Sanctions Whistleblower Reports: OFAC Violations and the FinCEN Award Route

A sanctions whistleblower can qualify for an award from the Financial Crimes Enforcement Network by providing original information that leads to a successful Treasury or Justice Department enforcement action under covered U.S. sanctions laws. You may know why a payment lost its Iranian identifiers, why an account stayed open after a sanctions alert, or who approved access that the company’s policy prohibited. Those decisions can connect the transaction the government sees to the people and business interests behind it.

The Anti-Money Laundering Act’s whistleblower provision, as amended provides qualifying whistleblowers collectively 10% to 30% of qualifying monetary sanctions collected in covered actions that exceed $1 million.

As of October 21, 2026, FinCEN’s program page says it will begin processing and paying awards once its implementing regulation is finalized. We work through the proposed rules with you and sanctions whistleblower lawyers who understand the program.

What Is the AML Whistleblower Law?

The Anti-Money Laundering Act and the Anti-Money Laundering Whistleblower Improvement Act expanded the whistleblower program administered by the Financial Crimes Enforcement Network. Its sanctions coverage reaches violations of the International Emergency Economic Powers Act, the Trading With the Enemy Act and the Foreign Narcotics Kingpin Designation Act. The same award program also covers Bank Secrecy Act violations, including failures to file required suspicious activity reports.

The Office of Foreign Assets Control administers sanctions and brings civil enforcement actions. The Financial Crimes Enforcement Network shares information with that office and relevant Justice Department offices, so an insider’s information about a sanctions violation can belong in the award program.

The practical question is what the business did, which sanctions restriction applied and how the transaction connected to U.S. jurisdiction. Ownership, the countries involved, the transaction date and any license can all change that answer.

What Are Examples of Sanctions Evasion?

Sanctions evasion can involve removing identifying details from payment messages, concealing owners behind front companies or allowing customers in sanctioned jurisdictions to keep trading. The useful detail is often the information removed before the next business in the chain saw the transaction.

Correspondent banking lets a foreign bank move money through a U.S. bank. The payment message can therefore be where an employee’s decision inside one institution changes what another institution can screen.

Standard Chartered’s 2019 New York banking consent order records the bank’s earlier admission that it intentionally stripped identifying information from payments involving Iranian parties. The practice involved removing or omitting identifiers in payment messages. For someone in payment operations, the original message, the edited message and the instructions behind the edit tell the story together. The money could move because the information did not travel with it.

What Is the 50% Rule in OFAC Sanctions?

Under the Office of Foreign Assets Control’s ownership rule, an entity owned at least 50% in aggregate, directly or indirectly, by blocked persons is itself blocked even if its name never appears on the sanctions list. A customer file can therefore matter as much as the list-screening result. The ownership chain may explain the restriction that a search for the customer’s name missed.

We examine the ownership information, the payment and the claimed authorization together when assessing a sanctions whistleblower report.

What Proof Do You Need?

If you want to report sanctions screening overrides to FinCEN for an award, the starting point is the transaction, the alert and the decision that allowed it through. We connect what the system detected to what the business knew and what happened afterward.

The useful evidence can sit in customer ownership files, payment messages, screening settings, account permissions, exception approvals and internal communications. Dates connect the decision to the rule and the customer at that time. On an exchange, customer records and the internal ledger can connect a wallet or trade to the person using it.

These are different views of the same business. An onboarding employee may know which owner was disclosed. An engineer may know which information the screening system used. Operations staff may know who approved the exception. We work with you to connect those observations to the conduct a government investigator can pursue.

Bittrex Had the Location Data

Bittrex, an online virtual currency exchange and hosted-wallet provider, agreed to a $24,280,829 civil settlement with the Office of Foreign Assets Control in October 2022. In its enforcement release, the agency alleged that the company had customers’ physical addresses and internet protocol addresses but failed to screen that information for sanctioned locations.

According to the agency, the screening vendor checked names against sanctions lists but did not check for the customers’ connection to sanctioned jurisdictions. Its account included an Iranian passport and a customer who identified Iran as their location at account opening. The alleged failure involved information the business already held. The vendor’s screening scope and the onboarding records supplied different halves of it.

Binance’s Internal Ledger Held the Other Side of the Trade

Binance agreed to a $968,618,825 civil settlement with the Office of Foreign Assets Control in November 2023 over alleged sanctions violations involving trades between U.S. users and users in sanctioned jurisdictions or blocked persons. The agency described an exchange whose matching engine paired orders by price and time. Trades between Binance users appeared in its internal ledger, rather than on the public blockchain.

According to the agency, senior management knew both groups of users remained on the platform. The agency also alleged that Binance retained valuable U.S. traders for their volume and liquidity despite its stated restrictions. In the agency’s account, the internal discussions exposed the gap between the policy and the business decision. The release quoted the deputy head of compliance reporting the chief executive’s position:

An exchange that enforces those restrictions gives up the business Binance allegedly chose to keep.

For an insider, the ledger can identify the counterparties, while the communications explain why access continued. A public blockchain view alone misses trades the platform records only in its own books.

The Wharton Initiative on Financial Policy and Regulation’s Anti-Money Laundering: Opportunities for Improvement, published in 2024, describes research in which compliance officials see themselves as aligned with law enforcement but feel that others inside their firms view their work as an expense to minimize. That analysis gives a reason to look beyond the written policy to the resources, permissions and decisions behind it. In a sanctions report, the question is how those choices affected the particular customer or transaction.

OFAC Employee Tip Versus Company Voluntary Self Disclosure

An employee’s tip about a sanctions violation and a company’s voluntary self disclosure serve different interests. The insider supplies information about the conduct. A company disclosing its own potential violations seeks credit that can reduce its sanctions penalty. The Financial Crimes Enforcement Network administers the separate whistleblower award route.

The company’s disclosure, its internal investigation and the employee’s knowledge can concern the same transactions. We assess the employee’s information and its contribution to enforcement on their own terms.

The sanctions agency’s blocked-property and rejected-transaction reports are another part of the company’s sanctions obligations. They describe how the institution handled property or a payment. The whistleblower’s account can explain why the business allowed a prohibited transaction, concealed an owner or disregarded an alert in the first place.

Who Can Be a Sanctions Whistleblower?

A sanctions whistleblower can have original information from independent knowledge or analysis, including information learned through their job. That makes the people operating the controls particularly relevant: compliance staff, auditors, payment operations employees, customer-onboarding teams and engineers who understand the system’s actual behavior. An independent analyst can also hold original information.

The program also reaches qualifying reporters outside the United States. A foreign employee may know the customer or the instructions at the beginning of a payment chain that later reaches a U.S. bank. We assess that knowledge against the U.S. transaction and the covered sanctions law.

We focus on what your information adds: the owner behind an account, a concealed counterparty, an approval that kept a customer trading or an explanation for a changed payment message. Your role helps explain how you know it. The connection between that information and successful enforcement matters to the award.

What Is the Proposed Whistleblower Rule?

The Financial Crimes Enforcement Network’s April 1, 2026 proposal sets out how it would implement the award program, including treatment of information obtained through compliance, audit and management roles. We address the rules applicable to your role with you and the sanctions whistleblower lawyers we bring into your case.

What Is the Reward Based On?

A sanctions whistleblower reward is based on qualifying money collected through enforcement. A settlement announcement states what the company agreed to pay.

A sanctions report may also raise questions under another whistleblower program. The Financial Crimes Enforcement Network’s program and the Justice Department’s corporate whistleblower pilot have separate rules for overlapping matters. We assess which program fits the conduct and the information you hold.

A whistleblower case under the False Claims Act can pay 15% to 30% of what the government recovers. That is a separate program from the sanctions award route.

How Do I Report Someone to FinCEN?

Start with our whistleblower experts to assess the sanctions conduct, your information and the award route together. We work through the connection between the customer, the transaction, the failed control and the decisions inside the company, then bring in sanctions whistleblower lawyers suited to the case.

If your information involves suspicious activity reports, confidential customer records, anonymity or retaliation concerns, we address those questions with you and your sanctions whistleblower lawyers. That review belongs alongside the facts of your case.

When You Know Why the Transaction Cleared

If you know who concealed the customer, changed the payment message or approved the sanctions override, speak with our whistleblower experts about the decision behind the transaction. We help build your strongest sanctions whistleblower case around that knowledge and bring in sanctions whistleblower lawyers who understand payment systems, ownership and exchange controls. We stay beside you as the case develops.