Will FinCEN Update Me After I File a Whistleblower Report?

Usually, you should not expect regular updates. The Financial Crimes Enforcement Network (FinCEN) may acknowledge or contact you about a submission, but a whistleblower report can lead to confidential investigations that are not visible to the person who filed it. FinCEN generally cannot tell you whether investigators opened a matter, what steps they are taking, or whether a financial institution filed a Suspicious Activity Report (SAR).

That silence does not necessarily mean your report was ignored. It also does not mean an award is likely. A report, an investigation, an enforcement action, and a whistleblower award are separate stages—and there may be no public information about any of them for a long time.

This guide explains the federal anti-money-laundering whistleblower program, what makes information eligible, the kinds of violations it covers, and what to do during the waiting period. It is general information, not legal advice.

What Is the AML/BSA Whistleblower Program?

The Anti-Money Laundering (AML) whistleblower program is a federal process for people who voluntarily provide original information about certain violations of the Bank Secrecy Act (BSA) and related laws. The BSA is the main federal framework requiring financial institutions to keep specified records and help detect and report money laundering and other financial crime.

FinCEN, a bureau of the U.S. Department of the Treasury, administers the program. The program is designed to help the government learn about violations that may otherwise be difficult to detect. It also authorizes monetary awards for eligible whistleblowers whose information contributes to a successful enforcement action resulting in sufficiently large monetary sanctions.

A whistleblower report is not the same thing as filing a SAR. Banks and other covered financial institutions file SARs with FinCEN when they identify suspicious activity that what is a suspicious activity report meets reporting requirements. An employee or other individual may separately provide information to the government about suspected misconduct. The existence or contents of a SAR, however, are subject to strict confidentiality rules. Do not copy, disclose, or attach a SAR unless you have received advice specific to your situation.

Legal Origin and Timeline

Congress expanded the BSA whistleblower provisions in the Anti-Money Laundering Act of 2020. Later, the National Defense Authorization Act for Fiscal Year 2023 (NDAA FY2023), enacted on December 23, 2022, made further changes to the program. These amendments addressed matters including potential awards and protections for whistleblowers.

The law provides a framework for awards when qualifying information contributes to a successful enforcement action and the government obtains more than $1 million in monetary sanctions. It generally authorizes an award of between 10% and 30% of the collected monetary sanctions, subject to the law’s requirements and the government’s determination.

The statute sets the framework; it does not promise an award to every person who reports a concern. A tip may be useful to investigators but fail to meet the legal requirements for an award. For example, the https://dlf-ne.org/can-former-employees-file-a-bsa-whistleblower-claim/ government may already know the information, may not bring an enforcement action, or may not collect qualifying sanctions.

Who May Be Eligible?

An individual may qualify if they voluntarily provide original information about a covered violation and the information contributes to a successful enforcement action meeting the statutory conditions. Eligibility depends on the facts, the person’s role, how the information was obtained, and the connection between the report and the enforcement result.

What “Original Information” Means

In broad terms, original information is information based on your independent knowledge or analysis that is not already known to the government from another source. It must be specific, credible, and relevant enough to assist the authorities. Merely repeating public allegations or general suspicions may not be enough.

For example, “I think the bank is laundering money” is a conclusion, not a detailed account. A more useful report might identify a particular customer, a time period, a pattern of transactions, and the internal control failure that allowed the activity to continue. Share only material you may lawfully provide, and do not obtain information through unauthorized access or other unlawful means.

The legal rules can limit eligibility for people who played a role in the misconduct or who obtained information through certain professional duties. There are also restrictions involving, among other things, criminal convictions connected to the relevant conduct and certain government or audit-related roles. These questions are fact-sensitive, so a person with a compliance, legal, audit, or management role should get individualized legal advice before submitting information.

What Violations May Qualify?

The program covers certain violations of the BSA and related laws. The following examples are relevant areas of concern, but a report must describe facts that suggest a violation—not simply a business practice someone dislikes.

Area Example of potentially relevant conduct What to document SAR requirements A covered institution may have failed to identify, investigate, or report suspicious activity as required. Dates, transaction patterns, responsible processes, and what the institution knew. Do not disclose a SAR’s existence or contents without legal advice. Structuring Transactions may have been arranged to evade reporting or recordkeeping requirements, including by breaking activity into smaller amounts. Who arranged the transactions, how they were divided, and any communications showing an effort to avoid reporting. Customer due diligence Required customer due diligence (CDD) controls may have been ignored or applied inadequately, such as in identifying beneficial owners or assessing customer risk. Relevant policies, exceptions, approvals, and examples of customers or accounts affected. Records and controls An institution may have failed to maintain required records or may have concealed, altered, or improperly handled records. The records involved, applicable process, time period, and evidence of alteration or omission. Sanctions Conduct may involve evading or violating applicable sanctions requirements, potentially alongside BSA-related violations. Relevant parties, transactions, dates, screening or escalation decisions, and the basis for suspecting a violation.

Sanctions violations may involve laws administered by other authorities, such as the Treasury Department’s Office of Foreign Assets Control. A person reporting sanctions-related conduct should check the appropriate agency’s current reporting instructions; FinCEN may not be the only or correct destination for every sanctions matter.

Why FinCEN May Give No Status Updates

People often search for “no status updates” because they expect a confirmation that their report is being investigated. In practice, an agency’s silence may have several explanations: the information is still being reviewed, investigators are protecting a confidential matter, the report was referred elsewhere, or the agency has decided not to pursue it. A lack of communication does not tell you which explanation applies.

Confidential investigations can involve financial institutions, customers, employees, and parallel government inquiries. Revealing whether a matter exists—or what investigators are doing—could compromise evidence, alert subjects, or affect another proceeding. The government may also be unable to discuss a matter even if your information was useful.

FinCEN’s public website, fincen.gov, is the official place to check current program information, submission instructions, and agency announcements. It is not a public case-tracking portal. Do not assume that a lack of a public notice means there was no investigation or enforcement action.

How Long Is the Waiting Period?

There is no reliable, universal timeline for an update or award decision. Some matters may take years to investigate and resolve. Others may never produce a public enforcement action. Even after an action is announced, award eligibility and the amount of any award can require additional review.

The timing depends on factors such as the complexity of the suspected conduct, the number of institutions or people involved, whether other agencies are investigating, and whether the government ultimately collects monetary sanctions above the statutory threshold. The program’s legal framework does not mean FinCEN will send routine progress reports during this waiting period.

What to Do After Filing

1. Keep your submission records. Save a copy of what you submitted, the date, any confirmation number, and any correspondence. Store them somewhere secure and separate from employer-controlled systems.
2. Preserve evidence lawfully. Keep a factual timeline and identify where supporting records are located. Do not remove confidential files, access systems without authorization, or share SARs or other protected material casually.
3. Use a safe contact method. If you expect follow-up, make sure the contact details you provided are current and that you can receive messages privately. Avoid using a work device or work account for sensitive personal communications.
4. Report retaliation concerns promptly. The law includes anti-retaliation protections in specified circumstances. If your employer demotes, threatens, or otherwise penalizes you after protected reporting, document dates and events and consult an attorney promptly. Deadlines and available remedies may matter.
5. Ask a whistleblower attorney about your situation. An attorney can assess eligibility, confidentiality risks, overlapping reporting channels, and whether any additional submission or follow-up is appropriate. Do not assume that hiring counsel guarantees an award or changes the government’s timeline.

Can You Contact FinCEN for an Update?

You can consult the instructions and contact information published on FinCEN’s website, particularly if you need to correct your contact details or ask about submission procedures. But a request for an update may not result in information about investigative status. Avoid sending repeated messages that disclose sensitive details through an unverified channel.

If you receive a request for information, verify that it is genuinely from the government before responding. Do not send documents or personal information in response to an unexpected message until you have confirmed the contact through an official channel. If you have counsel, ask whether they should handle the response.

Quick Checklist: What to Do Next

• Check FinCEN’s official website for current instructions and contact details.
• Keep a private copy of your submission and any confirmation.
• Do not interpret silence as proof that your report was rejected—or accepted.
• Protect SAR confidentiality and other restricted information.
• Preserve evidence without taking or accessing materials unlawfully.
• Document any workplace retaliation and seek legal advice quickly.
• Be prepared for a long waiting period, with no routine status updates.

The Bottom Line

FinCEN may contact you, but you should not count on regular updates after filing an AML/BSA whistleblower report. Confidential investigations, legal restrictions, and the time required to build an enforcement case can leave whistleblowers without meaningful information for months or years—or indefinitely.

Focus on keeping your submission and contact details organized, protecting sensitive information, and getting legal advice about eligibility and retaliation risks. A report can help authorities uncover misconduct, but neither an investigation nor an award is guaranteed.