Speak-up culture: why your whistleblowing line goes unused, and what fixes it

Wirecard, once Germany's fintech champion, turned out to be missing 1.9 billion euros that had probably never existed. What makes the case so instructive is not the fraud. It is that people raised concerns for years, journalists and short-sellers among them, and the warnings were dismissed, attacked or ignored until the company collapsed in 2020.1 The information was in the building. The mechanism to act on it was not. That is the real whistleblowing failure, and most organisations share it.

Almost every company now has a speak-up line. Far fewer have a speak-up culture. The line is the easy part, a phone number and an email address on a poster. The culture is the hard part: whether a reasonable person believes that raising a concern will be taken seriously, acted on, and not quietly end their career. When people go quiet, it is rarely because they saw nothing. It is because they did the maths on what speaking up would cost them.

0255075100100%Sawmisconduct63%Reported it44%Felt safedoing so
The speak-up funnel: many see wrongdoing, fewer report, fewer still feel safe. Indicative. Source: ethics and compliance survey patterns

Why good people stay silent

People weigh three things before they report: will anything happen, will it come back on me, and is it worth it. In most organisations the honest answers are "probably not", "possibly" and "not really", so they stay quiet, and the organisation congratulates itself on how few reports it gets. A low number of reports is usually a bad sign, not a good one. It means either nothing is wrong, which is unlikely, or people have concluded that speaking up is pointless or dangerous, which is common.

The line is not the system. The response is.

The mistake is to invest in the channel and ignore the response. A slick reporting app with no visible follow-through trains people not to use it. What builds a speak-up culture is what happens after the call: that concerns are acknowledged fast, investigated fairly, acted on visibly, and that the person who raised them is protected, not punished. One well-handled case that people hear about does more than any poster campaign, and one retaliation, seen by everyone, undoes years of it.

The solution, as a speak-up design checklist

Build the response, not just the channel

  • Multiple routes, including one that bypasses the person's own manager, because the manager is often the problem.
  • A real option to raise a concern confidentially, and honesty about the limits of anonymity.
  • A named owner and a promised timeline: acknowledged in days, not lost in a queue.
  • Protection from retaliation that is written down, enforced, and seen to be enforced.
  • Feedback to the reporter that something happened, even when you cannot share the detail.
  • Managers trained to receive a concern without defensiveness, since most reports start as a quiet word, not a hotline call.

The one metric that tells you the truth

If you want to know whether you have a speak-up culture, do not count reports. Track what happens to the people who make them. Follow a cohort of reporters for two years and look at their reviews, promotions and exits against everyone else. If raising a concern quietly damages careers, your people already know it, and no amount of hotline marketing will fix it. If reporters do as well as their peers, word gets around, and the line starts to work because people believe the response behind it.

Questions to ask about your speak-up culture

  • When someone raises a concern, what actually happens, and how fast?
  • Can a person report around their own manager if they need to?
  • What happened to the last three people who spoke up, honestly?
  • Is our low report count a sign of health, or of silence?
  • Are managers trained to hear a concern, or to make it go away?

A whistleblowing line you can point to satisfies a requirement. A speak-up culture protects the business, because it surfaces the problem while it is still small and cheap, instead of leaving it to a journalist or a regulator to find when it is neither. The difference is not the technology. It is whether people believe, from what they have seen happen to others, that speaking up is safe and worth it. Build that belief, one well-handled case at a time, and the silence lifts.

Notes and sources

  1. Wirecard collapsed in 2020 after 1.9 billion euros could not be accounted for, following years of dismissed warnings. CNBC. Link. ↩
Cover of Compliance

From the book

Compliance Beyond Ticking the Box

Turn compliance from a cost you endure into a system that protects the business and drives its growth.

View on Amazon →

← Back to Writing