The Tip Line Is Still Open: SEC Crypto Enforcement in 2026

For most of the past two years, the story of the SEC and crypto has read like a retreat. The agency that once sued Coinbase, Kraken, Binance, and Ripple over whether their tokens were unregistered securities has dropped nearly all of those cases. In August 2026 it went further and did the thing the industry had asked for since 2017: it proposed an actual rulebook. On paper, the crackdown is finished.

Look a layer down and a different picture appears. In December 2025, a federal judge in Manhattan sent Do Kwon, the architect of the roughly $40 billion collapse of TerraUSD and Luna, to prison for 15 years. In May 2026, the SEC sued a Texas man who, prosecutors say, raised $12.3 million by promising investors artificial-intelligence trading bots that barely functioned. The registration lawsuits stopped. The fraud cases did not.

That is the half of the pivot that draws less notice. Under Chair Paul Atkins, the SEC shelved the theory that most tokens are securities and moved token fundraising toward a set of proposed exemptions. Yet the apparatus that actually finds, builds, and prosecutes cases (a tip line that pays cash bounties, a specialized fraud unit, blockchain forensics, and a pipeline that ends in federal court or a criminal referral) never switched off. The perimeter simply moved. The question stopped being “did you register?” and became “did you lie?”

This piece opens the machine room of SEC crypto enforcement in 2026: who runs it, how a tip becomes a case, what the numbers actually say, and why the “enforcement is over” headline is only half true. It arrives in a fraught week for policy. Bitcoin traded near $78,000 on September 9, according to Fortune, and the Senate is scheduled to hold a make-or-break procedural vote on the CLARITY Act market-structure bill on September 15, a vote that most prediction markets expect to fail.

The retreat everyone saw

The visible half of the story is real, and it is large. According to Cornerstone Research, the SEC brought just 13 crypto-related enforcement actions in calendar 2025, down about 60% from 33 the year before and the lowest count since 2017. Monetary penalties against digital-asset defendants totaled roughly $142 million, less than 3% of the prior year’s figure. The old headline cases folded one after another: Coinbase, Kraken, ConsenSys, and Cumberland DRW were all dismissed in early 2025, the Binance suit was dropped with prejudice in May, and Ripple’s long fight ended in August 2025 when both sides abandoned their appeals.

Then came the rulebook. On August 18, 2026, the Commission proposed a bespoke offering regime, branded Regulation Crypto Assets, that would let issuers raise capital through tiered exemptions instead of running the registration gauntlet or waiting to be sued. The comment period runs to October 20. For an agency that spent the Gensler years insisting that existing securities law already covered tokens, proposing a purpose-built framework is a genuine reversal.

But read the Cornerstone breakdown closely and the tell is right there. Of those 13 actions in 2025, five predated Gensler’s January departure. The eight that originated under Atkins shared one feature: every single one carried a fraud allegation. The agency did not stop enforcing. It stopped enforcing one thing (unregistered offerings) and kept enforcing another (lying to investors). That distinction is the entire subject of this article.

What changed at the top

Personnel explains a lot of the shift. Paul Atkins took over as chair in April 2025. Caroline Crenshaw, the Commission’s last sitting Democrat and its most vocal crypto hawk, left in January 2026 when her term expired, leaving an all-Republican, three-member panel for the first time in the agency’s modern history. Hester Peirce, who leads the Crypto Task Force, has said she will depart in November 2026, which would drop the Commission to two sitting members out of five.

The person who matters most for the machine, though, runs the Division of Enforcement. David Woodcock took that job effective May 4, 2026, arriving from Gibson, Dunn and Crutcher, where he chaired the securities enforcement practice, and having earlier run the SEC’s Fort Worth regional office. In his first public remarks, at an industry conference in May, Woodcock described his goal as returning the enforcement program “back to basics,” with “quality over quantity” and resources aimed at cases involving real investor harm rather than technical violations. He also announced the revival of the Division’s Retail Fraud Working Group and tighter coordination with state and federal partners.

That is not the language of an agency standing down. It is the language of an agency narrowing its aim. Fewer cases, pointed at fraud, pointed at retail harm, is a mission statement for a leaner machine, not a dismantled one. The staff that once spent months arguing whether a token met the Howey test can now spend that time following money that was simply stolen.

CETU, the unit that replaced the crypto police

The clearest signal of the new posture is a rebrand. In February 2025 the SEC folded its Crypto Assets and Cyber Unit into a new Cyber and Emerging Technologies Unit, or CETU, led by Laura D’Allaird. The old unit ran roughly 50 lawyers and specialists and was built, in practice, to test the registration theory against exchanges and issuers. CETU is smaller, about 30 fraud specialists and attorneys, and its stated remit is different: fraud involving artificial intelligence, social-media schemes, hacking, blockchain, and cybersecurity lapses.

The name change carries the message. Crypto Assets pointed at a category of instrument and asked whether it was a security. Emerging Technologies points at conduct and asks whether it was used to defraud someone. That is a narrower door, but it is a door the courts rarely dispute. Nobody argues that lying to investors falls outside the securities laws. The fights over whether a token is a security were always the vulnerable part of the docket; the fraud cases almost never were. By reorganizing the unit around conduct, the SEC traded a legal theory that kept losing for one that keeps winning.

The tip line: how the bounty machine works

Enforcement needs fuel, and much of it arrives through the SEC’s whistleblower program. Created by Section 21F of the Securities Exchange Act, added by the Dodd-Frank Act in 2010 and launched in 2011, the program pays an award of 10% to 30% of the money collected whenever a tip leads to sanctions above $1 million. Those payments come out of an Investor Protection Fund financed by sanctions the agency collects, not by taxpayers, so a bigger recovery helps fund the next round of tips. It is one of the few enforcement tools that pays for itself.

The design is deliberately generous. Tips can be submitted anonymously if filed through a lawyer, the program protects whistleblowers from retaliation, and it accepts information from tipsters inside the United States and abroad. For crypto, that global reach matters: a developer in one jurisdiction and an investor in another can both feed the same case. The whistleblower program is, in effect, an outsourced detection layer, and it scales with the industry rather than with the SEC’s headcount. A three-member Commission that files a dozen crypto cases a year is still connected to tens of thousands of pairs of eyes.

Fiscal 2025 by the numbers

The program’s fiscal-2025 results, disclosed after the year closed, show a detection layer that is busier than ever even as payouts fell. The SEC received about 27,000 tips, complaints, and referrals, up roughly 8% year over year, per analyses from Phillips and Cohen and Outten and Golden. Crypto and crypto-asset securities made up about 7% of those tips. The agency paid more than $60 million to 48 whistleblowers across 31 covered actions, with the largest single award near $12 million.

Two numbers point in opposite directions, and both matter. Tips rose, which means the funnel is filling. Payouts fell sharply, from about $255 million in fiscal 2024 to just over $60 million, because awards lag the cases that generate them by years, and the record payouts of 2023 and 2024 were driven by a handful of giant settlements with no 2025 equivalent yet. Since the program began it has paid out more than $2 billion in total. The agency also issued 82 preliminary determinations recommending awards during the year, a pipeline that will pay out in fiscal 2026 and beyond.

Deny, deny, deny? The program’s critics

Not everyone reads those figures as a healthy machine. The watchdog group Better Markets titled its fiscal-2025 analysis “Deny, Deny, Deny,” noting that the Commission issued 114 preliminary determinations recommending denials against 82 recommending awards, and that total payouts collapsed. To critics, a program that pays fewer whistleblowers while the agency files fewer big cases looks less like restraint and more like a slow starving of the very tools that surface fraud in the first place.

The counterargument is timing. Awards are tied to money actually collected, and the collections that fund 2025 awards mostly trace to cases filed years earlier, in a period when the agency was pouring energy into registration theories that later collapsed. If the eight fraud cases Atkins-era staff filed in 2025 mature into settlements, the awards will follow on a lag. Whether the machine is being tuned or quietly defunded is a real debate, and the honest answer is to watch the fiscal-2026 numbers rather than declare it settled now.

From tip to courtroom: the case pipeline

A tip is only the start. Once CETU or a regional office opens a matter, investigators subpoena records, interview witnesses, and, in crypto cases, do something they cannot do with a shell company or an offshore bank: they read the blockchain. A public ledger is a permanent, timestamped record of every transfer, which turns tracing stolen or misappropriated funds from a forensic-accounting slog into a graph-analysis exercise. On-chain forensics has become the accelerant of the modern crypto case, and it is the same discipline that private incident-response and recovery firms have turned into a business, as we covered in our look at Halborn and the crypto recovery race.

When the staff believes it has a case, it sends a Wells notice, a formal heads-up that charges are coming and an invitation to argue why they should not. From there, most matters settle. The standard settlement lets a defendant resolve claims without admitting or denying the findings, pay a penalty and disgorgement, and accept an injunction against future violations. The ones that do not settle now travel a different road than they used to, because of a Supreme Court decision that quietly rewired the whole apparatus.

Jarkesy and the jury

In June 2024, in SEC v. Jarkesy, the Supreme Court ruled 6 to 3 that the Seventh Amendment guarantees a defendant a jury trial whenever the SEC seeks civil penalties for fraud. For decades the agency could route many contested matters to its own in-house administrative law judges, a home-field advantage that pressured defendants to settle. Jarkesy closed that lane for fraud penalties and pushed those fights into federal district court.

The practical effect is a more selective machine. Federal litigation is slower and more expensive than an in-house proceeding, so the agency has more reason to bring only the cases it is confident it can win before a jury, which in crypto means clean fraud fact patterns rather than novel legal theories. Jarkesy did not weaken fraud enforcement so much as concentrate it. It is one more reason the surviving crypto docket skews toward outright deception, where a jury needs no tutorial on why lying for money is illegal.

Fraud never stopped: the 2026 docket

The clearest evidence that the machine still runs is the docket itself. The signature case closed in December 2025, when a federal judge in Manhattan sentenced Do Kwon to 15 years in prison. Kwon, who was extradited at the end of 2024 and pleaded guilty in August 2025, drew a term longer than the 12 years prosecutors requested. Judge Paul Engelmayer, who handed down the sentence, called it “a fraud of epic generational scale,” according to CoinDesk. Kwon also agreed to forfeit more than $19 million, and the earlier SEC civil case against Terraform Labs had settled in 2024 for about $4.47 billion.

The Kwon sentence is a criminal matter run by the Justice Department, not the SEC, but the two agencies work the same evidence, and the split is the point: the SEC pursues money and market bars, the DOJ pursues prison. Together they are the two halves of the enforcement machine, and neither one paused for the regulatory reset. Smaller cases show the same pattern with fresher fact patterns.

In May 2026, in a case that reads like a preview of where crypto fraud is heading, the SEC charged Nathan Fuller, a Texas man who allegedly raised about $12.3 million from roughly 150 investors through his firm Privvy Investments. Fuller promised proprietary AI trading bots running high-frequency arbitrage, with returns of 40% to 50% in a month and guarantees above 100% in three weeks. According to the complaint, the bots did not work as described, only about $380,000 (near 3% of the money raised) ever went into digital assets, and Fuller allegedly took at least $6.2 million for himself and used roughly $5.5 million to pay earlier investors in classic Ponzi fashion.

The AI-fraud frontier

Fuller’s case is not an outlier; it is the template. CETU was built precisely for the collision of two hype cycles, crypto and artificial intelligence, and the phrase regulators now use for it is “AI washing,” slapping the letters AI onto an ordinary scam to borrow the credibility of a technology most investors cannot evaluate. The tell is almost always the same: guaranteed returns, an opaque proprietary system, and pressure to reinvest rather than withdraw.

The irony is that verifiable, provable machine computation is one of the harder problems in the field, the subject of a genuine engineering race we examined in our piece on verifiable compute. Real teams are spending years trying to prove that an AI model did what it claimed. A fraudster can simply say the bot exists and pocket the money. That gap, between what can be verified and what can be asserted, is exactly the space CETU now polices, and it is why the fraud beat will outlast the registration beat by a wide margin.

Where the money goes: Fair Funds and the recovery gap

Winning a case and getting victims their money back are two different things. When the SEC collects penalties and disgorgement, it can return those funds to harmed investors through a Fair Fund, a mechanism created by the Sarbanes-Oxley Act. In theory that money flows back to the people who lost it. In practice, recovery is slow, partial, and often subordinate to other claims on the same pot.

Terraform is the cautionary example. The $4.47 billion settlement sounds like near-total restitution until you notice it sits behind the company’s bankruptcy estate, which means the SEC collects only after Terraform’s own creditors and customers are addressed through the Chapter 11 process. Kwon’s $19 million forfeiture is real money, but it is a rounding error against $40 billion in vaporized value. The lesson for investors is blunt: an enforcement win is not a refund, and the surest protection is to avoid the loss in the first place.

The rulebook and the whip

Step back and the 2026 SEC runs on two tracks at once. One track is the rulebook: the Regulation Crypto Assets proposal, the September 15 CLARITY vote in the Senate, and the parallel work of building exemptions and market-structure rules so legitimate projects can raise money without litigation. The other track is the whip: the whistleblower funnel, CETU, on-chain forensics, and the fraud docket that put Do Kwon in prison. Atkins has framed the change as ending “regulation by enforcement,” a phrase he used in remarks earlier this year. The rulebook is meant to replace enforcement as a way of making policy. It was never meant to replace enforcement against fraud.

The same doubling shows up on the market-plumbing side, where the SEC now clears crypto exchange-traded products on a fast generic track rather than case by case, a shift we detailed in our review of the crypto ETF assembly line. Whether the legislative half of the rulebook actually arrives is another matter; markets have largely priced in a CLARITY failure, a dynamic we unpacked in what the market already priced. Not everyone thinks the balance is right. Benjamin Schiffrin, director of securities policy at the watchdog Better Markets, argued after the August proposal that the agency “is exempting crypto from the very registration requirements that would protect investors,” and called the current SEC, pointedly, the “Crypto Promotion Commission,” in a statement.

What it means for builders and investors

For anyone building a token or a platform, the single most important thing to understand about the new regime is what it does not cover. The proposed exemptions and the safe harbor address whether a token is an unregistered security. They do nothing about fraud. The antifraud provisions of the securities laws, principally Section 17(a) of the Securities Act and Rule 10b-5 under the Exchange Act, apply to any offering regardless of whether it is registered, exempt, or sheltered by a future safe harbor. A project can do everything right on registration and still lose everything to a single misleading claim about its technology, its reserves, or its returns.

For investors, the machine cuts two ways. It is a resource: the tip line is open to anyone with real evidence of misconduct, and a qualifying tip can pay. It is also a reminder that enforcement arrives after the money is gone. The patterns in these cases are boringly consistent, guaranteed returns, a proprietary black box, and pressure to roll gains forward, and they are the same whether the wrapper is a hedge fund, a mining pool, or an AI bot. The most reliable defense remains basic hygiene: verify claims independently, keep custody of your own assets where you can, and treat any promised return that sounds engineered rather than earned as the red flag it is. Our guide to multisig best practices covers the custody side of that discipline.

The tidy narrative of 2026, that Washington called off the war on crypto, is comforting and incomplete. The war on unregistered offerings is genuinely winding down. The war on fraud is being retooled, funded by the people it protects, and pointed at the next generation of scams. The tip line is still open. The machine is still running. It is just aiming somewhere new.

Frequently Asked Questions

Did the SEC stop enforcing crypto rules in 2026?

Not entirely. The SEC largely stopped suing companies over whether their tokens are unregistered securities, and it dropped its cases against Coinbase, Kraken, Binance, and others. But it kept bringing fraud cases. Cornerstone Research found that all eight crypto actions the agency filed under Chair Atkins in 2025 alleged fraud, and the whistleblower program and the CETU fraud unit both remain active.

Can I get paid for reporting crypto fraud to the SEC?

Potentially, yes. Under the SEC whistleblower program, a tip that leads to sanctions above $1 million can earn an award of 10% to 30% of the money collected, paid from an Investor Protection Fund rather than by taxpayers. Tips can be submitted anonymously through a lawyer, the program protects against retaliation, and it accepts information from both US and foreign tipsters. In fiscal 2025 the SEC paid more than $60 million to 48 whistleblowers.

What is CETU and how is it different from the old crypto unit?

CETU is the Cyber and Emerging Technologies Unit, created in February 2025 to replace the Crypto Assets and Cyber Unit. It is smaller, about 30 specialists versus roughly 50, and its focus shifted from testing whether tokens are securities to fraud involving artificial intelligence, social media, hacking, and blockchain. The rename signals the SEC’s move from a registration focus to a fraud focus.

What happened to Do Kwon and Terraform?

Do Kwon, co-founder of Terraform Labs, was sentenced in December 2025 to 15 years in federal prison after pleading guilty to fraud tied to the roughly $40 billion collapse of TerraUSD and Luna in 2022. He agreed to forfeit more than $19 million. Separately, the SEC’s civil case against Terraform and Kwon settled in 2024 for about $4.47 billion, though much of that sits behind the company’s bankruptcy estate.

If the CLARITY Act passes, will SEC crypto enforcement end?

No. The CLARITY Act would divide oversight of crypto between the SEC and the CFTC and clarify when a token is a security, which could further reduce registration disputes. It would not repeal the antifraud laws. Whatever happens with the September 15 Senate vote, fraud, manipulation, and misappropriation would remain enforceable, and the whistleblower program and criminal referrals would continue.

By Anneke de Vries, regulation desk, HOGE Wire.