SEC Whistleblower Program: Rules, Awards, and Eligibility
The SEC Whistleblower Program, established under Section 21F of the Securities Exchange Act of 1934 as amended by the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, creates a federal framework for incentivizing private individuals to report securities law violations to the U.S. Securities and Exchange Commission. The program governs award eligibility, confidentiality protections, anti-retaliation rights, and the procedural mechanics through which tips are evaluated and monetary awards are determined. Understanding its structure is essential for anyone navigating securities fraud reporting, because the program's eligibility rules, exclusions, and award calculation methodology contain significant complexity that directly affects outcomes.
- Definition and Scope
- Core Mechanics or Structure
- Causal Relationships or Drivers
- Classification Boundaries
- Tradeoffs and Tensions
- Common Misconceptions
- Checklist or Steps (Non-Advisory)
- Reference Table or Matrix
Definition and Scope
The SEC Whistleblower Program operates under 17 CFR Part 240, Rule 21F and is administered by the SEC's Office of the Whistleblower. The program's foundational mandate is to award eligible individuals who voluntarily provide the SEC with original information about possible violations of the federal securities laws — including the Securities Act of 1933, the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, and the Investment Company Act of 1940.
"Original information" is defined by statute and rule to mean information derived from the whistleblower's independent knowledge or independent analysis, information not already known to the SEC, and information not exclusively derived from an allegation made in a judicial or administrative hearing, government report, audit, or investigation. The Dodd-Frank whistleblower provisions explicitly set this standard.
Scope extends to violations involving public companies, registered investment advisers, broker-dealers, hedge funds, and other SEC-regulated entities. Foreign nationals located outside the United States are eligible to submit tips and receive awards, provided that the conduct they report has a sufficient nexus to U.S. securities markets or violates a covered federal securities law. The program does not extend to violations of laws outside the SEC's jurisdiction — separate frameworks govern tax fraud (IRS), commodity fraud (CFTC Whistleblower Program), and healthcare fraud.
Core Mechanics or Structure
The award mechanism is the program's central feature. When the SEC brings a successful enforcement action that results in sanctions exceeding $1,000,000, an eligible whistleblower may receive between 10% and 30% of the total monetary sanctions collected (SEC Office of the Whistleblower, Award Claim Process). This threshold applies to the SEC's own action; sanctions collected in related actions by the Department of Justice, state attorneys general, or foreign regulators may also be included in the award base under the "related action" provisions of Rule 21F-3.
The process unfolds in discrete phases:
- Tip submission — Filed through the SEC's online Tips, Complaints, and Referrals (TCR) system or by mailing Form TCR. Anonymous submissions are permitted only if submitted through an attorney.
- SEC intake review — The Office of the Whistleblower and relevant SEC divisions assess whether the tip raises actionable issues under covered securities laws.
- Investigation — The SEC's Division of Enforcement may open a formal investigation; the whistleblower is not a party to this process.
- Enforcement action — If sanctions exceeding $1,000,000 are obtained, the SEC publishes a Notice of Covered Action on its website.
- Award application — Claimants submit Form WB-APP within 90 days of the Notice of Covered Action publication.
6.Preliminary determination — The Claims Review Staff issues a preliminary award determination with a stated percentage. - Final order — After any contest procedures, the Commission issues a final order. Awards are paid from the SEC Investor Protection Fund, which is financed by monetary sanctions and does not reduce amounts returned to harmed investors.
Since the program's inception through fiscal year 2023, the SEC has awarded more than $1.9 billion to over 400 individuals (SEC Annual Report to Congress on the Dodd-Frank Whistleblower Program, FY2023). The largest single award as of fiscal year 2023 stood at approximately $279 million, issued to one individual in May 2023. For a detailed breakdown of how percentages are calculated, see Whistleblower Award Calculations.
Causal Relationships or Drivers
Three structural factors drive award outcomes: the significance of the information provided, the degree of assistance the whistleblower renders during the investigation, and the whistleblower's culpability in the underlying violation.
The SEC's rules specify upward adjustment factors — including the significance of the information, the assistance provided, and any law enforcement interest — and downward adjustment factors, including unreasonable delay in reporting, interference with internal compliance systems, and culpability. Rule 21F-6 governs this balancing process explicitly (17 CFR § 240.21F-6).
A key causal driver is the internal reporting question. While the Dodd-Frank Act does not require internal reporting before approaching the SEC, a whistleblower who reports internally before filing with the SEC may receive additional credit if that internal report led the company to conduct its own investigation that contributed to the SEC's action. Conversely, a whistleblower who unreasonably delays external reporting after choosing the internal route may receive a reduced award.
The SEC's 2020 rule amendments — effective September 23, 2020 — added a provision allowing the Commission to apply, in its discretion, a presumption of the maximum 30% award for sanctions totaling $5,000,000 or less (SEC Release No. 34-89963). This was intended to preserve incentive structures for smaller cases where the dollar award might otherwise be insufficient.
Classification Boundaries
Not all individuals who report securities violations qualify as eligible whistleblowers under the program. The SEC's rules draw precise classification lines:
Excluded categories include:
- Individuals who obtained the information through a communication subject to attorney-client privilege, unless an attorney-disclosure exception applies under Rule 21F-4(b)(4)
- Foreign government officials reporting information obtained in their official capacity
- Employees of the SEC, CFTC, DOJ, banking regulatory agencies, and certain self-regulatory organizations
- Individuals convicted of a criminal violation related to the conduct being reported
- Individuals who obtained the information through an audit of a company's financial statements if submission would violate applicable auditing standards (with narrow exceptions)
Eligible categories include:
- Current and former employees of the entity under investigation
- Contractors, subcontractors, and agents
- Foreign nationals with sufficient nexus to U.S. markets
- Attorneys submitting information under a limited attorney-disclosure exception
- Multiple individuals submitting jointly (joint submissions are treated as a single claimant for award purposes, with the group sharing the total award)
The distinction between internal vs. external whistleblowing carries classification weight: under the SEC's post-2020 rules, an individual who reports internally is treated as an SEC whistleblower for anti-retaliation purposes (as of the Supreme Court's decision in Digital Realty Trust, Inc. v. Somers, 138 S. Ct. 767 (2018)), but only if they subsequently report to the SEC within 120 days of the internal report.
Tradeoffs and Tensions
The program's design contains inherent tensions that generate ongoing legal and policy debate.
Award floor vs. ceiling discretion. The 10%–30% statutory range gives the SEC significant latitude to adjust awards, creating uncertainty for claimants. Critics argue that published award determinations lack sufficient transparency in how adjustment factors are weighted. The SEC publishes its reasoning in final orders, but the granular weighting methodology is not codified in a standardized rubric.
Internal vs. external reporting tension. The program structurally favors external reporting to the SEC — reporting first to the SEC preserves all rights, while internal-only reporting may not. This creates a tension with corporate compliance programs that rely on employees escalating concerns internally. The 2020 amendments attempted a partial accommodation but did not resolve the underlying incentive conflict. See Whistleblower Confidentiality Rights for the related privacy dimension.
Culpable whistleblower eligibility. A participant in the underlying fraud may still receive an award, though at a reduced percentage. This creates moral hazard arguments: individuals who profited from illegal conduct may also receive federal awards for reporting it. The rules cap reductions but do not exclude culpable parties categorically.
Anonymity and attorney dependency. Anonymous filers must be represented by an attorney at the time of submission and must disclose their identity before any award is paid. This creates a practical barrier for individuals who cannot secure representation. Anonymous Whistleblower Reporting covers the procedural mechanics in detail.
Common Misconceptions
Misconception: Reporting to the company first satisfies SEC whistleblower requirements.
Correction: Internal reporting does not constitute a submission to the SEC and does not start any SEC clock. A separate Form TCR must be filed with the SEC to establish whistleblower status, even if the internal report predates it.
Misconception: The award percentage is always 15%–30%.
Correction: The statutory range is 10%–30%. The 10% floor is real and applied in cases where the whistleblower delayed unreasonably, interfered with internal compliance, or bears substantial culpability.
Misconception: Awards are paid from money recovered for harmed investors.
Correction: Awards are paid exclusively from the SEC Investor Protection Fund. Payments to investors in disgorgement or fair fund distributions are separate from whistleblower awards and are not reduced by the award payment (15 U.S.C. § 78u-6(b)(1)).
Misconception: A whistleblower must have direct evidence of fraud.
Correction: Original information may include independent analysis of publicly available data if the analysis reveals a violation not previously identified. Analytical submissions — such as pattern analysis of public filings — have resulted in paid awards.
Misconception: Retaliation protections require a successful SEC action.
Correction: Anti-retaliation protections under Section 21F(h) attach to the act of providing information to the SEC, regardless of whether the SEC takes enforcement action or the whistleblower receives an award. The Whistleblower Retaliation Protections page addresses the full scope of available remedies.
Checklist or Steps (Non-Advisory)
The following is a structural overview of the procedural elements associated with an SEC whistleblower submission. This is a reference sequence, not legal guidance.
- [ ] Confirm that the subject conduct involves a potential violation of federal securities laws within the SEC's jurisdiction
- [ ] Determine whether the information qualifies as "original information" — independently known or analyzed, not already public, and not derived exclusively from privileged communications
- [ ] Assess eligibility status: verify the submitter does not fall within an excluded category (government employee, convicted participant, etc.)
- [ ] Decide on anonymous vs. identified submission; anonymous submission requires attorney representation at the time of filing
- [ ] Complete and submit Form TCR through the SEC's online TCR portal or by mail to the SEC Office of the Whistleblower
- [ ] Retain documentation of all evidence and the date and method of submission
- [ ] Monitor the SEC's website for any Notice of Covered Action related to the subject conduct
- [ ] If a Notice of Covered Action is published, file Form WB-APP within 90 calendar days of that notice
- [ ] Respond to any SEC requests for additional information during the Claims Review Staff's evaluation
- [ ] Review the preliminary determination and exercise contest rights within the stated deadline if the preliminary determination is disputed
- [ ] If submitting anonymously, disclose identity to the SEC prior to receiving any award payment
For the underlying complaint filing process, see Whistleblower Complaint Filing Process.
Reference Table or Matrix
SEC Whistleblower Program: Key Parameters at a Glance
| Parameter | Detail | Governing Authority |
|---|---|---|
| Statutory basis | Section 21F, Securities Exchange Act of 1934 (as amended by Dodd-Frank, 2010) | 15 U.S.C. § 78u-6 |
| Implementing regulation | 17 CFR Part 240, Rule 21F | eCFR Title 17, § 240.21F |
| Administering body | SEC Office of the Whistleblower | sec.gov/whistleblower |
| Minimum enforcement action threshold | $1,000,000 in sanctions | Rule 21F-3 |
| Award range | 10%–30% of collected sanctions | Rule 21F-6 |
| Presumption of maximum award | Available for actions ≤$5,000,000 (post-2020 amendments) | SEC Release No. 34-89963 |
| Anonymous submission | Permitted with attorney representation | Rule 21F-9(c) |
| Award application form | Form WB-APP | SEC Office of the Whistleblower |
| Award application deadline | 90 days from Notice of Covered Action | Rule 21F-10(b) |
| Award fund source | SEC Investor Protection Fund | 15 U.S.C. § 78u-6(b)(1) |
| Anti-retaliation scope | Covers reporting to SEC; internal-only reporting protected under certain conditions post-Digital Realty | Section 21F(h); 138 S. Ct. 767 (2018) |
| Related action coverage | DOJ, state AG, CFTC, foreign regulators | Rule 21F-3(b) |
| Excluded reporters | Government officials, convicted participants, audit professionals (standard exception), attorneys (standard exception) | Rule 21F-4(b) |
| Largest single award (FY2023) | ~$279 million | SEC FY2023 Annual Report to Congress |
| Total awards issued (inception–FY2023) | Over $1.9 billion to 400+ individuals | SEC FY2023 Annual Report to Congress |
References
- SEC Office of the Whistleblower — Program Overview
- SEC Annual Report to Congress on the Dodd-Frank Whistleblower Program, FY2023
- 17 CFR Part 240, Rule 21F — Electronic Code of Federal Regulations
- 15 U.S.C. § 78u-6 — Securities Exchange Act Section 21F (U.S. House Office of Law Revision Counsel)
- [SEC Release No. 34-89963 — 2020 Whistleblower Rule Amendments](https://www.sec.gov