What Evidence Should I Keep If I Think My Employer Is Retaliating?

If you raised a concern about money laundering, suspicious activity, sanctions, or another compliance issue and then experienced a sudden change at work, keep a careful record of what happened. A useful record can show the sequence: what you reported, who knew about it, what changed afterward, and how the employer explained those changes.

This is especially important if your concern involved a Suspicious Activity Report (SAR), the Bank Secrecy Act (BSA), or anti-money-laundering controls. But evidence gathering has limits. SAR information and customer records may be protected, and taking or sharing them without authorization can create serious problems. Preserve your own employment records and a factual timeline; do not copy restricted material or conduct your own investigation.

First, understand the AML/BSA whistleblower program

The federal Anti-Money Laundering (AML) whistleblower program is a mechanism for individuals to provide information about certain financial-law violations to the U.S. Department of the Treasury or the U.S. Department of Justice. The Financial Crimes Enforcement Network (FinCEN), a Treasury bureau, administers the program. Its website, fincen.gov, provides official information and updates.

The program is grounded in the AML Act of 2020, which was enacted as part of the National Defense Authorization Act (NDAA) for fiscal year 2021. Congress amended the whistleblower provisions in the NDAA for fiscal year 2023, signed on December 23, 2022. The amendments addressed the award framework and strengthened protections, including protections against retaliation. The statute is codified at 31 U.S.C. § 5323.

In general, the law allows eligible whistleblowers who voluntarily provide original information that leads to qualifying enforcement actions to seek an award. The statute casino suspicious activity reporting also prohibits certain retaliation for lawful whistleblowing activity. Whether a particular report or workplace action is covered depends on the facts and the law; raising an issue internally does not automatically establish eligibility for an award or prove retaliation.

What “original information” means

“Original information” generally means information derived from the person’s independent knowledge or analysis, not already known to the government from another source, and not obtained from specified public sources. The exact statutory requirements and exceptions matter. For example, information based only on public allegations may not qualify, while a person’s firsthand observations, analysis of records they were authorized to review, or knowledge of how a control failed may be relevant.

Keep the distinction between what you personally saw and what you heard from someone else. Write down when you learned each fact and from whom. Do not label information “original” yourself as a legal conclusion; let counsel assess the applicable requirements.

What kinds of violations may qualify?

The program concerns specified violations of the BSA and related laws. Depending on the facts and the applicable statutory provisions, issues may include:

• SAR obligations: possible failures to identify, investigate, or report suspicious activity as required. SARs are highly confidential. Do not disclose a SAR’s existence or contents to a customer, subject, or other unauthorized person.
• Structuring: transactions arranged to evade currency-reporting requirements, such as breaking up cash transactions to avoid a report.
• Customer due diligence (CDD): failures involving required customer-risk controls, beneficial-ownership information, or ongoing monitoring, depending on the institution and legal obligation.
• Records and reporting: possible failures to keep required records or submit required reports, or efforts to conceal or falsify them.
• Sanctions: certain violations of laws administered by the Treasury’s Office of Foreign Assets Control (OFAC), including potentially applicable sanctions statutes.

Not every policy breach, poor decision, or control weakness is necessarily a qualifying legal violation. The relevant question is what law may have been violated and what evidence supports that concern.

What evidence to keep about retaliation

Focus on records that establish the timeline and the workplace treatment you experienced. Keep evidence in its original form where possible, and make notes that distinguish facts from your interpretations. A documented change is more useful when you can compare it with your prior duties, performance history, or treatment.

Evidence category Examples to preserve What it may help show Reporting activity Your report date, recipient, method, subject, and any confirmation or follow-up When and how you raised a concern, and who may have known about it Document changes Revised schedules, duties, goals, access, reporting lines, performance ratings, or compensation notices Whether terms or conditions changed after your report Supervisory behavior Specific comments, new scrutiny, threats, exclusion from meetings, or unusual discipline How managers treated you and whether the pattern changed Workplace treatment Written warnings, denied leave, demotion, isolation, reassignment, or termination paperwork The nature and timing of adverse treatment Comparison and context Prior reviews, established procedures, relevant policy excerpts, or non-confidential records of similar treatment Whether the employer’s explanation fits the history and practice

1. Make a dated timeline

As soon as you can, write a private, factual chronology. Include the date and time, people involved, what was said or done, where it happened, and whether anyone else was present. Note the date of your compliance report and each change in workplace treatment. If you do not know an exact date, say so rather than guessing.

For example: “On March 4, I emailed my manager that a monitoring alert had been closed without the review required by our procedure. On March 8, my manager removed me from the weekly monitoring meeting. On March 12, I was told my performance was suddenly below expectations. My January review rated my work as meeting expectations.” This is more useful than a note that simply says, “They whistleblower protections for bankers retaliated.”

2. Preserve employment records you are authorized to access

Keep copies of your own performance reviews, job description, compensation statements, schedule changes, written warnings, leave decisions, and relevant messages that you are permitted to retain. Preserve complete communications, including dates and context. Do not alter, annotate, or selectively edit an original file; keep separate notes explaining why it matters.

Follow company rules and applicable law. Do not forward work email to a personal account, photograph screens, download files, or access systems unless you are authorized to do so. If a relevant record is on a company system and you cannot lawfully retain it, note its location, date, title, and custodial context instead. An attorney can advise on lawful preservation and formal requests.

3. Record supervisory behavior and workplace treatment precisely

For each incident, write down the words as accurately as you can. Identify who was present and whether the statement was direct or reported to you by someone else. Avoid conclusions like “my boss hates whistleblowers”; record the observable conduct, such as “My supervisor said, ‘You should stop raising this,’ during the April 2 meeting.”

Track changes in assignments, access, review standards, promotion opportunities, schedule, pay, reporting lines, and discipline. Also note favorable or unchanged treatment. A balanced record is generally more credible than one that records only events supporting a particular conclusion.

4. Keep a witness list

Write down the names and contact details of people who directly witnessed relevant events or may have knowledge of your prior performance or the reported issue. Note what each person may have seen, not what you assume they will say. Do not pressure coworkers to provide statements, coordinate accounts, or share confidential customer information.

Critical limits: do not take SARs or customer data

SARs are not ordinary workplace documents. Federal law generally prohibits a financial institution and its personnel from notifying a person involved in a reported transaction that a SAR was filed. SARs and information that would reveal their existence are subject to strict confidentiality rules. Do not send a SAR, SAR narrative, alert, customer file, account statement, or identifying details to a personal email, an attorney, a regulator, or the press without advice about a lawful channel and the applicable rules.

Do not access records outside your role, defeat security controls, remove originals, or use another employee’s credentials. Do not assume that a whistleblower purpose makes unauthorized copying lawful. If you believe key evidence is only available in restricted systems, record what you know without taking it and ask a qualified whistleblower attorney how to proceed.

What to do next: a practical checklist

1. Create a chronology. Record your compliance concern, the reporting route, who received it, and each later workplace change.
2. Preserve authorized employment records. Keep your own reviews, notices, and communications in their original form where lawful.
3. Separate facts from conclusions. Mark firsthand knowledge, secondhand information, and your interpretation distinctly.
4. Do not remove restricted information. Especially avoid SARs, customer data, privileged material, and records you cannot lawfully access or retain.
5. Review official information. Consult FinCEN’s website for current AML whistleblower program information. The details of eligibility, confidentiality, submission procedures, and award rules can change or depend on the facts.
6. Speak with an experienced attorney. A lawyer familiar with whistleblower and employment matters can assess possible protections, deadlines, reporting options, and how to preserve evidence safely.
7. Keep your search private. Do not use a work laptop, work phone, or employer network for sensitive legal research or attorney communications. Use a personal device and account, while following applicable security and confidentiality rules.

Does internal reporting count?

The BSA whistleblower statute includes protection for certain lawful acts involving the provision of information to an employer or the federal government about possible violations. Still, coverage can turn on what you reported, how you reported it, the employer’s response, and whether the conduct falls within the statute. Other whistleblower laws may also apply, with different requirements and deadlines.

Retaliation can include more than firing. A demotion, reduced hours, a pay cut, suspension, threats, or other materially adverse workplace treatment may be relevant. But timing alone does not prove that an action was retaliatory. Evidence about prior performance, decision-makers’ knowledge, stated reasons, and treatment of comparable employees can all matter.

Bottom line

If you suspect retaliation, preserve a clean record of your reporting activity, document changes in your job, and track supervisory behavior and workplace treatment with dates and specific facts. Keep only materials you are authorized to retain. Because SAR confidentiality and other information-security rules are strict, do not copy compliance or customer records to build a case. A qualified attorney can help you evaluate the safest way to preserve evidence and whether the AML/BSA whistleblower program or another law may apply.