What Should I Track Before I Talk to a Whistleblower Attorney?
A whistleblower case often starts with a pattern that feels wrong: transactions that do not fit the customer, alerts that seem to disappear, or pressure to approve something without a clear explanation. Before you decide what it means, start recording what you personally know and where supporting information may exist.
The goal is not to build a courtroom case by yourself. It is to give an attorney a clear, usable account: who did what, when it happened, and where records live. A careful timeline can help counsel assess whether the issue may involve a federal law, what evidence might matter, and how to protect you while the facts are reviewed.
One headline correction matters up front: FinCEN whistleblower awards are real, but they are not fast or automatic. And the statutory framework is commonly mislabeled in online coverage. The AMLA enacted in 2020 established the core Bank Secrecy Act (BSA) whistleblower award structure; it is not accurate to say that AMLA 2022 created the program. Details of implementation and funding have been subject to legislative and regulatory developments, so an attorney should verify the law and rules in effect when you seek advice.
What the FinCEN Whistleblower Program Does—and Does Not Promise
The BSA gives the Treasury Department authority to pay eligible whistleblowers an award when original information leads to certain successful enforcement actions with monetary sanctions above the statutory threshold. Under the law, an award may generally be between 10% and 30% of monetary sanctions collected, subject to the statute and applicable rules.
That range is not a guaranteed payout. The amount is discretionary and can depend on factors such as how useful the information was, whether it helped the government achieve the result, and the whistleblower’s role in the misconduct. Eligibility and award calculations are legal questions, not something a headline—or a Facebook post—can settle.
There is also a timing issue. Government investigations may take years. A person may submit information and never receive an award, even if the information is credible, because the case may not result in a qualifying action or collected sanctions. An award is not the same thing as an immediate payment for reporting a concern.
Here is the catch: the program’s existence does not mean every AML concern belongs in a FinCEN whistleblower submission. The facts, the person’s role, the type of institution, and the government action all matter. An attorney can assess those details; your first job is to preserve a clear, truthful record without creating new risks.

Start With the Three Questions an Attorney Needs Answered
1. Who did what?
Record names, titles, teams, and relevant relationships where you know them. Describe actions, not conclusions. “On May 3, the operations manager told me to close the alert without adding the missing source-of-funds information” is more useful than “management covered up money laundering.”

Separate what you observed directly from what someone told you and what you inferred. If you do not know a person’s full name, note the role or identifier you do know. Do not guess. Include your own actions too: who you notified, what you reported, and what response you received.
2. What is the timeline?
Create timeline notes while the events are still fresh. Use dates and times when available, and mark estimates as estimates. Capture the sequence: the transaction or alert, the review, the decision, the escalation, and any follow-up. A timeline helps an attorney spot patterns and identify gaps without forcing the reader to reconstruct events from scattered messages.
3. Where do records live?
Make a record map, not a private evidence archive. Note the system, business unit, date range, record type, and who may have access. For example: “Case-management system, alert queue, April–June, reviewed by the investigations team.” This tells counsel what may exist without requiring you to copy or remove company material.
What to Track: A Practical Checklist
Track What to note Why it helps People and roles Names, titles, teams, reporting lines, and who made or approved a decision Shows who had knowledge, responsibility, or authority Events and dates When an alert, transaction, instruction, escalation, or response occurred Helps establish sequence and identify repeat conduct Systems and records System name, record type, relevant period, and likely custodian Helps counsel identify evidence through lawful channels What you personally saw Direct observations, conversations, and your role in the process Separates first-hand facts from rumor or interpretation Internal reporting Who you contacted, when, how, and what response followed May clarify notice, escalation, and possible retaliation concerns Changes to your work Schedule, duties, access, reviews, discipline, or other changes after reporting Creates a contemporaneous record if retaliation becomes an issueKeep a Timeline That Stays Factual
Website linkA simple, dated log is often more useful than a long narrative written months later. Keep it secure and separate from employer systems. Do not include confidential customer data or sensitive company material in a personal document unless an attorney has given you specific, lawful instructions.
- Write the date and time. If you are unsure, say “approximately” and explain why.
- Describe the event plainly. Note what happened, who was present, and what you did.
- Identify the source. Mark whether the information comes from your own observation, a conversation, or a record you saw in the ordinary course of work.
- Record the next step. Note any escalation, response, or change in treatment at work.
- Correct mistakes transparently. Add a dated correction rather than quietly rewriting an old entry.
Do not embellish, fill gaps with assumptions, or coordinate stories with coworkers. If you remember something later, add it as a later recollection. A candid note that distinguishes certainty from uncertainty is stronger than an overconfident one.
Map Where Records Live—Do Not Take Them
Record locations can be crucial in a financial-crime investigation. Relevant materials might include transaction-monitoring alerts, customer due diligence files, case notes, escalation records, policies, training materials, audit findings, communications, and decision logs. But knowing where records live is different from having permission to copy them.
Do not forward work emails to a personal account, download customer files, photograph screens, access records outside your job duties, or remove documents to “protect” them. These steps can expose private information, breach company policy, or create legal problems that distract from the underlying concern. Do not delete or alter records either.
Instead, note the location and description from your ordinary work knowledge: the system or repository, approximate date range, relevant team, and likely custodian. Tell the attorney if records may be overwritten, routinely deleted, or held by a third party. Counsel can advise on lawful preservation and reporting channels.
Do Not Assume the BSA Applies Only to Banks
The Bank Secrecy Act’s reach extends well beyond traditional banks. Depending on the business and activity, BSA and related anti-money-laundering requirements can apply to credit unions, money services businesses, casinos, broker-dealers, certain dealers in precious metals, and other covered financial institutions. Fintech companies may be involved through a bank partner, a regulated subsidiary, or activities that bring a particular entity within a legal obligation.
That does not mean every fintech, payment company, crypto business, or vendor is automatically covered in the same way. The legal analysis depends on the entity, its services, how it operates, and the rules that apply. Track the actual business unit and product involved, who controls the relevant process, and whether a https://highstylife.com/amla-2022-whistleblower-program-explained-for-employees/ bank or other regulated partner participates. Avoid labeling a company “covered” based only on its industry or branding.
Online Posts Can Be Leads, Not Proof
People often first encounter whistleblower stories through sites such as Tycoonstory.com or through Facebook posts and groups. Those can point you toward a topic, a public announcement, or a source worth checking. Pretty simple.. They are not a substitute for the statute, an official FinCEN notice, a court filing, or advice based on your own facts.
Save the URL and date if an online item is relevant to how you learned about a program or event. Then verify the claim against primary sources. Be especially cautious with posts promising a specific award, saying reporting guarantees payment, or claiming a deadline applies to everyone. Do not post your own account, identify colleagues, or upload screenshots of internal records to ask strangers for legal advice.
Before the Attorney Meeting
You do not need to arrive with a perfect legal theory. A concise preparation packet can make the first conversation more productive:
- A one-page summary of the concern, written in plain language.
- Your timeline notes, including uncertainty and gaps.
- A people-and-roles list, with what each person did or knew.
- A record map showing where relevant materials may live—without attaching improperly obtained files.
- A list of internal reports, government contacts, or public statements already made.
- A short account of any work changes that followed your reporting.
- Questions about confidentiality, eligibility, reporting options, deadlines, and how to handle records lawfully.
Questions worth asking directly
- Based on these facts, what whistleblower or reporting programs might apply, and why?
- What information can I lawfully preserve or share, and what should I leave where it is?
- Should anyone be notified now, or could that create avoidable risks?
- What deadlines or procedural requirements should I know about?
- How will you evaluate whether my information is original, specific, and useful to an agency?
- What should I document if my access, duties, or treatment at work changes?
Keep the Record Clean
You ever wonder why the best preparation is disciplined, not dramatic. Track who did what, build timeline notes, and map where records live. Be accurate about what you know and careful about what you access. FinCEN awards are a real statutory possibility, but they depend on eligibility, the government’s use of information, qualifying enforcement results, and collected sanctions. They are discretionary and can take a long time.
Your notes cannot guarantee an award or determine whether a legal violation occurred. They can help an attorney evaluate the facts faster—and help you avoid turning a legitimate concern into a preventable records or confidentiality problem.