An SEC subpoena is not the beginning of an investigation. By the time a subpoena arrives — whether it is a subpoena for documents, a subpoena for testimony, or both — the SEC's Division of Enforcement has already been investigating the matter for months. Staff has reviewed trading data, public filings, news reports, and in many cases has already interviewed other witnesses. The subpoena is not the opening move. It is the moment the investigation becomes visible to you.
Understanding this context is the first thing Frederick M. Lehrer tells every client who calls after receiving an SEC subpoena. The investigation did not start today. What you do today, however, will shape how it ends.
The First Decision: Counsel Before Everything Else
Before you respond to the subpoena, before you call anyone at the SEC, before you discuss the matter with colleagues, and before you take any action with respect to documents or communications — retain experienced securities enforcement counsel. This is not a procedural formality. It is the decision that determines the quality of every decision that follows.
SEC enforcement investigations are conducted by staff attorneys and accountants who specialize in securities fraud. They have subpoena power, access to trading records, and the ability to compel testimony under oath. They have been building this investigation before you knew it existed. The asymmetry of information at the outset of an SEC investigation is significant, and experienced counsel is the primary mechanism for reducing it.
Counsel with SEC enforcement experience — particularly counsel who has worked inside the Division of Enforcement — understands how investigations are structured, what staff is looking for, and how early decisions affect later outcomes. The first 72 hours are when the most consequential decisions are made, and they should be made with counsel.
Preserve Everything: The Litigation Hold
Within hours of receiving an SEC subpoena, your counsel should implement a litigation hold — a formal directive to preserve all documents, communications, and data that are potentially relevant to the investigation. This includes emails, text messages, instant messages, financial records, trading records, board minutes, internal presentations, and any other materials that could relate to the subject matter of the subpoena.
The obligation to preserve documents arises when litigation or regulatory investigation is reasonably anticipated. Receipt of an SEC subpoena makes that anticipation concrete. Destruction of documents after receipt of a subpoena — even documents not specifically requested by the subpoena — can constitute obstruction of justice and can itself become the basis for an enforcement action.
The litigation hold must reach everyone who might have relevant documents. This includes officers, directors, employees, and in some cases outside advisors. It must cover personal devices and personal email accounts if they were used for business communications. The scope of the hold should be defined by counsel based on the subject matter of the subpoena and what is known about the investigation.
Understand the Subpoena's Scope and What It Reveals
An SEC subpoena is a document that tells you something about the investigation, if you know how to read it. The document requests, the time periods covered, the specific transactions or communications requested, and the entities and individuals named in the subpoena all provide information about the scope and focus of the investigation.
Experienced enforcement counsel will analyze the subpoena carefully to understand what the SEC is investigating, what theory of liability staff may be developing, and where you stand in relation to the investigation. Are you being treated as a witness — someone with information relevant to the investigation of others? A subject — someone whose conduct is within the scope of the investigation but who has not been identified as a target? Or a target — someone against whom the SEC is likely to recommend enforcement action?
The SEC does not always disclose this information directly, and the characterization can change as the investigation develops. But the subpoena itself, combined with what is known about the underlying events, often provides meaningful information about your status.
Do Not Contact Potential Witnesses
One of the most consequential mistakes people make after receiving an SEC subpoena is contacting others who may be witnesses in the investigation. The impulse is understandable — you want to understand what is happening, coordinate with colleagues, or reassure business partners. But witness contact after receipt of a subpoena creates serious legal risk.
The SEC takes witness tampering and obstruction seriously. Contact with potential witnesses — even contact that is not intended to influence testimony — can be characterized as obstruction if it has the effect of interfering with the investigation. In cases where the SEC is investigating securities fraud, obstruction can itself become an additional basis for enforcement action or criminal referral.
All communications about the investigation should go through counsel. If colleagues, business partners, or other parties contact you about the investigation, refer them to your attorney. Do not discuss the substance of the investigation with anyone who is not your legal counsel.
The Document Production Process
Responding to an SEC subpoena for documents is a significant undertaking that requires careful management. The subpoena will specify categories of documents to be produced, a time period, and a return date. Counsel will work with you to identify, collect, review, and produce responsive documents while asserting applicable privileges.
Privilege review is critical. Attorney-client communications and attorney work product are generally protected from disclosure. But the privilege belongs to the client, not the attorney, and it can be waived by disclosure to third parties. The privilege analysis must be conducted carefully, particularly in cases where communications involve both legal and business matters.
The production itself must be accurate and complete. Producing false or misleading documents, or producing an incomplete set of documents while representing the production as complete, can constitute obstruction. The SEC has sophisticated tools for identifying gaps in document productions, including comparison with documents obtained from other sources.
Testimony: The Formal Interview and the Sworn Examination
SEC enforcement investigations often involve testimony from witnesses, subjects, and targets. This testimony may take the form of an informal interview — a voluntary meeting with SEC staff — or a formal order of investigation, which gives staff the authority to compel testimony under oath.
If you receive a subpoena for testimony, you will be examined under oath by SEC staff attorneys. The examination is recorded and transcribed. False statements made during SEC testimony can constitute a federal crime under 18 U.S.C. § 1001, independent of any underlying securities violation.
Preparing for SEC testimony requires extensive preparation with counsel. You need to understand the scope of the investigation, the documents that have been produced, the likely areas of questioning, and your rights during the examination. You have the right to have counsel present during testimony, and counsel can object to questions on privilege grounds. Counsel cannot, however, instruct you not to answer questions that are not privileged.
The decision whether to testify voluntarily — before a formal order of investigation is issued — requires careful analysis. Voluntary testimony can sometimes be used to demonstrate cooperation and provide context that is favorable to your position. But it also carries risk, particularly if the investigation is at an early stage and the full scope of the inquiry is not yet clear.
Cooperation and Its Limits
The SEC's enforcement program places significant weight on cooperation. The Commission's cooperation framework provides for reduced penalties, deferred prosecution agreements, and in some cases declinations of enforcement action for individuals and companies that provide substantial assistance to the investigation.
Cooperation is not simply compliance with document requests. It includes proactive disclosure of information relevant to the investigation, assistance in identifying other potential violations, and in some cases providing testimony against other parties. The value of cooperation is assessed based on the timeliness, completeness, and usefulness of the assistance provided.
But cooperation has limits, and those limits are defined by your legal rights and interests. The Fifth Amendment privilege against self-incrimination applies in SEC proceedings. The decision whether to cooperate, and the scope of any cooperation, should be made with counsel after a careful assessment of your exposure and the potential benefits of cooperation.
If the SEC investigation has a parallel criminal component — which is common in cases involving securities fraud, insider trading, or market manipulation — the cooperation analysis becomes significantly more complex. Statements made in SEC proceedings can be used in criminal proceedings, and the decision to cooperate with the SEC must be made with full awareness of the criminal exposure.
The Wells Notice: What Comes After the Investigation
If the SEC's investigation concludes that enforcement action is warranted, staff will issue a Wells Notice — a formal notification that staff intends to recommend enforcement action to the Commission. The Wells Notice identifies the charges staff intends to recommend and gives the recipient an opportunity to submit a Wells Submission explaining why enforcement action is not warranted.
The Wells Notice is not a final determination. It is a recommendation by staff that must be approved by the Commission. The Wells Submission is an opportunity to present arguments, evidence, and legal analysis that may persuade staff or the Commission to decline to bring an action or to modify the charges.
If you receive an SEC subpoena and are concerned about your exposure, contact Frederick M. Lehrer, P.A. at [email protected]. The firm's practice is concentrated in federal securities law, and SEC enforcement defense — from the initial subpoena through the Wells process and beyond — is a specific area of focus.
Frederick M. Lehrer served as an enforcement attorney in the SEC's Division of Enforcement at the Southeast Regional Office from 1991 through 2000, and concurrently as a Special Assistant United States Attorney in the Southern District of Florida from 1997 through 1999, prosecuting securities-related financial crimes. He has practiced securities and corporate law in private practice for more than twenty-five years, advising issuers worldwide on SEC registration, disclosure obligations, Regulation D private placements, Regulation A offerings, and going public transactions. The firm is based in Florida and serves clients internationally.