Securities enforcement is the set of civil, administrative, and criminal tools federal and state regulators use to investigate and punish violations of the laws governing stocks, bonds, and other investments. In fiscal year 2025, the Securities and Exchange Commission filed 456 enforcement actions and obtained orders for roughly $2.7 billion in combined disgorgement and civil penalties, excluding outlier judgments from long-running cases like the Stanford Ponzi scheme. The work spans tips, subpoenas, settlements, jury trials, and prison sentences, and it involves several agencies with overlapping jurisdiction.
Who Brings the Cases
The SEC is the primary federal regulator. Section 21 of the Securities Exchange Act of 1934 gives it broad authority to investigate potential violations and bring civil actions in federal district court.1Office of the Law Revision Counsel. 15 U.S. Code 78u – Investigations and Actions The SEC can seek injunctions, monetary penalties, and bars from the industry, and it recovers money for harmed investors.2U.S. Securities and Exchange Commission. Enforcement and Litigation It cannot send anyone to prison.
Prison is the Department of Justice’s territory. When a securities violation is willful, the DOJ’s Fraud Section can file federal criminal charges, often running a parallel investigation alongside the SEC’s civil case.3Department of Justice. Corporate Crime
The Financial Industry Regulatory Authority is a self-regulatory body for broker-dealers. FINRA writes its own rules, examines member firms, and can fine or expel firms and individuals who break industry standards.4FINRA. About FINRA Every state also has its own “blue sky” securities laws aimed at frauds sold to its residents.5Investor.gov. Blue Sky Laws The Commodity Futures Trading Commission handles instruments on the commodity side of the line.
What Triggers an Enforcement Action
Insider trading sits at the top of the list. It covers trading on material, nonpublic information obtained through a relationship of trust: an officer dumping shares before an earnings miss, or a consultant tipping a friend about a pending merger. The theory is a breach of fiduciary duty by exploiting information ordinary investors do not have.
Market manipulation is another core target. The classic pump-and-dump involves quietly accumulating a thinly traded stock, hyping it with false claims to drive the price up, then selling into the inflated market. These schemes increasingly play out through social media, encrypted messaging groups, and digital asset markets.
Financial reporting fraud reaches executives who falsify a company’s books, hide liabilities, or omit material risks from required filings. The Securities Act of 1933 requires companies to register securities and deliver an accurate prospectus before selling shares to the public.6U.S. Government Publishing Office. Securities Act of 1933 Public companies must also file annual 10-Ks and quarterly 10-Qs, with the CEO and CFO personally certifying the financials.7U.S. Securities and Exchange Commission. Exchange Act Reporting and Registration
Selling securities without registration or a valid exemption is a steady source of cases. So are violations of Regulation Best Interest, which requires broker-dealers to act in a retail customer’s best interest and to mitigate or eliminate certain conflicts rather than merely disclose them.8U.S. Securities and Exchange Commission. Regulation Best Interest: The Broker-Dealer Standard of Conduct The SEC has brought multiple Reg BI actions since 2024 against firms recommending unsuitable products or lacking adequate compliance policies.
How an Investigation Unfolds
Most investigations start quietly. Staff review tips, trading data, and referrals, and if the evidence looks serious the Commission issues a formal order of investigation. That order authorizes staff to subpoena documents and sworn testimony.9Securities and Exchange Commission. Division of Enforcement Enforcement Manual Subpoenas pull in emails, bank records, and internal accounting. Investigators also run pattern analysis across huge trading datasets to spot suspiciously timed trades before public announcements.
Banks and brokerages feed the pipeline through suspicious activity reports, filings they are required to make when transactions look like money laundering or fraud.10Financial Crimes Enforcement Network. Guidance on Preparing A Complete and Sufficient Suspicious Activity Report Narrative Routine examinations of registered firms add another stream, checking books, capital compliance, and client account activity for red flags.
Cooperation can change the outcome. The SEC’s framework weighs self-policing, self-reporting, remediation, and cooperation with investigators.11U.S. Securities and Exchange Commission. Benefits of Cooperation With the Division of Enforcement Benefits range from reduced charges and smaller penalties to deferred prosecution agreements, non-prosecution agreements, or no action at all.
The Wells Notice
Before filing charges, staff usually send the target a Wells notice. It identifies the specific violations staff intend to recommend. It is not a finding, but it signals that charges are close.
Under reforms adopted in 2025, recipients have at least four weeks to prepare a written Wells submission arguing why the Commission should not authorize the action. They can request access to nonprivileged portions of the investigative file and ask for a meeting with staff. Every Wells submission goes to the Commissioners before they vote. Skipping it is generally a mistake. It is the last real chance to shape the outcome before the matter becomes public.
Penalties and Remedies
Civil Monetary Penalties
Federal securities law uses a three-tier penalty structure that is adjusted annually for inflation. The amounts in effect after the January 2025 adjustment:12U.S. Securities and Exchange Commission. Civil Penalties Inflation Adjustments
- Tier 1, for technical violations: up to $11,823 per violation for an individual, or $118,225 for a company.
- Tier 2, involving fraud or reckless disregard: up to $118,225 per violation for an individual, or $591,127 for a company.
- Tier 3, fraud causing substantial losses: up to $236,451 per violation for an individual, or $1,182,251 for a company.
These are per-violation caps. In schemes involving thousands of transactions the totals compound quickly. The statutory base amounts sit in 15 U.S.C. § 78u-2, but the inflation-adjusted figures are what regulators actually seek.13Office of the Law Revision Counsel. 15 U.S. Code 78u-2 – Civil Remedies in Administrative Proceedings
Disgorgement
Disgorgement strips violators of their ill-gotten gains. In Liu v. SEC (2020), the Supreme Court held that a disgorgement award cannot exceed the wrongdoer’s net profits after deducting legitimate expenses, and that the money generally must be returned to harmed investors rather than deposited in the Treasury.14Supreme Court of the United States. Liu v. SEC Congress then codified the SEC’s disgorgement authority in the 2021 National Defense Authorization Act at 15 U.S.C. § 78u(d)(7), and extended the limitations period to 10 years for intentional fraud.1Office of the Law Revision Counsel. 15 U.S. Code 78u – Investigations and Actions
Fair Funds for Investors
Section 308 of the Sarbanes-Oxley Act lets the SEC combine civil penalties with disgorgement and distribute the pool to harmed investors.15U.S. Securities and Exchange Commission. Report Pursuant to Section 308(c) of the Sarbanes-Oxley Act of 2002 Without it, civil penalties would go to the Treasury while only disgorgement reached victims. The SEC returned billions to investors through these distribution plans in fiscal year 2025.16U.S. Securities and Exchange Commission. SEC Announces Enforcement Results for Fiscal Year 2025
Industry Bars
Professional sanctions can end a career. The SEC can bar individuals from associating with broker-dealers, investment advisers, or credit rating agencies, either for a set period or permanently. Sarbanes-Oxley separately authorizes officer and director bars against people found unfit to lead public companies.17U.S. Department of Labor. Sarbanes-Oxley Act of 2002 No criminal conviction is required; the SEC imposes bars in its civil and administrative cases based on the severity of the conduct.
Prison
Criminal securities fraud under 18 U.S.C. § 1348 carries up to 25 years in federal prison plus fines.18Office of the Law Revision Counsel. 18 U.S. Code 1348 – Securities and Commodities Fraud Samuel Bankman-Fried received the full 25-year sentence in 2024 for the fraud at FTX, along with an $11 billion forfeiture order.19United States Department of Justice. Samuel Bankman-Fried Sentenced to 25 Years for His Orchestration of Multiple Fraudulent Schemes Prosecutors routinely stack wire fraud (up to 20 years) and money laundering (up to 20 years) alongside securities fraud charges.
How Long Regulators Have to File
The default limitations period is five years. Under 28 U.S.C. § 2462, any action to enforce a civil fine, penalty, or forfeiture must be filed within five years of accrual.20Office of the Law Revision Counsel. 28 U.S. Code 2462 – Time for Commencing Proceedings In Kokesh v. SEC (2017), the Supreme Court confirmed that disgorgement counts as a penalty subject to the same five-year clock.
For intentional fraud, Congress extended the window. Under 15 U.S.C. § 78u(d)(8), the SEC has 10 years to seek disgorgement when the conduct violates provisions like Section 10(b) of the Exchange Act or Section 17(a)(1) of the Securities Act. The 10-year window also covers equitable remedies such as injunctions and industry bars. Time the defendant spends outside the United States does not count toward either period.
Where Cases Are Heard After Jarkesy
For decades the SEC could choose between federal district court and its own administrative law judges. Administrative proceedings moved faster, offered limited discovery, and had no jury, and the SEC won at a higher rate there.
In June 2024, the Supreme Court ruled in SEC v. Jarkesy that defendants facing SEC fraud claims have a Seventh Amendment right to a jury trial in an Article III court.21Supreme Court of the United States. SEC v. Jarkesy Civil penalty actions for fraud, the Court held, are essentially common-law fraud suits and belong before a neutral judge and jury. The SEC can still use administrative proceedings for non-penalty remedies like cease-and-desist orders and industry bars, but contested fraud cases seeking money now go to federal court.
Reporting a Violation and Getting Paid for It
The Dodd-Frank Act created a whistleblower program that pays substantial rewards. To qualify, you must submit original information that leads to a successful SEC action producing more than $1 million in monetary sanctions. Awards run from 10% to 30% of the money collected.22U.S. Securities and Exchange Commission. Whistleblower Program By the end of fiscal year 2023, the SEC had paid nearly $2 billion to close to 400 whistleblowers. Tips can be filed through the SEC’s Tips, Complaints and Referrals Portal or by mailing a Form TCR. Anonymous submissions are allowed, but you must be represented by an attorney to stay eligible for an award.23U.S. Securities and Exchange Commission. Information About Submitting a Whistleblower Tip
Federal law also prohibits employers from firing, demoting, suspending, harassing, or otherwise retaliating against employees who report possible securities violations to the SEC. To trigger these protections, you must report the information to the Commission in writing before the retaliation occurs. A successful retaliation suit can recover double back pay with interest, reinstatement, and reasonable attorneys’ fees. The limitations period is six years from the violation, or three years from when you knew or should have known about it, with a hard outer limit of 10 years.24Office of the Law Revision Counsel. 15 U.S. Code 78u-6 – Securities Whistleblower Incentives and Protection
SEC Rule 21F-17(a) separately prohibits anyone from impeding communication with the SEC about possible violations. The rule reaches past the employment relationship and has been applied to restrictive language in severance agreements, non-disclosure agreements, and compliance manuals.25U.S. Securities and Exchange Commission. Whistleblower Protections Even a clause requiring employees to notify the company before responding to a government inquiry can violate it.