To report illegal activity in the workplace, match the misconduct to the federal agency that handles it, file within that agency’s deadline, and keep a written record of what happened and when you reported it. Discrimination goes to the EEOC. Safety hazards and retaliation for raising them go to OSHA. Securities fraud goes to the SEC. Environmental violations go to the EPA. Fraud against the federal government can be pursued through a qui tam lawsuit under the False Claims Act. Each channel has its own filing window, and some are as short as 30 days.
Build Your Record Before You Report
Write down what you saw or experienced while it’s fresh: dates, times, locations, who was involved, and who else might have witnessed it. Save emails, memos, pay stubs, screenshots, or any other documents that support your account. Keep copies outside your workplace, on a personal device or in a personal email account, because company-owned laptops and servers can be wiped or locked if you’re terminated.
Be careful about what you take. Proprietary trade secrets and attorney-client privileged documents can create legal problems for you even if the underlying misconduct is real. A short consultation with an employment attorney before you copy anything can prevent an avoidable mistake.
Recording conversations is another trap. Federal wiretapping law generally allows one-party consent recordings, meaning you can record a conversation you’re part of without telling the other person. Many states require all parties to consent, and violating your state’s recording law can expose you to criminal penalties and civil liability regardless of what the recording captured. Check your state’s law before you hit record.
Talking to coworkers about the problem is protected. Federal labor law protects employees who act together to address work-related issues, including discussing concerns with each other, bringing group complaints to management, or contacting a government agency. Your employer cannot fire or discipline you for this kind of coordinated activity.1National Labor Relations Board. Concerted Activity You can lose that protection by making knowingly false statements or acting egregiously offensively, but gathering facts with coworkers about a shared concern is squarely within your rights.
Try Internal Channels First When It’s Safe
Most organizations have ethics hotlines, online portals, compliance officers, or HR departments designated to receive complaints. Using these first is often worth trying. Some whistleblower programs give you credit for it, and many problems get resolved faster internally than through a government agency.
Publicly traded companies are required to have these systems. The Sarbanes-Oxley Act directs audit committees to establish procedures for receiving complaints about accounting or auditing problems, including a way for employees to submit concerns confidentially and anonymously.2Public Company Accounting Oversight Board. Sarbanes-Oxley Act of 2002 Private companies aren’t bound by that specific requirement, but many have adopted similar systems.
Put your complaint in writing. Keep a copy. Note the date you submitted it, who received it, and any response you got. If the company promises to investigate, ask for a timeline. If weeks pass with no follow-up, escalate to a higher-level manager or a different department. Document every step. If the company ignores your report or retaliates, that paper trail becomes critical evidence when you go to an outside agency.
Skip internal reporting when using it would tip off the wrongdoer, when your supervisor is part of the problem, or when retaliation seems likely.
Match the Misconduct to the Right Agency
Filing with the wrong agency wastes time you may not have. Which agency you contact depends entirely on what kind of illegal activity you’re reporting.
Discrimination and Harassment
The Equal Employment Opportunity Commission handles complaints of discrimination based on race, color, religion, sex, or national origin, and also covers age, disability, and retaliation for reporting any of these.3U.S. Equal Employment Opportunity Commission. Title VII of the Civil Rights Act of 1964 You submit an inquiry through the EEOC’s online Public Portal, and the agency interviews you and helps you complete a formal Charge of Discrimination.4U.S. Equal Employment Opportunity Commission. Filing a Charge of Discrimination
Safety and Health Hazards
OSHA handles two distinct types of reports. If someone dies on the job or suffers a hospitalization, amputation, or eye loss, the employer must notify OSHA within 8 hours for a fatality and 24 hours for the other injuries.5Occupational Safety and Health Administration. Report a Fatality or Severe Injury If your employer isn’t making those reports, that itself is a violation you can flag. Separately, if you’re retaliated against for raising safety concerns, you file a whistleblower complaint with OSHA under Section 11(c) of the OSH Act.6Occupational Safety and Health Administration. Occupational Safety and Health Act, Section 11(c)
Securities and Financial Fraud
The Securities and Exchange Commission runs one of the most financially rewarding whistleblower programs in the federal government. If you report securities fraud, accounting manipulation, or other violations of federal securities laws, and your information leads to an enforcement action with more than $1 million in sanctions, you’re eligible for an award of 10 to 30 percent of the money collected.7U.S. Securities and Exchange Commission. SEC Issues $24 Million Awards to Two Whistleblowers Since the program began, the SEC has paid nearly $2 billion to whistleblowers.8U.S. Securities and Exchange Commission. Whistleblower Program You can submit tips anonymously, but only if an attorney provides contact information on your behalf.9U.S. Securities and Exchange Commission. Information About Submitting a Whistleblower Tip Reporting internally first can push your award toward the higher end of the range, because the SEC weighs it in setting the percentage.
Environmental Violations
Report violations of the Clean Air Act, Clean Water Act, or other environmental laws to the Environmental Protection Agency through their online violation reporting form. For emergencies posing an immediate threat to health or the environment, call the National Response Center Hotline at 1-800-424-8802.10U.S. Environmental Protection Agency. Report an Environmental Violation, General Information
Consumer Fraud
The Federal Trade Commission accepts reports of scams, deceptive advertising, and unfair business practices at ReportFraud.ftc.gov. The FTC doesn’t resolve individual complaints but uses report data to identify patterns and bring enforcement actions against companies engaged in widespread fraud.11Federal Trade Commission. How to Report Fraud at ReportFraud.ftc.gov
Wage and Hour Violations
If your employer isn’t paying minimum wage or overtime, or is misclassifying employees to avoid labor protections, the Department of Labor’s Wage and Hour Division investigates. You can file online or through the nearest WHD office. State labor departments also handle wage claims, and in some cases resolve them faster than the federal process.
Fraud Against the Government
If you know about a company defrauding the federal government, such as billing for services never provided, falsifying quality certifications on government contracts, or overbilling Medicare or Medicaid, the False Claims Act lets you file a qui tam lawsuit on the government’s behalf. If the case succeeds, you get a percentage of what the government recovers: 15 to 25 percent if the Department of Justice takes over the case, and 25 to 30 percent if the government declines to intervene and you pursue it yourself. The defendant also pays your attorney’s fees and litigation costs.12Office of the Law Revision Counsel. 31 U.S. Code 3730 – Civil Actions for False Claims
Qui tam cases require an attorney. The complaint is filed under seal, meaning it stays confidential while the government investigates, which can take months or years.
Federal Government Employees
Federal employees have a separate framework. The Whistleblower Protection Act prohibits any federal official from retaliating against an employee who discloses information they reasonably believe shows a violation of law, gross mismanagement, gross waste of funds, abuse of authority, or a substantial danger to public health or safety.13Office of the Law Revision Counsel. 5 U.S. Code 2302 – Prohibited Personnel Practices If you’re retaliated against, file with the Office of Special Counsel, which investigates whistleblower retaliation claims against federal employers.14U.S. Office of Special Counsel. Home If the OSC can’t resolve it, you can appeal to the Merit Systems Protection Board, which can order reinstatement, back wages, and attorney’s fees.15U.S. Merit Systems Protection Board. Questions and Answers About Whistleblower Appeals
Deadlines That Will Kill Your Claim
Every whistleblower and retaliation statute has a filing deadline, and missing it almost always kills the claim. The deadlines vary widely, and some are short enough to catch people off guard.
OSHA administers whistleblower protections under more than 20 different federal statutes, each with its own clock:16Occupational Safety and Health Administration. Whistleblower Statutes Summary Chart
- 30 days: OSH Act retaliation (Section 11(c)), Clean Air Act, Clean Water Act, Safe Drinking Water Act, Toxic Substances Control Act, and several other environmental statutes
- 90 days: aviation safety (AIR21), asbestos hazard reporting (AHERA), and anti-money laundering violations (AMLA)
- 180 days: Sarbanes-Oxley Act, Affordable Care Act, railroad safety, pipeline safety, consumer financial protection, and nuclear energy whistleblower claims
Outside the OSHA-administered statutes, the EEOC gives you 180 calendar days from the discriminatory act to file a charge, extending to 300 days if a state or local agency enforces a similar anti-discrimination law, which is true in most states.17U.S. Equal Employment Opportunity Commission. Time Limits for Filing a Charge The SEC whistleblower program doesn’t publish a hard filing deadline in the same way, but delays in reporting can reduce your award. For False Claims Act qui tam lawsuits, the statute of limitations is generally six years from the violation or three years from when the government knew or should have known about the fraud, whichever is later.
Treat any deadline under 180 days as urgent. If you’re unsure which statute applies, consult an employment attorney quickly. The clock starts running whether or not you know about it.
Retaliation Is Illegal, and It’s Broader Than Firing
Retaliation goes well beyond getting fired. According to EEOC guidance, materially adverse actions include demotion, suspension, denial of promotion, negative evaluations, transfers to less desirable assignments, closer scrutiny of your work without justification, removing supervisory responsibilities, and threats of deportation or immigration action. Even changing the work schedule of a parent with childcare responsibilities can qualify. The test is whether the action would discourage a reasonable person from reporting misconduct.18U.S. Equal Employment Opportunity Commission. Enforcement Guidance on Retaliation and Related Issues
Remedies differ by statute. Under the Sarbanes-Oxley Act, employees of publicly traded companies who are retaliated against for reporting securities fraud can file a complaint with OSHA within 180 days; if the complaint is upheld, remedies include reinstatement, back pay with interest, compensation for special damages, and attorney’s fees.19Occupational Safety and Health Administration. OSHA Fact Sheet – SOX Act Under the False Claims Act, back pay is doubled, and there’s no cap on compensatory damages.12Office of the Law Revision Counsel. 31 U.S. Code 3730 – Civil Actions for False Claims Under the SEC whistleblower program, employers can face separate enforcement actions for retaliating against tipsters.20U.S. Securities and Exchange Commission. Whistleblower Protections
Retaliation claims turn on timing. If you were demoted two weeks after filing an internal complaint, that timing is powerful evidence. If you can’t prove when you reported or what happened afterward, the claim gets much harder to win. Save the dated copy of your complaint, save every performance review before and after, and note any change in how you’re treated at work.