What Retaliation Protections Exist for AML and BSA Whistleblowers?

Employees who raise concerns about money laundering or sanctions violations may worry that speaking up will cost them their job. Federal law offers protections for some people who report covered misconduct—including protection against certain adverse employment actions. But the rules have limits: a report must relate to covered conduct, a worker must use a protected channel or otherwise engage in protected activity, and deadlines can be short.

This guide explains the anti-retaliation provisions for whistleblowers under the Bank Secrecy Act (BSA), how the program developed, what “original information” means for a possible award, and practical steps to consider if you report misconduct or face retaliation. It is general information, not legal advice. The details of your role, report, and employer matter.

What is the AML/BSA whistleblower program?

The BSA is the main federal framework requiring financial institutions to help detect and prevent money laundering. Anti-money laundering (AML) rules and related obligations include monitoring activity, keeping certain records, and reporting suspicious transactions to the government. The Financial Crimes Enforcement Network (FinCEN), a bureau of the U.S. Department of the Treasury, administers key parts of this framework.

The BSA whistleblower program has two related features:

• Potential monetary awards: Eligible people who voluntarily provide original information that leads to successful enforcement may qualify for an award in certain cases.
• Anti-retaliation provisions: The law prohibits covered employers from retaliating against people for engaging in specified protected activity.

These protections can matter to employees, former employees, and other workers who encounter misconduct through their work. They do not mean that every workplace disagreement or compliance concern automatically qualifies. The connection between the report and a covered violation—and between the report and any later employment action—can be important.

Legal origin and timeline

Congress first established a BSA whistleblower framework through the Anti-Money Laundering Act of 2020. The law provided for awards and anti-retaliation protections, but the original award structure had limitations that raised concerns about whether it would encourage reporting.

Congress strengthened the program in the Anti-Money Laundering Whistleblower Improvement Act, included in the National Defense Authorization Act for Fiscal Year 2023. President Biden signed that act on December 23, 2022. Among other changes, the legislation revised the award framework and clarified elements of the program. The governing provisions are primarily found in 31 U.S.C. § 5323.

For current information, consult the whistleblower materials on the FinCEN website. Program procedures and agency guidance may change, and a lawyer can help assess how the statute applies to a particular report.

What kinds of misconduct may qualify?

The whistleblower law reaches information about specified violations within the Treasury Department’s jurisdiction. That can include violations of the BSA and its implementing rules, as well as certain related federal offenses. The facts matter: an operational mistake is not necessarily a legal violation, and a concern about a policy breach may not fall within the statute.

Area of concern Example of a potential issue Important qualification Suspicious Activity Reports (SARs) A financial institution allegedly fails to file required reports, files them late, or interferes with the reporting process. Whether a SAR was required depends on the facts and applicable rules. SARs and information that would reveal one are subject to strict confidentiality requirements. Structuring Transactions are allegedly divided into smaller amounts to evade reporting or recordkeeping requirements, or staff are directed to facilitate that conduct. Repeated cash transactions alone do not prove structuring; intent and context matter. Customer due diligence (CDD) Required customer information or beneficial ownership details are allegedly not collected or maintained, or known gaps are concealed. Requirements vary by institution and customer, and a deficiency is not automatically a whistleblower-qualifying violation. Records and monitoring Records are allegedly falsified, concealed, or not retained as required, or monitoring failures are deliberately hidden. Document the underlying facts lawfully; do not remove restricted records or customer data. Sanctions A business allegedly processes prohibited transactions or conceals activity involving sanctions restrictions. Sanctions laws and enforcement authority can be complex. Whether a specific violation falls within the program’s coverage requires a legal assessment.

Eligibility and “original information”

For a possible award, the law generally focuses on whether a person voluntarily provided original information that led to a successful enforcement action resulting in qualifying monetary sanctions. “Original information” generally means information based on the person’s independent knowledge or independent analysis that is not already known to the government, subject to statutory rules and exceptions.

Information may be less likely to qualify as original if it merely repeats allegations already available in a public hearing, government report, or news story. There are exceptions, including circumstances where the whistleblower was an original source of the information. The analysis is fact-specific, so the fact that an issue was discussed internally or appeared in public does not, by itself, answer the question.

Eligible people can include individuals with relevant information obtained through employment or other work. Some categories of people may be excluded from awards or face limits under the statute—for example, in certain circumstances, people who obtained information through specified government or audit roles. Award eligibility is not the same as protection from retaliation: a person may have a retaliation claim even if they do not qualify for an award.

The award provision generally allows an award of 10% to 30% of collected monetary sanctions in qualifying cases where the statutory threshold is met. An award is not automatic. The government must take successful enforcement action, the information must meet the legal requirements, and the amount is determined under the program’s rules.

What activity is protected?

The BSA’s anti-retaliation provisions protect certain lawful whistleblowing activity. Depending on the circumstances, protected activity can include providing information about a suspected covered violation to an appropriate government authority, Congress, or an employer; participating in a related investigation or proceeding; or taking other steps identified by the statute.

Internal reporting can be important, but workers should not assume it is the only protected route—or that they must report internally before contacting an authorized government recipient. The exact protections depend on the statutory language and facts. If you are considering an external report, get advice about how to make it lawfully and protect confidential information.

Employees should be especially cautious with SARs. A SAR, or information that would reveal whether a SAR exists, generally cannot be disclosed to unauthorized people. Reporting a concern does not give a worker permission to copy, forward, or share confidential SAR materials. A lawyer can help identify a safe way to describe the underlying conduct without making an unauthorized disclosure.

What counts as an adverse employment action?

The law prohibits covered employers from retaliating against a worker because of protected activity. The statute identifies actions such as discharging, demoting, suspending, threatening, harassing, or otherwise discriminating against a worker in the terms and conditions of employment.

Examples that may raise concern include:

• Being fired or demoted soon after raising a compliance concern.
• Having shifts, responsibilities, pay, or access to promotion opportunities reduced.
• Receiving threats or harassment tied to a report.
• Being isolated, disciplined, or treated differently after cooperating with an investigation.

Timing can be evidence, but it does not prove retaliation on its own. Employers may have legitimate reasons for employment decisions, and the facts may be disputed. Keep a private, lawful record of relevant dates, communications, and changes to your role. Do not take confidential business or customer materials to build a personal file.

What remedies and deadlines may apply?

A worker who believes they experienced prohibited retaliation may be able to bring a civil action in federal district court. Available remedies under the statute can include reinstatement, back pay with interest, and compensation for certain special damages, including litigation costs and reasonable attorneys’ fees. The precise remedy depends on the case; no result is guaranteed.

The statute includes a filing deadline of 180 days from the date the violation occurs or the date the employee becomes aware of it. Deadlines and procedural questions can be complex, and other legal claims may have different time limits. If you suspect retaliation, seek advice promptly rather than waiting for an internal process to finish.

What to do next: a practical checklist

1. Write down the facts. Note dates, people involved, what you observed, how you reported it, and any employment changes that followed.
2. Preserve information lawfully. Keep personal notes and documents you are authorized to retain. Do not access systems without permission, remove customer data, or disclose SAR information.
3. Consider safe reporting channels. Review FinCEN’s whistleblower information and, where appropriate, consider reporting to the relevant government authority or seeking legal advice about the right channel.
4. Consult an attorney promptly. A whistleblower or employment lawyer can assess coverage, confidentiality, award eligibility, retaliation evidence, and the 180-day deadline.
5. Protect your privacy. Use a personal device and account—not a work laptop or work email—to seek legal advice or organize personal notes, while following the law and any applicable preservation duties.

The bottom line

The BSA whistleblower program offers both potential awards and anti-retaliation protections for qualifying reports. Workers who raise concerns about SAR practices, structuring, customer due diligence, recordkeeping, or sanctions-related conduct may have protections, but coverage depends on the specific law and facts. Preserve a clear timeline, handle confidential information carefully, consult FinCEN’s official resources, and get legal advice quickly if https://openclassactions.com/blog/aml-bsa-whistleblower-program-faqs.php you face adverse employment actions.