Secure disclosure for verifiable research-integrity concerns

This channel is for serious, specific information about research fraud, paper mills, citation manipulation, compromised peer review, fabricated data, or other conduct capable of corrupting the scientific record.

The principle is simple: the website may receive your disclosure, but it should not be able to read it.

Your submission is encrypted in your browser before transmission. The website receives ciphertext only. The private key is kept outside the website and is used only in a separate offline decryption environment. A small proof-of-work check helps keep the channel open to genuine sources by making automated abuse costly.

Use the form below to tell us what happened, who or what should be examined, and which two parties would most immediately benefit from the investigation.

Write what can be checked. Name the target individual, organization, or journal. Identify the pattern. Provide dates and identifiers. Separate fact from inference. Avoid rhetoric. Precision protects the source and strengthens the case.

No. This protocol obscures all identifying information. The encryption and proof-of-work runs in your browser and all traces of your submission are permanently deleted once submission is completed. This is an air-gapped zero-knowledge protocol.

Submit concrete, evidence-bearing concerns: manipulated data, false authorship, paper-mill work, citation cartels, compromised review, p-hacking, image reuse, editorial misconduct, or fabricated claims.

Give identifiers where possible: DOI, ORCID, ROR, grant number, journal, dataset, manuscript ID, institution, author group, or public record.

Your browser encrypts the disclosure locally using a modern public-key encryption design with a one-time session key. The website receives an encrypted package. It does not receive readable disclosure text.

No. The private key is not on the website, not in the form, and not available to the server. The website can validate and forward ciphertext. It cannot decipher your narrative, beneficiaries, evidence references, or contact details.

Proof-of-work is a smart anti-abuse control. Your browser performs a small calculation before submission. This helps block mass spam and replay attempts without requiring an account, login, or identity check.

Readable decryption is separated from online collection. Ciphertext is transferred out of the website environment and deciphered only with the private key in an offline operator environment. This online protocol handles ciphertext only.

Do not submit unlawful, classified, privileged, or unnecessarily sensitive personal material. Do not use a work device or a monitored account if your safety depends on discretion. Public identifiers and precise explanations are usually stronger than bulk documents.

The encrypted package is forwarded for offline review. Once deciphered, the disclosure is assessed for specificity, evidential value, legal sensitivity, and investigative relevance. A clear, testable submission is the fastest route to meaningful action.

Zero-knowledge encrypted channel

Whistleblower Protocol

Use this channel to anonymously submit information about suspected research misconduct, paper mills, citation manipulation, peer-review compromise, data fabrication, or related scientific-integrity risks. The disclosure is encrypted in your browser before transmission. Decryption is air-gapped from this channel and is done offline.

Security boundary: The disclosure is encrypted in your browser. SCIENTOMICS receives ciphertext only and does not contain a decryption function.

Use a persistent identifier where possible: ORCID, ROR ID, DOI, funder grant number, journal name, institution, company, or other precise reference.

Identify a person, institution, funder, publisher, regulator, board, patient group, investor, or other party likely to benefit from the investigation.

Add a second party who has a direct operational, legal, financial, scientific, or public-interest stake in the outcome.

List public links, DOIs, PubMed IDs, grant IDs, article titles, repository URLs, archive links, or document references. Do not upload files in v1.0.0.

Optional. Use a secure contact method you control. Do not provide identifying details if anonymity is required.

Describe what happened, who is involved, what evidence exists, why the matter is urgent, and which records or identifiers can verify the claim.