FINRA Investigation vs. SEC Investigation: Key Differences.

Last Updated on: 4th August 2026, 01:33 am

FINRA is a private, nonprofit, member-funded corporation. It is a self-regulatory organization (SRO) created to oversee broker-dealers and their affiliated persons. Unlike the SEC, FINRA is not a government agency, it is a private entity. However, despite its private status, FINRA possesses significant enforcement powers. It has the power to initiate disciplinary proceedings and take sanctions against member firms and personnel, often without the government’s involvement.

The SEC is the federal agency responsible for enforcing the U.S. Securities laws against various market participants. FINRA primarily has the authority to investigate and penalize its member broker-dealers and their associated persons. The SEC’s jurisdiction is broader; it oversees issuers, investment advisers, accountants, auditors, company executives, directors, board members, brokers, agents, and nonregistrants.

The SEC was created by Congress under the Securities Exchange Act of 1934. This Act’s Section 15A established the legal basis for the existence of national securities associations like FINRA. As a result, the SEC oversees FINRA and has authority to approve or reject FINRA’s proposed rule changes. The SEC can also pursue enforcement proceedings against FINRA’s member firms and affiliated persons in lieu of, or alongside, FINRA’s enforcement efforts.

As a result, while these two bodies can have overlapping jurisdiction, there are some key legal and procedural differences between their investigations. In each case, having a clear understanding of FINRA’s and the SEC’s authority, compulsory investigative tools, constitutional constraints, enforcement procedures, and the potential consequences of allegations can provide you and your defense counsel with strategic advantages in your investigation.

Why is FINRA or the SEC Investigating Me?

FINRA investigations can stem from a wide range of sources. Some of the most common triggers include (but are not limited to):

• Customer complaints...
• Form U5 disclosure...
• Market surveillance...
• Customer account records...
• Filings, reports, complaints, and referrals...

While FINRA also conducts many routine examinations, or “audits”, of its member firms and affiliated persons, these examinations can occasionally uncover potential securities law violations, and can similarly trigger subsequent enforcement investigations as a result. If FINRA has contacted you and mentioned “Rule 8210,” this strongly suggests that your inquiry (or the inquiry being conducted in relation to you or your company) is a FINRA investigation, as Rule 8210 is a rule that applies only to persons and entities subject to FINRA’s jurisdiction.

While FINRA’s jurisdiction extends to most broker-dealers and their registered representatives, it also covers unregistered employees of member firms who qualify as “associated persons,” and former associated persons for two years after the cessation of their registration or termination of their relationship with a member firm. However, if you are an ordinary retail customer and are not subject to FINRA’s jurisdiction, FINRA generally will not have the authority under Rule 8210 to compel you to respond to its inquiry, and, in many cases, will only have authority to request information from you on a voluntary basis.

Similar to FINRA, the SEC also can initiate investigations in various contexts. When the SEC has an investigative interest in a matter, it can launch an inquiry based on evidence uncovered in SEC surveillance; evidence uncovered in examination of a brokerage firm or investment adviser; suspicious trading activity; tips from whistleblowers; public complaints; filings; referrals from other federal agencies; or even news media coverage.

When the SEC has identified an investigation as being warranted, it will issue its supervisory staff an order to conduct an investigation. This order provides SEC staff members with the authority to issue subpoenas for documents, communications, and testimony from market participants, outside consultants, and other parties as necessary. Generally, a subpoena from the SEC will indicate its authority under Section 21(b) of the Securities Exchange Act of 1934, and the subpoena will explicitly state that testimony and/or records are required as part of an “investigation.”

With regard to a corporate entity being the subject of an SEC inquiry, if the entity is not subject to the SEC’s investigative authority as an “issuer” or “registrant” (under the Securities Act of 1933 or the Securities Exchange Act of 1934) or if it does not have an “affiliated person” subject to the SEC’s investigative authority (under the Investment Advisers Act of 1940), then it will generally not be subject to the SEC’s investigative authority.

Can I Challenge FINRA Demands or SEC Subpoenas?

When the SEC issues an order of investigation, it expressly identifies the SEC personnel who have been authorized to investigate, and provides these personnel with the authority to issue subpoenas for information, documents, communications, and testimony. A subpoena issued by the SEC’s staff constitutes an order of the SEC to testify or produce records in accordance with the provisions of the subpoena, and any person or entity that receives an SEC subpoena must comply with the SEC’s demand or affirmatively challenge the SEC’s subpoena in an enforcement action in federal court.

If you or your company have received a subpoena from the SEC, there are a number of substantive and technical grounds for challenging the SEC’s subpoena, including issues of scope, relevance, privilege, and compliance with Section 21(b) of the Securities Exchange Act of 1934. However, if you or your company have received an SEC subpoena that requires you to testify, or that requires your company to produce documents and communications, the SEC’s subpoena does not impose any affirmative obligation to comply without the SEC first seeking enforcement of the subpoena in federal court. If the SEC pursues enforcement of its subpoena in federal court, the SEC’s staff may seek a court order requiring compliance, and, if necessary, may seek to hold the subpoena recipient in contempt. While there is no pre-enforcement procedure to quash an SEC subpoena, defendants can challenge the enforceability and validity of an SEC subpoena in SEC enforcement proceedings in federal court.

In contrast, under FINRA Rule 8210, when FINRA believes that a person is within its jurisdiction and that a demand for information, documents, communications, or testimony is justified, FINRA issues a “Rule 8210 letter.” Unlike the SEC, which imposes its subpoena enforcement power in the federal judicial system, FINRA imposes its Rule 8210 enforcement power through administrative means. As a result, if you or your company have received a Rule 8210 letter from FINRA, then you (or your company) must produce information, documents, communications, or testimony as required, or risk being subject to the relevant sanctions.

If you or your company receive a Rule 8210 letter from FINRA and cannot comply with the letter’s demands in full (due to issues such as scope, relevance, privilege, or lack of clarity), you and your counsel will have the opportunity to respond to the Rule 8210 letter and seek clarification, modifications, and/or limited extensions of time as warranted.

If you or your company fail to comply with FINRA’s Rule 8210 demand, FINRA will be entitled to initiate disciplinary proceedings against you or your company. The outcome of these disciplinary proceedings could include, if warranted, suspension from or permanent bar from the securities industry. While there is no pre-enforcement procedure to quash a Rule 8210 demand, there are several levels of review and appeal available in connection with any resulting FINRA disciplinary proceeding.

Could Testimony to a Regulator Expose Me or My Company to Criminal Charges?

Criminal securities cases are handled by federal prosecutors from the U.S. Department of Justice (DOJ), often with assistance from a federal investigative agency. While the SEC is not a prosecutorial agency and cannot pursue criminal charges, and must therefore refer suspected crimes to the DOJ for prosecution, DOJ prosecutors may be assigned to work closely with the SEC from the inception of its inquiry.

If the SEC has a criminal investigative interest in your activities (or in your company’s activities), the SEC will be able to subpoena you to testify, provided that your constitutional rights are respected. For example, when the SEC compels potentially incriminating testimony from a suspected individual, that individual’s Fifth Amendment rights are implicated. The individual can invoke the Fifth Amendment privilege against self-incrimination during the SEC’s proceeding, though this can be extremely risky in some circumstances, and an individual’s decision to invoke the Fifth Amendment privilege can itself support an adverse inference in civil (but not criminal) cases.

A similar concern exists with respect to Rule 8210 demands from FINRA, although the issue of FINRA’s status as a state actor for constitutional purposes requires closer scrutiny. Generally, FINRA is a private entity. As a result, generally, there is nothing about FINRA’s status as a state actor that would trigger constitutional protections (e.g., the Fifth Amendment). While FINRA’s non-state-actor status allows the regulator to potentially impose sanctions when a person or company refuses to comply with a Rule 8210 letter on Fifth Amendment grounds, it also raises the question of whether government direction of FINRA’s enforcement efforts will trigger constitutional constraints. While coordination between FINRA and the government will generally not constitute state action, if the government is directing FINRA’s Rule 8210 enforcement efforts, then the government may be able to treat FINRA as its surrogate, and a federal court may find that the constitutional protections of the U.S. Constitution apply to FINRA’s Rule 8210 investigations.

In addition to addressing constitutional issues, this is also an area where FINRA and the SEC are closely coordinated. Under FINRA Rule 8210(b), FINRA can enter information-sharing agreements with “a domestic federal agency, or subdivision thereof, or foreign regulator.” As a result, if you or your company provide information, documents, communications, or testimony to FINRA, there is a real possibility that this information will later come into the possession of the SEC or prosecutors, which may increase the likelihood of prosecution for federal securities fraud, or for other criminal violations.

Todd Spodek is the managing partner of Spodek Law Group, a second generation criminal defense firm that has been practicing since 1976.

What Happens When FINRA or the SEC Finishes Its Investigation?

When the SEC has completed its investigation and its staff recommends that charges be filed, the recipient of an SEC subpoena (or recipient’s counsel) may receive a “Wells notice.” A Wells notice does not state that the SEC is initiating an investigation, but rather, that the SEC’s investigative staff is recommending enforcement action against the recipient. If you or your company received a Wells notice, then you or your company should work with your counsel to determine whether you or your company should file a “Wells submission” arguing against the SEC’s enforcement staff’s proposed charges. While filing a Wells submission is not required, it may be necessary in some cases, and is generally, a means of attempting to persuade the SEC’s enforcement staff not to file a case against the individual or company involved.

Of course, SEC investigations do not always result in charges, and the SEC’s staff can (and can) issue a closing letter to the individual or company that is no longer the subject of the SEC’s investigative interest. As a discussion of the grounds and consequences of securities fraud enforcement, FINRA Rule 8210, or SEC civil enforcement proceedings, these investigations can also result in criminal prosecution in some cases.

When the SEC decides to pursue enforcement action, it has the option to file a civil action in federal district court or to initiate administrative proceedings. Depending on the circumstances, the SEC may seek remedies such as (i) injunctive relief to stop the allegedly improper conduct; (ii) financial penalties, including civil fines; (iii) disgorgement of ill-gotten gains; and (iv) bars from the industry or from serving as an executive or director of a public company.

As a result of an investigation, FINRA may close its inquiry without taking any action, or FINRA may take any of several actions, which include:

• Cautionary Action Letter...
• Letter of Acceptance, Waiver, and Consent...
• Disciplinary Action...

A Cautionary Action Letter is FINRA’s informal enforcement action, and is not a formal disciplinary sanction. With respect to the Letter of Acceptance, Waiver, and Consent, this is a relatively common way for parties to FINRA enforcement proceedings to resolve their allegations, typically at the settlement stage. Finally, if FINRA recommends a disciplinary action, this may take the form of a FINRA-initiated disciplinary proceeding, which may lead to a fine, suspension, permanent bar, or other sanction.

Can I Appeal a FINRA Disciplinary Decision?

FINRA enforcement matters may resolve through either a settlement agreement or a litigated disciplinary complaint. When the latter occurs, the disciplinary proceeding will be presided over by one or more hearing officers from FINRA’s Office of Hearing Officers. If the hearing officer’s decision is unfavorable, you can file an appeal with FINRA’s National Adjudicatory Council. If FINRA’s National Adjudicatory Council agrees with the hearing officer’s decision, you can still file an appeal with the SEC. Finally, if the SEC agrees with FINRA’s final disciplinary action, a party can then seek federal appellate review of the SEC’s final order.

To be clear, while FINRA investigations are preliminary, once FINRA files its disciplinary complaint, this initiates a formal disciplinary proceeding. Exchange Act Section 15A(b)(8) mandates that:

“The proceedings by which a national securities association provides for the expulsion, suspension, or imposition of any other penalty or fine upon its members, associated persons, or approved persons shall be fair and reasonable.”

As a result of this statutory provision, FINRA is required to provide its respondents with substantial due process protections. This reflects the fact that although FINRA is a private corporation, it is essentially a surrogate of the government, and thus it is subject to the safeguards and protections that are at the heart of our judicial system.

How Long Can FINRA and SEC Investigations Last?

SEC investigations are non-public investigations, and generally, do not become public until the SEC decides to file an enforcement action. However, these investigations can also become public earlier, if an individual or entity files a Freedom of Information Act (FOIA) request seeking confirmation of the SEC’s inquiry, or if a company or media outlet reveals the investigation.

Neither the SEC nor FINRA have a one-universal deadline for completing every investigation. The SEC staff are not required to notify every party with an investigative interest when they first open an investigation, and they are not required to notify every party when they decide to continue their investigation beyond its usual statutory or internal deadlines. So, there is no “clock” ticking to compel the SEC’s staff to either finalize its inquiry or otherwise end its investigation without any penalties.

With respect to FINRA, there is no general statute of limitations that requires the industry regulator to pursue disciplinary action within a fixed period, and, in many cases, FINRA does not even need to notify individuals and firms that are subject to its inquiry when it decides to pursue disciplinary enforcement. With regard to FINRA’s jurisdiction, while the jurisdiction of FINRA continues as long as the individual or entity involved remains with the securities industry (subject to regulatory-compliance rules), FINRA By-Laws Article IV, Section 6 provides that FINRA’s jurisdiction generally lasts for two years after a person’s or firm’s departure from the securities industry.

With respect to the SEC, 28 U.S.C. § 2462 generally imposes a five-year filing period for all civil-penalty claims that are based on the U.S. Government’s ability to seek statutory or punitive civil-monetary remedies. As a result, generally, the SEC will be required to file an enforcement proceeding (either in federal court or in administrative proceedings) in connection with any suspected civil securities fraud within five years from the time of the alleged misconduct.

Contact a Federal Criminal Defense Attorney

Nothing here is legal advice, and the details of your case matter. Todd Spodek and Spodek Law Group take federal criminal and white collar cases nationwide, from offices in New York, Brooklyn, Queens and Los Angeles. You can reach the firm at 212-300-5196.