Corporate and Financial Fraud Whistleblowers in New Jersey

What counts as corporate whistleblowing under New Jersey law?

CEPA, N.J.S.A. 34:19-1 et seq., is one of the broadest whistleblower statutes in the country, and it is not limited to hospitals, patients or public safety. Under N.J.S.A. 34:19-3, an employer may not retaliate against an employee who:

• Discloses, or threatens to disclose, to a supervisor or a public body an activity, policy or practice the employee reasonably believes violates a law, rule or regulation — or is fraudulent or criminal, including deception or misrepresentation that may defraud a shareholder, investor, client, customer, employee, former employee, retiree, pensioner or government entity;
• Provides information or testifies before a public body conducting an investigation, hearing or inquiry; or
• Objects to, or refuses to participate in, an activity the employee reasonably believes is illegal, fraudulent or criminal, or incompatible with a clear mandate of public policy.

In a corporate setting, that commonly includes concerns such as:

• Falsified or manipulated financial statements, revenue recognition or reserves
• Misleading investors, lenders or auditors
• Bank, loan or insurance fraud
• Billing customers for work not performed, or overcharging
• Kickbacks, bribery and conflicts of interest
• Tax fraud, payroll fraud or misclassification schemes
• Money laundering or sanctions violations
• Fraud on government contracts or programs
• Being told to backdate, alter or destroy records

The concern also can involve another company the employer does business with. CEPA reaches activity of "another employer, with whom there is a business relationship," which matters to people who discover fraud by a vendor, customer or partner.

Do I have to be right about the fraud?

No. You need a reasonable belief, not proof. New Jersey courts ask whether there is a law, rule, regulation or clear public policy closely related to the conduct you complained about, and whether your belief that it was being violated was objectively reasonable. You do not have to cite the statute by name, and you are protected even if an investigation later finds no violation.

What you do need is specificity. "This feels unethical" is weaker than "these invoices bill the client for hours no one worked." General disagreements about business judgment, accounting judgment calls that are merely debatable, or complaints about management style usually fall outside CEPA. A lawyer can help you identify the law or fraud your concern actually ties to — the protected activity page explains the standard in more detail.

Is reporting inside the company enough?

Usually, yes. CEPA protects disclosure to a supervisor, and objecting to or refusing to take part in the conduct, so internal reports to a manager, compliance officer, general counsel or audit committee can all be protected. Going outside matters too. Before disclosing to a public body, CEPA generally expects the employee to have brought the problem to a supervisor in writing and given the employer a reasonable chance to correct it (N.J.S.A. 34:19-4). The exceptions are narrow — for example, when the employee is reasonably certain supervisors already know, or in an emergency where the employee reasonably fears physical harm. See internal complaints and outside reporting.

Employees whose job is to find and report problems — internal auditors, compliance officers, controllers, in-house counsel — are not excluded from CEPA, but their claims are analyzed carefully. See watchdog employees.

Which federal laws protect financial fraud whistleblowers?

Two federal laws often matter alongside CEPA:

• Sarbanes-Oxley (SOX), 18 U.S.C. 1514A. Protects employees of publicly traded companies — and, since Lawson v. FMR (2014), employees of their contractors and subcontractors — who report mail, wire, bank or securities fraud, violations of SEC rules, or fraud against shareholders. A complaint generally must be filed with OSHA within 180 days. Read more about Sarbanes-Oxley retaliation.
• Dodd-Frank and the SEC Whistleblower Program. People who give the SEC original information about securities violations can be eligible for an award of 10% to 30% of sanctions over $1 million, and Dodd-Frank protects those who reported to the SEC from retaliation. Read more about the SEC whistleblower program.

Fraud on federal, state or local government money raises a different set of claims under the False Claims Acts — see CEPA and False Claims Act claims.

What does retaliation look like in a corporate setting?

Retaliation is not limited to firing. Under CEPA it includes discharge, suspension, demotion, and other adverse action regarding the terms and conditions of employment. In corporate cases it often looks like:

• Being cut out of the meetings, accounts or deals you used to run
• A sudden negative review, a performance improvement plan, or a reorganization that eliminates only your position
• Reduced bonus, commission or equity compared with peers
• Reassignment away from the area where you raised the concern
• A pattern of smaller actions that together make the job untenable

The connection between the report and the action is usually proven with timing, who knew about the report, and whether the company's stated reason holds up. See proving retaliation and pretext.

What can I recover, and what are the deadlines?

A successful CEPA plaintiff may recover reinstatement, back pay and lost benefits, compensatory damages, and in appropriate cases punitive damages, along with reasonable attorney fees (N.J.S.A. 34:19-5). Claims are tried to a jury. See CEPA damages.

The deadlines are short:

• CEPA: generally one year from the retaliatory action (details).
• Sarbanes-Oxley: generally 180 days to file with OSHA.

Strategy matters as much as speed. Filing a CEPA action waives certain other state-law claims based on the same retaliation (N.J.S.A. 34:19-8), Sarbanes-Oxley claims generally cannot be forced into arbitration, and a report to the SEC has its own consequences. These choices should be made together, early.

What should I do now?

• Write down what you reported, to whom and when, while it is fresh — dates, names, and what was said.
• Keep copies of your own communications — emails you sent, your performance reviews, your compensation records.
• Do not take company documents you are not authorized to have until you have talked with a lawyer. In Quinlan v. Curtiss-Wright (2010), the New Jersey Supreme Court held that whether an employee's taking of documents is protected depends on a balancing of factors; it is not automatically protected.
• Don't sign a severance agreement or release without having it reviewed — it may waive the claim. See still employed or offered severance.
• Get advice before you resign. Leaving can change what you can recover.

Who handles these matters at Gray Law Group?

Gray Law Group's whistleblower practice is led by partner Bruce D. Nimensky, a New Jersey trial attorney with more than four decades of litigation experience whose practice focuses on CEPA retaliation and complex employment litigation. In 2026 he tried a whistleblower-retaliation case to a Morris County jury verdict for the employee — see the Gormus verdict. Past results do not guarantee a similar outcome.

For a broader overview of the law, read Bruce's guide to New Jersey whistleblower law.

Talking to a lawyer about your situation

If you reported or refused to go along with fraud or illegal conduct at your company and the treatment changed afterward, a confidential conversation can help you understand where you stand and which deadlines apply. Please don't include confidential company documents in a first message.

Gray Law Group's office is in Jefferson, in Morris County, and the firm represents employees throughout New Jersey. Call 973-240-7313 or request a consultation.