Securities Investigation: Stages, Rights, and Penalties

A securities investigation is a formal review by a government regulator or self-regulatory body to determine whether someone violated the laws governing financial markets. If you are the subject of one, you face a staged process that can move from a quiet review of trading data to subpoenas, sworn testimony, a formal charging recommendation, and ultimately civil penalties, industry bars, or in serious cases parallel criminal prosecution carrying up to 25 years in prison under 18 U.S.C. § 1348.¹ What follows is what to expect at each stage, the rights you can invoke, and where the real risk sits.

Who Is Investigating You

Three kinds of regulators run securities investigations, and which one is looking at you shapes almost everything else. The Securities and Exchange Commission is the primary federal regulator, created by the Securities Exchange Act of 1934 with jurisdiction over virtually every corner of the securities industry, including mutual funds under the Investment Company Act of 1940 and investment advisers under the separate Investment Advisers Act of 1940.²

The Financial Industry Regulatory Authority is a self-regulatory organization that oversees its member broker-dealer firms and their registered representatives under federal law.³ FINRA writes rules for how brokers deal with the public and can bring its own disciplinary actions independent of the SEC.

State regulators enforce Blue Sky Laws, which require registration of securities offerings and licensing of brokerage firms, brokers, and investment adviser representatives within the state.⁴ State action typically reaches localized misconduct and smaller offerings.

The Department of Justice is not a securities regulator, but it prosecutes criminal securities fraud and often runs its investigation in parallel with the SEC’s civil one.

How Investigations Get Started

Market surveillance systems continuously scan trading data for anomalies: volume spikes, unusual price movements ahead of public announcements, patterns that don’t line up with public information. The SEC and DOJ increasingly rely on data analytics to flag these statistical anomalies proactively, and they are a common starting point for insider trading and market manipulation cases.

Whistleblowers are the other major pipeline. The Dodd-Frank Act’s SEC whistleblower program pays eligible tipsters between 10 and 30 percent of the monetary sanctions collected in enforcement actions that produce more than $1 million in penalties.⁵ Through the end of fiscal year 2023, the SEC had paid nearly $2 billion to almost 400 whistleblowers, and the program protects tipsters against employer retaliation.⁶ Tips tend to arrive with specific dates, names, and details about internal procedures that were bypassed.

Referrals from other agencies, self-regulatory organizations, and foreign regulators also open investigations, as do voluntary self-reports from companies that discover violations during internal audits.

The Stages of a Securities Investigation

The SEC generally begins with a Matter Under Inquiry, an informal stage where staff review public filings, trading data, and tips to decide whether to go further. At this point they can only request voluntary cooperation.

If the matter warrants deeper scrutiny, staff prepare a memo requesting a Formal Order of Investigation, which the Commission itself must approve.⁷ The Formal Order is a threshold event. Once issued, designated staff can issue subpoenas, compel witness attendance, administer oaths, take testimony, and require the production of documents. Ignoring a subpoena at that point can lead to a federal court order compelling production and contempt sanctions.

The investigation phase can run anywhere from several months to several years. Investigators analyze documents, take sworn testimony, and coordinate with other agencies. There is no fixed timeline, and the subjects of an investigation are not always told what stage the matter is in.

The Wells Notice

If staff conclude they have enough to recommend an enforcement action, they may issue a Wells Notice describing the allegations and informing the recipient that a charging recommendation is coming.⁸ The recipient can then file a Wells Submission arguing why charges should not be filed or should be narrowed. This is often the last real chance to influence the outcome before formal proceedings begin. Some recipients decline to submit one, particularly when doing so would reveal a defense strategy better held back. Not every Wells Notice ends in charges, but most do.

Responding to a Subpoena or Document Request

Subpoenas and document requests tend to be broad. Relevant materials include internal emails, text messages, recorded phone lines, trade confirmations, financial statements, bank records, and communications with third-party brokers or clients. The point is to reconstruct a complete timeline of the conduct.

The SEC sends document preservation letters early. The obligation extends to all forms of documents and communications, including personal devices and messaging apps.⁷ Destroying or failing to preserve materials after receiving one of these letters can produce independent sanctions even if the underlying investigation would not have led to charges.

Any document withheld on privilege grounds must appear on a privilege log identifying the document’s nature, author, recipients, date, and specific basis for the claim.⁷ Incomplete logs create friction with staff and can lead courts to order production of the disputed documents.

Sworn Testimony

The SEC can require witnesses to appear for on-the-record testimony under oath. A witness may bring an attorney, who may advise before, during, and after the testimony, ask brief clarifying questions at the end, and take summary notes.⁷ Witnesses are sequestered, so your attorney generally cannot be present during another witness’s examination. False statements carry their own legal consequences.

Your Rights

You have the right to counsel at every stage. Anyone appearing for testimony, whether compelled or voluntary, may be accompanied by an attorney admitted to practice before the Supreme Court or the highest court of any state.⁷ Retaining experienced securities defense counsel early is one of the most consequential decisions in the process, because early missteps in document production or testimony shape the trajectory of the case.

You have the Fifth Amendment privilege against self-incrimination, with a significant caveat. Unlike in a criminal trial, invoking the Fifth in a civil enforcement action allows the tribunal to draw an adverse inference against you. The Supreme Court held in Baxter v. Palmigiano that the Fifth Amendment does not prohibit adverse inferences against parties who refuse to testify in civil cases once probative evidence has been offered against them. Companies and other entities have no Fifth Amendment right at all, so their representatives can be compelled to testify or produce documents without invoking the privilege on the entity’s behalf.

You have a statute of limitations defense. Under 28 U.S.C. § 2462, any action for a civil fine, penalty, or forfeiture must be commenced within five years of when the claim first accrued.⁹ The Supreme Court confirmed in Kokesh v. SEC that disgorgement counts as a penalty subject to the same five-year window.¹⁰ This is one of the stronger protections available when the alleged conduct is older.

Cooperation and Self-Reporting

The SEC has published a framework for evaluating whether cooperation warrants reduced sanctions. For companies, staff look at the compliance procedures in place before the misconduct, whether the company self-reported promptly and completely, remedial steps like discipline and control fixes, and the completeness of cooperation with the investigation itself.¹¹ For individuals, staff consider the value of the cooperation, the seriousness of the misconduct, the cooperator’s relative culpability, and whether the person has accepted responsibility.

Meaningful cooperation credit can produce reduced penalties, narrower charges, or in rare cases a decision not to bring an action at all. The catch: cooperation must be genuine and timely. Offering it after staff have already built their case carries far less weight.

How the Case Ends

Most SEC enforcement actions settle. Under a policy that stood for more than 50 years, settling parties had to agree not to publicly deny the SEC’s allegations. On May 18, 2026, the SEC rescinded that requirement. Chairman Paul S. Atkins stated that the rescission “ends the policy prohibiting such criticism by settling defendants,” and the Commission announced it will not enforce existing no-deny provisions.¹² A settling party can now resolve the matter financially while publicly explaining its side.

Cases that don’t settle go to one of two forums. Federal district court operates like any civil lawsuit, with a jury, an Article III judge, and the Federal Rules of Evidence. An administrative proceeding before the SEC’s own tribunal uses an administrative law judge, no jury, and more lenient evidentiary rules.¹³ The Supreme Court’s 2024 decision in SEC v. Jarkesy held that the Seventh Amendment requires a jury trial when the SEC seeks civil penalties, pushing more actions into federal court.

Parallel Criminal Prosecution

Securities violations are not exclusively civil. The DOJ can pursue criminal charges under 18 U.S.C. § 1348, which carries a maximum 25-year sentence for securities fraud.¹ The DOJ and SEC frequently run parallel investigations into the same conduct. Statements made during SEC testimony can become evidence in a criminal case. Documents produced to the SEC may be shared with prosecutors. The five-year civil limitations period does not necessarily run on the same clock as the criminal one. A strategy that makes sense for the civil case can be disastrous for the criminal exposure, which is why counsel handling both tracks together matters.

The Penalties You Actually Face

Civil penalties under 15 U.S.C. § 78u-2 follow a three-tier structure that escalates with the severity of the conduct:

First tier, for technical violations: up to $5,000 per violation for individuals and $50,000 for entities.
Second tier, for fraud or reckless disregard: up to $50,000 per violation for individuals and $250,000 for entities.
Third tier, for fraud causing substantial losses: up to $100,000 per violation for individuals and $500,000 for entities.

These base figures adjust upward for inflation, often dramatically.¹⁴ The SEC’s current inflation-adjusted maximums for the most serious fraud violations can exceed $236,000 per violation for individuals and $1.18 million per violation for entities under the Exchange Act, with separate caps under other statutes.¹⁵ Because penalties apply per violation, a scheme involving dozens of trades can produce total penalties in the millions.

Disgorgement

Disgorgement requires violators to surrender the profits from illegal activity so those funds can be returned to harmed investors.¹⁶ The Supreme Court held in Liu v. SEC that disgorgement cannot exceed net profits (expenses must be deducted) and must be directed toward compensating victims rather than simply flowing to the government.¹⁷ And under Kokesh, disgorgement is subject to the same five-year statute of limitations as other penalties.¹⁰

Industry Bars and Suspensions

The SEC can bar individuals from associating with broker-dealers, investment advisers, municipal advisors, and other regulated entities. Under the Investment Advisers Act, suspensions last up to 12 months and bars can be permanent.¹⁸ FINRA imposes its own bars and suspensions on registered representatives. For an industry professional, a permanent bar effectively ends the career, which is why the Wells stage is treated with such urgency.

Cease-and-Desist Orders

The SEC can issue cease-and-desist orders directing a person to stop violating the securities laws and refrain from future violations of the same type. These orders follow notice and an opportunity for hearing and a Commission finding that a violation has occurred or is about to occur.¹⁹ Violating one exposes the person to additional penalties and potential contempt proceedings.

What Defense Costs

Securities investigations are expensive to defend. Even matters that end without charges can produce hundreds of thousands of dollars in legal fees. Cases involving significant document productions, multiple witness interviews, and Wells Submissions routinely run into the millions. Specialized defense attorneys charge premium hourly rates, and investigations often last for years. Companies also carry the cost of compliance consultants, forensic accountants, and e-discovery vendors to manage collection and production. For individuals without employer indemnification, the financial weight alone can be devastating regardless of the outcome, which is another reason early strategic decisions carry so much weight.

1
Office of the Law Revision Counsel. 18 USC 1348 – Securities and Commodities Fraud
2
Securities and Exchange Commission. Statutes and Regulations
3
FINRA. About FINRA
4
Investor.gov. Blue Sky Laws
5
Securities and Exchange Commission. Whistleblower Program
6
Securities and Exchange Commission. Whistleblower Protections
7
Securities and Exchange Commission. Enforcement Manual
8
Securities and Exchange Commission. Enforcement Manual – Section: 2.3. The Wells Process
9
Office of the Law Revision Counsel. 28 U.S. Code 2462 – Time for Commencing Proceedings
10
Supreme Court of the United States. Kokesh v. SEC
11
Securities and Exchange Commission. Benefits of Cooperation With the Division of Enforcement
12
Securities and Exchange Commission. SEC Rescinds Policy Regarding Denials of Settlements in Enforcement Actions
13
Congressional Research Service. SEC v. Jarkesy – Constitutionality of Administrative Enforcement Actions
14
Office of the Law Revision Counsel. 15 USC 78u-2 – Civil Remedies in Administrative Proceedings
15
Securities and Exchange Commission. Inflation Adjustments to the Civil Monetary Penalties Administered by the SEC
16
Securities and Exchange Commission. Disgorgements (Audit 311)
17
Oyez. Liu v. Securities and Exchange Commission
18
GovInfo. 15 USC 80b-3 – Investment Advisers Act, Registration and Sanctions
19
Office of the Law Revision Counsel. 15 U.S. Code 78u-3 – Cease-and-Desist Proceedings