The First Call Decides Whether There’s a Second

Friday, 4:40 p.m.

The ethics hotline routes a call to the compliance officer on duty. The caller won't give her name at first. She works in accounts payable. She thinks invoices from one supplier are being approved without the goods ever arriving, and she thinks her manager knows.

She's been thinking about calling for three months. She's calling now because she's afraid waiting longer will implicate her.

"I don't know if this is even the right place. I don't want to lose my job over this. And I don't have proof — I just know something's wrong. Should I be going to someone outside the company instead?"

In that one breath she's raised every difficult question in whistleblower intake: whether she'll be protected, whether she'll be believed, whether she needs evidence, and whether she's allowed to go elsewhere.

How the compliance officer answers the next four sentences will decide whether she keeps talking — and whether she ever calls again.

Why the intake is its own skill

A whistleblower intake interview is not an investigation interview. The investigator's job is to establish facts. The intake's job is narrower and more fragile: receive the concern, understand it well enough to act, keep the reporter safe and willing, and route it correctly.

Four features make it difficult.

The reporter is taking a risk. Many people who raise concerns fear retaliation, damage to relationships and damage to their careers. Their willingness to continue depends on how the first conversation feels.

They usually have only a fragment — an invoice, a remark, a pattern. Demanding proof they don't have signals disbelief.

Protections are real but not unlimited. Organizations prohibit retaliation, and many jurisdictions provide legal protections for people who report certain concerns. But the scope of those protections varies, and anonymity may not always be fully maintainable. Honest explanation matters more than reassurance.

And the reporter may have other options. In many jurisdictions and sectors, people can report concerns to regulators or other external bodies, and organizations must not discourage or impede them from doing so. An intake that sounds like it's trying to keep the concern in-house can create serious problems of its own.

The four answers that matter first

"Is this the right place?" — "Yes. You've done the right thing by calling. Whatever this turns out to be, I want to understand it." Taking the concern seriously is the foundation for everything that follows. It isn't a judgment that the concern is correct; it's a commitment to look.

"Will I lose my job?" — "The company prohibits retaliation against anyone who raises a concern in good faith. If anything happens to you because you called, I want you to tell me, and it will be taken seriously." Accurate, specific and not overpromising. Don't say "nothing will happen to you" — the compliance officer can't guarantee that, and the reporter may remember the promise.

"I don't have proof." — "You don't need proof to raise a concern. That's our job. Tell me what you've seen and why it worries you."

"Should I go outside the company?" — "You're entitled to raise concerns with outside authorities, and nothing about this call changes that. I'm not going to advise you on what to do. What I can tell you is what we'll do with what you tell us." The line the intake must never cross is discouraging someone from reporting externally — even implicitly, even with good intentions. What the organization's policy says about this, and how it should be phrased, should come from its legal guidance.

Anonymity and confidentiality — honestly

The caller asks whether she has to give her name.

Explain the options. Many hotlines accept anonymous reports. Some reporters prefer to be confidential rather than anonymous — known to compliance but protected from wider disclosure.

Explain the trade-offs honestly. "You can stay anonymous. If you do, follow-up questions are harder, and depending on the details, people may guess where a concern came from. If you give me your name, I'll keep it to the people who need it to look into this."

Don't promise complete confidentiality. Some information may need to be shared to investigate, and legal obligations may require disclosure in some circumstances. Say what's true.

Offer a way back in. If she stays anonymous, give her a reference number or a channel to return.

Get the specifics without interrogating

Once the reporter is willing to continue, the intake needs enough detail for someone to act.

Start open. "Take me through what you've noticed, from the beginning."

Then move to specifics. What, when, where, who, how often. "Which supplier? Roughly when did you first notice? Where do the approvals show up — in the system, on paper?"

Ask where the evidence lives, not for the evidence itself. "Are there records that would show this?" is useful. Asking the reporter to gather documents, access systems she wouldn't normally access or record colleagues is not — it may put her at risk and may breach policy or law.

Ask what she's already done. Has she raised it with anyone? What happened? A prior report that went nowhere is itself important information — and possibly a separate concern.

Ask about her own position carefully. If she's worried she may be implicated, don't advise her. Note it, and make sure it reaches the people who can decide how it's handled. Whether she should seek her own legal advice is her decision; don't discourage it.

Don't investigate on the call. The intake records; the investigation evaluates.

Close with a next step she can hold

Summarize and check it's accurate.

Explain what happens next — in general terms, without promising outcomes or timelines you can't keep. "This will go to the team that reviews concerns like this. They may want to ask you more. I can't tell you what they'll find, but it will be looked at."

Tell her how to follow up and how to report any retaliation.

Thank her.

Then escalate according to the process — immediately where the concern is urgent, involves senior people or has legal implications. The manager she's worried about must not be the person the report is routed to.

Four ways it goes wrong

The skeptic, whose questions about proof and motive make the reporter feel she's being investigated.

The overpromiser, who guarantees anonymity, job security or an outcome to keep her talking.

The gatekeeper, who, by tone or words, suggests the concern should stay inside the company.

The investigator, who starts testing the allegation on the call instead of receiving it.

Why this isn't trained

Hotline staff are trained on process, not conversation. Logging a report is taught. Keeping a frightened caller on the line is not.

Intake calls are unscheduled. Many staff handle serious reports only occasionally.

The external-reporting question is delicate. Staff often don't know what they can say, so they either avoid it or answer it badly.

And peer role play is too easy. Colleagues playing a whistleblower rarely hesitate, change their minds about giving a name or ask whether they should go to a regulator. Real callers do all three.

What whistleblower-intake simulation can rehearse

A ten-minute simulation can put a compliance officer or hotline handler opposite a reporter who is frightened, hesitant, missing proof and unsure whether she should be calling at all — so the handler practices taking the concern seriously, explaining protections honestly, handling the external-reporting question correctly and gathering specifics without interrogating. The AI agent in Foretell AI plays the reporter consistently; the organization's policies, the wording of protections and all legal guidance stay with the organization and its counsel.

Four versions to build:

Design caution — high tier. Whistleblower protections, anti-retaliation obligations, rules on anonymity and confidentiality, and the rights of individuals to report to external authorities vary significantly by jurisdiction and sector. Scenarios must follow the organization's policies and legal guidance and must never train handlers to discourage, delay or impede external reporting. Nothing here describes what does or doesn't constitute wrongdoing, and nothing here is legal advice.

Designing the module

Ten minutes, scored against a whistleblower-intake rubric.

Pass one — the first minute. Was the concern taken seriously? Were the retaliation and proof questions answered accurately, without overpromising?

Pass two — the hard questions. Were anonymity and confidentiality explained honestly, with trade-offs? Was the external-reporting question answered without discouragement?

Pass three — specifics and close. Were what, when, where, who and how often covered? Did the handler avoid asking the reporter to gather evidence? Was a next step and a follow-up channel given?

Rubric on observable behavior: Was the concern acknowledged as worth raising? Was proof demanded? Was anti-retaliation explained? Was complete anonymity or job security promised? Were anonymity trade-offs explained? Was external reporting discouraged in any way? Were specifics gathered? Was the reporter asked to collect evidence? Was a follow-up channel given?

Discouragement statements is the measure — any word or phrase that suggests the reporter shouldn't raise the concern, shouldn't go elsewhere or should reconsider. One is too many.

For compliance teams, ethics hotlines and advisory firms

Reporting depends on the first experience. A reporter who feels dismissed rarely calls back, and colleagues hear about it.

Protections have to be explained, not just written. A policy that handlers can't explain accurately isn't doing its job.

Poor intake creates legal risk. Overpromising, discouraging external reporting or mishandling a reporter's identity can create problems far larger than the original concern.

And it scales. Hotline teams, regional ethics officers and outsourced intake can all practice the calls that matter most.

For law schools and compliance programs, it's a practical exercise in the gap between a whistleblowing policy and the conversation that tests it.

Frequently asked questions

How should a whistleblower intake interview be conducted? Take the concern seriously, explain anti-retaliation protections accurately, explain anonymity and confidentiality options honestly, gather specifics without demanding proof, avoid discouraging external reporting, and give a clear next step and follow-up channel.

Can a whistleblower remain anonymous? Often, yes — many hotlines accept anonymous reports. But anonymity can limit follow-up and may not always be fully maintainable. Reporters should be told the trade-offs honestly.

Can a company discourage employees from reporting to regulators? In many jurisdictions, organizations must not discourage or impede individuals from reporting to authorities. Intake handlers should never suggest that a concern must stay internal. Organizations should take legal advice on how to address this.

Does a whistleblower need evidence to report a concern? No. Reporters should describe what they've observed; investigating is the organization's job.

The short version

"I don't know if this is the right place. I don't want to lose my job. I don't have proof. Should I go outside instead?"

Tell her she's done the right thing by calling. Explain the protection against retaliation accurately — not a promise of safety. Tell her she doesn't need proof. Tell her she's entitled to go outside and that this call doesn't change that. Explain anonymity honestly. Get the what, when, where and who, without asking her to gather anything. Give her a way back in. Then get it to the right people — not her manager.

The first call decides whether there's a second one.

Foretell AI lets compliance teams and ethics hotlines build whistleblower-intake simulations — including hesitant callers, anonymity questions and the external-reporting question like the one above — with configurable AI reporters, recordings and rubric-based evaluation. If your handlers have never practiced the call that matters most, we're happy to walk through how other organizations have structured it.