Federal Whistleblower Laws, Protections, and Awards

Whistleblower Protection Depends on Your Employer and the Fraud You Report

Federal whistleblower laws protect an employee who reports fraud or other illegal conduct from being fired, demoted, or pushed out for it, and several of them pay an award when the report leads to money collected.

Which law covers you depends on who you work for and what you reported.

A report of fraud on Medicare or a government contract falls under the False Claims Act, a report of securities fraud at a public company under Sarbanes-Oxley and the Dodd-Frank Act, and a federal employee's report under the Whistleblower Protection Act.

Each law sets its own deadline for a retaliation claim, from as little as 30 days to three years or more.

The award programs pay between 10 and 30 percent of the money collected, depending on the program.

Knowing which law applies before you report tells you where the report should go and how long you would have to act if the company retaliates.

Article at a Glance

  • Federal law protects employees who report fraud from firing, demotion, and other retaliation
  • Dodd-Frank retaliation suits allow six years, or three from learning the facts, never past ten
  • A Sarbanes-Oxley retaliation complaint must reach OSHA within 180 days
  • SEC, CFTC, and anti-money laundering awards run 10% to 30% of sanctions over $1 million
  • A tip that repeats information already public can disqualify you from most award programs

What Is a Whistleblower Under Federal Law?

A whistleblower is a person who reports fraud, abuse, or other illegal conduct by a company or a government agency, usually from the inside, to someone with the power to act on it.

Many illegal schemes cannot be investigated until someone involved reveals them, which is why federal law protects certain reports. If you lose your job or are sidelined over a report one of these laws covers, that law can return you to the job and pay you for what you lost.

Some reports also earn money. When the fraud cheated a government program, the person who sues on the government's behalf is called a relator and collects a share of the recovery through a qui tam lawsuit.

Reports That May Not Count as Whistleblowing

A report usually counts as whistleblowing only when the conduct it exposes is illegal or against the public interest. Revealing a practice that breaks no law can leave you unprotected, and if you signed a nondisclosure agreement it can put you in serious legal jeopardy.

These reports may fall outside whistleblower protection:

  • Exposing bullying by a supervisor, unless it rises to the level of illegal discrimination
  • Exposing practices that are inefficient or impractical but not illegal
  • Sharing information with outsiders who have no role in enforcing the law, such as friends or a competing company

A lawyer can tell you before you report whether what you saw is conduct one of these laws covers.


Which Federal Program Handles Medicare, Securities, Tax, or Contract Fraud

Where a report goes depends on who was cheated.

  • Fraud on government money. Medicare and Medicaid billing fraud, overbilling on a defense contract, and misuse of a research grant fall under the False Claims Act. The Justice Department's Civil Division and the U.S. Attorney's Offices handle these cases, often with an inspector general, such as the Health and Human Services inspector general in a healthcare case.
  • Securities fraud. Fraud on investors goes to the Office of the Whistleblower at the Securities and Exchange Commission (SEC).
  • Commodities and derivatives fraud. These reports go to the Commodity Futures Trading Commission (CFTC).
  • Tax fraud. These reports go to the IRS Whistleblower Office.
  • Money laundering and sanctions violations. The Treasury Department runs this award program.
  • Wrongdoing inside a federal agency. A federal employee can make a confidential disclosure to the Office of Special Counsel or the agency's Inspector General.

Sending a report to the wrong agency can cost time and, in an award program, the award.


Healthcare Fraud Schemes, From Medicare Billing to Hospice Care



Defense Contract, Research Grant, and Government Program Fraud






What a Company Owes Under the False Claims Act
A company that knowingly bills the government on false claims pays up to triple the government's loss and, for penalties assessed after July 3, 2025, between $14,308 and $28,619 for every claim that was false.

What Each Federal Whistleblower Protection Act Does if Your Employer Retaliates

Each of these laws covers a different group of workers, and each gives a worker punished for a protected report a different set of remedies.

 

False Claims Act of 1863

The False Claims Act was created to give private individuals a reason to report fraud on the government, and its qui tam provision lets a whistleblower collect part of the money recovered. Its retaliation section protects employees, contractors, and agents who are punished for steps toward a case or for efforts to stop the fraud. A worker who wins can recover reinstatement with full seniority, double back pay plus interest, special damages, and attorney fees and costs for the retaliation suit.[1]

Dodd-Frank Act

Section 922 of the Dodd-Frank Act created the SEC's award program. It protects a whistleblower who gives the SEC information about a securities law violation, helps with an SEC investigation, or makes a disclosure that Sarbanes-Oxley protects. The remedies include reinstatement, two times back pay with interest, and the expert fees, attorney fees, and other costs of the suit.[2]

Sarbanes-Oxley Act of 2002

The Sarbanes-Oxley whistleblower protections cover anyone employed by a publicly traded company, or by one of its contractors, subcontractors, or agents, who reports what they reasonably believe is mail, wire, bank, or securities fraud, a violation of an SEC rule, or fraud against shareholders. A reasonable suspicion is enough, and you do not need proof. A retaliation complaint goes first to the Occupational Safety and Health Administration (OSHA), and the remedies include reinstatement, back pay plus interest, and special damages that cover attorney fees.

Whistleblower Protection Act of 1989

The Whistleblower Protection Act protects federal employees who report wrongdoing from retaliation, and it set added penalties for government employees or appointees who retaliate or threaten to.

Lloyd-La Follette Act of 1912

The Lloyd-La Follette Act guarantees federal employees the right to share information with members of Congress without telling a supervisor or asking permission.

No FEAR Act of 2002

The No FEAR Act requires a federal agency to pay whistleblower settlements, awards, and judgments against it out of its own budget instead of other government funds.

 

Match your employer and the conduct you reported to one of these laws first, because that match decides which deadline below applies to you.

Whistleblower Award Percentages Under the FCA, SEC, CFTC, and IRS Programs

Several federal programs pay the person who reports fraud a share of what the government collects. The percentage depends on the program and, under the False Claims Act, on whether the Justice Department takes over the case.


  • False Claims Act. 15% to 25% of the recovery when the government intervenes, and 25% to 30% when the whistleblower, called the relator, carries the case forward after the government declines. A case built mostly on facts that were already public pays no more than 10%.
  • SEC Whistleblower Program. 10% to 30% of monetary sanctions over $1 million in a securities enforcement action, under Section 922 of the Dodd-Frank Act.
  • CFTC Whistleblower Program. 10% to 30% of sanctions over $1 million for commodities and derivatives fraud.
  • IRS Whistleblower Program. 15% to 30% of the proceeds collected when more than $2 million is in dispute and, for an individual taxpayer, gross income exceeds $200,000. Smaller tax cases fall under a discretionary program.
  • Anti-money laundering program. 10% to 30% of sanctions over $1 million for money laundering, Bank Secrecy Act, and sanctions violations, paid by the Treasury Department. Congress added the 10% floor in December 2022.[3]

Most of these programs pay only for original information, meaning facts the government did not already have from a public source. Under the False Claims Act, the first relator to file also blocks related suits by other insiders for as long as that first case is pending. A tip that arrives second, or that repeats a news story, can earn nothing no matter how accurate it is.

Filing Deadlines for False Claims Act and Retaliation Claims

A False Claims Act case must be filed within six years of the violation, or within three years of when the responsible government official knew or should have known about it, and never more than ten years after the violation, under 31 U.S.C. § 3731(b).[4] The Supreme Court held in Cochise Consultancy v. United States ex rel. Hunt (2019) that the three-year extension applies even when the government declines to join the case.

Retaliation deadlines depend on the law, and some run on much shorter clocks:

  • False Claims Act. A retaliation suit may be filed up to three years after the retaliation.
  • Dodd-Frank Act. A retaliation suit may be filed within six years of the retaliation, or three years after you learned or should have learned the key facts, and never more than ten years after it.
  • Sarbanes-Oxley Act. A complaint has to be filed with OSHA within 180 days of the firing, demotion, or other adverse action, or of the date you became aware of it.[5]
  • Environmental whistleblower statutes OSHA enforces. A complaint is due within 30 days of the retaliation.[6]
  • State laws. State false claims acts and state whistleblower laws set their own deadlines.

Count from the date of the firing or demotion, and act before the shortest deadline that could apply to you has passed.

Does Your State Have Its Own Whistleblower or False Claims Law?

Several states have whistleblower laws that may add protection beyond federal law or cover conduct at state agencies and companies.

Some states also have false claims acts of their own. The Florida False Claims Act and the Texas False Claims Act are two, and each sets its own rules and deadlines for reporting fraud on state programs.

A worker in a state with its own law may have a state claim as well as a federal one, so check the state deadline at the same time as the federal deadline.

Questions About Federal Whistleblower Laws and Awards

Q:   Is an employee protected if they're mistaken about the actions being unlawful?

A:   Under Sarbanes-Oxley, yes, if the belief was reasonable. That law protects an employee who reports conduct they reasonably believe is fraud or a securities violation, so a good-faith report can stay protected even if the conduct turns out to be legal. Other laws set their own standards, and a lawyer can tell you which one applies to your report.

Q:   How do I qualify to be a whistleblower?

A:   You need specific information about fraud or other illegal conduct, reported through the channel the law sets up. You do not have to be a direct witness to the fraud as long as you have documentation of it. To earn an award, the information usually has to be original, meaning not already public, and under the False Claims Act no other insider can already have a related case pending.

Q:   What is the public disclosure bar?

A:   The False Claims Act bars qui tam claims based on substantially the same facts already disclosed publicly in federal hearings, government reports, the news media, or similar channels, under 31 U.S.C. 3730(e)(4). The exception is an original source, a relator with independent knowledge that materially adds to what was disclosed. The SEC, CFTC, IRS, and anti-money laundering programs have similar original-information requirements, so talk to a qui tam attorney before discussing the facts with anyone else.

Q:   Can I be a whistleblower if I took part in the fraud?

A:   Often yes, with a reduced reward and possible exposure. Courts may reduce the share of a relator who planned and initiated the violation, and a relator convicted of criminal conduct arising from the fraud is barred from any award under 31 U.S.C. 3730(d)(3). The SEC, CFTC, and IRS programs also allow reduced awards to culpable insiders but bar anyone convicted of a related crime. Retain counsel before disclosing anything.

Q:   Can I blow the whistle anonymously?

A:   In some programs. SEC and CFTC whistleblowers can file anonymously through an attorney and still collect an award. A False Claims Act complaint stays under seal while the government investigates, but the relator's name usually becomes public when the seal is lifted. IRS whistleblower identities are protected, though disclosure can be required if a case reaches Tax Court, and federal employees can make confidential disclosures to the Office of Special Counsel or an Inspector General.

Q:   How do I protect myself from whistleblower retaliation?

A:   Retain counsel before you report internally or externally, document dates, conversations, and performance reviews as they happen, and avoid removing documents in violation of company policy. Common retaliation includes demotion, schedule changes, sudden negative reviews, pretextual discipline, and termination. The remedies and deadlines for each law are listed above, and the shortest is 30 days.

Q:   Should I take what I know to the media?

A:   Not before filing. Going public can trigger the False Claims Act public disclosure bar, cost you original-source status and the award, and invite retaliation before any investigation begins. The seal also bars a relator from disclosing a sealed qui tam complaint.

Confidential Reviews for Employees Deciding Which Whistleblower Law Applies

If you work for a hospital, a government contractor, a public company, or a federal agency and have seen conduct you believe is illegal, the first question for a whistleblower lawyer is which of these laws covers you.

Lawsuit Legal will match what you saw and where you work to the law that covers it, and tell you how long you have to act if the company has already retaliated.

You owe a fee only when the case brings in money, at the percentage written into your agreement, and we cover the case expenses while it runs.

Call (888) 713-6653 before you report, or as soon as the retaliation starts, to talk with us free of charge in English or Spanish at any hour.

Have the date you reported, or plan to report, and the date of any firing or demotion ready when you call.

 

 

 

 

 

Do I Have a Case?


Let's See If You Have a Case...

What best describes the nature of your case?
Do you have insider knowledge of fraud?
Are you still employed with the company?
Number of employees at the company?
Please describe briefly the nature of your case...
How to best contact with information about your potential False Claims Act case?
External Resources
Legal Representation

"Speak with our false claims act whistleblower attorneys for a free, confidential review of your potential claim. Past results vary based on the unique facts of each case."

Find out more >>