Former SEC Enforcement Attorney|15 Years Prosecuting Securities Fraud|(561) 706-7646
HomeEnforcement IntelligenceSEC Fraud Case Construction
Enforcement Intelligence — Pillar I

How the SEC Builds a Securities Fraud Case

Understanding the SEC's investigative architecture is the first line of defense for any issuer, officer, or counsel operating in the capital markets. This analysis — written by a former SEC enforcement attorney and federal prosecutor — traces the complete enforcement workflow from initial tip intake through Wells Notice, formal charges, and resolution.

Definition

SEC Securities Fraud Enforcement: The process by which the U.S. Securities and Exchange Commission investigates, charges, and resolves violations of the Securities Act of 1933, the Securities Exchange Act of 1934, and related rules — including Section 10(b), Rule 10b-5, Section 17(a), and Regulation D. The SEC may bring civil charges; criminal referrals are made to the Department of Justice.

The SEC Enforcement Architecture

The SEC's Division of Enforcement is the largest division within the Commission, with approximately 1,300 staff across headquarters in Washington, D.C. and eleven regional offices. In fiscal year 2023, the SEC filed 784 enforcement actions and obtained orders for nearly $5 billion in disgorgement and penalties — the second-highest total in Commission history.

The enforcement process is not a single event — it is a multi-stage administrative and legal workflow that can span years. Each stage presents distinct strategic opportunities for counsel. Understanding where the SEC is in its process is essential to mounting an effective defense or negotiating a favorable resolution.

The Eight-Stage Enforcement Workflow

01

Tip, Complaint, or Referral

Most SEC investigations begin with a tip submitted through the SEC's online Tips, Complaints, and Referrals (TCR) system, a referral from FINRA or a self-regulatory organization, or an internal surveillance flag from the Division of Trading and Markets. Whistleblowers who provide original information leading to a successful enforcement action can receive 10–30% of sanctions exceeding $1 million under Dodd-Frank Section 21F.

02

Informal Inquiry (MUI)

The SEC opens a Matter Under Inquiry (MUI) — a non-public, informal stage. Staff may review public filings, trading data, press releases, and social media without issuing subpoenas. No formal order is required. Companies and individuals are typically unaware an MUI exists. The MUI can be closed without action or escalated to a formal investigation.

03

Formal Order of Investigation

A Formal Order of Investigation (FOI) is approved by the Commission and grants staff authority to issue subpoenas for documents and compel testimony under oath. The FOI defines the scope of the investigation. Receiving a subpoena does not mean charges are imminent — it means the SEC has enough predicate to justify compelled discovery.

04

Document Production and Testimony

Subpoenas demand production of emails, trading records, board minutes, financial statements, and communications. Witnesses are deposed under oath before SEC staff. The Fifth Amendment right against self-incrimination applies, but invoking it in a civil proceeding can be used against the witness. Counsel should be present for all testimony.

05

Wells Notice

Before recommending charges, SEC staff typically issue a Wells Notice — a written notice that staff intends to recommend enforcement action and the basis for that recommendation. The recipient has the right to submit a Wells Submission responding to the allegations. This is the last meaningful opportunity to prevent charges before they are filed.

06

Wells Submission

A Wells Submission is a written response to the Wells Notice arguing why charges should not be brought, challenging the legal theory, disputing facts, or proposing a settlement. A well-crafted Wells Submission can result in charges being dropped, reduced, or settled on favorable terms. It is not a formal legal proceeding but is taken seriously by Commission staff.

07

Commission Authorization and Charges

If staff proceeds, they present a recommendation to the full Commission. The Commission votes to authorize charges. The SEC may bring charges in federal district court (seeking injunctions, disgorgement, and civil penalties) or before an Administrative Law Judge (ALJ) in an administrative proceeding. The choice of forum has significant strategic implications.

08

Settlement or Litigation

The majority of SEC enforcement actions settle. Settlements typically include disgorgement of ill-gotten gains plus prejudgment interest, civil monetary penalties, injunctions against future violations, and officer-and-director bars. Contested cases proceed to trial before an ALJ or federal district court judge.

The Wells Notice: Your Last Meaningful Defense Opportunity

The Wells Notice process — named after the 1972 Wells Committee report that recommended it — is the most consequential procedural moment in an SEC investigation. It is the point at which the trajectory of an enforcement action is most susceptible to influence by experienced counsel.

A Wells Submission is not a legal brief — it is a persuasive document directed at SEC staff and, ultimately, the Commission itself. Effective Wells Submissions combine factual rebuttal, legal argument, policy considerations (why bringing this case is not in the public interest), and, where appropriate, cooperation credit arguments. The submission becomes part of the official record and may be reviewed by a court if the matter is litigated.

Statistics compiled from SEC enforcement data suggest that approximately 30–40% of Wells Notices result in no charges being filed or significantly reduced charges following the Wells Submission process. This is not a number to be dismissed — it represents the single highest-leverage intervention point in the entire enforcement workflow.

Forum Selection: Federal Court vs. Administrative Proceeding

When the SEC decides to bring charges, it chooses between two forums: federal district court or an in-house administrative proceeding before an Administrative Law Judge (ALJ). This choice has profound implications for the respondent.

Federal District Court
Full discovery rights under FRCP
Jury trial available
Independent federal judge
Longer timeline (2–4+ years)
Higher burden of proof standards
Full appellate rights
Administrative Proceeding (ALJ)
Limited discovery
No jury trial
SEC-employed ALJ
Faster timeline (12–18 months)
Commission reviews ALJ decisions
Appeal to federal circuit court

Case Pattern Analysis: Four Recurring Enforcement Templates

SEC enforcement actions follow recognizable patterns. Understanding these patterns allows issuers and counsel to identify risk before the SEC does. The following four case templates account for a significant majority of securities fraud enforcement actions filed in the past decade.

Microcap Fraud and Pump-and-Dump

SEC Release
SEC v. Honig et al., Case No. 18-cv-08175 (S.D.N.Y. 2018)

The SEC's most common enforcement pattern in small-cap markets involves coordinated promotional campaigns, undisclosed share ownership, and coordinated selling after artificial price inflation. In Honig, the SEC alleged that a group of investors acquired large blocks of microcap stock, coordinated promotional campaigns, and sold into the resulting price increase — generating millions in illegal profits. The case established that even sophisticated investors can be charged as unregistered dealers under Section 15(a) of the Exchange Act.

Unregistered Securities Offerings

SEC Release
In the Matter of LBRY, Inc., Admin. Proc. File No. 3-20713 (2021)

The SEC pursued LBRY for selling LBC tokens without registration, establishing that utility tokens can constitute securities under the Howey test. The enforcement pattern: the SEC focuses on whether purchasers expected profits from the efforts of others, regardless of how the issuer characterizes the token. This case is routinely cited in digital asset enforcement actions.

Form S-1 Material Misstatement

SEC Release
SEC v. Theranos, Inc., Case No. 18-cv-01602 (N.D. Cal. 2018)

The SEC charged Theranos and its CEO with raising over $700 million through an elaborate fraud involving false claims about its blood-testing technology. The enforcement pattern: the SEC scrutinizes the gap between public representations and internal technical assessments. Every material statement in an S-1 or offering document is a potential enforcement trigger if it diverges from internal knowledge.

Regulation D Abuse and General Solicitation

SEC Release
In the Matter of Ranieri Partners LLC, Admin. Proc. File No. 3-15930 (2014)

The SEC charged Ranieri Partners for failing to take reasonable steps to verify accredited investor status after the JOBS Act amendments to Rule 506(c). The enforcement pattern: issuers who claim Rule 506(c) exemptions but fail to document verification procedures face enforcement even if all investors were actually accredited.

What the SEC Looks for in Document Review

When the SEC issues subpoenas for documents, staff are looking for specific categories of evidence that establish the elements of securities fraud under Section 10(b) and Rule 10b-5: a material misstatement or omission, made with scienter (intent or recklessness), in connection with the purchase or sale of a security, that caused reliance and damages.

High-Priority Document Categories in SEC Investigations
Internal emails contradicting public statements
Board minutes discussing material risks
Analyst or investor presentations
Due diligence reports and legal opinions
Trading records and brokerage statements
Communications with underwriters or placement agents
Accounting workpapers and audit correspondence
Compensation and incentive plan documents
Transfer agent records and stock ledgers
Social media posts and promotional materials

Civil Penalties and Remedies

The SEC's civil enforcement arsenal includes disgorgement of ill-gotten gains plus prejudgment interest, civil monetary penalties, injunctions against future violations, officer-and-director bars, penny stock bars, and industry bars. Under the Securities Enforcement Remedies and Penny Stock Reform Act of 1990 and subsequent legislation, civil penalties can reach:

TierViolation TypeMax Penalty Per Violation (Individual)Max Penalty Per Violation (Entity)
Tier 1Any violation$10,781$107,813
Tier 2Fraud, deceit, manipulation, or deliberate disregard$107,813$538,063
Tier 3Substantial pecuniary gain or significant risk of loss to others$215,626$1,078,125

Practical Guidance: What to Do If You Receive an SEC Subpoena

1

Retain securities enforcement counsel immediately — before responding to the subpoena or contacting SEC staff. Anything said before counsel is engaged can be used against you.

2

Implement a litigation hold. Preserve all documents, emails, and electronic records potentially relevant to the investigation. Destruction of documents after receiving a subpoena is obstruction.

3

Do not contact other potential witnesses. The SEC will interpret coordination as consciousness of guilt and may add obstruction charges.

4

Identify all potentially privileged communications. Attorney-client privilege and work product doctrine can protect significant categories of documents from production.

5

Assess cooperation credit options. Early, substantial cooperation can result in significantly reduced penalties or declinations. Your counsel should evaluate this option at the outset.

6

Prepare for testimony. If you receive a subpoena for testimony, prepare extensively with counsel. SEC staff are experienced examiners — uncoached testimony frequently creates new problems.

Frequently Asked Questions

What is a Wells Notice from the SEC?

A Wells Notice is a written notification from SEC staff that they intend to recommend enforcement action against a person or entity. It describes the charges being considered and gives the recipient an opportunity to submit a Wells Submission responding to the allegations before the Commission votes on whether to authorize charges. Receiving a Wells Notice is serious — it should trigger immediate engagement with experienced securities enforcement counsel.

How long does an SEC investigation take?

SEC investigations vary widely in duration. A Matter Under Inquiry (MUI) may be opened and closed within months. A formal investigation can last 2–5 years before charges are filed or the matter is closed. Complex accounting fraud cases have lasted over a decade. The statute of limitations for SEC civil enforcement actions is generally five years from the date of the violation.

What triggers an SEC formal investigation?

A formal investigation is triggered when SEC staff have sufficient predicate to believe a violation may have occurred and need subpoena power to gather evidence. Common triggers include whistleblower tips, suspicious trading patterns detected by the Division of Trading and Markets' surveillance systems, material misstatements in public filings, and referrals from FINRA, state securities regulators, or other federal agencies.

Can you negotiate with the SEC before charges are filed?

Yes. The Wells Notice and Wells Submission process is specifically designed to allow negotiation before charges are filed. Experienced securities enforcement counsel can often resolve matters at the Wells stage through proffer agreements, cooperation credit, or demonstrating factual or legal deficiencies in the staff's case. Approximately 30–40% of Wells Notices result in no charges or significantly reduced charges following the Wells process.

Former SEC Enforcement Attorney

Facing an SEC Investigation?

Frederick M. Lehrer spent 15 years inside the SEC and DOJ prosecuting securities fraud. He now applies that insider knowledge to defend issuers, officers, and counsel against enforcement risk.

Schedule a Confidential Consultation