Nobody Calls a Helpline Run by the People They Would Report

The ACFE's Occupational Fraud 2026: A Report to the Nations found that 43% of frauds were detected by tips, nearly three times the next most common method, and that 55% of those tips came from employees. A speak-up channel people trust is the most productive detection control a company can have.

Many Indian companies have a helpline that almost nobody uses. The number is in the annual report, the policy is on the website, and the quarterly audit committee pack says "no material complaints". Very often the helpline is answered by HR, the compliance team or the chairman's office. That is the problem.

Why internally run helplines fail

Put yourself in the position of an employee who has seen their manager take kickbacks from a contractor. Before they decide whether to report, they ask three questions.

Will anything happen? If they have never seen a complaint lead to visible action, they assume it will not. Internally run channels often close complaints quietly, and silence looks the same as inaction.

Who will hear it? If the helpline is answered by HR, the reporter knows HR works alongside their manager every day. If it goes to the chairman's office, they wonder whether the chairman's people will want to hear about a favoured executive. Rightly or wrongly, they suspect that the people running the channel would rather not investigate.

What will happen to me? In a company where the people receiving the report also influence appraisals, transfers and promotions, the fear of retaliation is rational. One leaked name, anywhere in the organisation's memory, is enough to silence a workforce for years.

When the answers are "nothing", "the wrong people" and "something bad", the channel goes quiet. The fraud continues.

The case for independence

An independent helpline answers all three questions differently.

• Reports are received outside management's line, recorded in a log management cannot edit, and routed by rules the audit committee has approved.
• Complaints about senior people bypass management entirely and go to the audit committee chair or an independent ombudsperson. Section 177(10) of the Companies Act 2013 already requires direct access to the chair in appropriate or exceptional cases.
• Identity is protected by design. Anonymous reporting with two-way communication lets investigators ask questions without learning who the reporter is.
• Nobody named in a complaint has any role in deciding how it is handled.

The law sets a floor. Section 177(9) and Rule 7 of the Companies (Meetings of Board and its Powers) Rules 2014 require a vigil mechanism for listed and other prescribed companies, with safeguards against victimisation, and independent directors must ascertain that it is adequate and functional under Schedule IV. For listed entities, SEBI LODR adds a whistle-blower policy under Regulation 22 and audit committee review of how it functions. Our article on the vigil mechanism under the Companies Act and SEBI LODR sets out the requirements.

Real assurances, not words

Independence only earns trust if the assurances behind it are real.

Confidentiality

Limit access to reporter details to the smallest possible group, record every access, and treat any attempt to identify an anonymous reporter as serious misconduct.

Safety and anti-retaliation

Name a person responsible for protecting reporters. For every identified reporter, review appraisals, transfers, promotions and exits for the following 12 months, and report the results to the audit committee. Act visibly against anyone who retaliates.

Fair, independent investigation

Investigators must be independent of the business unit concerned, with external support for senior or complex matters. Our guide on how to investigate a whistleblower complaint sets out the steps. Matters such as sexual harassment complaints under the POSH Act need their own statutory route.

Feedback and visible outcomes

Tell reporters that their concern was examined and closed, even if details cannot be shared. Share anonymised outcomes internally. Nothing restores confidence faster than seeing that reports lead somewhere, which is why awareness campaigns that show action taken are the other half of the system.

EthicalView, Spectra's Speak Up system, can support this digitally and seamlessly: an independent helpline and other reach-out channels, awareness campaigns, training, setting up and rolling out a code of conduct, and the communication around all of them. Explore EthicalView.

What the board should measure

1. Volume by channel, business unit and category, against prior periods.
2. Share of anonymous reports, and of reports about senior people.
3. Substantiation rate and time from receipt to closure.
4. Action taken on substantiated complaints, by seniority of the subject.
5. Any adverse action against identified reporters, and how it was reviewed.

Common mistakes

• Routing through HR or the business. Complaints about a business head should never reach that business head's team first.
• Investigating the reporter. Attempts to identify an anonymous reporter destroy trust permanently.
• Closing on denial. Asking the accused whether it happened is not an investigation.
• Silence after closure. Reporters who hear nothing assume nothing was done.
• Counting calls instead of outcomes. Volume says little about whether the channel works.

Where we can help

We investigate whistleblower complaints independently for audit committees, review existing speak-up arrangements against these standards, and support the triage of complex or senior matters through our fraud and whistleblower investigation practice. Speak to us in confidence.