Whistleblower intake
Share inside information
The drop
The drop form
The form sends only after its encryption key loads. The server logs connection metadata for security. Through the onion service, it receives the Tor connection instead of your public IP address. Encryption does not remove identifying details from your evidence.
Up to 80 MB before compression. Files alone are fine. Add a reply address only if you want us to contact you.
Privacy and encryption
Files stay on your device until you press send. Then the form packs them with your message into a single archive and encrypts it on this device, to a key the server does not hold. If the key fails to load, the form refuses to send. There is no unencrypted fallback, by design.
No account required
No account is required. Name and reply-contact fields are optional.
The server stores ciphertext
Encryption starts in your browser. The server never holds a readable copy.
Public pages and intake over Tor
The onion address serves public pages and the encrypted drop. Account, admin, Frank, and Recon pages use the clearnet site.
Contact is optional
Add a reply address if you want a response. You can leave it blank.
What happened at your employer?
XH1B is an independent evidence archive. A submission here is not a government complaint, an attorney engagement, or a finding that an employer broke the law.
Reporting guidance reviewed: .
What happened at your employer?
Layoffs followed by H-1B hiring
Describe the jobs removed, the work that continued, and any instructions to train replacements. Include dates, locations, job duties, and employer or staffing-company names. A layoff near an H-1B filing does not by itself prove unlawful replacement.
Hiring that excludes people by race, national origin, or citizenship
Preserve job ads, recruiter instructions, rejection messages, and selection criteria. Explain who made the decision and what they said. A team that shares one race or nationality does not by itself establish discrimination. Do not infer immigration status from a name or appearance.
Unpaid wages, unpaid bench time, or false filing documents
Describe the employer, job, worksite, dates, and the difference between the documents and events you observed. Pay records, assignment notices, and messages can help reviewers assess a concern. A staffing-company billing margin alone does not prove wage fraud.
Something else?
Describe what happened, when it happened, and what you observed. Include records that help explain your concern. You do not need to fit one of the examples above.
The drop form or the report form?
Both channels reach founder review. Choose the report form for a structured employer account or the encrypted drop for documents and a message. Neither channel files a government complaint.
The employer report form
Your account of what happened at a named employer, stored as a private receipt only the founder can read. Contact details are optional, and you choose whether the report can reach attorneys or be published. Use it when you want your account on file and may want a follow-up.
Open the report formThe browser-encrypted drop
Your files and message are encrypted in your browser. The server stores ciphertext. The founder needs the private key to read a submission. No account is required, and reply details are optional.
Operational security
- • Consider whether your device, network, account, text, or files can identify you.
- • Keep original evidence unchanged. Review identifying metadata before sharing; if you prepare a separate copy, keep the original and record the changes.
- • Include only material you have the right to share. If that is uncertain, seek advice before submitting.
- • If encryption or key verification fails, stop and retry later.
How to submit safely
Choose the encrypted drop, PGP email, or the configured onion service. Each route has different network and account exposure. No route guarantees anonymity.
Start with Tor Browser
Use Tor Browser from torproject.org if you want to reduce direct network exposure. Use the verified onion address when available. A work device or network can expose your activity.
Use the direct drop
The form above encrypts your submission in your browser. Nothing to install or configure.
Or send PGP email
Encrypt to the published key before sending to [email protected]. Email providers can see account and connection information. An address or message can identify you even when its body is encrypted.
What to send
What to send
What evidence helps reviewers understand your report?
- A dated timeline: what happened, where, and who made each decision.
- The job ads, rejection or layoff messages, job duties, and replacement-training instructions you can lawfully share.
- Relevant pay records, assignment notices, or filing references. Explain how each record relates to your account.
- What you observed directly, what another person told you, and what remains uncertain. Keep these separate.
- Keep original files unchanged. If you prepare a copy to protect identifying details, keep the original and record what you changed.
Send records that explain the concern and a timeline that connects them. State what you know and what remains uncertain.
Internal memos
Layoff notices, restructuring plans, job duties, and replacement-training instructions. Explain how dates, roles, and worksites connect.
Billing rate sheets
Staffing contracts, billing records, and pay records can help explain an arrangement. A billing margin alone does not prove a wage violation.
The messages
Job ads, recruiter instructions, and messages that state a hiring preference or exclusion. Keep the dates, sender information, and surrounding context.
Pay records
Pay stubs, hours worked, assignment notices, and the applicable LCA wage record. Explain the employer, job, and pay period. Filing wage offers are not observations of payroll.
Over Tor
Over Tor
Tor reaches this site's hidden service without a direct connection from your device to our host. If human verification is enabled, the check contacts Cloudflare over Tor.
The official onion address: http://qnjd4cufhdp3gbnzatyfdakjf5qjaymtxklvipnrark4uq54a3fg4pqd.onion (open it in Tor Browser.) Compare it character by character before you submit.
The public key
One key serves both channels: drop encryption and encrypted email. It is the [email protected] key, published on this site at /xh1b-pub.asc.
Loading public key…
Fingerprint: 318B E12B 9C8B 67AC 0821 FAF7 2DDE 58F8 A0AB D656 · Verify this fingerprint on our official channels before encrypting.
After you send
What happens after you send
The encrypted drop stores your submission for private founder review. It does not automatically publish your evidence or send it to an employer, attorney, or agency. The founder can compare your account with the available government records. A saved hash detects changes; it does not prove an allegation.
If you leave reply details, the founder can contact you about your submission. A reply, investigation, lawyer referral, or publication is not guaranteed. The privacy policy describes handling and disclosures required by valid legal process.
Official routes
The official routes
Choose the route that fits the conduct. A discrimination charge, a wage complaint, and a visa-fraud tip serve different purposes. An agency determines its jurisdiction and the facts of the case.
DOJ: citizenship-status and visa-related hiring discrimination
Contact the Immigrant and Employee Rights Section about citizenship-status discrimination or an employer preference for temporary visa workers. DOJ has separate routes for a tip about a job ad and an individual discrimination charge.
DOJ reporting routesEEOC: race and national-origin discrimination
Use the EEOC charge process for possible race or national-origin discrimination in hiring, firing, or layoffs. Employer coverage and filing deadlines matter. Federal employees and applicants use a different process.
How to file an EEOC chargeDOL: H-1B wages and unpaid bench time
Contact the Wage and Hour Division about H-1B pay and other program requirements. The WH-4 instructions explain how to report alleged H-1B violations and identify the responsible WHD office.
DOL H-1B complaint informationUSCIS: suspected visa-filing fraud
Use the USCIS tip form for suspected fraud in the visa process. Describe the employer, the filing or job, and the facts behind the concern. Read the form's privacy notice before submitting.
USCIS fraud tip formICE: suspected criminal conduct
The ICE tip form accepts information about suspected criminal activity within its jurisdiction. Check its reporting categories and privacy notice before you submit.
ICE tip formDo not wait for XH1B review to contact an agency. Filing here does not file an official charge. It does not extend a government deadline.
Not ready yet
Not ready to send anything?
Start with the public record. Employer pages show available filing wage offers, linked WARN notices, and official enforcement records where available. Filing requests are not confirmed hires, and linked events do not establish causation. No account is required.
If you are not ready to send, you can join the community or contact the team. You can return to this page when you have something to share.
FAQ
Questions about the data & methods
H-1B whistleblowing and evidence: common questions
How do I report H-1B fraud anonymously?
The XH1B drop encrypts your message and files in your browser. No account is required, and reply details are optional. Text, files, devices, and connection metadata can still identify you. Review the privacy instructions and the configured Tor route before sending. For an official visa-fraud tip, use USCIS and read its privacy notice; an anonymous tip is different from a formal discrimination charge.
How do I report being laid off and replaced by H-1B workers?
Use the employer report form to describe the layoff, the work that continued, and any replacement-training instructions. Include dates, job duties, and records you can lawfully share. XH1B reviews your account against available employer filings and WARN notices. Contact the appropriate agency separately if you want to file an official complaint.
How do I report hiring discrimination involving H-1B workers?
Describe the employer decision and the evidence behind it, such as a job ad, rejection message, or instruction to exclude candidates. DOJ provides reporting routes for citizenship-status and visa-related hiring concerns. EEOC handles covered race and national-origin discrimination complaints. You can also submit the employer evidence privately to XH1B.
Does an employer hiring only one race prove discrimination?
A team composition alone does not establish unlawful discrimination. Relevant evidence can include selection rules, unequal treatment, and statements about race or national origin. Report the employer conduct you observed. Do not infer a person's immigration status from their race, name, or appearance.
What evidence helps assess suspected H-1B wage fraud?
Include the employer, job, worksite, pay periods, hours worked, and relevant pay or assignment records. Explain how those facts compare with the applicable LCA and wage requirements. Preserve original files unchanged. An offered wage below a BLS median or a staffing-company billing margin alone does not prove a violation.[4]
What is unpaid bench time?
Workers sometimes use benching to describe time without a client assignment. Describe who withheld work, whether pay stopped, and the dates involved. DOL has rules for employer-caused nonproductive time and exceptions for some worker-requested absences. Ask the Wage and Hour Division to assess the facts rather than treating every unpaid absence as the same violation.
Can an H-1B worker report their own employer?
Yes. DOL provides H-1B complaint information through its Wage and Hour Division. Workers can also send evidence for private XH1B review. If you are concerned about retaliation or immigration status, contact the relevant agency or a qualified attorney about your situation. Submitting here does not resolve a status question or guarantee protection.[5]
Does encryption guarantee that I cannot be identified?
No. The drop encrypts your files and message before upload, and the server stores ciphertext. Encryption does not remove identifying text or file metadata. The site logs connection metadata for security. Tor can reduce direct network exposure, but your device, accounts, and evidence can still identify you.
What happens to evidence after I submit it?
The encrypted drop stores evidence for private founder review. It does not automatically publish a submission or send it to an employer, agency, or attorney. A hash helps detect changes; it does not establish that a claim is true. The privacy policy describes handling and disclosures required by valid legal process.
Can I be fired or lose immigration status after reporting an employer?
Retaliation and immigration status require separate attention. Reporting channels and legal protections depend on the conduct, the worker, and the applicable law. XH1B cannot guarantee job security, immigration status, or anonymity. Record any threats or adverse decisions and seek advice from the appropriate agency or a qualified attorney.
Can you connect me with a lawyer or guarantee an investigation?
A submission does not create an attorney-client relationship or guarantee a referral, reply, investigation, or publication. Optional reply details let the founder contact you. Use the official agency routes separately if you want a government complaint, and do not wait for XH1B review before checking filing deadlines.
Is there a reward for reporting visa fraud?
XH1B pays no reward for submissions. Government award programs have separate requirements; a tip alone does not establish eligibility. If your evidence may support a whistleblower award or legal claim, ask a qualified attorney about the relevant program and its filing process.
References
- [1] Guidance · U.S. Department of Justice. Filing an IER Charge. Protected conduct, agency jurisdiction, and the 180-day charge deadlineChecked 2026-10-08.
- [2] Guidance · EEOC. Race/Color Discrimination. Work situations, employment practices, employer coverage, and time limitsChecked 2026-10-08.
- [3] Guidance · EEOC. National Origin Discrimination. Work situations, discriminatory job advertisements, and agency reporting routesChecked 2026-10-08.
- [4] Law or rulemaking · eCFR. 20 CFR 655.731. 20 CFR 655.731(a); 20 CFR 655.731(c)(7)The required wage is the higher of the actual wage and prevailing wage. An independent market median is a comparison, not this legal test.; Employer-caused nonproductive time and qualifying voluntary or unrelated absences have different rules.Checked 2026-10-08.