The identity of whistleblowers is protected under the 2010 Dodd-Frank Act. Whistleblower payments are withdrawn from an investor protection fund established by Congress. Rewards can range from 10% to 30% of the money collected when sanctions exceed $1 million.