FinCEN Wants Tips on Iran-Linked Money — and Is Offering 30% Bounties to Get Them

On September 10, FinCEN — the Treasury bureau that polices money laundering — issued something called a "whistleblower bulletin" aimed at Iran-related illicit finance; under the whistleblower program, individuals may be eligible for a monetary award if their information leads to a successful enforcement action. Bulletins are how FinCEN talks to the people it wants information from, and this one is essentially an advertisement: if you have information about Iran-linked money laundering or sanctions violations, the government wants it, and there is a bounty attached.

The interesting part is not the bulletin itself. It is the machine the bulletin is advertising. Over the past year the Treasury has been building a whistleblower program for anti-money-laundering and sanctions enforcement that is basically the SEC's whistleblower program rebuilt to pay bounties on laundered money instead of securities fraud. And the Iran bulletin is the clearest sign yet that the machine is being operated the way it was designed — as a targeted proposition to the people who actually know where the money hides.

The bounty that funds itself

Here is the deal FinCEN is offering. If your information leads an enforcement action that collects more than $1 million, and the action succeeds, you are entitled to 10% to 30% of whatever was collected. The awards are paid out of a "Financial Integrity Fund" that can hold up to $300 million — and the fund is filled with exactly the kind of sanctions penalties those tips help generate. The government buys the information from recovered money. It is a bounty that funds itself.

This is the SEC program in a new wrapper. The SEC has run a bounty system for securities fraud since Congress created it in the Dodd-Frank Act, and it has paid out enormous sums; the record for a single whistleblower collection is nearly $279 million. FinCEN's version, mandated by the Anti-Money Laundering Act of 2020 and a 2022 follow-up, applies the same economics to the Bank Secrecy Act and to sanctions.

The catch in the word "monetary"

But before you start dreaming of a bounty, notice one wrinkle. The award is 10% to 30% of "monetary sanctions," and FinCEN's proposed rule defines that term narrowly — excluding forfeiture, blocked property, restitution, and victim compensation.

That gap matters a lot, because anti-money-laundering and sanctions cases are usually heavy on forfeiture rather than fines: money seized because it is tainted, not money paid as a penalty. If a big chunk of a resolution is forfeiture, it does not count toward your payout. The bounty is real, but it is skinnier than the headline 30% suggests — and the place where that fights over the definition is exactly where the real money does or doesn't show up.

Why Iran, right now

So why is the latest bulletin about Iran? Because 2026 is the year the Treasury turned its full weight on Iranian finance — a campaign unusually well stocked with the big-dollar targets a bounty program wants. OFAC has designated Iran's largest crypto exchanges, including Nobitex, which processed more than half of Iran's digital asset inflows in 2025, along with Wallex, Bitpin, and Ramzinex. It has dismantled the "rahbar" shadow-banking networks that move hundreds of millions of dollars for Iranian banks through front companies in Dubai, Hong Kong, and Singapore. FinCEN has separately estimated that billions of dollars a year flow through Iranian oil-smuggling and shadow-bank channels.

The bulletin's real significance is which constituency it addresses. FinCEN's alerts tell banks what to watch for — red flags, typologies, keywords to type into a Suspicious Activity Report. That is how you talk to institutions. A whistleblower bulletin is how you talk to individuals: the compliance officer who saw a pattern and was overruled, the exchange employee who watched Iranian flows, the finance person who noticed the number did not add up. The government used to depend on institutions to self-disclose and on their people to be brave. Now it is offering to pay the person directly — up to 30 cents on the dollar of whatever gets recovered.

That is a genuine shift in the economics of compliance for anyone who owns financial stocks. Anti-money-laundering and sanctions failures were already expensive. The new program adds a specific, personal incentive for a company's own employees to surface them. Note the awkward built-in tension: compliance officers and management insiders have to wait 120 days after learning something before they can report — a nod to giving companies time to investigate and self-disclose first. But once that window closes, the employee's financial interest and the employer's interest are simply no longer aligned.

A couple of calibrations before this sounds more dramatic than it is. This is not a company-specific catalyst, and it is not live money yet. The rules were proposed in April, the comment period closed in June, and no final rule has been issued — so although the Treasury has been taking tips since February, nobody has been paid. And the program already has a backlog of demand: from its establishment in 2021 through May 2024, FinCEN had received at least 270 tips, most of them about sanctions.

The bulletin itself is a page. But there is a way to read it that has nothing to do with Iran: as an advertisement for a funding model. The Treasury has concluded that the fastest way to find financial crime is to buy the information from the people closest to it, and to fund the purchase with the money it recovers. For holders of banks, payment companies, trade-finance firms, and anything that touches a crypto exchange, that is a structural change in what a compliance failure is likely to cost — a change that does not depend on any single designation or fine to matter.