The SEC Whistleblower Process: From Tip to Check, Step by Step

Ask when a whistleblower award actually arrives and most sources give you a shrug or a headline number. The truth is the SEC’s own Office of the Whistleblower publishes a fair amount about what it pays and to how many people each year, but it does not publish a median processing time from tip to check, and no source honestly can, because the path runs through separate systems (enforcement and claims review) that do not report against each other’s clock. What follows is every real step in order, with the one fixed deadline in the whole process flagged clearly, because missing it is how people forfeit awards they actually earned.

Step 1: You file a Form TCR

The process starts with a Tips, Complaints, and Referrals submission, either through the SEC’s online TCR portal or by mail or fax. This part is fast and entirely in your control: fill it out with specific, credible information, answer “yes” to the whistleblower question, and complete the declaration at the end. The online portal gives you a submission number and a printed receipt. Keep both; you will need the number later, and there is no fixed timeline for this step because it depends entirely on when you are ready to file. For the full mechanics of filing correctly, see the SEC whistleblower program page.

Step 2: The SEC decides whether to investigate

This is where the clock leaves your hands entirely. Most tips do not lead to an enforcement action at all; the SEC receives far more submissions than it can turn into cases, and there is no notification if your tip goes nowhere. If your tip does contribute to opening or reopening an investigation, or significantly helps one already underway, that investigation itself can run for a long time before it produces anything public. The SEC does not publish a standard duration for this stage, and any number you see claiming an average “investigation length” is not coming from an official SEC source.

Step 3: Enforcement action and the $1 million threshold

If the investigation results in an enforcement action, the sanctions the SEC orders have to top $1 million for the case to count as a “covered action” that can produce a whistleblower award at all. Actions below that threshold, even ones your tip directly caused, are not eligible. Once a case clears that bar, the SEC posts a Notice of Covered Action on its website. That posting is the single most important date in the entire process, because it starts your clock.

Step 4: You file Form WB-APP within 90 days

You have 90 calendar days from the Notice of Covered Action posting to file a claim for an award using Form WB-APP. This is the one deadline in the entire SEC whistleblower process that is completely fixed and completely unforgiving. Miss it and you forfeit the award, even if your original tip was the entire reason the case existed. There is no discretionary extension. Because covered actions post continuously and you may not personally hear about the one tied to your tip, the practical move is checking the SEC’s Notices of Covered Action page on a recurring basis after you file, not waiting for the SEC to reach out to you.

Step 5: Claims review, preliminary determination, final order

After you file Form WB-APP, the Office of the Whistleblower reviews your application and issues a preliminary determination, either recommending an award or a denial. You can contest a preliminary denial before it becomes final. This stage is where the SEC’s own annual reports are most useful and most honest about what they do and do not disclose: the reports describe individual determinations, denials, and dollar totals granted each fiscal year, but they do not publish a formal median time-to-decision metric for this review stage. One real example from the program’s own history illustrates why that number would be hard to pin down anyway: in fiscal year 2020, the SEC awarded approximately $175 million to 39 individuals, both records for the program at the time, but a separate award of more than $114 million cleared just three weeks after that fiscal year closed, so the SEC’s own report attributes the entire amount to fiscal year 2021 instead. That timing accident helped push fiscal year 2021’s total to roughly $564 million across 108 individuals, a jump that reflects which side of the government’s fiscal-year cutoff a final order happened to land on, not any real change in how fast claims review moves. Review timing varies case by case, sometimes by years, and the annual reports document outcomes, not a clock.

Once a final order grants an award, payment comes from the SEC’s Investor Protection Fund, financed by sanctions collected from wrongdoers rather than from money returned to harmed investors or from taxpayers.

What the actual numbers look like, fiscal year by fiscal year

Because there is no published median duration, the closest thing to an honest timeline benchmark is the program’s own year-by-year award data, which shows how unevenly the process actually pays out. The program’s first-ever award, in fiscal 2012, was $45,739 to one person. By fiscal 2023, the program paid nearly $600 million to 68 people in a single year, including the record $279 million individual award. Fiscal 2025 came back down to about $60 million paid to 48 people. None of these years tell you how long any individual case took to resolve; they tell you that the SEC’s own pace, case by case and year by year, is genuinely irregular. Our award tracker carries the complete year-by-year breakdown pulled from the same annual reports.

So how long does this actually take?

Stacking every real step together, from the original tip through investigation, enforcement, the Notice of Covered Action, your 90-day claim window, and final determination, the SEC’s own program materials describe the realistic span as three to seven years or longer. That is not a median in the statistical sense; it is the honest range the process itself implies once you add up how long enforcement actions typically take to litigate or settle, plus however long claims review takes on top of that. Anyone who tells you a specific average number of months is not quoting an official SEC figure.

What to actually do while you wait

Save your TCR number and keep it somewhere durable. You will need it years later to link your original tip to any covered action that eventually posts.

Check the Notices of Covered Action page regularly, not just once. New notices post on an ongoing basis, and there is no personal notification system telling you that one matches your tip.

Do not assume silence means your tip died. Investigations that produce nothing public for years can still be active. The absence of news is not the same as a closed file.

Set a hard reminder the moment a matching notice appears. The 90-day WB-APP window is the one part of this entire process where a calendar mistake, not a weak case, is what costs people money they earned. If you are unsure whether a posted covered action matches your original tip, or if the stakes are large enough to warrant it, read do you need a whistleblower lawyer before that window closes.

If your case involves commodities, futures, swaps, or crypto derivatives rather than securities, the process runs almost identically through the CFTC whistleblower program, including its own Notice of Covered Action and claim-filing structure. For what the award itself is actually worth once it arrives, see how much whistleblowers actually get paid.