SEC Reports 348 Enforcement Actions and $1.1 Billion in Monetary Relief for Fiscal 2026

Key Takeaways

• Enforcement Activity: The SEC filed 348 enforcement actions in fiscal 2026, including 235 standalone actions and 113 follow-on administrative proceedings.
• Financial Penalties: The Commission obtained orders for $1.095 billion in monetary relief, including $343 million in civil penalties, and returned approximately $731 million to harmed investors.
• Individual Accountability: Two-thirds of standalone enforcement actions included charges against at least one individual, reflecting the SEC's continued emphasis on personal responsibility for securities violations.
• Compliance and Internal Controls: Enforcement actions addressed financial reporting misconduct, anti-money laundering deficiencies, cybersecurity safeguards, whistleblower protections, and failures to remediate known compliance weaknesses.
• Enforcement Modernization: The SEC established specialized investigative units for financial reporting, retail fraud, and advanced analytics while revising its Enforcement Manual and procedures for evaluating cooperation and remediation.

Deep Dive

The Securities and Exchange Commission brought 348 enforcement actions during fiscal year 2026, obtained orders for nearly $1.1 billion in monetary relief, and charged individuals in two-thirds of its standalone cases. The figures, released Tuesday, describe an enforcement program that spent much of the year pursuing familiar forms of misconduct while making substantial changes to the way it investigates them.

The fiscal year ended September 30. Of the 348 actions, 235 were standalone cases and 113 were follow-on administrative proceedings seeking to bar or suspend individuals from certain securities market activities following criminal convictions, civil injunctions, or other qualifying orders.

The Commission obtained orders for $752 million in disgorgement and prejudgment interest and $343 million in civil penalties. Of the disgorgement ordered, $235 million was deemed satisfied by a court in a separate, non-SEC action. The agency also returned approximately $731 million to more than 250,000 harmed investors.

The annual enforcement report offers a detailed account of where the SEC directed its resources. Financial reporting fraud, deficient internal controls, failures to meet anti-money laundering obligations, and misconduct by investment advisers all featured prominently. So did the conduct of individuals entrusted with responsibilities inside companies, accounting firms, and financial institutions.

SEC Chairman Paul S. Atkins said the agency's performance should not be judged by enforcement totals alone.

"Enforcement actions and financial remedies are important measures of activity, but they are not the only or most telling measures," Atkins said. He described the Commission's responsibility as applying the law fairly and consistently while protecting investors and maintaining confidence in U.S. markets.

The distinction matters when reading the results. The SEC is emphasizing the seriousness of the violations it pursues, the harm they cause, and the remedies obtained, rather than presenting the number of cases as sufficient evidence of success.

Financial reporting remained a substantial part of that work. The Commission highlighted its case against Archer-Daniels-Midland Company and former executives over the material inflation of a business segment's reported performance. The segment had been promoted to investors as an important source of growth. The SEC filed settled charges against the company and two former executives and pursued litigation against a third.

Other cases involved alleged fraudulent disclosures by financial technology company RYVYL and its founders, an alleged revenue inflation scheme involving former executives of Near Intelligence, and misleading statements connected to a $112.5 million convertible debt offering by electric vehicle manufacturer Battle Motors.

The agency also pursued misconduct involving accountants and auditors. Its annual results cited settled actions against an audit engagement partner connected to audits of the now-defunct cryptocurrency trading platform FTX, audit firm EisnerAmper, and a New Jersey-based accountant. The matters involved failures concerning accounting requirements, auditing standards, or auditor independence.

The SEC established a Financial Reporting and Accounting Unit during the year, bringing attorneys and accountants together to investigate complex accounting fraud, issuer disclosures, books and records violations, internal accounting controls, and auditor misconduct.

The agency said the unit is already helping identify problems earlier in the reporting cycle and improve the technical quality of enforcement cases. Those are the SEC's assessments of the new unit's early performance, rather than independently established measures of its effectiveness.

For corporate finance departments, internal auditors, and compliance officers, the cases concern obligations that are already well established. Accurate financial statements, reliable accounting records, adequate controls, and proper disclosures remain central to the Commission's enforcement work. The creation of a specialized investigative unit gives those obligations a more concentrated source of regulatory scrutiny.

The SEC's treatment of known compliance deficiencies was equally revealing. UBS Financial Services received a $20 million civil penalty after the Commission found that the firm had failed to adequately monitor customer foreign exchange wire transactions for potentially suspicious activity, as required by its own anti-money laundering policies and procedures.

UBS had engaged a consulting firm to address deficiencies in its transaction data and conduct a retrospective review to determine whether additional Suspicious Activity Reports were necessary. Even after that work, the SEC found, the firm failed to file timely reports concerning thousands of suspicious transactions identified through the review. The problem was not confined to the original weakness in monitoring. The firm's subsequent efforts to correct it had also fallen short.

Western Asset Management Company received a considerably larger penalty. The SEC imposed a $100 million civil penalty after finding that the investment adviser had failed to take reasonable steps to detect and prevent a cherry-picking scheme, despite knowing that the trading and allocation practices of its former co-chief investment officer differed from those of other portfolio managers.

Both cases concerned firms that had information pointing to potential problems. The enforcement findings turned, in part, on what the organizations did after those problems became apparent.

Elsewhere, the Commission pursued established requirements involving custody of client assets, broker-dealer capital, customer information protection, and suspicious activity reporting.

Merrill Lynch and Canaccord Genuity were the subjects of settled orders involving failures to file Suspicious Activity Reports. M Holdings Securities was cited for failing to adopt or maintain reasonably designed policies and procedures concerning cybersecurity, customer information protection, and identity theft prevention.

The New York Stock Exchange was also the subject of a settled enforcement action after failing to conduct opening auctions for more than 2,800 securities, in violation of Regulation Systems Compliance and Integrity and the Exchange Act.

These were different failures under different regulatory requirements. What connects them in the SEC's account is the continued enforcement of obligations intended to make misconduct easier to detect, protect investors, and preserve the integrity of market operations.

The Commission also pursued an employment practice that can interfere with regulatory oversight. In a settled action against Foot Locker, the SEC found that employee separation agreements purported to waive workers' rights to receive whistleblower awards from the agency. The Commission determined that the agreements violated rules prohibiting actions that impede individuals from communicating directly with SEC staff about possible securities law violations.

Whistleblower information remains an important source of investigative leads. The SEC received approximately 26,000 tips during fiscal 2026 and awarded more than $158 million to 65 individual whistleblowers, the highest number of award recipients since fiscal 2023.

Since the whistleblower program began in 2011, information provided through it has contributed to enforcement actions resulting in more than $11 billion in ordered financial remedies, according to the Commission.

The figures help explain why restrictions on employees' ability to communicate with regulators remain an enforcement concern. They also show the scale of information the agency must assess before deciding which allegations warrant investigation.

Individual accountability was another prominent feature of the year's cases. Two-thirds of standalone enforcement actions included charges against at least one person. The defendants included company founders, senior executives, investment advisers, accountants, auditors, and other professionals accused of misconduct or failures that contributed to investor harm.

Among the cases highlighted were charges against the former chief executive, chief financial officer, and senior director of finance of Tricolor Holdings. The SEC alleged that the executives participated in a multiyear scheme involving the double pledging of hundreds of millions of dollars in subprime auto loans to multiple asset-backed securities offerings and lenders.

The Commission also brought cases involving insider trading by employees and professionals who allegedly used confidential information obtained through their work. One case charged 21 individuals in connection with an alleged decade-long insider trading scheme involving information misappropriated from multiple global law firms.

The SEC's focus on individuals extends responsibility beyond the organizations in which misconduct occurs. Its enforcement results repeatedly identify the people who made decisions, controlled information, or held professional obligations relevant to the alleged violations. The Commission nevertheless made clear that the response to misconduct can affect the outcome of an investigation.

In a settled action against CBIZ, the SEC found that the company had made unregistered offers and sales of securities but imposed no civil penalty, acknowledging its cooperation and prompt remedial measures. The agency also imposed no civil penalties in certain settled matters involving Outdoor Holding Company, formerly Ammo, and Key Tronic Corporation and two senior executives, taking remedial efforts into account.

In another case, an individual who traded on material nonpublic information received a civil penalty equal to half his illicit profits. The Commission acknowledged that he had voluntarily reported his conduct to SEC staff approximately one month after the relevant acquisition announcement and cooperated with investigators. These decisions accompanied revisions to the Division of Enforcement's manual, its first significant update since 2017.

The changes standardized the Wells process, through which prospective enforcement respondents can present their positions before the Commission considers charges. They also clarified how cooperation is evaluated, including its potential effect on civil penalties, and allowed settlement recommendations and related waiver requests to be considered simultaneously.

The SEC separately rescinded Rule 202.5(e), which had generally prevented settlements imposing sanctions unless defendants or respondents agreed not to publicly deny the allegations. The Commission said removing the restriction would provide greater flexibility in resolving cases.

Taken together, the procedural changes give companies and their advisers a more explicit account of how the agency intends to approach cooperation, settlements, and remediation. They do not remove the underlying obligations that gave rise to the enforcement actions.

A Changing Investigative Operation

While much of the year's enforcement activity involved longstanding securities law violations, the SEC also made changes to the machinery used to identify and investigate them. The Division established a Retail Fraud Working Group to examine schemes affecting individual investors, including Ponzi schemes, fraudulent securities offerings, impersonation scams, false regulatory filings, and market manipulation.

The group draws on information from regulators and law enforcement agencies and uses data-driven methods, including Super Intelligence tools, to identify potential violations. The SEC said its work had already produced more than a dozen new investigations.

A separate Office of Super Intelligence and Analytics was created to bring advanced analytical capabilities into the Division's investigative work. Its activities include anomaly detection, accelerated review of documents and transcripts, and analysis of blockchain transactions and financial flows. The agency intends to use these capabilities to identify suspicious patterns earlier and examine misconduct that may be difficult to detect through conventional investigative methods.

The SEC also reorganized its Trial Unit, introduced a formal leadership training program, and established regular meetings between senior officers and Division leadership to review investigation timelines, milestones, and staffing.

The changes amount to a broader effort to improve investigative capacity and case management. Whether they produce faster or more effective enforcement outcomes remains to be demonstrated.

The Commission also expanded coordination with other agencies. An agreement with the Commodity Futures Trading Commission strengthened cooperation on enforcement matters involving securities and derivatives markets. Another agreement with the Food and Drug Administration addressed disclosures and compliance issues involving life sciences companies. The SEC continued working with the Public Company Accounting Oversight Board on audit failures and auditor misconduct. That coordination is particularly relevant to cases in which conduct falls within more than one regulator's jurisdiction.

The Division's work against cross-border fraud illustrated the difficulty of investigating misconduct that moves between markets and countries. During the fiscal year, the SEC charged entities accused of filing false Forms ADV to present themselves as legitimate U.S. investment advisers and attract retail investors. Several appeared to operate overseas, according to the allegations.

The Commission also brought charges against purported cryptocurrency trading platforms and investment clubs in an alleged scheme that defrauded retail investors of at least $14 million. The scheme involved social media solicitations and investment tips supposedly generated by Super Intelligence, with investor funds allegedly transferred overseas.

In addition, the SEC instituted 13 trading suspensions involving securities of Asia-based issuers in response to suspected market manipulation, much of it allegedly conducted through social media.

Private markets received attention as well. The Commission pursued cases involving alleged fraud in pre-IPO investments, including undisclosed fees, misappropriation of client assets, and misleading representations concerning investments in private companies.

These investigations reflect the SEC's concern with schemes that use newer distribution channels or the appearance of regulatory legitimacy to reach investors. The underlying allegations remain familiar: false representations, misuse of funds, undisclosed conflicts, and manipulation.

For compliance professionals, the significance of the fiscal 2026 results lies partly in that continuity. The SEC has reorganized investigative teams, introduced new analytical capabilities, and revised important enforcement procedures. But the cases it chose to highlight repeatedly concerned failures to maintain accurate records, disclose material information, protect customer assets, meet regulatory reporting obligations, and correct deficiencies once they were known.

The Division now enters fiscal 2027 with specialized units devoted to financial reporting and retail fraud, additional analytical resources, and a revised framework for evaluating cooperation.

Director of Enforcement David Woodcock said the changes had strengthened the Division's investigative capabilities and prepared it to address longstanding and emerging threats.

The more consequential measure will be how those capabilities are used: which violations the SEC identifies, how quickly investigations proceed, and whether enforcement action produces meaningful remedies for investors. Those results will take longer to establish than the annual figures released Tuesday.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey