What Triggers an SEC Investigation??

Last Updated on: 4th August 2026, 01:33 am

The SEC has an extensive network for gathering information. Many investigations start with complaints from the public or with tips from whistleblowers (who may be entitled to financial awards). Referrals from other government agencies, as well as filings and reports with the SEC, can also provide the basis for an investigation.

SEC investigations may begin as examinations in connection with the SEC’s oversight function, or in response to news articles and other media reports. Market surveillance and trading data can also help to identify potential issues. The SEC’s sophisticated data analysis tools can reveal suspicious trading timing, market manipulation, or other red flags. Some companies choose to voluntarily self-report possible wrongdoing in hopes of receiving leniency from the government.

The SEC’s Division of Enforcement has jurisdiction to investigate potential violations of the federal securities laws. If the SEC believes it has found sufficient evidence of wrongdoing, it may recommend that the Commission authorize a civil enforcement proceeding. If it finds potential criminal conduct, it may refer the matter to criminal authorities, including the Department of Justice.

Other entities that conduct investigations in the securities industry include the Financial Industry Regulatory Authority (FINRA) and the Public Company Accounting Oversight Board (PCAOB). FINRA investigates potential violations of its self-regulatory rules involving FINRA member firms and associated persons. The PCAOB is the self-regulatory organization for auditors and accounting firms that provide attest services for public companies. Both have statutory authority to initiate investigations within their respective jurisdictions.

SEC Enforcement investigations generally remain confidential. Unless and until the SEC files formal charges, the details of an investigation will typically stay under wraps, unless the target of the investigation makes public disclosure.

How Does the SEC Decide Which Leads to Investigate?

The SEC Office of Market Intelligence (OMI) is the office within the Commission that initially receives tips, complaints, and referrals. Staff members in the Office of Market Intelligence review and triage the leads, and a lead that credibly suggests a specific and timely violation of the securities laws can lead to an SEC Enforcement investigation.

SEC staff are likely to open an investigation when information strongly and credibly suggests a violation. They will prioritize their efforts based on several factors, such as:

• Ongoing harm, or probability of imminent harm, to investors and the market;
• Recency of the alleged misconduct;
• Availability of evidence and the ability to pursue it;
• Resource demands for conducting the investigation, litigation, and other efforts; and
• Novelty of the alleged violation or otherwise significant implications.

After OMI triages a lead, the lead will either be closed, referred to another section or agency, or assigned to SEC Enforcement staff for investigation.

Regarding market surveillance-related leads, electronic blue sheets provide the SEC with the information that connects specific securities transactions to broker-dealers and customer accounts.

The SEC does not publish comprehensive frequencies of SEC investigations originating from each of the different types of triggers.

Although some SEC inquiries start with a specific focus, it is common for an investigation to expand to address additional conduct and/or additional people. For example, staff who are investigating an alleged violation of the Investment Advisers Act in connection with one adviser’s investment advisory business may find evidence of an unregistered broker-dealer relationship. Staff may then request additional documents or open a new investigation to pursue the broker-dealer registration issue. If the investigation uncovers additional evidence, staff may also request additional records or testimony from people who were not initially implicated.

What Do SEC Investigation Labels and Notices Actually Mean?

Matters Under Inquiry (MUI)

An MUI is a type of inquiry conducted by the SEC Enforcement Division. Opening an MUI does not necessarily trigger immediate notification of the target or other individuals or firms involved. This is especially true when the SEC is relying on complaints from the public or whistleblowers. Even when the SEC notifies individuals and entities involved in an MUI, those individuals and entities are not charged with any federal securities law violations.

Voluntary Requests for Information (Informal Requests)

Before initiating a formal process, SEC staff members will typically seek documentation and voluntary interviews to gather information. Staff members are generally willing to extend time for voluntary responses, as long as there is an agreement and substantial progress is being made. The SEC will generally accept voluntary responses to its requests as sufficient for purposes of continuing the investigation informally.

Formal Order of Investigation (Formal Order)

A formal order is an internal SEC document which formally authorizes designated Enforcement staff members to conduct an investigation, and which may grant these staff members authority to issue subpoenas. The staff may communicate to recipients of investigative requests that the presence or absence of a Formal Order does not, by itself, signify the staff’s views on the matter under investigation.

Generally speaking, a formal order is not a charging document. Issuance of a formal order does not guarantee that SEC staff will pursue enforcement action, and it is also not necessarily true that anyone who is subject to a formal order will ultimately face charges.

Subpoenas

A subpoena is a type of formal request for records or testimony. Recipients of subpoenas are not necessarily the target of the investigation and do not necessarily face charges. Recipients of subpoenas should discuss with an experienced federal securities defense attorney whether they should expect an investigation that will result in SEC enforcement charges and, if so, how to limit the scope of the investigation.

Under Section 21(b) of the Securities Exchange Act, 15 U.S.C. § 78u(b), the Commission and the officers it designates issue investigative subpoenas themselves, for both the production of records and the compulsion of testimony. If a recipient refuses to comply, the SEC may invoke the aid of a federal district court under 15 U.S.C. § 78u(c) to obtain an order enforcing the subpoena.

Wells Notices

A Wells Notice does not initiate a formal investigation and does not grant Enforcement staff subpoena power. A Wells Notice comes at a late stage of the enforcement process, after the staff has substantially completed its investigation and evaluated the evidence, at which point the SEC advises a target (or multiple targets) of its preliminary intention to recommend enforcement charges.

In response to a Wells Notice, target recipients have an opportunity to address their concerns to the Commission. A comprehensive response to a Wells Notice can be a critical component of a successful federal securities defense strategy.

Summary of SEC Enforcement Procedures

The following chart provides a general summary of the SEC’s enforcement procedure from the receipt of a lead to enforcement action.

| Step | Trigger | Label | Action |

| :--- | :--- | :--- | :--- |

| 1 | Complaints, whistleblower, referrals, filings, reports, examinations, media reports, market surveillance, self-disclosure | Matter Under Inquiry (MUI) | Open MUI/investigation; request documents and interviews voluntarily |

| 2 | Need for additional information, need for subpoena power | Formal Order of Investigation | Formal Order issued; designated SEC staff may issue subpoenas |

| 3 | Evidence of liability | Wells Notice | Staff notifies target(s) and recommends enforcement proceedings |

| 4 | Commission authorization to institute an enforcement proceeding | Enforcement Charging Document | SEC files charging document (administrative proceeding or civil complaint) |

Since October 1, 2016, the SEC has adopted new enforcement procedures whereby Enforcement staff should open new matters as investigations rather than MUIs. This means that many (if not all) new matters will be formally opened as investigations, and those investigations will be subjected to more scrutiny at the outset. The formal order of investigation continues to be the document that authorizes subpoena power.

Spodek Law Group, led by managing partner Todd Spodek, defends clients in federal criminal and white collar matters.

How Long Can an SEC Investigation Remain Confidential?

Q: How long can an SEC investigation remain confidential?

The SEC Enforcement Division conducts both simple and complex investigations. Complex investigations can continue for several years, and there is no universal statutory deadline requiring Enforcement to finish every investigation by a certain time. Some investigations do end in charges, and others do not. Some investigations close without the SEC taking public enforcement action.

Q: Does the SEC publish the median duration of its Enforcement investigations?

The SEC does not publish the median duration of its Enforcement investigations. It removed its investigation-timeliness performance goals and indicators from its annual performance reporting beginning with the FY 2020 annual performance plan.

Q: Can the public find out about an SEC investigation before the SEC charges the target?

Generally, SEC investigations remain confidential. However, this is not always the case. For example, in a subpoena-enforcement action in federal court, Enforcement staff may refer to the investigation during their oral arguments. This will disclose the investigation before the SEC is prepared to pursue charges (if charges are on the table).

Q: Does the SEC notify all individuals and entities that provided information in a closed investigation?

Generally, no. Enforcement staff may send “closing letters” to targets and other entities, but no rule requires these staff members to notify every person contacted in a closed investigation.

Q: Does the SEC share information with other agencies or authorities?

The SEC shares information with other federal agencies, state agencies, and self-regulatory authorities such as FINRA and the PCAOB in appropriate circumstances.

• With criminal authorities, the SEC will share evidence including sworn testimony, electronically stored information, and documents.
• With state and self-regulatory authorities, the SEC will share the same types of evidence but will restrict access to certain types of information.

Q: I received a Wells Notice. Do I have to disclose it?

Receiving a Wells Notice does not automatically create a universal duty of disclosure. Whether you have a duty to disclose depends on the applicable securities laws and other rules, statutes, contracts, and circumstances that are applicable. You may have a duty to disclose to certain parties, and not others. Discuss your situation with an experienced securities defense attorney to make an informed and strategic decision.

What Should I Do After Learning About an SEC Inquiry?

Q: Can defense counsel retain investigators?

Defense counsel can engage investigators to locate witnesses and verify factual accounts independently.

The investigators’ materials may qualify as work product under Federal Rule of Civil Procedure 26(b)(3), which ordinarily protects documents and tangible things prepared in anticipation of litigation or for trial from discovery, and which requires a court that does order their discovery to protect against disclosure of the mental impressions, conclusions, opinions, or legal theories of a party's attorney or other representative. Communications with privately retained investigators are not protected under the attorney-client privilege, but they are protected under the Kovel privilege if the information that they obtain is intended to assist the legal advice.

Q: What other information do I need to obtain?

Depending on the circumstances at hand, you may need to obtain information such as:

• Your company’s corporate structure and board of directors composition
• Any public statements and other public information about your company
• Your company’s policies and procedures
• Your company’s code of conduct
• Your company’s securities law compliance policy (if any)
• Any prior investigations, examinations, or enforcement proceedings involving you, your company, or any of your company’s personnel

Q: What is a litigation hold?

A litigation hold is a temporary suspension of routinely scheduled deletion of records of custodians and data sources that are likely to contain relevant information.

If you are under an SEC investigation, you have a duty to preserve all relevant evidence, including all electronically stored information (ESI) and any physical records. Evidence will be relevant if it is related to, or you have reason to believe that it is related to, the matter at hand. Evidence that has been relevant is presumed to remain relevant.

Q: What are the consequences of violating one’s duty to preserve evidence?

18 U.S.C. § 1519 has criminalized the destruction or concealment of records in federal matters. The statute states, “Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States... shall be fined under this title or imprisoned not more than 20 years, or both.”

Individuals and entities should be very cautious about not destroying or altering any information, including metadata.

Q: Can I refuse to answer questions during an SEC investigation?

Individuals can invoke their Fifth Amendment privilege and refuse to testify and answer questions that may incriminate them. However, this privilege does not extend to non-self-incriminating information.

Many firms provide their own representation for individuals in the early stages of an investigation. However, the company’s counsel represents the company, not the individuals. If individuals are also facing charges, they should engage their own independent defense counsel.

Talk to Spodek Law Group

Every case turns on its own facts, and general information is no substitute for advice about yours. Todd Spodek, managing partner of Spodek Law Group, and the firm's attorneys defend federal criminal and white collar matters nationwide. Reach the firm at 212-300-5196.