Financial Fraud Whistleblower Reporting: SEC and CFTC Pathways

Federal law provides two primary administrative channels for individuals who possess original information about financial fraud in securities and commodities markets: the Securities and Exchange Commission (SEC) Whistleblower Program and the Commodity Futures Trading Commission (CFTC) Whistleblower Program. Both programs operate under the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 and share structural similarities while targeting distinct market sectors. Understanding how these pathways are defined, how submissions are processed, and where the boundaries between them lie is essential for anyone evaluating a potential disclosure in the financial fraud context.

Definition and Scope

Financial fraud whistleblowing, as governed under federal securities and commodities law, refers to the voluntary submission of original, credible, and specific information about violations of laws administered by the SEC or CFTC by an individual who has a reasonable belief that a violation has occurred, is ongoing, or is about to occur. This definition is codified under Dodd-Frank Act Section 21F for SEC matters and Section 23 for CFTC matters.

The SEC program, administered under 17 C.F.R. Part 240, Rule 21F, covers violations of the Securities Exchange Act of 1934, the Securities Act of 1933, the Investment Advisers Act of 1940, and the Investment Company Act of 1940. The CFTC program, governed under 17 C.F.R. Part 165, covers violations of the Commodity Exchange Act (CEA), including fraud in futures, options, and swaps markets.

Neither program is limited to employees of the firms under investigation. Corporate officers, accountants, compliance personnel, market participants, investors, and foreign nationals can all qualify as eligible whistleblowers, subject to specific exclusions discussed below. The SEC Whistleblower Program and CFTC Whistleblower Program each maintain independent administrative structures and award funds.

How It Works

Both programs follow a structured multi-phase process from submission through potential award.

1. Submission of a Tip — The whistleblower submits original information using a designated form. For the SEC, this is Form TCR (Tip, Complaint, or Referral), submitted through the SEC's online portal. The CFTC uses its own Form TCR, available through the CFTC's whistleblower submission system. Submissions may be made anonymously if the individual is represented by legal counsel, a requirement that affects downstream award collection.

2. Screening and Intake — Staff reviewers assess whether the submission falls within the agency's jurisdiction, whether the information is original (not previously known to the agency), and whether the claim meets a threshold of specificity and credibility. Tips that duplicate publicly available information generally do not qualify as original information under SEC Rule 21F-4(b).

3. Investigation — If the tip triggers an investigation or examination, the agency may contact the whistleblower for additional information. The whistleblower is not a party to any resulting enforcement action; the agency proceeds independently.

4. Enforcement Action and Sanctions — An award becomes available only if the agency brings a successful enforcement action resulting in monetary sanctions exceeding $1,000,000 (SEC Rule 21F-3; CFTC parallel threshold under 7 U.S.C. § 26(b)(1)).

5. Award Determination — The whistleblower may apply for an award using Form WB-APP. Awards range from 10% to 30% of sanctions collected, adjusted by factors including the significance of the information, the degree of assistance provided, and any culpability of the claimant. The whistleblower award calculations framework details these adjustment criteria.

6. Appeals — Award decisions may be appealed to a U.S. Court of Appeals within 30 days of a final agency order, per Dodd-Frank Section 21F(f).

Anonymous submissions are permitted under both programs but require the whistleblower to reveal identity before an award is paid. The anonymous whistleblower reporting framework describes the procedural implications of that election.

Common Scenarios

Financial fraud whistleblower submissions to the SEC and CFTC typically involve one of the following categories:

Securities fraud (SEC jurisdiction)
- Accounting fraud and financial statement manipulation at public companies, often implicating Sarbanes-Oxley Act Section 806 obligations alongside Dodd-Frank protections (see Sarbanes-Oxley whistleblower protections)
- Insider trading schemes using material nonpublic information
- Ponzi schemes or fraudulent investment products marketed to retail investors
- Foreign Corrupt Practices Act (FCPA) violations involving bribery of foreign officials by U.S.-listed companies
- Market manipulation by broker-dealers or investment advisers
- Unregistered securities offerings in violation of the Securities Act of 1933

Commodities fraud (CFTC jurisdiction)
- Manipulation of benchmark rates or commodity prices (e.g., energy, agricultural, or metals markets)
- Fraud in retail forex or binary options markets
- Misappropriation of customer funds held by futures commission merchants
- Spoofing and layering schemes in futures markets, prohibited under CEA Section 4c(a)(5)
- Swap dealer misconduct or failure to register under CEA Title VII

A frequently contested boundary involves cryptocurrency and digital asset fraud. The SEC asserts jurisdiction over digital tokens that qualify as securities under the Howey test, while the CFTC asserts jurisdiction over commodities-based digital assets such as Bitcoin and Ether. A whistleblower with information about a digital asset scheme may need to file with both agencies or assess which regulatory theory applies most directly.

Decision Boundaries

Several structural distinctions determine which program applies, whether a submission is eligible, and what exclusions bar recovery.

SEC vs. CFTC Jurisdiction

Exclusions from Eligibility

Both programs exclude categories of individuals whose access to the information arose from privileged positions:

• Attorneys who learned of violations through privileged legal representation (subject to narrow exceptions under SEC Rule 21F-4(b)(4))
• Compliance and audit personnel who obtained information through their official functions, unless an independent basis for disclosure exists or the whistleblower has reason to believe disclosure to the SEC is necessary to prevent imminent harm
• Individuals convicted of criminal violations related to the underlying conduct
• Officers, directors, trustees, and partners who receive the information through a compliance or reporting system

Internal vs. External Reporting

Both programs permit reporting directly to the agency without first reporting internally. However, SEC Rule 21F-4(c)(3) provides a 120-day credit period: if a whistleblower reports internally first, the date of internal reporting counts as the tip date for priority purposes, even if the SEC submission comes later. This mechanism intersects with debates about internal vs. external whistleblowing strategy and the impact on award eligibility timelines.

Retaliation Protections

Dodd-Frank expressly prohibits employer retaliation against individuals who report to the SEC or CFTC, or who participate in an agency investigation. Retaliation protections under Dodd-Frank extend to employees of subsidiaries and affiliates of covered entities. A 2018 Supreme Court decision, Digital Realty Trust, Inc. v. Somers, 583 U.S. 149 (2018), held that Dodd-Frank's anti-retaliation provisions apply only to individuals who have reported to the SEC — internal-only reporters must rely on other statutory protections such as Sarbanes-Oxley Section 806. Whistleblower retaliation protections and retaliation remedies and damages cover the full remedial landscape.

The whistleblower complaint filing process provides a procedural reference for navigating the submission mechanics across both programs.

References

• SEC Whistleblower Program — SEC.gov
• CFTC Whistleblower Program — CFTC.gov
• [