How Much Can You Get Paid as an AMLA Whistleblower?

Short answer: an eligible whistleblower may receive an award of 10% to 30% of monetary sanctions collected in a qualifying Bank Secrecy Act (BSA) enforcement action. The programme generally requires sanctions to exceed $1 million. That is not a guaranteed payment or a percentage of the institution’s revenue, the amount of a suspicious transaction, or a settlement headline. The award depends on the law’s requirements, the information supplied, the enforcement outcome and other discretionary factors.

For someone working in compliance, operations or financial crime, the practical question is not only “What is the percentage?” It is also whether the conduct is a BSA violation rather than a mistake, whether your evidence can be verified, how quickly you need to act, and whether you can submit information anonymously. Those questions deserve careful treatment before you make a disclosure.

What does the 10% to 30% award mean?

The Anti-Money Laundering Act of 2020 (AMLA) amended the BSA to create financial incentives for people who voluntarily provide original information that leads to successful enforcement action. The award is calculated against qualifying monetary sanctions that are collected, not simply announced. In general, the action must result in more than $1 million in monetary sanctions.

For example, suppose a bank pays $8 million in qualifying sanctions after an enforcement action that was substantially informed by a whistleblower’s original evidence. A 10% award would be $800,000; a 30% award would be $2.4 million. This is an illustration, not a prediction. The actual award may be lower, and a person may receive no award if the legal conditions are not met or no qualifying sanctions are collected.

Question Practical answer What is the potential percentage? Generally 10% to 30% of qualifying monetary sanctions collected. Is there a minimum enforcement threshold? Generally, monetary sanctions must exceed $1 million. Is an award automatic? No. Eligibility and the award amount depend on statutory requirements and discretionary factors. What if the regulator announces a penalty but collects less? The award is tied to qualifying sanctions collected, so an announced figure is not necessarily the final calculation base.

The award programme is separate from a retaliation claim. A person who reports suspected misconduct may have protection against retaliation even if there is no award. Conversely, making a disclosure does not itself establish a right to compensation.

What counts as a BSA violation — and what may just be a mistake?

A BSA concern can involve failures in a financial institution’s anti-money laundering controls or reporting duties. Examples may include deliberately ignoring repeated red flags, failing to maintain an effective AML programme, or knowingly failing to file required reports. Whether particular conduct violates the law depends on the facts, the applicable requirements and the organisation’s role.

It is important to distinguish a control failure from proof of individual misconduct. A late Suspicious Activity Report (SAR), a missed escalation or an incomplete customer file may reflect human error, a poorly designed process, inadequate training or limited staffing. It may also be sanctions exceed $1 million part of a more serious pattern. One error, on its own, does not establish that someone knowingly concealed suspicious activity or that the institution committed a legally actionable BSA violation.

Consider two examples:

Possible human error: an analyst misclassifies a transaction, the error is found during quality assurance, and the institution documents and corrects the issue.
Possible evidence of a broader problem: several dated escalations identify the same high-risk activity, managers repeatedly direct staff not to file or escalate, and the underlying transactions continue without documented review.

Neither example resolves the legal question by itself. The second, however, gives an investigator specific conduct, people, dates and transactions to examine. Avoid broad claims such as “the bank launders money” unless you can identify the facts that support the allegation.

Evidence and documentation that holds up

Useful evidence is usually specific, contemporaneous and capable of independent verification. You do not need to prove the entire case before seeking legal advice, but you should be able to explain what happened, when it happened, who was involved and how you know.

For instance, a dated escalation record linked to a transaction reference is generally more useful than a recollection that “this was happening for months”. A SAR log, quality-assurance record, policy version or meeting note may help establish a timeline. Do not take customer data, SARs or other restricted records outside authorised channels. SAR confidentiality and privacy rules can apply, and unauthorised copying can create serious risks.

Quick “what to write down” checklist

Dates and times: when you observed the activity, raised the concern and received a response.
Transactions or accounts: identifiers sufficient to locate the records through authorised processes; do not include more personal data than necessary in your notes.
People and roles: who made a decision, gave an instruction or received an escalation.
What you personally know: separate direct observation from what a colleague told you or what you infer.
Records that may exist: for example, a SAR log entry, case-management ticket, dated email, audit finding, policy version or meeting minutes.
Response and follow-up: whether the concern was reviewed, corrected, closed without explanation or raised again.
Possible innocent explanations: record them too. Showing that you considered human error or a process breakdown can make your account more balanced and credible.

Keep notes factual. Do not alter records, access files outside your authority, forward confidential material to a personal account or discuss SAR details with people who are not authorised to receive them. A lawyer can advise how to preserve evidence without breaching confidentiality or internal controls.

Discretionary factors: why one case may receive more than another

The 10% to 30% range is not a tariff. The amount is determined under the applicable programme rules and depends on the particular case. Factors commonly relevant to an award assessment include the significance and usefulness of the information, how much it helped the authorities, whether it was timely, and whether the person participated in an internal reporting process. The person’s role in the underlying conduct may also matter.

In practical terms, a detailed, original account that helps investigators identify previously unknown conduct may carry more weight than a submission consisting only of public information or unsupported conclusions. Cooperation can also matter. But do not assume that reporting internally is always safe or that you must wait for an internal investigation to finish before seeking independent advice. Consider the retaliation risk, preservation obligations and legal deadlines before deciding when and where to report.

Timing pressure and limitation periods

There is no single deadline that answers every timing question. The deadline for a whistleblower award submission, the limitation period for an enforcement action and the time limit for a retaliation complaint are different issues. Rules and procedures can change, so check the current FinCEN instructions and obtain advice promptly.

One specific timing issue deserves particular attention: BSA anti-retaliation provisions include a short window for bringing a retaliation claim. The statutory framework provides a 180-day period tied to the alleged retaliation or when the employee knew, or reasonably should have known, of it. The correct trigger can depend on the facts. If you are demoted, dismissed, threatened or otherwise disadvantaged after raising a concern, record the dates and seek advice immediately rather than assuming an internal HR process pauses the clock.

Enforcement limitation periods are separate. For example, federal civil enforcement time limits may apply to the government’s action, while programme procedures can set deadlines for pursuing an award after an enforcement outcome is publicised. Do not wait for a case to become public before asking whether a submission should be made. Early legal advice can help preserve the option to report while avoiding a premature or poorly prepared disclosure.

Anonymous versus identified submissions

Some whistleblower processes allow a person to submit information anonymously through an attorney. An anonymous submission can reduce the immediate exposure of your identity, but it does not necessarily mean your identity will remain unknown throughout the process. Programme rules may require identity verification before an award can be paid, and investigators may need further information to assess credibility or follow leads.

An identified submission may make follow-up easier, but it can also raise workplace and personal concerns. Before choosing, discuss with a lawyer who understands the relevant whistleblower rules:

whether anonymous submission is available for your circumstances;
what information must be provided to verify your identity later;
how confidentiality is handled and what its limits are;
how to preserve your records and communicate securely; and
what to do if your employer takes adverse action.

Do not promise yourself absolute anonymity. Confidentiality protections are not the same as a guarantee that no one will infer your identity from the facts, and they do not remove the need to comply with data-protection, SAR-confidentiality and other legal obligations.

Where do the FFIEC and legal resources fit?

The Federal Financial Institutions Examination Council (FFIEC) provides supervisory and examination resources, including materials that can help professionals understand how AML controls are assessed. Its resources can help you frame a concern in operational terms—such as customer due diligence, transaction monitoring or escalation—but the FFIEC is not the whistleblower-award application portal.

The National Law Review has published legal analysis on filing an AML/BSA whistleblower lawsuit. Use that kind of article as background, not as a substitute for checking current statutes, regulations and agency procedures. A retaliation lawsuit and a claim for an award are distinct routes, and the steps for one do not automatically satisfy the requirements for the other.

Practical next steps

Separate facts from conclusions. Identify the transactions, dates, decisions and records behind your concern.
Record a neutral timeline. Include internal escalations, responses and any possible innocent explanation.
Protect restricted information. Do not remove SARs or customer records without authorisation or legal advice.
Get independent advice early. Discuss eligibility, anonymity, deadlines and retaliation risk with a lawyer experienced in whistleblower matters.
Check current procedures. Confirm the applicable FinCEN submission process and any deadline connected with a covered enforcement action.

Bottom line: the headline potential is 10% to 30% of qualifying sanctions collected in a successful action where sanctions exceed $1 million. But that range is only the starting point. A strong matter rests on original, verifiable information; a careful distinction between human error and willful misconduct; and timely decisions about documentation, confidentiality and protection from retaliation.

This article is general information, not legal advice. Whistleblower eligibility, award procedures, limitation periods and confidentiality rules depend on the facts and the law in force when you act.