How to Report Workplace Misconduct

1. Recognizing reportable behavior

Reportable misconduct often includes:

• Fraud or financial wrongdoing

  False reporting, embezzlement, bribery, kickbacks.

• Harassment or discrimination

  Based on protected characteristics.

• Safety or environmental violations

  Conduct that puts people or the environment at risk.

• Legal or regulatory breaches

  Violations of laws or rules that apply to your organization.

• Retaliation

  Against someone for having reported, or for cooperating with an investigation.

If you are unsure whether something is reportable, consider your organization’s policy, applicable laws, and whether the conduct could cause serious harm.

2. Gathering evidence safely

Document what you have observed in a way that keeps you safe:

• Record dates, times, locations, and who was involved or present
• Note what was said or done — stick to facts you personally know
• Keep copies of documents or messages in a secure, private place (not only on work systems)
• Avoid confronting the person or discussing your plans in places that could be overheard or monitored

3. Choosing a reporting channel

Options often include:

• Internal

  HR, compliance, an ethics hotline, or a manager you trust — if your policy or situation supports it.

• External

  A regulator, law enforcement, or a secure anonymous platform such as EZ Report.

Choose a channel that you trust and that fits your need for confidentiality or anonymity. If you fear retaliation, an anonymous or external option may be safer.

4. Protecting yourself

Before and after reporting:

• Understand your whistleblower rights in your jurisdiction (see our Whistleblower Rights by Country and Retaliation Guide)
• Use anonymous or confidential reporting if that reduces your risk
• Keep your own copy of what you reported and when
• If you experience retaliation, document it and consider legal advice

5. What to expect after reporting

Responses vary by organization and channel. You may receive:

• An acknowledgment that your report was received
• Information on next steps or timeframes (if the channel provides it)
• Requests for more information — you can choose whether and how to respond