SEC Crypto Enforcement Explained: How the Rules Changed
The SEC once sued crypto's biggest names; now it drops those cases and writes rules instead. Here is what changed in 2026, what still counts as fraud, and why lawmakers cry foul.
Two years ago, the surest way to make headlines in crypto was to receive a Wells notice from the U.S. Securities and Exchange Commission (SEC). Coinbase, Binance, Kraken, Ripple, and dozens of smaller projects spent 2023 and 2024 fighting the agency in federal court, and every fresh lawsuit knocked billions of dollars off token prices. By the middle of 2026, that map is almost unrecognizable. The SEC has dismissed most of those cases, launched a rulemaking push it calls Project Crypto, and told the market in plain language that most tokens are not securities at all.
For anyone building or trading in crypto and Web3 gaming, this reversal is one of the most consequential regulatory stories of the decade. The stakes are not abstract: the outcome shapes which tokens can list in the United States, which exchanges can operate onshore, and how much legal risk sits behind the assets in your wallet. This explainer covers what SEC enforcement is, how the agency swung so hard in one direction, which risks still remain, and why a group of lawmakers now says the pullback smells like favoritism.
What “SEC enforcement” actually means
The SEC is the main federal regulator for securities in the United States, and its Division of Enforcement is the arm that investigates firms and sues the ones it believes broke the rules. A case often opens quietly and ends with a “Wells notice,” a letter warning a company that charges are on the way; from there it can settle with fines, disgorgement of profits, and officer bans, or go to trial. Penalties reach into the billions of dollars across all markets, which is why a single notice can move a token.
For most of the last decade, the central question in crypto was whether a given token counts as a “security.” The test comes from a 1946 Supreme Court case, SEC v. W. J. Howey Co., which treats an asset as an investment contract when buyers put money into a common enterprise expecting profit from the efforts of others. If a token is a security, its issuer must register with the SEC and publish detailed disclosures, or qualify for an exemption. Critics argued the agency never wrote crypto-specific rules and instead drew the lines lawsuit by lawsuit, a practice the industry mocked as “regulation by enforcement.” Supporters of the old approach countered that existing law was clear enough and that many projects simply did not want to comply.
From Gensler to Atkins: a policy U-turn
The change started at the top. After the 2024 election, Gary Gensler left the SEC. Acting chairman Mark Uyeda moved first, and by the time the Senate confirmed Paul Atkins as the new chairman in April 2025, the agency had already stood up a Crypto Task Force led by Commissioner Hester Peirce, a longtime skeptic of the enforcement-first model who had earned the nickname “Crypto Mom.” President Trump had set the tone on January 23, 2025, with an executive order titled “Strengthening American Leadership in Digital Financial Technology.”
One of the earliest signals was an accounting change. On that same day in January 2025, the SEC issued Staff Accounting Bulletin 122, rescinding the controversial SAB 121 that had forced banks to record customer crypto holdings as balance-sheet liabilities. Banks had blamed that rule for keeping them out of crypto custody, so its removal reopened the door for regulated institutions.
The cases the SEC walked away from
The clearest evidence of the new posture is the list of enforcement actions the agency abandoned. In its own fiscal year 2025 review, the SEC said it dismissed seven cases inherited from the prior administration, describing them as matters that showed no direct investor harm and represented “a misallocation of Commission resources.” The Coinbase dismissal in February 2025 was the symbolic turning point: the agency had accused the exchange of running an unregistered securities market, and it dropped the suit without a fight.
The dismissals were only part of it. The agency also closed investigations into Robinhood Crypto, Uniswap Labs, OpenSea, and Gemini without filing any charges, ending years of legal limbo for some of the sector’s best-known names. For founders who had lived under the threat of a subpoena, the message was blunt: the agency was folding its crypto docket, not expanding it. The table below tracks the highest-profile courtroom retreats.
| Case | Original SEC claim | Filed | 2025 outcome |
|---|---|---|---|
| Coinbase | Unregistered securities exchange | 2023 | Dismissed, Feb 2025 |
| Binance and CZ | Unregistered securities sales | 2023 | Dismissal filed, May 2025 |
| Ripple Labs | Unregistered XRP offering | 2020 | Appeals dropped, $125M penalty, Aug 2025 |
| Kraken | Unregistered exchange | 2023 | Dismissed, 2025 |
| Consensys (MetaMask) | Unregistered broker and staking | 2024 | Dismissed, 2025 |
| Cumberland DRW | Unregistered dealer | 2024 | Dismissed, 2025 |
The Ripple template and why it still matters
The Ripple case deserves its own look, because it produced the closest thing crypto has to a working rulebook. A federal judge ruled in 2023 that Ripple’s institutional sales of XRP to sophisticated buyers were unregistered securities offerings, while “programmatic” sales to anonymous buyers on public exchanges were not. In August 2025 both sides dropped their appeals, and Ripple paid a $125 million civil penalty tied only to the institutional sales.
That split, where a token can be sold as a security in one setting and as an ordinary asset in another, now shapes how lawyers advise clients on token launches. The practical takeaway for token teams is that how you sell can matter as much as what you sell; a private raise to funds carries securities risk that a listing on a public order book may not. Not everyone at the agency was comfortable with the result; Commissioner Caroline Crenshaw warned that the settlement blurred the legal line. XRP, which briefly traded above $3 after the deal, changed hands near $1.06 in early July 2026 as the broader market cooled.
Project Crypto and the promise of clear rules
Rather than litigate, Atkins wants to write rules. In a November 2025 speech, he laid out Project Crypto, a plan to move securities activity “on-chain” and to replace case-by-case enforcement with a formal framework the agency expects to propose in stages through 2026. It was a striking turn from an agency whose previous leadership had insisted the existing rules already fit digital assets.
The core ideas include:
- A token taxonomy that sorts digital assets into categories (network tokens, tokenized securities, digital collectibles, and stablecoins) so builders know which bucket applies to them.
- A refined reading of the Howey test that treats a token’s status as something that can change as its network becomes more decentralized.
- A forthcoming “Regulation Crypto” package with tailored disclosures, exemptions, and safe harbors, plus an “innovation exemption” meant to let early projects launch without full registration.
Atkins has also promised the SEC will not act alone. The agency said the CFTC would partner on Project Crypto to bring “a unified approach” to federal oversight, a nod to the long turf war over which regulator governs which token.
New laws are changing the board
Enforcement does not happen in a vacuum, and in 2025 Congress finally acted. On July 18, 2025, President Trump signed the GENIUS Act, the first federal framework for payment stablecoins. It requires issuers to back every coin one-to-one with cash or short-term U.S. Treasurys, publish monthly reserve reports, and it states plainly that a compliant payment stablecoin is neither a security nor a commodity. In practice, that gives banks, fintechs, and some retailers a clear path to issue or accept dollar-backed tokens without fear of a securities case.
A second bill, the Digital Asset Market Clarity Act (the CLARITY Act), passed the House on July 17, 2025, and would divide oversight of digital assets between the SEC and the Commodity Futures Trading Commission (CFTC), handing the CFTC authority over tokens that behave like commodities. It remains with the Senate as of mid-2026. Together the two bills aim to settle the jurisdictional question that years of enforcement never resolved.
“Fraud is fraud”: what the SEC still pursues
The retreat is not a blanket amnesty. The agency has been explicit that outright fraud stays in scope, warning that anyone who raises money by promising to build a network and then takes the proceeds and disappears “will be hearing from us.” The distinction it now draws is between honest projects that failed to register and bad actors who lied to investors: the first group gets rules, the second still gets sued. In fiscal year 2025 the SEC filed 456 total enforcement actions and obtained $17.9 billion in monetary relief across all markets, and it kept live crypto fraud cases such as Unicoin, PGI Global, and Nate, Inc.
To sharpen that focus, the agency folded its old crypto unit into a broader Cyber and Emerging Technologies Unit in February 2025, aimed at blockchain scams, account takeovers, and AI-driven fraud. Even so, the numbers show the change in emphasis: according to a year-in-review analysis, monetary penalties against digital-asset defendants fell to roughly $142 million in 2025, less than 3% of the prior year’s total. The agency framed the drop as a reallocation toward fraud that actually harms investors rather than registration violations that do not.
The backlash over “pay-to-play” concerns
Not everyone reads the pivot as principled. At a February 2026 House Financial Services Committee hearing, Democratic lawmakers including Maxine Waters, Ritchie Torres, and Stephen Lynch pressed Atkins on why the SEC paused or dropped more than a dozen crypto cases, and whether donations to Trump-linked ventures shaped those decisions. The same members had sent the chairman a formal letter weeks earlier demanding documents on the paused matters, arguing the pattern risked turning enforcement into a favor for political allies.
The sharpest example is Justin Sun, the Tron founder the SEC charged in 2023 with fraud and alleged wash trading. His case was quietly paused in early 2025 after he put money into a Trump-family crypto venture. Atkins declined to discuss specifics at the hearing, citing agency rules, and offered lawmakers a confidential briefing instead. Critics called the pattern a possible “pay-to-play scheme”; the chairman said he could not speak to what the Trump family does or does not do.
What it means for crypto and gaming builders
For readers building tokens, marketplaces, or Web3 game economies, the 2026 environment is friendlier but not lawless. None of this removes the need for real legal advice, yet the guardrails are clearer than they have been since the first token boom. A few practical takeaways stand out:
- Utility and in-game tokens have more room now that the SEC concedes most tokens are not securities, but the Howey test still bites anything you market as an investment with promised returns.
- Stablecoin integrations finally have a rulebook under the GENIUS Act, which matters for in-game payments, rewards, and cash-out flows that touch dollars.
- Fraud, misleading promises, and fake trading volume remain top enforcement priorities, so honest disclosure is still the cheapest insurance a project can buy.
The era of surprise lawsuits may be fading, but the clearest lesson from 2026 is that the rules are finally being written down. Builders who read them will have far fewer excuses than the projects that spent the last cycle fighting the SEC in court, and traders should watch the Senate’s handling of the CLARITY Act as the next real catalyst.
By the HOGE Wire editorial desk, covering crypto regulation and Web3 gaming.