Investigative journalism relies on the courage of individuals who come forward with information that the public needs to know. Whether you have firsthand experience with a corporate scandal, evidence of government misconduct, or documents that reveal hidden truths, your tip can be the starting point for a story that drives change. We take every tip seriously, but we also understand that sharing sensitive information requires trust and secure channels. This article walks you through the various methods to contact us safely, with detailed guidance on protecting your identity and avoiding reprisals.

Why Secure Channels Matter

In an age of pervasive surveillance and data collection, the act of submitting a tip can expose you to risks from employers, governments, or other hostile actors. A simple email sent from a work account or over an unsecured network can be intercepted. Financial records, location data, and metadata can link you to a leak. That is why we have established multiple secure communication options. Our goal is to minimize the risk of detection while maximizing the utility of the information you share. Evidence—such as documents, screenshots, and internal communications—carries more weight than hearsay. If you have something concrete, let us help you protect it.

Email: The Easiest First Step

For many, email remains the most convenient way to reach us. You can send tips to our general editorial email address: tips@publication.com. However, if you are at risk of reprisals, do not use your work email, work-issued device, or employer’s Wi-Fi network. Even a personal email account can be vulnerable if it is linked to your real identity. We strongly recommend creating a new, anonymous email account—using a service like ProtonMail or Tutanota—specifically for this purpose. Use a pseudonym and avoid any identifying information in the account creation process. Send your tip from that anonymous address, and we will respond within the same encrypted environment whenever possible.

It is also worth noting that standard email is not end-to-end encrypted by default. The contents of your message may be readable by the email provider or anyone who intercepts the transmission. For this reason, we encourage you to use email only for initial contact or low-sensitivity tips. If your information is particularly sensitive, consider using an encrypted email service that supports PGP. You can find the public PGP keys for specific editors on their individual staff pages. For general tips, we have made the process as straightforward as possible, but your security awareness is the most critical factor.

Signal: Encrypted Communication Made Simple

For higher sensitivity, we recommend using Signal. Signal is a free, open-source app that provides end-to-end encryption for text messages, voice calls, and file transfers. Unlike standard SMS or many messaging apps, Signal does not have access to your message contents. The service stores only your phone number and the last time you accessed the app; it does not know who you communicate with. This makes Signal one of the most secure options available for tip submissions. To use it, download the Signal app on your smartphone. Do not use your work phone—use a personal device or a burner phone if you are particularly cautious.

Once installed, you can reach individual journalists by finding their Signal numbers on their author pages, which are linked from our staff list. Alternatively, you can send a message to our general editorial Signal account. Depending on your version of Signal, you may need to add a contact’s number before starting a conversation. After the conversation is initiated, you can safely delete that contact from your phone’s address book. The conversation will still appear in Signal. We also recommend enabling disappearing messages on your conversations to further reduce the digital footprint.

Signal is regularly audited for security, and its protocol is widely trusted by security researchers, journalists, and activists. However, it is not immune to all risks. The phone number you use to register can be traced back to you if you are not careful. Consider using a secondary phone number (e.g., from a prepaid SIM or a virtual number) to register a separate Signal account. The Freedom of the Press Foundation provides detailed guidelines for locking down your Signal settings, including disabling notifications previews, enabling screen security, and using a strong passphrase for your device.

Best Practices from the Freedom of the Press Foundation

The Freedom of the Press Foundation is a nonprofit organization that advocates for press freedom and provides security resources for journalists and sources. Their guidelines have shaped our own approach to tip security. They recommend the following steps when contacting journalists:

• Use end-to-end encrypted channels whenever possible.
• Avoid using any device or network that can be tied to your employer.
• Create a separate, anonymous email account or phone number for tip-related communication.
• Be mindful of metadata: turn off location services, avoid sending files that contain hidden metadata (e.g., from a digital camera), and strip metadata using tools like MAT.
• Do not discuss your tip with anyone else, as loose talk can alert those who might want to suppress the information.
• Consider using Tor Browser or a VPN to hide your IP address when visiting our website or sending initial communications.

These practices may seem extreme, but they are essential in a world where surveillance is omnipresent. Even if you are not a high-profile whistleblower, protecting your identity ensures we can report the story without compromising your safety.

Additional Security Considerations

Beyond the methods described above, we encourage you to think about the broader picture. If you are planning to share a large volume of documents, consider using tools like SecureDrop or OnionShare—though we currently do not maintain a SecureDrop instance, we are exploring options. For now, Signal is the most secure way to send files directly to a specific journalist. If you must use email, compress your files into an encrypted archive (using VeraCrypt or 7-Zip with a strong password) and share the password through a separate channel, such as a voice call using Signal.

Physical documents remain a viable option. If you have printed materials, you can mail them to our physical address (available upon request). Use an untraceable return address and consider sending your package from a postal box not near your home or work. For highly sensitive materials, you might arrange a meeting with a journalist—but be aware of the risks of being seen together. In all cases, trust your instincts and prioritize your safety above all else.

Why This Page Is Different

In accordance with best practices set by the Freedom of the Press Foundation, this page is served over HTTPS without third-party analytics or ad trackers. That means when you visit this page, no external company logs your visit, and we do not collect any identifying information from you. We have deliberately removed trackers to minimize the risk of a third party inferring that you are accessing tip submission guidelines. Your privacy starts from the moment you land on this article. However, even without trackers, your internet service provider (ISP) can still see that you visited our publication’s website. For extra privacy, we recommend using Tor Browser or a VPN when reading this page or any other pages related to tips.

Speaking to Specific Journalists

You are not limited to contacting our general account. Many of our editors cover specific beats—technology policy, cybersecurity, artificial intelligence, climate, and more. If you have information that falls within a particular area, you can find the email address and Signal number for the relevant journalist on their staff profile. Reaching out directly may speed up the response time, as the journalist can immediately assess the relevance and urgency of your tip. However, if you are unsure which journalist to contact, sending your tip to the general address is perfectly fine; we will route it appropriately.

When contacting a specific journalist, follow the same security precautions: use an anonymous email or Signal, avoid work devices, and do not include any identifying details unless you are prepared to reveal yourself. You can also ask the journalist to use PGP encryption for email communication. Most security-focused reporters will have their public keys published on their profiles or on key servers.

What Happens After You Send a Tip

Once we receive your tip, we will read it within a business day. Due to the volume of submissions, we cannot guarantee a personal response to every tip, but we do review every message. If your tip is promising, we may reach out to you for additional information or verification. We treat all source identities with the utmost confidentiality. Our reporters adhere to strict ethical guidelines: we do not reveal sources without their explicit consent, and we only publish information after thorough fact-checking and verification. If you prefer to remain completely anonymous, you can tell us at the outset, and we will respect your wishes unless legally compelled to identify you (in which case we will inform you if possible).

Remember that evidence is key. A vague suspicion without supporting documentation is hard to act upon. If you have a document, a recording, or a first-person account, we can build a story around it. The more concrete the evidence, the stronger the resulting article. We also appreciate context—why this matters, who is affected, and what the consequences are. If you are unsure whether your information is relevant, send it anyway; our editorial team can assess its value.

Final Practical Tips

Before you send anything, take a moment to check your digital hygiene. Ensure your device is up to date with security patches. Log out of any accounts that might link to your real identity. If you are using a computer, consider using a live USB operating system like Tails, which leaves no trace on the machine. For mobile users, review the permissions of the messaging apps you use—disable contacts sync if possible. And never communicate your tip details over unencrypted channels like regular SMS or social media direct messages.

We value your bravery in coming forward. Without tips, many stories about injustice, wrongdoing, and hidden power structures would never see the light of day. By using the secure methods outlined above, you are not only protecting yourself but also enabling us to do our job—holding the powerful accountable and informing the public. Thank you for considering sharing what you know.

Source: The Verge News