An SEC violation is any breach of the federal securities laws the U.S. Securities and Exchange Commission enforces, and the penalties run from civil fines and forced repayment of profits to industry bars and, when the Department of Justice takes the case, up to 20 years in prison. The SEC itself brings only civil actions, but the money at stake in a single enforcement action can reach into the hundreds of millions of dollars, and criminal referrals for the same conduct can put a defendant in prison while the civil case proceeds in parallel.
What Counts as an SEC Violation
Almost every SEC enforcement action ties back to one provision: Rule 10b-5, adopted under Section 10(b) of the Securities Exchange Act of 1934. The rule makes it illegal to use any scheme to defraud, to make a materially false or misleading statement, or to engage in any practice that operates as fraud in connection with buying or selling a security.1eCFR. 17 CFR 240.10b-5 – Employment of Manipulative and Deceptive Devices It is broad by design and reaches insider trading, accounting fraud, market manipulation, and most other securities misconduct.
Rule 10b-5 sits inside a larger statutory framework. The Securities Act of 1933 requires companies to disclose accurate financial information when they first offer securities to the public.2Investor.gov. Registration Under the Securities Act of 1933 The Securities Exchange Act of 1934 governs ongoing trading and created the SEC.3GovInfo. Securities Exchange Act of 1934
The conduct the SEC pursues most often falls into a handful of categories:
- Insider trading. Buying or selling a security on material information the public doesn’t have. An executive who sells before bad earnings, a lawyer who tips off a friend about a merger, or an official trading on a confidential decision can all be charged.
- Accounting fraud. Cooking the books to make results look better than they are, whether by inflating revenue, hiding debt, understating expenses, or overvaluing assets. Some of the largest enforcement actions in SEC history involved reported profitability that turned out to be fiction.
- Disclosure failures. Omitting material facts from annual reports, quarterly filings, or prospectuses, or filing late. It doesn’t always take a lie. A failure to disclose a related-party transaction, a material risk, or a change in executive pay can be enough.
- Market manipulation. Artificially moving a security’s price or volume. Pump-and-dump schemes, wash trading, spoofing, and spreading false rumors all qualify.
- Offering fraud. False claims during the sale of securities: fake credentials, guaranteed returns that aren’t realistic, or Ponzi structures that pay early investors with money from later ones.
- Broker-dealer misconduct. Recommending unsuitable investments, trading in a customer’s account without authorization, or churning to generate commissions.
Who Can Be Held Responsible
The SEC casts a wide net. On the individual side, enforcement reaches corporate officers such as CEOs and CFOs who sign off on misleading financial statements, portfolio managers who trade on inside information, and brokers who cheat their customers. Individual investors aren’t exempt either. Anyone who trades on a confidential tip or spreads false information to move a stock can end up in the SEC’s crosshairs.
On the organizational side, publicly traded companies, investment firms, hedge funds, and broker-dealers all face enforcement. A company can be held liable for its own violations and for failing to supervise employees who break the rules. The SEC also pursues gatekeepers. Auditors, accountants, and audit committee members who look the other way when they encounter fraud face their own enforcement actions.
Civil Penalties the SEC Can Impose
Monetary Penalties
The Securities Exchange Act uses a three-tier penalty structure that rises with the severity of the misconduct. For each individual violation, the statutory base amounts are:
- Tier 1, for any violation: up to $5,000 per violation for an individual, or $50,000 for an entity, or the gross profit from the violation, whichever is greater.
- Tier 2, for fraud or reckless disregard of a regulation: up to $50,000 per violation for an individual, or $250,000 for an entity, or the gross profit.
- Tier 3, for fraud that caused substantial losses to others: up to $100,000 per violation for an individual, or $500,000 for an entity, or the gross profit.4Office of the Law Revision Counsel. 15 USC 78u – Investigations and Actions
These base amounts are adjusted upward for inflation each year, so real-world penalties are higher than the statutory floor. Because penalties are assessed per violation, a scheme involving hundreds of misleading transactions can produce an enormous total, which is why major cases regularly settle for tens or hundreds of millions of dollars.
Disgorgement
Disgorgement forces violators to give back the money they made from the misconduct. The Supreme Court set the limits on this remedy in 2020: disgorgement cannot exceed the wrongdoer’s net profits (legitimate expenses are deducted), and the recovered funds should generally go to harmed investors rather than the government.5Supreme Court of the United States. Liu v. Securities and Exchange Commission
Injunctions and Industry Bars
The SEC can obtain court orders prohibiting future violations. That may sound redundant since the law already forbids the conduct, but an injunction raises the stakes: any later violation becomes contempt of court, carrying its own consequences. In more serious cases, the SEC can bar individuals from serving as officers or directors of public companies, or bar them from the securities industry entirely. For a career professional, an industry bar effectively ends the career.
Cease-and-Desist Orders
The SEC can issue administrative orders requiring an individual or company to stop specific conduct. Unlike injunctions, which come from a court, cease-and-desist orders come directly from the SEC through administrative proceedings. Violating one can lead to further penalties.
Executive Compensation Clawbacks
When a company restates its financial results, executives may have to return incentive-based compensation received during the affected period. Rules adopted under Dodd-Frank require listed companies to have clawback policies that recover excess pay from current and former executives after any accounting restatement, whether or not the executive was personally at fault. A separate Sarbanes-Oxley provision lets the SEC claw back bonuses and stock profits from CEOs and CFOs specifically when misconduct caused the restatement.
When a Violation Becomes a Criminal Case
One point trips people up: the SEC itself does not bring criminal charges. It is a civil enforcement agency. When the SEC believes conduct warrants prosecution, it refers the matter to the Department of Justice, which decides whether to charge.
The criminal exposure is severe. Under the Securities Exchange Act of 1934, a willful violation carries up to 20 years in prison and a fine of up to $5 million for individuals, or up to $25 million for entities.6GovInfo. 15 USC 78ff – Penalties Under the Securities Act of 1933, willful violations carry up to 5 years in prison and a fine of up to $10,000.7Office of the Law Revision Counsel. 15 USC 77x – Penalties Most insider trading and fraud cases are charged under the harsher Exchange Act penalties.
Civil and criminal proceedings can run in parallel. The SEC often files a civil action for penalties and disgorgement while the DOJ prosecutes the same person for the same conduct. A defendant can pay civil fines and serve prison time from the same set of facts.
How Long the SEC Has to Act
The SEC does not have unlimited time. Any civil action seeking a penalty or forfeiture must be brought within five years of when the claim first arose.8Office of the Law Revision Counsel. 28 USC 2462 – Time for Commencing Proceedings The Supreme Court confirmed in 2017 that this five-year clock also applies to disgorgement, not only to traditional fines.9Oyez. Kokesh v. Securities and Exchange Commission If the SEC doesn’t file within five years, both penalties and disgorgement are off the table for that conduct. Criminal prosecution runs on its own limitations periods.
Reporting a Violation
The SEC accepts tips through its online Tips, Complaints, and Referrals portal, and you don’t need to be an investor or an industry insider to file one.10U.S. Securities and Exchange Commission. Welcome to Tips, Complaints, and Referrals
For people with high-quality, original information about a securities law violation, the SEC’s Whistleblower Program pays an award. If your tip leads to a successful enforcement action producing more than $1 million in sanctions, you can receive between 10% and 30% of what the SEC collects.11U.S. Securities and Exchange Commission. Whistleblower Program Tips can be submitted anonymously as long as an attorney represents you.12U.S. Securities and Exchange Commission. Whistleblower Frequently Asked Questions
Federal law also prohibits employers from firing, demoting, suspending, threatening, or harassing an employee who reports potential securities violations to the SEC. A whistleblower who faces retaliation can sue in federal court and recover reinstatement, double back pay with interest, and attorney’s fees. The suit must be filed within six years of the retaliatory act, or within three years of when the employee discovered or should have discovered it, and in no case more than ten years after the violation.13Office of the Law Revision Counsel. 15 USC 78u-6 – Securities Whistleblower Incentives and Protection