This is a paid article which your subscription is allowing you to read.

Whistleblowers play a vital role in the fight against corruption, fraud, and misgovernance. According to the Association of Certified Fraud Examiners' 2026 Report to the Nations, approximately 43% of frauds were detected by tip-offs. This is nearly three times the effectiveness of internal audits, the second-most common detection method, which accounted for just 15% of cases. Considering that more than half of all tip-offs come from employees, the importance of whistleblower hotlines and protections can hardly be overstated.

Conscientious and ethical employees are the frontline defence against fraud and corruption. They are found not only in private enterprises, but also throughout government departments and public institutions. But despite their vital contributions to exposing criminality and misappropriation, they enjoy little meaningful protection.

A Framework Built on a Fragile Assumption

Typical whistleblower protections include legislation that forbids employers from persecuting or discriminating against whistleblowers in the workplace. In South Africa this is mostly covered by the Protected Disclosures Act (PDA). The PDA ensures that if a disclosure is made in good faith and the whistleblower reasonably believes the information to be true, they are legally protected against workplace retaliation. Other South African laws, such as the Labour Relations Act, also offer avenues for redress and compensation should a whistleblower find themselves on the receiving end of occupational detriment.

Proposals to strengthen South Africa’s whistleblower protection framework are currently under consideration. This is good news, but the legislative process is far from complete and the road ahead is not a short one.

Legal protections are valuable, but they assume the whistleblower survives long enough to exercise them. Employment remedies, compensation orders, and anti-retaliation provisions offer little comfort to a whistleblower who has been assaulted, intimidated, or murdered.

This is the uncomfortable reality at the heart of South Africa’s whistleblower crisis.

When Exposure Becomes a Death Sentence

Nor is it a danger faced by whistleblowers alone. Investigators, fraud examiners, liquidators, legal practitioners, journalists, and even senior police officials have been murdered for threatening entrenched criminal interests. In South Africa, those who expose corruption do not merely risk losing their jobs. In some cases, they risk losing their lives.

Any individual who threatens a politically connected patronage network may find themselves marked for intimidation, assault, or assassination. The corrupt have no shortage of willing accomplices prepared to carry out such violence.

The implications of this reality are grim. The murder, intimidation, and persecution of whistleblowers discourage people from coming forward with vital information about corruption and criminality. A forensic investigator who has handled several whistleblower cases put it plainly: “Only those who have genuinely reached the end of their tethers are reaching out. Most just keep quiet or leave.”

The result is a perverse incentive structure: those who expose wrongdoing assume the greatest risks, while those who remain silent are often the safest. In this way, state failure actively discourages the very conduct it should be encouraging and normalising. Faced with the prospect of retaliation, many potential whistleblowers simply choose silence.

A State That Cannot Protect Its Own

The instinctive response to a crisis of this nature is to demand that the state fix the problem. Yet repeated calls for stronger protections have produced limited results, while the risks faced by whistleblowers continue unabated.

Unfortunately, there are compelling reasons to doubt whether the state is capable of fulfilling that role.

The findings emerging from the Madlanga Commission paint a troubling picture. They suggest not only significant criminal infiltration and capture of state institutions, including senior elements of the South African Police Service, but also expose serious shortcomings in the state’s ability to protect witnesses and other individuals who place themselves at risk by coming forward with information.

A state that cannot reliably protect witnesses, investigators, prosecutors, and whistleblowers cannot credibly claim to be the primary guarantor of their safety. To suggest otherwise is patently reckless. It is time to supplement public efforts with private solutions to this public problem.

The Case for a Private Protection Framework

Protecting whistleblowers, witnesses, and investigators requires far more than occasional police patrols or the assignment of bodyguards. Effective protection is a comprehensive process of risk management that begins long before a threat materialises and continues long after it has been identified.

Such a system requires an independent and trustworthy body capable of assessing risk, assigning resources, and coordinating protective measures. Depending on the circumstances, these measures may include residential target hardening, workplace security, enhanced security awareness and personal resilience, emergency support mechanisms, and, where appropriate and lawful, private defensive capabilities.

There are numerous professional associations, industry bodies, and private initiatives with extensive experience and established expertise in security, investigations, fraud prevention, and risk management. Organisations such as ACFE South Africa, ASIS International, Business Against Crime South Africa, and others are well positioned to provide leadership, expertise, and coordination in the development of effective protection frameworks for at-risk whistleblowers, witnesses, and investigators.

Indeed, many of the procedures, methodologies, and best practices required to assess risk, harden potential targets, and manage protective measures already exist. The challenge is not a lack of knowledge, but rather the mobilisation of sufficient resources, coordination, and institutional support to implement them effectively.

Effective protection does not depend on a single intervention, but rather on multiple overlapping layers of security. Just as organisations do not rely on a single control to prevent fraud, whistleblower protection should not rely on a single mechanism to prevent intimidation, assault, or assassination.

A Layered Protection Framework

Any protection programme starts with a comprehensive risk assessment. Not all whistleblowers are exposed to the same level of threat. An anonymous tipster using a whistleblower hotline faces significantly different risks to a municipal manager exposing or testifying against a politically connected corruption network. Effective protection therefore begins with understanding the nature, likelihood, and severity of the identified and potential threats involved so that resources and protective measures can be allocated appropriately.

Risk assessments should consider factors such as the nature of the allegations, the individuals implicated, the whistleblower’s public profile, previous threats or incidents, family circumstances, and the likelihood of retaliation.

The first layer is workplace-based protections. These include confidentiality safeguards, secure reporting mechanisms – such as anonymous hotlines, identity protection, and anti-retaliation policies. While important, they suffer from a critical weakness: they are administered by the very organisations within which the wrongdoing is alleged to have occurred. This does not diminish their importance – in fact, they are extremely important, and represent key elements of any sound corporate governance and enterprise risk management framework.

However, since their administration is not independent, their reliability and effectiveness cannot simply be taken for granted.

The second layer supports the whistleblower through the provision of legal aid, support networks and NGOs, and psychological counselling. Legal advice and representation will ensure that whistleblowers are guided through the process and assisted with any legal concerns they may have. Support networks and psychological counselling will help them and their families deal better with the pressure, disruption, and stress inherent in the process. It is important that they do not feel isolated, vulnerable, or without adequate support and assistance.

Workplace and residential security can reduce vulnerability, but no security system accompanies a whistleblower everywhere they go. Individuals therefore require the knowledge and skills necessary to recognise threats, make informed decisions, and respond appropriately to emerging risks.

Many threats are enabled not through sophisticated surveillance, but through information that individuals voluntarily make available about themselves, their families, and their routines.

Good security awareness and threat recognition training, together with sound personal security and information security habits, form the foundation of individual resilience. These measures include limiting unnecessary public exposure, locking down social media profiles (including those of family members), protecting sensitive personal information, maintaining good digital security practices, and engaging in emergency preparedness and planning.

The fourth layer uses the findings and recommendations of the risk assessment to perform residential target hardening. The whistleblower’s home should be their castle. It is their place of safety, it is where their family resides, and it is also where they may be most vulnerable. Securing their home via a combination of physical security systems, emergency response, and – where necessary – guarding and close protection, serves many purposes. For one, it decreases the likelihood of the whistleblower being targeted or coming to harm at their home. It also protects their emotional and psychological state if they feel safe and secure in their homes – and that their families are as well.

Threats against whistleblowers are often indirect. Family members, spouses, and children may be targeted precisely because they are perceived as softer and more accessible targets. Effective protection must therefore extend beyond the whistleblower alone and account for the broader family unit.

In the event of an impending or actual incident, there must be rapid and effective response by the appropriate resources. This can range from emergency relocation of the whistleblower and their families to a secure location, to a tactical intervention team responding to a direct threat to their lives. These emergency resources must not only be available, but must also be directed and coordinated by a qualified person with appropriate authority. Effective crisis management requires the coordinated efforts of multiple disciplines, including specialised private security, emergency medical services, law enforcement, public relations, and investigative resources. Its purpose is to protect the whistleblower from imminent harm, or remove them out of harm’s way.

Even the most comprehensive protection programme cannot eliminate all risk. Despite the successful implementation of every preceding layer, there remains the possibility that a whistleblower may be confronted by an imminent threat before assistance can arrive. It is this residual risk that necessitates a final layer of protection.

All the preceding layers are designed to eliminate, reduce, and manage risks facing whistleblowers, witnesses, and investigators. However, no framework is infallible. Residual risks remain, and those who expose corruption and criminality are required to provide for their own immediate safety.

For this reason, private defensive capacity should be regarded as a legitimate component of a broader protection framework. Depending on the circumstances, this may include self-defence training, personal safety equipment, access to private security services, and the lawful ownership and carriage of defensive firearms.

Importantly, private defensive capacity is not a substitute for any of the preceding layers. It is a measure of last resort. Its purpose is not to encourage confrontation, but rather to ensure that individuals retain the means to protect themselves when all other protective measures have failed or are unavailable.

The notion that individuals facing credible threats should simply wait for assistance to arrive is neither realistic nor responsible. In South Africa, where emergency response times vary considerably and where violent criminality remains a persistent concern, private defensive capacity provides an additional layer of resilience for those who may find themselves targeted because they chose to expose wrongdoing.

Putting It All Together

The encouraging reality is that very little of what has been proposed here needs to be invented from scratch. The expertise already exists. The methodologies already exist. The security, investigative, legal, and risk-management professions have spent decades developing the knowledge required to assess threats, manage risk, and protect individuals from harm.

The challenge is one of coordination, resources, and implementation.

Perhaps this requires the creation of a special-purpose vehicle, most likely in the form of a non-profit company, capable of drawing together private funding, expertise, and resources from a wide variety of stakeholders in pursuit of a public-interest objective. Such an organisation could provide risk assessments, coordinate protective measures, mobilise emergency resources, and ensure that whistleblowers, witnesses, and investigators are not left to face credible threats alone.

Whistleblowers remain the single most effective means by which fraud and corruption are detected. If we are serious about combating corruption, we cannot continue treating their protection as an afterthought. A society that relies upon whistleblowers has a responsibility to ensure that they can come forward without fearing for their livelihoods, their families, or their lives.

A dead whistleblower has no legal remedies. More importantly, a murdered whistleblower is a victory for corruption.

The objective must therefore be simple: make exposing corruption safer, and make silencing those who expose it ineffective.

Gideon Joubert is a certified fraud examiner (CFE) and security management professional with experience in fraud investigations, corporate security, protective intelligence, crisis management, and enterprise risk management. He currently serves as an investigator and corporate security manager. He is a member of ACFE and ASIS International and writes on issues relating to security governance, corruption, crime, and public policy.