Frequently Asked Questions
Straight answers about fraud rewards, anonymity, and the reporting process.
How much money can I get for reporting fraud?
Most major programs pay 10–30% of what the government recovers because of your information. The False Claims Act pays 15–30%, the SEC and CFTC pay 10–30% of sanctions over $1 million, the IRS pays 15–30% of collected proceeds, and Tennessee’s state law pays up to 50%. The largest single award to date is $279 million (SEC, 2023). Small-tip programs (like state arson hotlines) pay fixed rewards of $1,000–$25,000.
Can I report fraud anonymously and still get paid?
Often yes — but usually only by filing through an attorney. The SEC, CFTC, FinCEN, NHTSA and DOJ corporate programs all allow anonymous submissions if a lawyer represents you. The IRS does not allow anonymous filing (Form 211 is signed under penalty of perjury). Qui tam lawsuits are filed under seal — your identity is protected during the investigation but typically becomes public if the case proceeds.
Do I need a lawyer to claim a whistleblower reward?
It depends on the program. Agency tip programs (SEC, IRS, CFTC) let you file yourself — though an attorney is required if you want anonymity, and data shows represented whistleblowers win awards far more often. Qui tam lawsuits under the False Claims Act require an attorney. Whistleblower attorneys work on contingency: they only get paid if you win, so consultations are free.
What kinds of fraud qualify for a reward?
Fraud against government programs (Medicare, Medicaid, defense contracts, grants, pandemic relief), tax evasion, securities and crypto fraud, money laundering and sanctions evasion, customs and tariff evasion, vehicle safety cover-ups, price fixing, insurance fraud (in CA, IL and NJ), ocean dumping, wildlife trafficking, and more. If a company is cheating a government program or regulator, there is probably a program that pays for reporting it.
What if the fraud is against a private company, not the government?
Several programs still pay. Securities fraud harming investors goes to the SEC. Fraud against private health insurers is covered by the DOJ Corporate Whistleblower Pilot Program, and by state law in California (30–50% rewards) and Illinois (30–40%+). Bank fraud can qualify under FIRREA (up to $1.6M).
Am I protected from retaliation if I blow the whistle?
Yes — most reward laws include anti-retaliation provisions. The False Claims Act (§ 3730(h)) provides reinstatement, double back pay and damages if you’re fired or demoted for whistleblowing. Dodd-Frank protects SEC and CFTC whistleblowers. State FCAs include similar protections. Document everything and talk to an attorney before your employer learns anything.
How long does it take to get a whistleblower reward?
Be patient: typically 2–6 years. The government must investigate, win or settle the case, and collect the money before awards are paid. Qui tam cases average 3–5 years; SEC/IRS award claims add months to years after the enforcement action ends. The payoff can be life-changing, but it is not fast money.
What is a qui tam lawsuit?
“Qui tam” lets a private citizen (the “relator”) sue a fraudster on behalf of the government and keep 15–30% of the recovery. It comes from the False Claims Act — Lincoln’s 1863 law — and 29 states plus DC, three territories and several cities have their own versions. The suit is filed under seal while the government investigates and decides whether to take over the case.
Does it matter which state I’m in?
Federal programs apply nationwide. But your state matters for state-level rewards: 29 states plus DC and three territories have False Claims Acts, New York and DC pay for reporting big tax cheats, California and Illinois pay 30–50% for private insurance fraud, and states like New Jersey, Michigan and Virginia run cash tip-reward programs. Use the state filter above to see everything available where you are.
What evidence do I need?
Programs pay for original information — specific, credible, non-public facts. Insider documents, billing records, emails, and firsthand accounts are strongest. Publicly known information generally doesn’t qualify (the “public disclosure bar”). Collect evidence lawfully — don’t hack systems or take privileged documents — and preserve what you legitimately have access to.