On July 28, the IRS Whistleblower Office marked National Whistleblower Day, publicly reaffirming that tips from insiders are one of the agency’s primary tools for finding fraud it would otherwise never see. That’s not a symbolic gesture. The IRS pays real money for this, and the payouts are climbing.

Since the program started paying awards in 2007, the IRS has collected more than $7.5 billion from noncompliant taxpayers based on whistleblower tips, and paid out over $1.3 billion in awards. In fiscal year 2024 alone, awards totaled $123.5 million — up 39% from the year before. Earlier this year, three whistleblowers split a combined $79 million after their information helped the government recover $263.7 million from a single scheme.

Big numbers, big cases. But the mechanism behind them applies just as much to a business with $2 million in revenue as one with $200 million. Here’s what that actually means for you.

Two programs, and most small businesses fall into the smaller one

The IRS runs whistleblower claims through two tracks:

The mandatory program (the one that generates headlines). If the tax, penalties, and interest identified add up to more than $2 million — and for an individual, the taxpayer’s gross income exceeds $200,000 in at least one of the years in question — the whistleblower is entitled to an award of 15% to 30% of what’s collected, and can appeal the amount to Tax Court if they disagree with it.

The discretionary program (the one that actually applies to most small businesses). Below that $2 million threshold, tips still go through the same process, but the award is capped at 15%, entirely up to the IRS’s discretion, and there’s no right to appeal. Most single-location businesses, contractors, and local service companies who get reported land here — not in the mandatory program.

The dollar threshold changes the whistleblower’s payout. It does nothing to change what happens to you. An audit triggered by a $50,000 tip works the same as one triggered by a $5 million tip.

Who actually files these

Strangers don’t file whistleblower claims against small businesses. They can’t — they don’t have the information. The people who file Form 211 with the IRS are people who had access to your books: a bookkeeper you let go on bad terms, an employee who saw the cash drawer never quite matched the register tape, a former business partner who came out on the losing end of a split, a spouse in the middle of a divorce. The financial incentive didn’t exist for most of these people ten years ago in any meaningful way. Now it does, and the IRS is actively promoting it.

This isn’t a reason to distrust everyone who works for you. It’s a reason to make sure nothing in your books needs to stay hidden from any of them in the first place.

What actually triggers a report

In practice, it’s rarely one dramatic secret. It’s the ordinary stuff that a business owner assumes nobody’s tracking closely: cash sales that never made it into the books, employees paid partly under the table, personal expenses run through the business and written off as ordinary costs, a worker classified as a 1099 contractor who’s functionally an employee. None of that requires forensic accounting to spot from the inside — it just requires someone who saw it happen and decided to say something.

If there's something in your books from a prior year that you already know wouldn't hold up — old cash income, a misclassified worker, personal expenses buried in business accounts — the difference between fixing it yourself and having someone else report it is enormous. One of those is a correction. The other is an audit with a fraud question attached.

Get ahead of it before someone else does →

You won’t know it started with a tip

Here’s the part most business owners don’t expect: a whistleblower-triggered audit doesn’t come with a note that says “someone reported you.” It looks exactly like any other audit notice or information request. The IRS doesn’t disclose whether — or who — reported you, and whistleblower identities are protected. You can go through the entire process without ever knowing your former bookkeeper is the reason it started.

That means you can’t manage this risk by trying to guess who might talk. The only real defense is not having anything that would matter if they did.

What actually protects you

Clean, current books. Workers classified correctly from day one, not corrected after someone asks. Income reported as it’s earned, not as it’s convenient. If your business has cash transactions, a process for recording every one of them — not “most” of them. None of this is complicated advice. It’s just the difference between a business that can survive an insider with a grudge and one that can’t.

An audit doesn't care whether it started with a data match, a routine selection, or a tip from someone who used to work for you. What it cares about is whether your records back up what you filed.

Book a review before it becomes a problem →

See also:

This content is for general informational purposes only and does not constitute legal or tax advice. Tax rules are complex and change frequently. Consult a qualified tax professional before acting on this information. Geiger Tax & Accounting serves clients in New York and nationwide.