Section 10(b) of the Exchange Act: Elements, Liability, and Penalties

Section 10(b) of the Securities Exchange Act of 1934 is the federal government’s main antifraud rule for the securities markets. It makes it illegal to use any manipulative or deceptive device when buying or selling stocks, bonds, or other securities, and it gives the Securities and Exchange Commission authority to write rules filling in the details. The most important of those rules is Rule 10b-5. Together, the statute and the rule reach everything from outright lies in corporate filings to insider trading to coordinated schemes that distort stock prices, and violations can produce civil penalties in the hundreds of millions of dollars, disgorgement of profits, and up to 20 years in federal prison.

What the Statute Prohibits

The text of Section 10(b) is deliberately broad. It bars “any manipulative or deceptive device or contrivance” that breaks SEC rules, in connection with buying or selling any security.1Office of the Law Revision Counsel. 15 U.S.C. 78j – Manipulative and Deceptive Devices Congress left the specifics to regulators so the law could keep up with new forms of fraud.

Rule 10b-5 does the specific work. It makes three kinds of conduct illegal for any person acting directly or indirectly:2eCFR. 17 CFR 240.10b-5 – Employment of Manipulative and Deceptive Devices

  • Any scheme or device to defraud in connection with a securities transaction.
  • A material misstatement, or an omission that makes other statements misleading.
  • Any act or practice that operates as a fraud on someone buying or selling securities.

The phrase “in connection with the purchase or sale of any security” is read expansively. Courts apply it to any conduct that touches a securities transaction, which blocks defendants from using technical arguments to escape liability.

The statute also reaches price manipulation that doesn’t involve false statements at all. Wash trading, where a person trades with themselves to fake market activity, and matched orders, where coordinating parties stage trades to fabricate demand, both fall within the ban on manipulative devices. These tactics distort the price signals other investors rely on.

Insider Trading and the Misappropriation Theory

Trading on material nonpublic information is the most recognizable use of Section 10(b). The traditional theory holds corporate insiders liable when they trade their own company’s stock based on confidential information. In United States v. O’Hagan, the Supreme Court recognized a second route to liability: the misappropriation theory, which applies to outsiders who take confidential information and trade on it in breach of a duty to the information’s source.3Legal Information Institute. United States v. O’Hagan

A lawyer who learns about a client’s upcoming merger and trades on that knowledge has defrauded the client, even though the lawyer owes no duty to whoever is on the other side of the trade. One wrinkle matters: if the person openly tells the information source they plan to trade, the deception element disappears and the misappropriation theory no longer applies.

What a Private Plaintiff Has to Prove

Winning a Section 10(b) case is harder than it looks. A private plaintiff has to establish several separate elements, and failing on any one of them ends the case.

Materiality. The misstatement or omission has to involve a fact a reasonable investor would consider important when deciding whether to buy, sell, or hold. Courts frame this as whether the information would significantly change the “total mix” of data available to the market. News that would likely move the stock price clears this bar easily; disputes tend to cluster around softer information like projections or vague risk disclosures.

Scienter. The defendant must have acted with intent to deceive or with deliberate recklessness. Honest mistakes don’t qualify. Recklessness here means conduct so far outside ordinary care that the danger of misleading investors was either known or so obvious it couldn’t have been missed. Courts examine internal emails, the timing of insider stock sales, and whether executives ignored warnings from auditors or compliance staff.

Reliance. There has to be a causal link between the deception and the investor’s trade. In a one-on-one case, that might mean proving the plaintiff personally read and relied on a fraudulent press release. In class actions, the Supreme Court’s “fraud-on-the-market” presumption from Basic Inc. v. Levinson does the work. The theory is that in an efficient market, the stock price already reflects all public information, including any lies, so an investor who buys at the market price is indirectly relying on the fraud. Without that presumption, class actions covering thousands of shareholders would be impossible to run.

Economic loss and loss causation. The plaintiff must have actually lost money, and the fraud itself must have caused the loss. In Dura Pharmaceuticals, Inc. v. Broudo, the Supreme Court made clear that a stock drop following a fraud isn’t enough; the plaintiff has to tie the decline to the fraud.4Justia. Dura Pharmaceuticals, Inc. v. Broudo, 544 U.S. 336 (2005) If a company lied about earnings but the stock fell for unrelated industry reasons, there’s no loss causation. Courts typically look for a “corrective disclosure,” where the truth comes out and the price drops in response.

Who Can Be Held Liable

Liability reaches anyone who personally makes a material misstatement or engages in deceptive conduct connected to securities trading. Officers and directors are the usual targets because they sign SEC filings, approve press releases, and control what information reaches investors. Insiders who trade on confidential information face liability, and so do “tippees” who receive and act on tips from them. The misappropriation theory pulls in corporate outsiders like lawyers, consultants, and bankers who exploit information they learn through professional relationships.

Secondary actors who help a fraud without making the false statements themselves are a different matter. In Central Bank of Denver v. First Interstate Bank, the Supreme Court held that private plaintiffs cannot sue for aiding and abetting a Section 10(b) violation.5Legal Information Institute. Central Bank of Denver, N.A. v. First Interstate Bank of Denver, N.A. An accountant who audits fraudulent financials, a lawyer who drafts a misleading offering document, or a bank that structures a deceptive transaction cannot be sued privately on an aiding-and-abetting theory. If any of those people personally “make” a false statement, though, they can be liable as primary violators. The SEC itself has statutory authority to bring aiding-and-abetting claims, which is one reason SEC enforcement reaches parties private plaintiffs can’t touch.

Penalties and Enforcement

Section 10(b) violations run through three enforcement channels, each with different consequences.

SEC Civil Enforcement

The SEC can bring enforcement actions either in its own administrative proceedings or by suing in federal court. Available remedies include injunctions to stop ongoing fraud, civil monetary penalties, and disgorgement of profits.6Office of the Law Revision Counsel. 15 U.S.C. 78u – Investigations and Actions

Civil penalties sit in three tiers, adjusted annually for inflation. As of January 2025, the per-violation maximums are:7U.S. Securities and Exchange Commission. Adjustments to Civil Monetary Penalty Amounts

  • Tier 1, any violation: up to $11,823 for individuals and $118,225 for entities.
  • Tier 2, fraud or reckless disregard: up to $118,225 for individuals and $591,127 for entities.
  • Tier 3, fraud causing substantial losses: up to $236,451 for individuals and $1,182,251 for entities.

Those caps stack across multiple violations and multiple transactions, so total penalties in major cases regularly climb into the tens or hundreds of millions. Disgorgement forces the defendant to surrender profits earned through the violation. In Liu v. SEC, the Supreme Court held that a disgorgement award cannot exceed net profits after legitimate expenses, and that the money should generally go to harmed investors rather than the Treasury.8Justia. Liu v. Securities and Exchange Commission, 591 U.S. ___ (2020)

Criminal Prosecution

The Department of Justice handles criminal cases, generally reserved for the most intentional and damaging fraud. A willful violation of the Securities Exchange Act carries up to 20 years in prison, fines of up to $5 million for individuals, and fines of up to $25 million for entities.9Office of the Law Revision Counsel. 15 U.S.C. 78ff – Penalties Criminal cases require proof beyond a reasonable doubt rather than the civil preponderance standard, which is why parallel SEC civil and DOJ criminal actions against the same defendant sometimes end differently.

Private Investor Lawsuits

Investors have an implied private right of action under Section 10(b), letting them sue for damages in federal court. These cases often proceed as class actions covering everyone who traded during the period the fraud distorted the stock price. Settlements in major securities class actions regularly reach the hundreds of millions, and sometimes exceed a billion dollars.

Private plaintiffs face steeper procedural hurdles than the SEC. The Private Securities Litigation Reform Act of 1995 requires complaints to identify each misleading statement, explain exactly why it was misleading, and lay out facts creating a “strong inference” of scienter.10Office of the Law Revision Counsel. 15 U.S.C. 78u-4 – Private Securities Litigation Judges rule on these pleadings before any discovery, meaning plaintiffs need strong circumstantial evidence from the start. Most private securities fraud cases die at this stage.

The PSLRA also created a safe harbor for forward-looking statements like revenue forecasts and growth projections. A projection is shielded from private suits if it carries meaningful cautionary language identifying specific risks, or if the plaintiff can’t prove the speaker actually knew the statement was false.11Office of the Law Revision Counsel. 15 U.S.C. 78u-5 – Application of Safe Harbor for Forward-Looking Statements Boilerplate disclaimers don’t qualify; the warnings have to address the particular risks that make the projection uncertain.

Deadlines for Bringing a Claim

The time limits for Section 10(b) actions are strict. Private plaintiffs must file within two years of discovering, or reasonably being expected to discover, the facts behind the violation, and no later than five years after the violation itself.12Office of the Law Revision Counsel. 28 U.S.C. 1658 – Time Limitations on the Commencement of Civil Actions Arising Under Acts of Congress Both deadlines must be met. The five-year outer limit is absolute: even a well-concealed fraud that genuinely couldn’t be discovered for six years is time-barred.

The SEC must bring penalty actions within five years of when the violation occurred. In Gabelli v. SEC, the Supreme Court held that this clock starts at the time of the fraud, not when the SEC discovers it.13Justia. Gabelli v. Securities and Exchange Commission, 568 U.S. 442 (2013)14Office of the Law Revision Counsel. 28 U.S.C. 2462 – Time for Commencing Proceedings Long-running frauds that evade detection may fall partly outside the SEC’s penalty reach, though the agency can still pursue injunctions and disgorgement for conduct outside that window in some circumstances.

Reporting a Violation

If you know about a securities fraud, the SEC whistleblower program pays original informants whose tips lead to an enforcement action with more than $1 million in sanctions. Awards run from 10% to 30% of the money collected.15U.S. Securities and Exchange Commission. Whistleblower Program Through fiscal year 2023, the SEC had paid nearly $2 billion to almost 400 whistleblowers.

The Dodd-Frank Act also prohibits retaliation against employees who report possible securities violations to the SEC. A whistleblower who is fired, demoted, or harassed can sue in federal court and recover double back pay with interest, reinstatement, and attorneys’ fees.16U.S. Securities and Exchange Commission. Whistleblower Protections After the Supreme Court’s decision in Digital Realty Trust, Inc. v. Somers, this protection requires that the employee reported to the SEC in writing before the retaliation occurred. Internal reporting alone, without SEC contact, doesn’t trigger the anti-retaliation shield.

Separately, SEC rules prohibit anyone from impeding communication with SEC staff about potential violations. Companies that put language in severance agreements, NDAs, or internal policies discouraging employees from going to the SEC can face enforcement actions for that restriction alone.