First rule of blowing the whistle: never disclose your identity if you can avoid it, even to authorities. There’s no upside to that and authorities are incompetent at preserving anonymity if it’s even legal for them to do so. (Exception: you’re filing a whistleblower report to the SEC, there’s sweet anonymous $$$ for you then.)