In a recent blog post, we touched on the significant employment protections available under the SEC Whistleblower Program. Here, we take a deeper look at an issue that is top of mind for many individuals who contact us: When employees become aware of financial fraud, how, when, and to whom should they report suspected misconduct to minimize—or defend against—the risk of retaliation?
The Risk of Coming Forward
The adage “see something, say something” is admirable. For employee whistleblowers, however, it can also be perilous. Even a measured, good-faith comment to management such as—“I believe this conduct is problematic” or “these disclosures to investors are inaccurate…”—can trigger retaliation. The most common forms include termination, demotion, pay cuts, denial of promotion, negative performance reviews, or reassignment to less desirable duties.
Retaliation can also be subtle: exclusion from meetings, isolation from colleagues, denial of vacation requests, relocation to a smaller office or different location, unrealistic performance targets, or reputational harm. These actions may be harder to detect—but no less damaging.
Fortunately, there are safeguards.
Snapshot of Employment Protections
Enacted in the wake of the 2008 financial crisis—a collapse fueled by systemic corporate misconduct that destabilized global markets, wiped out trillions in wealth, and eroded public trust—the Dodd-Frank Wall Street Reform and Consumer Protection Act ushered in sweeping reforms. Among its most important provisions were powerful financial incentives and anti-retaliation protections to empower whistleblowers to report securities fraud without fear of reprisal.
Under the Act, employers are prohibited from firing, demoting, suspending, threatening, harassing, or otherwise discriminating against individuals who report potential securities law violations to the SEC. If retaliation occurs, a whistleblower may file suit in federal court and seek double back pay with interest, reinstatement, and reimbursement of attorneys’ fees and litigation costs
These remedies are among the most robust available under federal law. However, when—and how—these protections are triggered is not always straightforward.
Internal Reporting: A Strategic Proposition
There is no legal requirement to report misconduct internally before going to the SEC. Doing so is a strategic decision that depends on multiple factors. Some individuals wish to report internally because doing so may result in a higher SEC award. But that decision requires a careful risk–reward analysis that looks at the company’s ethics culture; the strength and independence of its compliance systems; whether other whistleblowers have experienced retaliation; the scope of the alleged misconduct; if the fraud is ongoing; and, if senior executives are implicated.
In some situations, internal reporting may lead to prompt corrective action. In others, it may expose the whistleblower to significant professional harm. When a client’s livelihood is at stake, informed strategy—not optimism—must guide the decision.
Reporting to the SEC First
In some cases, it is necessary to report to the government first. This offers several practical and legal advantages. Reporting directly to the SEC reduces the risk that evidence will be altered or destroyed. In addition, the SEC only issues awards for original information so being the first to report to the SEC can materially affect award eligibility. Unless another employee provides new or supplemental information, there is no award for second place. Most importantly, in the case of ongoing fraud, early reporting to the SEC enables it to act swiftly to minimize harm to investors and the markets.
Triggering Employment Protections: The Reality of Digital Realty
While the final rules of the SEC Whistleblower Program were approved in 2011, seven years passed before the United States Supreme Court settled the question of what triggers Dodd-Frank employment protections. In Digital Realty Trust, Inc. v. Somers, the Court held that anti-retaliation protections only apply to employees who report securities law violations directly to the SEC. The ruling had a chilling effect on employees who sought to report misconduct through internal channels.
After a 2018 Supreme Court ruling, reporting to the SEC
is necessary to secure Dodd-Frank’s robust employment protections.
In the wake of Digital Realty, guidance from a whistleblower attorney has become even more important. In certain cases, counsel may recommend simultaneous internal and SEC reporting to trigger Dodd-Frank protections while preserving potential award benefits. If an employee has already reported internally, other statutes—such as Sarbanes-Oxley—may provide protection, though remedies are generally more limited.
Other rulings have also complicated the whistleblower calculus. In Liu v. Siemens, the court held that foreign employees working abroad at foreign companies generally cannot invoke the anti-retaliation protections of Dodd-Frank. Foreign nationals can receive whistleblower awards, but not whistleblower protections. This is a complex and ever-shifting area of law, and legal guidance is strongly advised.
The Bottom Line: Minimize Risk, Maximize Reward
In FY2024, the last year the SEC published the data, 62% of those who received whistleblower awards were company insiders and the majority had tried to report internally in the first instance. Post-Digital Realty, there’s tremendous risk in this approach for whistleblowers who are not already protected under a different whistleblower protection law. Lawmakers recognize the paradox. Last year, Senator Grassley introduced the SEC Whistleblower Reform Act of 2025, which included a proposal to extend Dodd-Frank’s employment protections to internal whistleblowers. We remain cautiously optimistic that bipartisan reform efforts will pass and common sense will prevail. In the meantime, strategic planning is essential. The right approach can minimize the risk of retaliation while preserving eligibility for a potential award. Whistleblowing is rarely an easy path—but with informed guidance, it can be a protected one.
