Whistleblowers and journalists
How do whistleblowers and journalists expose money laundering?
Insiders and reporters catch what the routine reporting system misses. A bank employee's warnings, or a leaked data trove that thousands of hours of reporting turn into public evidence, can push regulators and prosecutors to act. In the US, a statute now offers rewards to whistleblowers, but the rules for paying them were still only proposed as of September 2026.
As of September 2026: FinCEN's whistleblower rule was published as a proposal on April 1, 2026, and the comment period closed June 1, 2026. As of September 2026 no final rule had been located, so the application and award procedures are not yet settled, and the ICIJ recovery figure is its April 2021 count, which it describes as conservative. Check FinCEN and the Federal Register for the current status.
Why do insiders and reporters matter?
Most of the detection system on this site is built from routine paperwork: reports, monitoring alerts and customer checks. Those work best when the institution doing the filing is honest. When the institution itself is the problem, the paperwork can fail silently. Two outside routes fill that gap: people inside who speak up, and journalists who turn leaked records into public evidence.
How did a whistleblower expose Danske Bank?
Danske Bank’s Estonian branch handled a large portfolio of non-resident customers, many hidden behind shell companies. The full story is in the case files. The detection lesson is what the bank’s own 2018 investigation says about warnings from inside.
That report records a whistleblower report from an employee in the Estonian branch on December 27, 2013, followed by more allegations in the next months. It says the allegations were not properly investigated, and that there was no reporting to authorities. The scandal became public in 2018. Howard Wilkinson, the whistleblower publicly known for the disclosures, testified before both the Danish and European Parliaments and shared the Allard Prize for International Integrity in October 2020, according to the National Whistleblower Center.
The result came years later. On December 13, 2022, Danske Bank pleaded guilty in the US to defrauding American banks about its Estonian anti-money laundering controls, and agreed to forfeit $2 billion. The warning existed in 2013. What was missing was a response.
How does investigative journalism drive enforcement?
Two networks matter most.
ICIJ says its network has grown to more than 290 reporters in more than 100 countries and territories, working with more than 140 outlets. It coordinated the Panama Papers, the FinCEN Files and other large leak projects. Its own count is that governments have recouped more than $1.36 billion in back taxes and penalties from the Panama Papers, a figure it calls conservative because many countries do not publish recoveries.
OCCRP led the reporting on the Azerbaijani Laundromat, which it says moved $2.9 billion over two years, from 2012 to 2014, through four UK shell companies, with accounts at Danske Bank’s Estonian branch. Sixteen news organizations took part. OCCRP reported that an Azerbaijani couple agreed to forfeit over £4 million. See laundromats and shell companies for how those structures work.
The FinCEN Files show the other side of the coin. In September 2020, ICIJ and 108 media partners in 88 countries published stories based on more than 2,100 leaked suspicious activity reports that described more than $2 trillion in payments flagged over 18 years. The source, a former senior FinCEN adviser, was sentenced to six months in prison in June 2021 for unlawfully disclosing the reports. That is the same tension every FIU faces: the reports must stay secret, yet the public interest in what they reveal is large.
What are the limits of leaks?
A leak is a lead, not a verdict. ICIJ notes that suspicious activity reports describe potential illegal activity and are not proof of a violation. After the Panama Papers, a Panamanian court acquitted all 28 defendants of money laundering in June 2024. ICIJ said the court did not hold the defendants accountable, but that the impact of the investigation persists, through tax recoveries and reforms rather than convictions.
Leaks also depend on luck and courage. Only what someone chooses to release is seen, and those who release it can face prosecution or retaliation.
Do whistleblowers get paid?
In the US, the law says yes. Section 6314 of the Anti-Money Laundering Act of 2020 rewrote 31 U.S.C. 5323 to allow awards to people who voluntarily give original information that leads to a successful Treasury or Justice Department action under the Bank Secrecy Act, with monetary sanctions above $1 million. It allows awards from information gained through a person’s job. A December 2022 amendment added certain sanctions laws and set a minimum award of 10 percent, up to a maximum of 30 percent of sanctions collected, and created a revolving fund to pay awards. The statute also bars most employers from retaliating against whistleblowers and requires confidentiality.
The rule setting out how to apply and how awards are decided is still a proposal. FinCEN published it on April 1, 2026, and the comment period closed on June 1, 2026. We found no final rule as of September 2026. The design matters for detection: it gives insiders a lawful, protected route in place of an anonymous leak, and gives banks a reason to fix problems before an employee escalates them outside.
Frequently asked questions
Who was the Danske Bank whistleblower?
Howard Wilkinson is the whistleblower publicly known for exposing Danske Bank's Estonian branch. The National Whistleblower Center says he confidentially raised concerns in 2013, and that his identity was later leaked to an Estonian newspaper against his wishes. Danske's own 2018 report does not name its whistleblower, but records a report from a branch employee on December 27, 2013.
What is the difference between ICIJ and OCCRP?
Both are journalist networks that run cross-border investigations. ICIJ, the International Consortium of Investigative Journalists, coordinated the Panama Papers and FinCEN Files. OCCRP, the Organized Crime and Corruption Reporting Project, led work such as the Russian and Azerbaijani Laundromat investigations, the latter with a coalition of 16 news organizations.
Does a leak prove someone committed a crime?
No. ICIJ stresses that suspicious activity reports describe potential illegal activity and are not proof of any violation of law. After the Panama Papers, a Panamanian court acquitted all 28 defendants of money laundering in June 2024. A leak is a lead for investigators, and evidence still has to be gathered and tested in court.
Is it legal for a government employee to leak a suspicious activity report?
No. Those reports are confidential. In June 2021 a former senior FinCEN adviser was sentenced to six months in prison for unlawfully disclosing them to a reporter. Lawful whistleblower channels exist, which is one reason the US built a formal program.
Can US whistleblowers get paid for anti-money laundering tips?
In law, yes. The Anti-Money Laundering Act of 2020 set up awards, and a 2022 amendment extended them to certain sanctions violations. As of September 2026, FinCEN's rule setting out how to apply for and receive an award was still at the proposal stage.
Techniques this catches
- Shell companies and nominees · Companies with no real operations hold accounts and assets while nominee directors and stacked ownership across jurisdictions hide the true beneficial owner.
- Professional enablers · Lawyers, accountants, company formation agents, and real estate professionals whose ordinary services, knowingly or not, give illicit money a respectable paper trail.
- Correspondent banking and wire layering · Small or weakly supervised banks reach the dollar system through accounts at big correspondent banks, and rapid wires through many accounts and countries bury the origin of the money.
Glossary
Sources
- Report on the Non-Resident Portfolio at Danske Bank's Estonian Branch (Danske Bank (Bruun & Hjejle investigation), September 2018).
- Danske Bank pleads guilty to fraud on US banks in multi-billion dollar scheme to access the US financial system (US Department of Justice, December 13, 2022).
- Howard Wilkinson: whistleblower profile (National Whistleblower Center, accessed September 2026).
- About the ICIJ (International Consortium of Investigative Journalists, accessed September 2026).
- Panama Papers revenue recovery reaches $1.36 billion as investigations continue (ICIJ, April 6, 2021).
- Panama Papers trial concludes with all defendants absolved of money laundering charge (ICIJ, June 28, 2024).
- What is the FinCEN Files investigation? (ICIJ, 2020).
- The Azerbaijani Laundromat (Organized Crime and Corruption Reporting Project (OCCRP), accessed September 2026).
- Statement by FinCEN Regarding Unlawfully Disclosed Suspicious Activity Reports (FinCEN, September 1, 2020).
- Former Senior FinCEN Employee Sentenced To Six Months In Prison For Unlawfully Disclosing Suspicious Activity Reports (US Attorney's Office, Southern District of New York, June 3, 2021).
- Whistleblower Incentives and Protections (proposed rule) (FinCEN / Federal Register, April 1, 2026).