What Makes Whistleblower Information Valuable? Originality, Proof, Timing, and Government Usefulness

Many insiders know something is wrong. Fewer know whether what they know is legally useful. That distinction matters. A whistleblower case is not built on outrage alone. It is built on information that helps the government, a regulator, or a court understand a fraud that is specific, provable, material, timely, and tied to money, public harm, investors, taxes, sanctions, cybersecurity, or government programs. 

The most valuable whistleblower information usually does at least one of three things: 

1. It explains how the scheme works.
2. It identifies where the proof is located.
3. It connects the misconduct to money, claims, payments, investors, taxes, sanctions, or regulatory action.

A person does not always need every document before speaking with a whistleblower lawyer. But they do need more than a feeling. 

Short Answer: Valuable Whistleblower Information Is Original, Specific, Provable, Timely, and Useful 

A strong whistleblower case usually has these qualities: 

Factor	Strong Signal	Weak Signal
Originality	You know non-public facts, internal processes, documents, witnesses, or systems.	You only read public news, rumors, or online complaints.
Specificity	You can identify who did what, when, how, and why it mattered.	“They are committing fraud” without details.
Proof path	You know where records, witnesses, data, emails, claims, reports, or audit trails exist.	No realistic way to verify the allegation.
Money link	The misconduct affected government money, investors, taxes, sanctions, duties, or enforcement.	Pure workplace unfairness with no legal or financial hook.
Knowledge	Internal warnings, emails, meetings, audits, or ignored compliance advice show awareness.	Honest mistake, confusion, or ambiguous rule with no evidence of knowledge.
Timing	The misconduct is recent, ongoing, or still actionable.	Stale conduct already investigated or publicly resolved.
Safe evidence handling	Information was lawfully accessed and preserved.	Hacked, privileged, stolen, altered, or unauthorized evidence.

The Big Mistake: Confusing Suspicion With a Case 

A suspicion sounds like this: 

“I think the company is overbilling Medicare.” 

A useful whistleblower lead sounds like this: 

“The company instructed coders to add unsupported diagnosis codes to Medicare Advantage records after patient visits, even when the treating physicians did not consider or treat those conditions. The goal was to increase risk-adjusted payments. I know the coding project, the personnel involved, the affected years, the internal audit warnings, and where the chart-review records are stored.” 

That second version gives the government something to investigate. The difference is not legal jargon. The difference is usefulness.

In January 2026, DOJ announced a $556 million False Claims Act settlement with Kaiser Permanente affiliates involving allegations that unsupported diagnosis codes were submitted for Medicare Advantage beneficiaries, increasing reimbursement from the government. DOJ stated that the settlement resolved claims brought by former Kaiser employees under the qui tam provisions of the False Claims Act.

That type of case shows what “useful” means. A medical coder, physician, risk-adjustment employee, compliance officer, or data analyst may understand the workflow better than anyone outside the company. The value is not just “Kaiser got paid too much.” The value is explaining how diagnosis data became payment data.

The Seven-Part Whistleblower Value Test 

1. Is the information original?

Original information does not always mean you are the only person in the world who knows it. It means your information adds something meaningful that the government or regulator does not already have. Under SEC Rule 21F-4, “original information” generally must come from independent knowledge or independent analysis and must not already be known to the SEC from another source unless the whistleblower is the original source.

Under the False Claims Act, originality also matters because of the public disclosure bar and original-source doctrine. The FCA generally limits cases based on publicly disclosed allegations unless the relator qualifies as an original source, including by having independent knowledge that materially adds to the publicly disclosed information.

2. Is the information specific?

The government cannot investigate adjectives. Words like “fraudulent,” “illegal,” “corrupt,” and “unsafe” may be true, but they are not enough by themselves. Useful information identifies the mechanics. 

A strong whistleblower narrative usually answers: 

• Who was involved? 
• What was false? 
• When did it happen? 
• Which contracts, claims, invoices, filings, tax years, patients, investors, products, shipments, or accounts were affected? 
• Who knew? 
• What records would prove it? 
• How did money move? 

The ACA enrollment fraud settlement announced by DOJ in April 2026 is a good example. DOJ described an alleged scheme involving fraudulent Affordable Care Act applications, unwarranted federal subsidies, and a whistleblower who received $24.3 million from the civil recovery. The useful information in a case like that is not “insurance brokers acted badly.” It is the specific path from false enrollment information to federal premium subsidies.

3. Is there a proof path?

A whistleblower does not always need to possess the documents. Sometimes the most valuable information is knowing where the documents are, who has them, and how they fit together. That is the difference between evidence possession and evidence map. 

A whistleblower may know: 

• which database contains the claims; 
• which internal audit identified the issue; 
• which Slack channel or email chain discussed it; 
• which coding project created the payment effect; 
• which tax workpapers show the income shift; 
• which CMMC assessment package contradicts the SPRS score; 
• which compliance officer objected; 
• which executives approved the certification. 

That information can be enough to start a serious legal review. The government has subpoena power. Lawyers can help present the evidence map in a way investigators can use. 

The cyber-FCA cases illustrate this. In Aerojet Rocketdyne, DOJ announced a $9 million settlement resolving allegations that Aerojet misrepresented its compliance with cybersecurity requirements in federal contracts. The relator was a former senior cybersecurity, compliance, and controls employee. The value of that kind of insider is not just that they “believe the company was insecure.” It is that they can compare the company’s actual controls to what the company told the government.

4. Is there a money or enforcement link?

Whistleblower law is not a general complaint box. 

A case becomes stronger when the misconduct connects to a legally recognized enforcement path: 

• federal healthcare payments; 
• defense contracts; 
• government grants; 
• customs duties; 
• taxes; 
• securities markets; 
• commodities markets; 
• sanctions; 
• anti-money-laundering obligations; 
• federal cybersecurity requirements; 
• investor disclosures; 
• government program eligibility. 

The False Claims Act imposes liability for knowingly presenting false or fraudulent claims for payment or approval, or using false records or statements material to false claims. That means the money path matters. The Raytheon resolution is a good example. DOJ announced that Raytheon agreed to pay more than $950 million in connection with defective pricing, foreign bribery, and export control matters, including a $428 million False Claims Act resolution related to defective pricing allegations. The case shows why information about pricing, cost data, negotiations, and contract representations can matter when government money is involved.

5. Is there evidence of knowledge?

Fraud is not the same as a mistake. Most whistleblower programs care about whether the company or individual acted knowingly, recklessly, deliberately, or with culpable awareness. Under the FCA, “knowingly” includes actual knowledge, deliberate ignorance, or reckless disregard. The strongest cases often include facts showing that decision-makers knew or had reason to know the statement was false. 

Evidence of knowledge can include: 

• compliance warnings; 
• internal audit findings; 
• rejected legal advice; 
• ignored coding concerns; 
• emails saying the billing practice was risky; 
• executives overruling security teams; 
• tax memos warning a position was not supportable; 
• quality reports showing unsupported diagnoses; 
• rejected remediation plans; 
• POA&Ms that contradict certifications; 
• side-by-side versions of “real” and “external” reports. 

In cyber-FCA matters, knowledge often appears in the gap between the technical team and the certification team. Penn State agreed to pay $1.25 million in 2024 to resolve False Claims Act allegations relating to cybersecurity noncompliance on federal contracts. DOJ’s announcement tied the allegations to contractual cybersecurity requirements, which is exactly the kind of area where internal knowledge and external representations can diverge.

6. Is the timing still useful?

Timing can make or break a whistleblower matter. Under the False Claims Act, the first-to-file rule generally bars later relators from bringing related actions based on the same underlying facts while an earlier qui tam action is pending.

Under SEC rules, timing matters because original information must not already be known to the Commission from another source unless the whistleblower is the original source. The SEC whistleblower program is built to incentivize people to report specific, timely, and credible information. This is why “I’ll wait and see” can be dangerous. Someone else may file first. The government may learn the essential facts from another source. The company may self-disclose. The misconduct may become public. Documents may disappear. A statute of limitations issue may develop. 

7. Can the evidence be used safely?

Evidence is powerful. Bad evidence handling is dangerous. A whistleblower should not hack systems, take privileged documents, alter records, violate protective orders, remove classified information, or access files outside their authority. A person can have a potentially strong case and still create legal problems by mishandling evidence. 

IRS guidance is especially clear about this concept. The IRS states that whistleblower submissions may undergo taint review to identify evidentiary, ethical, legal, or privilege concerns, and that information not used because of taint concerns will not result in proceeds for an award.

The practical rule is simple: Your value is not just what you possess. Your value is what you know, how you know it, and whether the government can lawfully use it. 

The “Map, Key, and Receipt” Framework 

A strong whistleblower usually brings one or more of three things. 

1. The Map

The map explains how the misconduct works. It might describe a billing workflow, a sales script, a coding initiative, a tax structure, a customs entry process, a sanctions-screening override, a CMMC self-assessment, or a revenue-recognition practice. 

2. The Key

The key identifies where the proof is located. It might include the names of systems, databases, shared drives, email groups, audit reports, claims files, customer accounts, contract files, tax workpapers, pricing folders, or witnesses. 

3. The Receipt

The receipt is direct proof. It might be an email, invoice, certification, claim, ledger, diagnosis code report, tax schedule, SPRS submission, Form TCR exhibit, customs entry, wire record, sanctions hit, or internal audit. The best cases have all three. But a case may still be worth reviewing if the whistleblower has only one or two, especially if they can explain how the government can get the rest. 

Real-World Example 1: ACA Enrollment Fraud — The Value Was the Path From False Application to Federal Subsidy 

In April 2026, DOJ announced a resolution exceeding $135 million involving AP of South Florida and AssuredPartners in connection with an alleged Affordable Care Act enrollment fraud scheme. DOJ stated that the civil settlement resolved allegations brought by a whistleblower under the False Claims Act and that the whistleblower would receive $24.3 million.

Why was this information valuable? 

Because it connected four things: 

1. allegedly false enrollment information; 
2. subsidized ACA plans; 
3. federal premium subsidies; 
4. a business process that allegedly generated improper government payments. 

That is the lesson. The value was not simply “bad sales practices.” The value was the link between false enrollment activity and federal money. 

Real-World Example 2: Medicare Advantage Diagnosis Codes — The Value Was the Payment Mechanism 

The Kaiser Medicare Advantage settlement shows the importance of understanding the payment mechanism. DOJ announced that Kaiser affiliates paid $556 million to resolve allegations that unsupported diagnosis codes were submitted for Medicare Advantage beneficiaries, allegedly resulting in inflated payments.

Why was this information valuable? 

Because Medicare Advantage payments depend, in part, on diagnosis data. A whistleblower who understands risk adjustment can explain why adding a diagnosis code is not just “documentation.” It can change payment. 

Valuable information might include: 

• which diagnoses were added; 
• whether treating physicians considered those diagnoses; 
• whether chart reviews were retrospective; 
• whether coding targets affected compensation; 
• whether internal audits flagged unsupported codes; 
• whether executives knew the practice increased federal payments. 

Real-World Example 3: Cybersecurity Compliance — The Value Was the Gap Between Technical Reality and Government-Facing Certification 

Cybersecurity whistleblower cases are increasingly important because federal contractors must make representations about their cybersecurity posture.  In Aerojet Rocketdyne, DOJ announced a $9 million settlement resolving allegations that the company misrepresented compliance with cybersecurity requirements in federal contracts.

In Penn State, DOJ announced a $1.25 million settlement resolving allegations relating to contractual cybersecurity requirements. In MORSECORP, DOJ announced a $4.6 million settlement resolving allegations that the defense contractor failed to comply with cybersecurity requirements in Army and Air Force contracts.

Why is this information valuable? Because technical insiders may know that the external certification does not match the actual control environment. 

Valuable information might include: 

• the submitted SPRS score; 
• the real NIST SP 800-171 control gaps; 
• System Security Plans; 
• POA&Ms; 
• FedRAMP-equivalence claims; 
• CUI handling; 
• incident-reporting failures; 
• subcontractor flowdown failures; 
• internal emails showing decision-makers knew the representation was false. 

Real-World Example 4: Customs and Tariff Evasion — The Value Was Government Revenue Loss 

Whistleblower cases are not limited to healthcare and defense. DOJ announced a $549.5 million False Claims Act settlement involving allegations of evaded antidumping and countervailing duties on aluminum extrusions from China. DOJ’s announcement said the settlement included a relator share of 17.5% of the settlement proceeds returned to Customs and Border Protection.

Why was this information valuable? Because customs fraud can deprive the government of duties it is owed. 

Valuable information might include: 

• false country-of-origin documents; 
• transshipment records; 
• customs classifications; 
• undervaluation instructions; 
• emails with brokers or suppliers; 
• bills of lading; 
• invoices; 
• internal knowledge that goods were subject to antidumping or countervailing duties. 

Real-World Example 5: Securities Fraud — The Value Is Original, Timely, Credible Information Before the SEC Already Knows 

The SEC’s whistleblower program was created to incentivize specific, timely, and credible reports about possible federal securities-law violations. Eligible whistleblowers may receive 10% to 30% of monetary sanctions collected in covered SEC actions and related actions.

But SEC whistleblower information must be handled carefully. Under Rule 21F-4, original information generally must come from independent knowledge or analysis and must not already be known to the Commission from another source unless the whistleblower is the original source.

Valuable information might include: 

• false revenue recognition; 
• channel stuffing; 
• undisclosed side agreements; 
• misleading public disclosures; 
• improper reserves; 
• insider trading; 
• FCPA books-and-records issues; 
• crypto or investment adviser misconduct; 
• internal emails contradicting public statements. 

Real-World Example 6: IRS Whistleblower Claims — The Value Is Specific Tax Underpayment and Collectability 

IRS whistleblower claims are different from False Claims Act lawsuits. They are submitted through the IRS Whistleblower Office, generally using Form 211. The IRS states that awards are generally 15% to 30% of the amount collected because of the information in the claim.

The key word is collected.

For IRS whistleblower matters, information is more valuable when it identifies: 

• the taxpayer; 
• the tax years; 
• the tax theory; 
• the underpayment; 
• supporting documents; 
• responsible persons; 
• assets or collectability; 
• whether the IRS can use the information. 

Valuable information might include: 

• offshore accounts; 
• hidden income; 
• sham deductions; 
• false basis; 
• abusive tax shelters; 
• payroll tax fraud; 
• transfer-pricing manipulation; 
• crypto concealment; 
• partnership or K-1 abuse; 
• entity charts and money flows. 

Real-World Example 7: AML, Sanctions, and FinCEN — The Value Is Timely, Actionable Illicit-Finance Information 

FinCEN administers a whistleblower program covering violations or conspiracies involving the Bank Secrecy Act, International Emergency Economic Powers Act, Trading With the Enemy Act, and the Kingpin Act.

In 2026, FinCEN proposed rules to pay whistleblowers who provide timely, actionable information on fraud, sanctions violations, and other significant illicit-finance activity.

Valuable information might include: 

• sanctions-screening overrides; 
• high-risk customer approvals; 
• suspicious activity monitoring failures; 
• ignored transaction alerts; 
• shell-company beneficial ownership; 
• correspondent banking risks; 
• crypto wallet flows; 
• internal pressure not to file SARs; 
• evidence of transactions involving sanctioned parties. 

“I Don’t Have Documents.” Does That Mean I Don’t Have a Case? 

Not necessarily. A whistleblower may still provide valuable information without personally possessing documents if they can identify: 

• where the documents are; 
• who created them; 
• what system stores them; 
• who approved them; 
• what dates matter; 
• which claims, filings, invoices, tax years, or contracts are affected; 
• which witnesses can corroborate the facts. 

A good lawyer can help convert knowledge into an evidence map. The government can subpoena records. The whistleblower does not need to become a rogue investigator. But there is a limit. If the person cannot identify the actors, documents, money path, affected program, or verification route, the matter may be too speculative. 

Useful framing: 

You do not always need to bring the receipt. But you need to know where the receipt is and why it matters. 

“I Have Documents.” Does That Mean I Have a Case? 

Also not necessarily. A pile of documents is not a legal theory. Documents must connect to: 

• falsity; 
• knowledge; 
• materiality; 
• payment; 
• investor harm; 
• tax underpayment; 
• sanctions exposure; 
• regulatory action; 
• damages; 
• award eligibility. 

Documents can also create problems if they are privileged, stolen, hacked, classified, confidential beyond your access rights, or taken in violation of law or policy.  A whistleblower lawyer should evaluate not only what the documents show, but whether they can be used safely. 

Useful framing: 

Evidence helps only if it is legally usable and tied to a claim the government or regulator cares about. 

What If the Government Already Knows? 

This is one of the most important questions. The fact that the government knows something does not always mean the government knows your thing. For example: 

• The government may know Medicare Advantage coding is a risk area but not know your employer’s specific workflow. 
• The SEC may know a company has accounting issues but not know about the internal side agreements. 
• DOJ may know cyber compliance is a problem but not know your company submitted a false SPRS score. 
• CBP may know tariff evasion is common but not know your supplier’s transshipment route. 
• The IRS may know a taxpayer is aggressive but not know the entity structure or offshore account path. 

The key question is whether your information materially adds to what is already known. Under the FCA’s original-source concept, a person may still qualify if they have independent knowledge that materially adds to publicly disclosed allegations or transactions and voluntarily provide that information to the government.

The Difference Between a Compliance Violation and a Whistleblower Case 

This is where many potential cases fail. Not every compliance violation is fraud. Not every bad practice creates an award claim. Not every internal policy breach matters to the government. A compliance violation becomes more likely to matter when: 

1. the company made a representation to the government, investors, tax authorities, regulators, or counterparties; 
2. the representation was false or misleading; 
3. the falsehood mattered to payment, eligibility, investment, tax, enforcement, sanctions, or regulatory action; 
4. decision-makers knew, recklessly ignored, or deliberately avoided the truth; 
5. there is a proof path. 

How a Lawyer Evaluates Whether Information Is Valuable 

A serious whistleblower lawyer should not simply ask, “How much is the case worth?” The better intake questions are: 

1. What program might apply — FCA, SEC, IRS, CFTC, FinCEN, DOJ, or another path? 
2. What is the false statement or omission? 
3. Who made it? 
4. Who knew it was false? 
5. What money, payment, tax, investor, sanction, or regulatory interest was affected? 
6. What documents or data would prove it? 
7. How did the whistleblower learn the information? 
8. Is the information original? 
9. Has the government already received it? 
10. Is another whistleblower likely to file first? 
11. Is there retaliation risk? 
12. Did the whistleblower participate in the misconduct? 
13. Are there privilege, taint, confidentiality, or document-access issues? 
14. Is the defendant collectable? 
15. What is the safest first move? 

Why Brown, LLC Looks at Whistleblower Information Differently 

A valuable whistleblower case is not just a tip. It is a potential enforcement matter. Brown, LLC evaluates whistleblower information through the lens of proof, program fit, timing, damages, government usefulness, retaliation risk, and safe evidence handling. That means the firm is not only looking for dramatic facts. It is looking for facts that can be organized into a legally actionable case. 

For example, in an FCA matter, the question is not just whether a company broke a rule. The question is whether the misconduct caused false claims or false statements material to payment. In an SEC matter, the question is whether the information is original, timely, credible, and useful to an enforcement action. In an IRS matter, the question is whether there is a substantial tax underpayment, collectability, and proof. In a cyber-FCA matter, the question is whether the technical gap can be translated into falsity, knowledge, materiality, and contract payment. 

That is the value a focused whistleblower firm should bring: helping an insider understand whether they have a complaint, a lead, or a case. 

A Practical Self-Assessment Before You Call a Whistleblower Lawyer 

Before contacting counsel, write down: 

The actor 

Who did it? Company, subsidiary, executives, department, contractor, provider, broker, taxpayer, trader, bank, importer, or vendor. 

The false statement 

What was false? Claim, invoice, diagnosis code, tax return, SEC filing, customs entry, cyber certification, risk score, grant report, pricing data, AML representation, or investor disclosure. 

The affected program 

What was harmed? Medicare, Medicaid, DoD, ACA subsidies, SEC investors, IRS tax collections, CFTC markets, FinCEN/AML enforcement, CBP duties, sanctions rules, or federal grants. 

The money path 

How did the falsehood lead to payment, underpayment, investor harm, tax loss, duty evasion, sanctions exposure, or enforcement consequences? 

The proof path 

Where are the records? Systems, emails, audit reports, billing platforms, EHRs, coding files, tax workpapers, security plans, customs files, trading records, bank alerts, or board materials. 

The knowledge evidence 

Who knew? What warnings, audits, meetings, objections, or documents show awareness? 

The timing 

Is it ongoing? When did it happen? Has anyone already reported? Has the government already contacted you? 

Your role 

How did you learn it? Did you participate? Are you at risk? Were you pressured? Did you sign anything? Did you take any documents? 

This summary is often more valuable than dumping documents into an email. 

Red Flags That Information May Not Be Enough Yet 

Your information may need more development if: 

• you cannot identify the taxpayer, contractor, issuer, provider, or program; 
• you cannot explain how money was affected; 
• you only have rumors; 
• you only have public information; 
• you do not know what was false; 
• you cannot identify time periods; 
• you cannot identify witnesses or records; 
• the issue is only a workplace dispute; 
• the alleged loss is too small for the program; 
• the government already fully investigated the same facts; 
• your documents were obtained in a legally risky way. 

That does not always mean there is no case. It means counsel must pressure-test it. 

Green Flags That Information May Be Valuable 

Your information may be valuable if: 

• you are an insider with direct knowledge; 
• the conduct is ongoing or recent; 
• federal money, taxes, investors, sanctions, customs duties, or regulated markets are involved; 
• the company made a representation that was false; 
• internal documents contradict external statements; 
• decision-makers were warned; 
• records exist and can be identified; 
• the damages or proceeds are substantial; 
• the government likely does not know the full mechanism; 
• you can explain the workflow better than an outsider; 
• you have not mishandled evidence; 
• you are willing to be truthful about your own role. 

Bottom Line 

The best whistleblower cases are not built on anger. They are built on information that is original, specific, provable, timely, and useful. 

A whistleblower does not always need perfect documents. A whistleblower does need a clear way to explain what happened, who was involved, what was false, what money or regulatory interest was affected, where the proof is, and why the government should care. Think in terms of the map, the key, and the receipt. The map explains the scheme. The key shows where the proof is. The receipt proves the lie, money, approval, or knowledge. 

If you have one or more of those, and the misconduct involves government money, taxes, investors, cybersecurity certifications, customs duties, sanctions, commodities markets, healthcare payments, or other regulated activity, speak with a whistleblower lawyer before reporting internally, contacting the government, or moving documents. The first move can shape the entire case. 

FAQ

What evidence do I need for a whistleblower case? 

Useful evidence can include emails, billing records, claims data, contracts, certifications, tax records, audit reports, coding files, ledgers, security plans, POA&Ms, customs records, trading records, or witness information. But the evidence must connect to a legal theory and be safely obtained. 

Can I report fraud without documents? 

Sometimes. A whistleblower may still be valuable if they can explain the scheme and identify where the documents, systems, witnesses, or data are located. But a case based only on suspicion is usually weak. 

What makes whistleblower information original? 

Original information generally comes from independent knowledge or analysis and adds something the government or regulator does not already know. SEC rules expressly define original information in terms of independent knowledge or analysis and information not already known to the Commission unless the whistleblower is the original source.

What if the government already knows about the fraud? 

The question is whether the government knows the same essential facts. If your information materially adds details, documents, witnesses, scope, damages, or proof of knowledge, it may still matter. 

Does a compliance violation automatically make a whistleblower case? 

No. A compliance violation becomes more significant when it is tied to a false claim, false certification, investor misstatement, tax underpayment, customs duty evasion, sanctions violation, or other legally actionable harm. 

Should I take documents before calling a lawyer? 

No. Preserve what you lawfully have, but do not take new documents, access systems outside your authority, copy privileged materials, or remove classified or controlled information without legal advice. 

When should I call a whistleblower lawyer? 

Call when you can identify the actor, the false statement, the affected program, the money path, the proof path, or the timing risk. Do not wait until retaliation begins or someone else reports first.