Coming soonCannabis EducationCannabis Education at the Institute: a professional course and a free public program.Register your interest

Not-for-profit research & education institute · Cassowary Coast, Far North Queensland


Australian Institute of Pharmacognosy

Natural Medicine Confidential Reporting

Dried ashwagandha (Withania somnifera) roots

If you work in the herbal or natural medicine trade and you’ve seen something wrong, you can tell us here. You don’t need to give your name, and you don’t need proof.

What we want to hear about

Botanical products where what’s in the bottle doesn’t match the label. For example:

  • Ashwagandha (Withania somnifera) leaf sold as root. The label says root, the powder is mostly leaf, and leaf has a different chemistry and safety record.
  • One species swapped for a cheaper or look-alike plant somewhere between harvest and packing.
  • Pharmaceutical drugs added to a “herbal” product and left off the label.
  • Contamination with heavy metals, pesticides or microbes.
  • Test results that came back bad and were filed away while the batch shipped anyway.
  • Products sold with claims or ingredients that sidestep the rules the TGA sets.
Withania somnifera leaves and fruit

If it involves a botanical product and it worries you, send it. You don’t have to be sure.

How we protect you

  • Encrypted on your own device. When you press send, your browser locks the report with the Institute’s public key before anything leaves your phone or computer. Only the Institute’s private key can open it. Our web server holds a block of scrambled text it has no way to read.
  • No name needed. Every field about you is optional.
  • No IP address, device details or time kept with your report. The stored record is the encrypted text and nothing else.
  • Deleted from our server within minutes. The encrypted report is passed to a private encrypted mailbox and then wiped from the website.
  • Kept quiet. We won’t share who you are with your employer, with the company you report or with the public. The only exception is if the law forces us to, and if that happens we’ll tell you where we lawfully can.

No online system can promise that nobody could ever work out who sent something. Your internet provider and the networks between you and us can see that you visited this site, though they can’t read the report. The steps below lower the risk a great deal.

Staying anonymous

  • Use your own phone or computer. Avoid a work laptop or work phone, and stay off your employer’s Wi-Fi.
  • For the most privacy, use Tor Browser, downloaded only from torproject.org. On iPhone, the Tor Project recommends Onion Browser. Set the security level to Standard or Safer so the encryption can run.
  • Don’t sign in to email, social media or any other account during the same session.
  • Leave out details only you would know, such as your shift, your desk or a conversation you were alone in.
  • Send only what you need to show the problem.
  • If you’ve signed a confidentiality agreement or NDA, tell us what happened in your own words and don’t send us company documents. A report to ASIC, or advice from a lawyer first, can give you legal protection that a report to us can’t. ASIC explains how on its whistleblowing page.
  • After you send, you’ll get a case code. Write it down somewhere private. It’s how you can follow up without telling us who you are.

What happens after you report

We read it. If it involves a botanical product, our team looks at what’s been described, and where it helps we may test a product in our own lab.

If you tick the consent box, we may lodge the information with the TGA on your behalf as a report received from a member of the public, with your name and anything that could identify you removed. We can’t promise a particular outcome, and we don’t make findings about whether a company has broken the law. That’s for the regulator.

Dried herbal materials stored in sacks

Make a confidential report

Up to 5 files, 8 MB in total. They're encrypted with your report before they leave your device. Photos are re-saved on your device first, which removes hidden data such as GPS location and camera details. Documents such as PDFs go as they are, so check them for your name (including the file's author details) before you attach them. Send only what you need to show the problem.

    Your report is encrypted on this device before it is sent. Only the Institute holds the key that opens it.

    How we handle personal information is set out in our Privacy Policy. Photographs: Withania somnifera by Agnieszka Kwiecień (Nova), CC BY-SA 4.0; dried herbal materials in sacks by Zmu’az4Z, CC BY 4.0; both via Wikimedia Commons.

    Share this pageFacebookXLinkedInWhatsApp