Evidencia
Compliance
Fraud

The DOJ Paid $1M to an Antitrust Whistleblower: What This Means for Your Compliance Program

Five months after the DOJ's first payout to an antitrust whistleblower, here's what this precedent concretely changes for compliance programs at companies exposed to the U.S. market — and its echo for European companies.

Équipe Evidencia• Conformité & éthique des affaires
3 min read
Lanceur d’alerte quittant un tribunal fédéral américain avec un dossier antitrust confidentiel

One million dollars, and a new line in the compliance playbook

In late January 2026, the U.S. Department of Justice paid out its first-ever award under the Antitrust Division's Whistleblower Rewards Program: one million dollars to a whistleblower whose information exposed a bid-rigging scheme in the used-vehicle auction market. Five and a half months later, the episode has stopped being a legal news item and become a case study. Deputy Assistant Attorney General Omeed Assefi described, the very next day, a "frenzy" of new reports reaching his office — and signaled that further announcements would follow. To date, no second award has been publicly announced. But the signal sent to companies, including those outside the United States, hasn't changed: the U.S. government now pays employees to speak up first.

For compliance officers, DPOs and legal teams at international groups, the question is no longer whether this type of program is here to stay, but how an internal reporting channel needs to evolve to remain an employee's first instinct — ahead of the regulator.

The DOJ program in three points

The Whistleblower Rewards Program was launched in July 2025 by the DOJ's Antitrust Division, in an unusual partnership with the U.S. Postal Service (USPS). That partnership isn't incidental: it provides the program's legal basis, funded through collected criminal fines, and it sets the program's scope around one specific test — the violation must affect, even indirectly, USPS revenues or operations.

In practice, that test is interpreted broadly. It's enough for a single document tied to the anticompetitive scheme — an invoice, a contract, a piece of business correspondence — to have moved through the U.S. mail for the requirement to be met. In effect, that covers a very wide range of companies operating in the United States, including U.S. subsidiaries of European groups that may not have considered themselves within reach of a program branded as "antitrust."

The program rewards whistleblowers with up to 30% of the criminal fine obtained thanks to their information, for violations under the Sherman Act (price-fixing, bid-rigging) or related fraud. The model is directly inspired by the Securities and Exchange Commission's whistleblower program, which has paid out more than a billion dollars since its creation in 2011 — proof, for the DOJ, that a financial incentive durably changes the behavior of employees who know something is wrong.

The EBlock case illustrates the mechanics well. The used-vehicle auction platform had acquired a competing company in November 2020. That company was already engaged, together with a third company, in a scheme to rig auctions and artificially inflate vehicle prices. EBlock did not stop the practice after the acquisition, which continued until February 2022. The result: a deferred prosecution agreement, a $3.28 million fine for EBlock — and $1 million, the 30% cap, paid to the whistleblower whose information helped end the scheme.

Why this matters for French and European companies too

Two features of the program deserve the attention of compliance teams on this side of the Atlantic.

First, the eligibility test tied to U.S. mail usage is broad enough to reach any company with operations, a subsidiary or suppliers in the United States — a far wider net than the "antitrust" label suggests. A French group with a commercial presence across the Atlantic can't assume it's out of scope simply because this isn't an EU regulation.

Second, the EBlock case illustrates a scenario M&A teams know well: an unlawful practice inherited from an acquired company, left undetected or unaddressed in time by the acquirer. That's exactly one of the blind spots that case management needs to cover from the moment a new entity is integrated — the absence of a working reporting channel in the months following an acquisition is a risk in its own right.

On the European regulatory side, the parallel with Directive (EU) 2019/1937 on whistleblower protection, transposed into French law through the Sapin II law, is direct: both frameworks rest on the same logic — giving whistleblowers a safe channel and, increasingly, an incentive to report early. The difference is the financial incentive, absent from the European framework, which makes it even more important for companies to offer a credible internal alternative before an employee considers going external.

The "race to report"

This is arguably the most structural effect of the DOJ program for companies: it creates a direct incentive to report externally rather than internally. An employee who spots questionable conduct now has a concrete choice to make — use the company's internal reporting channel, or contact the authorities directly with the prospect of a reward that could reach hundreds of thousands, even millions, of dollars.

That choice isn't made in the abstract. It depends directly on how much trust the employee places in the internal system: is it easy to access? Is the report handled quickly and visibly? Is the employee at risk of retaliation? A reporting channel perceived as slow, opaque or purely procedural mechanically pushes employees toward the external route — with the company losing control over the timeline and the handling of the matter.

Four practical steps to adapt your compliance program

U.S. law firms that analyzed the EBlock case converge on four concrete recommendations, all transferable to European companies with U.S. market exposure — or simply looking to get ahead of a similar dynamic among European regulators.

  1. Benchmark your compliance program against the regulator's own criteria. The DOJ publishes its own evaluation frameworks for antitrust and anti-corruption programs; testing your program against them proactively helps surface gaps before a whistleblower — internal or external — does it for you.

  2. Integrate acquired companies into your reporting channel immediately. This is precisely where EBlock fell short: failing to extend reporting procedures, training and internal controls to a newly acquired entity without delay means inheriting its blind spots on fraud-related compliance.

  3. Investigate every report promptly and thoroughly. An investigation that's delayed or incomplete — particularly one that skips digital communications, often the most direct evidence — weakens the company's position if the matter eventually reaches a regulator.

  4. Strengthen anti-retaliation policy and train on it at every level. An employee who fears retaliation, whether real or perceived, is structurally more likely to bypass the internal channel — regardless of how solid that channel otherwise is.

Where things actually stand, mid-2026

As of this article's publication, no second award has been publicly announced by the DOJ's Antitrust Division since the January payment. That silence shouldn't be read as the program slowing down: the DOJ has explicitly said it continues to receive a steady stream of reports since launch, and several U.S. law firms are still advising clients to review their internal procedures in anticipation of further announcements. For a company with U.S. market exposure, the absence of a new, high-profile case is a window to act — not a signal the topic can wait.

What this actually changes for your organization

The EBlock payment is neither the first nor the last example of a regulator financially rewarding external reporting. The SEC has done it since 2011, the DOJ since 2025, and the regulatory momentum on both sides of the Atlantic converges on one shared requirement: an internal reporting channel trustworthy enough to be an employee's first instinct, not their last resort.

For companies operating in France or Europe with any exposure to the U.S. market, that means concretely reviewing how accessible and how fast their reporting channel is, integrating acquired entities without delay, and documenting every report rigorously enough to withstand external scrutiny. A centralized case management tool makes it possible to sustain these requirements over time, rather than improvising a response each time a new report comes in.

To go further on the legal obligations that apply to companies operating in France, our article on whistleblowing systems and legal obligations covers the thresholds, deadlines and penalties set by the Sapin II law and the EU directive.


Sources

Tags

compliance
fraud

Share article

Frequently Asked Questions

Everything you need to know

Step up to next-generation compliance

Discover how Evidencia simplifies whistleblowing and case management

Evidencia