How SEC Crypto Enforcement Works in 2026: A Field Guide
The SEC dropped nearly every crypto registration lawsuit in 2025, then rebuilt around rulemaking. Here is how an enforcement action actually works now, from Howey to the Wells notice.
For most of the last decade, “SEC enforcement” was the phrase that could erase a token’s market value in an afternoon. A leaked Wells notice, a complaint filed in a Manhattan courtroom, and a project that had raised hundreds of millions of dollars suddenly faced an existential legal bill. Then the machine changed. Between early 2025 and the middle of 2026, the U.S. Securities and Exchange Commission dropped nearly every registration-based crypto lawsuit it had filed, swapped its enforcement-first posture for a rulemaking agenda, and, together with the Commodity Futures Trading Commission, handed sixteen major tokens a formal exit from securities law.
None of that means enforcement is dead. It means the machine has been rebuilt, and understanding how it works now, which cases the SEC still brings and which it walks away from, is one of the most useful pieces of literacy a builder, trader, or founder can carry into the rest of 2026. This guide walks through the whole apparatus: the legal test that decides whether a token is a security, how a case is born inside the agency, the Wells process that comes before any lawsuit, the fork between settling and litigating, and the remedies the SEC can extract if it wins.
The short version is that the SEC’s power has not shrunk on paper. Its statutes, its investigative reach, and its remedies are the same as they were under former chair Gary Gensler. What changed is the agency’s theory of when to use them. That distinction, between capability and appetite, runs through every section below.
What “SEC enforcement” actually means
The SEC is not a prosecutor in the criminal sense. It is a civil regulator, which means it cannot put anyone in prison; only the Department of Justice can do that. What the SEC can do is investigate suspected violations of the federal securities laws, sue in federal court or (in narrower cases) in its own administrative forum, and seek money and behavioral remedies against people and companies.
In crypto, almost every SEC case has rested on one of two claims: that a token, or the way it was sold, amounted to an unregistered securities offering; or that someone committed fraud in connection with a securities transaction. The first theory, the unregistered offering, is the one the agency has largely abandoned. The second, fraud, is the one it never stopped bringing.
That split explains the headlines. When you read that the SEC dropped its case against Coinbase or walked away from Kraken, those were registration cases: the agency arguing that running an exchange or a staking service without registering broke the law. When you read that the SEC charged a promoter behind a fake yield scheme, that is fraud, and fraud enforcement has if anything sharpened.
The agency’s power flows from a handful of statutes: the Securities Act of 1933, which governs offerings; the Securities Exchange Act of 1934, which governs trading, exchanges, and brokers and created the SEC itself; and the Investment Company and Investment Advisers Acts of 1940. Every crypto complaint you have ever seen cites one or more of these. The same registration machinery also sits underneath a spot Bitcoin fund’s launch, which is why the SEC’s ETF approval process and its enforcement posture are really two faces of one rulebook.
The Howey test: the engine under every case
Before any of the procedural machinery turns, the SEC has to answer one question: is the thing being sold a security? For eighty years, U.S. courts have answered that with the Howey test, named for a 1946 Supreme Court case, SEC v. W.J. Howey Co., that had nothing to do with crypto and everything to do with Florida orange groves.
Under Howey, a transaction is an investment contract, and therefore a security, when there is an investment of money, in a common enterprise, with a reasonable expectation of profits derived from the efforts of others. Courts and the SEC collapse this into three or four prongs, but the practical fight in crypto has almost always been the last one: are buyers relying on the managerial efforts of a promoter or a core team, or on a genuinely decentralized network?
For years the SEC applied this through a 2019 staff document, the Framework for “Investment Contract” Analysis of Digital Assets, which listed more than thirty factors bearing on that final prong: how much of the supply the team held, whether the network functioned, how the offering was marketed, and so on.
That framework is now history. On March 17, 2026, the SEC and the CFTC issued a joint interpretive release that superseded it, and the agency’s own website now labels the 2019 document withdrawn. The new interpretation narrows Howey, affirms that a common enterprise is a required element, and makes it materially harder to argue that ordinary secondary-market trades of a token, the kind that happen between two strangers on an exchange, are securities transactions at all, as law firms parsing the release noted. That single legal move shrank the SEC’s crypto jurisdiction more than any dropped lawsuit did.
How a crypto enforcement case is born
Enforcement actions do not arrive fully formed in a courtroom. They move through a pipeline, and knowing the stages tells you where a project sits on the risk curve.
It starts with a tip, a referral, or the agency’s own market surveillance. The SEC runs a whistleblower program that pays awards to people who report violations, and it takes in tens of thousands of tips a year across all markets. A crypto matter might also arrive as a referral from another regulator, a self-report, or a surveillance flag on unusual trading.
From there, staff in the Division of Enforcement open a Matter Under Inquiry, an informal look that can quietly close if nothing turns up. If it escalates, the Commission issues a formal order of investigation, which unlocks subpoena power: the ability to compel documents and sworn testimony. Most of this happens confidentially, which is why the first public sign of an SEC investigation is often a company’s own disclosure or a leaked subpoena.
- Tip or referral: a whistleblower, another regulator, or surveillance flags a possible violation.
- Matter Under Inquiry: an informal staff review that may close with no action.
- Formal order of investigation: the Commission authorizes subpoenas for documents and testimony.
- Wells notice: staff tell the target they intend to recommend charges.
- Commission vote: the five commissioners decide whether to authorize a case.
- Filing: a complaint in federal court or an administrative order.
Investigations are slow. A complex crypto matter can run two or three years from the first subpoena to a filed complaint. During that window staff build a record, take testimony, and decide whether the evidence supports charges. If it does, the case reaches the step every securities lawyer watches for: the Wells notice.
The Wells notice and the fork in the road
A Wells notice, named for a 1972 SEC advisory committee chaired by John Wells, is a letter telling the recipient that the enforcement staff intends to recommend charges. It is not a lawsuit, but it is the clearest possible warning that one is coming.
The recipient then gets to file a Wells submission, a written argument for why the Commission should not authorize the case. This is the target’s chance to shrink or kill the action before it ever becomes public. Coinbase, Uniswap Labs, Robinhood, OpenSea, and Consensys all received Wells notices during the Gensler era; several of those matters were later closed without charges once the agency’s priorities changed.
If staff still want to proceed after reading the Wells submission, they ask the five-member Commission to vote to authorize an action. Only then does the case become public, either as a complaint in federal district court or as an order instituting administrative proceedings. For a project on the receiving end, the Wells notice is the moment strategy changes: negotiate a settlement now, or prepare to fight. Which path makes sense depends heavily on the second great question of enforcement mechanics, which courtroom the case lands in.
Settle or litigate, and in which courtroom
The SEC has historically had two venues. It can sue in federal district court, in front of a judge and potentially a jury, or it can bring the case in-house before one of its own administrative law judges. For decades the agency often preferred its home turf, because administrative proceedings were faster, ran on the agency’s own procedural rules, and were decided by judges the agency employed.
That advantage was gutted in 2024. In SEC v. Jarkesy, decided that June by a 6-3 vote, the Supreme Court held that when the SEC seeks civil monetary penalties for fraud, the Seventh Amendment guarantees the defendant a jury trial, which means the case has to go to federal court rather than an in-house tribunal. The decision did not abolish administrative proceedings, but it stripped the agency of its ability to extract fraud penalties through its own judges and pushed its most serious cases into Article III courts, where defendants enjoy more procedural protection.
For crypto, Jarkesy reinforced a trend already under way. The SEC’s biggest crypto fights, against Ripple, Terraform, and Coinbase, were already in federal court. But the ruling raised the cost and risk of aggressive enforcement across the board, because federal litigation is slower, pricier, and less predictable for the agency than its old home-court option.
Most SEC cases never reach trial. The large majority settle, usually through a consent agreement in which the defendant neither admits nor denies the allegations but agrees to pay and to accept certain restrictions. Settlement is faster and cheaper for both sides, and it lets the agency book a win without risking an adverse ruling that sets a bad precedent. That risk is not hypothetical: it is exactly what happened when Judge Analisa Torres ruled in the Ripple case that programmatic XRP sales on exchanges were not securities transactions, a holding that still shapes how lawyers read the law.
The remedies the SEC can reach for
When the SEC wins or settles, it can pull from a specific set of remedies. Understanding them explains why some settlements look like a slap and others end a company.
| Remedy | What it does | Why it stings |
|---|---|---|
| Disgorgement | Forces the defendant to give up ill-gotten gains traceable to the violation | Often dwarfs the fine; measured by what you made, not what you did wrong |
| Civil penalties | Fines set in statutory tiers, per violation, scaling with severity | Stack fast across many transactions |
| Injunctions | Court orders barring future violations, the so-called obey-the-law orders | A later breach becomes contempt, with harsher consequences |
| Officer and director bars | Prohibits individuals from serving as officers or directors of public companies | Ends careers, not just cases |
| Industry bars | Bars a person from associating with brokers, dealers, or advisers | Removes bad actors from regulated finance |
| Undertakings | Required fixes: new controls, outside monitors, added disclosure | Ongoing cost and oversight long after the case closes |
The interplay of these tools explains the numbers in the headlines. When Terraform Labs and its founder Do Kwon settled with the SEC in 2024, the roughly $4.55 billion total was dominated by disgorgement of what the agency called ill-gotten gains, not by the comparatively small civil penalty. Kwon personally agreed to an $80 million fine and an industry ban, and in the parallel criminal case brought by the Department of Justice he was later sentenced in December 2025 to 15 years in prison for a fraud that wiped out an estimated $40 billion. That two-track pattern, an SEC civil case for the money and a DOJ criminal case for the prison time, is common in the worst frauds.
From Gensler to Atkins: the great retreat
The single biggest change to SEC crypto enforcement is not a rule or a court ruling. It is a change of personnel and philosophy. Gary Gensler, chair from 2021 to early 2025, argued that most crypto tokens were securities and that the existing rules already applied; his SEC brought dozens of actions and was accused by the industry of regulation by enforcement. His successor, Paul Atkins, sworn in as chair in April 2025, took the opposite view.
Within months the retreat was under way. In January 2025 the agency, then under acting chair Mark Uyeda, launched a Crypto Task Force led by Commissioner Hester Peirce to write real rules instead of litigating case by case. Then the dismissals came in a rush.
| Case or matter | Outcome | When |
|---|---|---|
| SEC v. Coinbase | Dismissed with prejudice | Feb 2025 |
| SEC v. Binance | Dismissed with prejudice | May 2025 |
| SEC v. Kraken | Dropped | 2025 |
| SEC v. Consensys | Dropped | 2025 |
| SEC v. Ripple | Appeals abandoned; roughly $125M penalty left in place | Aug 2025 |
| Robinhood, Uniswap Labs, OpenSea, Gemini probes | Closed without charges | 2025 |
Dismissed with prejudice is the key phrase for Coinbase and Binance: it means the SEC cannot refile the same claims. Commissioner Peirce, in a statement she titled Getting Back on Base, framed the Coinbase dismissal as a correction of an approach she had criticized for years. The Binance dismissal followed months later, ending one of the last major crypto actions still standing.
Ripple is the instructive outlier. After years of litigation and a mixed 2023 ruling, both sides finally abandoned their appeals in 2025, leaving intact the roughly $125 million civil penalty Judge Torres had ordered. The case the industry once treated as an existential referendum on token sales ended not with a bang but with a resolution neither side could call a full win. Surviving a multi-year SEC fight, much like surviving a major exploit, tends to come down to war chest and governance, the same dynamic that separates the projects in our study of which protocols live through a crisis and which die.
Project Crypto and the pivot to rulemaking
Atkins did not just stop suing. He announced a replacement strategy. On July 31, 2025, he unveiled Project Crypto, an initiative to write purpose-built rules for digital assets rather than forcing them through frameworks designed for stocks and bonds.
Its centerpiece is an innovation exemption, a mechanism that would let firms trade tokenized assets and test novel models under conditional, principles-based safeguards instead of full registration. Atkins signaled the exemption would arrive around the start of 2026, and the agency’s 2026 regulatory agenda lists a broader Regulation Crypto package covering custody, capital raising, and on-chain trading.
In his own framing, Atkins has been explicit that the era of setting policy through lawsuits is over. Policymaking, he wrote in the SEC’s 2026 regulatory-agenda statement, should flow from rulemaking and the Commission’s interpretive and exemptive authorities, not from ad hoc enforcement actions, though he added that the SEC would keep pursuing genuine lawbreakers. That philosophy has a long pedigree at the agency, just not a majority one until now. Commissioner Peirce spent years as a dissenting voice proposing a token safe harbor that would give new networks a multi-year grace period to decentralize before securities registration kicked in. Her long argument, that clear rules sort good actors from bad ones better than after-the-fact enforcement, is now effectively agency policy.
The March 2026 taxonomy: sixteen tokens leave securities law
The most consequential single document of the new era is the joint interpretation the SEC and CFTC issued on March 17, 2026, effective days later. It did two things. First, it set out a taxonomy separating digital commodities, whose value comes from a functional, decentralized network and ordinary supply and demand, from digital securities, whose value depends on a central team’s efforts. Second, it named sixteen specific tokens as digital commodities, placing them under CFTC jurisdiction and outside SEC registration requirements.
The sixteen named assets were Bitcoin (BTC), Ethereum (ETH), Solana (SOL), XRP, Cardano (ADA), Avalanche (AVAX), Polkadot (DOT), Hedera (HBAR), Litecoin (LTC), Dogecoin (DOGE), Shiba Inu (SHIB), Tezos (XTZ), Bitcoin Cash (BCH), Aptos (APT), Stellar (XLM), and Chainlink (LINK).
The inclusion of XRP and Chainlink mattered most: both had spent years in regulatory limbo, and the interpretation resolved their status in a single stroke. Tokens left off the list are not automatically securities, but they also do not get the interpretation’s safe treatment; their status still turns on a Howey analysis. Two caveats keep this from being a blanket amnesty. An interpretive release is not a statute, so a future Commission could revise it, and it does not bind courts the way legislation would. And it does not touch fraud: calling a token a commodity does not immunize the people who lie about it.
What the SEC still prosecutes: fraud never left
Strip away the registration cases and a hard core of enforcement remains: fraud. The Atkins SEC has been unambiguous that outright scams are still fair game, and the case flow proves it.
The agency’s own scorecard shows the shift. In its fiscal-year 2025 results, released in 2026, the SEC reported 456 total enforcement actions and 303 standalone actions, down 22% and 30% respectively from the prior year, with the remaining docket weighted heavily toward fraud and investor harm. Fewer cases, sharper focus.
The crypto fraud matters kept coming. The SEC charged the operators of PGI Global over a nine-figure crypto-and-forex scheme that promised guaranteed returns and worked, the agency said, as a Ponzi. In 2026 it brought fresh actions over a crypto mining investment scam and over social-media investment clubs that funneled retail money into fake platforms. These are the cases that survive every change of administration, because no one at the SEC, Democratic or Republican, defends a Ponzi scheme.
This is where enforcement meets the parts of crypto readers know best. The mechanics of a rug pull, a team minting a token, hyping it, then vanishing with the liquidity, map almost perfectly onto the fraud statutes the SEC still enforces, a pattern we traced in our look at the exit-scam machine behind DeFi rug pulls. The label changes from ICO to yield farm to AI token; the fraud template does not.
SEC or CFTC? The turf war behind every token
Running underneath all of this is a jurisdictional question older than crypto: who regulates what? The SEC oversees securities. The CFTC oversees commodities and their derivatives. Bitcoin has long been treated as a commodity; almost everything else lived in a gray zone.
The March 2026 taxonomy answered the question for sixteen tokens by routing them to the CFTC. The two agencies spent 2025 actively coordinating as well: in September they issued joint staff statements clarifying that registered exchanges are not barred from facilitating certain spot crypto trading, and they opened a formal harmonization effort with a joint roundtable. After years of the two regulators contradicting each other, the detente itself was news.
| Activity | SEC | CFTC |
|---|---|---|
| Token fundraising and ICOs | Yes | No |
| Investment contracts | Yes | No |
| Spot trading of named digital commodities | No (after the 2026 interpretation) | Yes |
| Derivatives: futures and perpetuals | No | Yes |
| Fraud | Yes, with a securities nexus | Yes, over commodities |
But an interpretation only goes so far. A durable answer needs Congress, which is what the CLARITY Act, formally the Digital Asset Market Clarity Act, is meant to provide. It would codify the split, sending decentralized digital commodities to the CFTC while keeping fundraising and investment contracts with the SEC. The House passed it in July 2025; the Senate Banking Committee advanced its version in 2026; a merged text of more than 600 pages landed in July 2026; and as of early August the Senate had filed a cloture motion but not held a final floor vote, with September the realistic window. Whether a decentralized exchange that never takes custody is even the kind of intermediary these rules describe is its own debate, one bound up with how automated market makers actually work.
The regulation-by-enforcement debate
The pivot has critics on both sides, and the disagreement is worth understanding because it will shape whatever comes next.
From the deregulatory side, the long-standing complaint, voiced most consistently by Peirce, was that using enforcement to make policy is fundamentally unfair: it punishes conduct without first telling the market clearly what the rules are. Peirce has argued for years that clear rules do a better job of separating good actors from bad ones than parachuting in later with lawsuits, a critique now embodied in the Crypto Task Force she leads.
From the investor-protection side, the worry is the mirror image: that dropping cases wholesale, some at advanced stages, tells bad actors the cop has left the beat. When the Commission moved to unwind the Ripple penalties, then-Commissioner Caroline Crenshaw dissented sharply, warning that the retreat undercut the court’s findings and the agency’s credibility. Her position lost, but it frames the stakes: a regulator that never litigates has no leverage, and a regulator that litigates everything freezes a young industry. The honest answer is that both critiques are partly right, and the 2026 settlement, clear rules for the honest and fraud cases for the crooked, is an attempt to thread them.
What builders can do to lower enforcement risk
For founders and teams, the practical question is not academic. Even in a friendlier climate, enforcement risk is manageable rather than absent. A few principles hold regardless of who chairs the SEC.
- Assume the fraud statutes always apply. Misleading investors about a token, its backing, its supply, or its returns is actionable in any administration. Disclosure is the cheapest insurance you can buy.
- Watch the Howey prongs, especially the efforts of others. The more a token’s value depends on a small team’s ongoing work and promises, the more it looks like a security. Real decentralization is a legal fact, not a slogan.
- Keep marketing honest and boring. Guaranteed returns, risk-free yield, and price predictions are the native language of enforcement complaints. The SEC reads your Discord and your ad copy.
- Document decentralization. If you plan to rely on the 2026 interpretation or a future safe harbor, keep records showing the network runs without you.
- Get real counsel before a token sale, not after a Wells notice. The cost of securities advice up front is trivial next to the cost of an investigation.
Infrastructure teams face a subtler version of the same test, because the line between building neutral software and operating a regulated service is exactly where several of the closed investigations lived. As more logic moves on-chain and into autonomous systems, that line gets harder to draw, a tension we examined in our reporting on who answers for on-chain AI agents when they move money.
What comes next
Three things will define SEC crypto enforcement over the next year. The first is legislation. If the CLARITY Act clears the Senate this autumn, the SEC and CFTC split moves from interpretation to statute, and the SEC’s crypto jurisdiction settles into a narrower, clearer lane. If it stalls again, the 2026 interpretation stays the governing text, durable but revisable.
The second is the innovation exemption and the wider Regulation Crypto package. How generous the exemption is, and how much it asks in return, will decide whether Project Crypto becomes a genuine on-ramp or a narrow carve-out that only the largest firms can use.
The third is the fraud docket. Bull markets breed scams, and the current rally has produced a fresh crop. Expect the SEC’s crypto enforcement to look less like a war on exchanges and more like a steady stream of Ponzi and misappropriation cases, the plain work the agency was doing before crypto existed and will be doing long after the current rules are settled. For anyone building or trading, the lesson is the same: the registration threat has faded, the fraud threat has not, and the difference between the two is now the most important thing to understand about the SEC.
Frequently Asked Questions
Is the SEC still going after crypto in 2026?
Yes, but selectively. The SEC dropped nearly all of its registration-based cases against exchanges and token projects in 2025, including Coinbase, Binance, and Kraken, and resolved its long-running fight with Ripple. What it still prosecutes aggressively is fraud: Ponzi schemes, misappropriation, and lying to investors. The agency’s own fiscal-2025 results show fewer total actions but a sharper focus on genuine investor harm.
What is the Howey test and why does it matter for tokens?
The Howey test comes from a 1946 Supreme Court case and defines an investment contract, and therefore a security, as an investment of money in a common enterprise with a reasonable expectation of profits from the efforts of others. For a token, the deciding question is usually whether buyers are counting on a central team’s work. The SEC’s March 2026 joint interpretation with the CFTC narrowed how Howey applies to crypto and named sixteen tokens as commodities rather than securities.
What is a Wells notice?
A Wells notice is a letter from the SEC’s enforcement staff telling a person or company that the staff intends to recommend charges. The recipient can respond with a Wells submission arguing against the case before the Commission votes to authorize it. A Wells notice is not a lawsuit, but it is the strongest signal that one may be coming.
Does the SEC or the CFTC regulate crypto?
Both, along a dividing line. The SEC handles securities: token fundraising, investment contracts, and fraud with a securities nexus. The CFTC handles commodities and their derivatives. A March 2026 interpretation routed sixteen major tokens, including Bitcoin, Ethereum, XRP, and Chainlink, to the CFTC as digital commodities. The pending CLARITY Act would write that split into federal law.
What penalties can the SEC impose in a crypto case?
As a civil regulator, the SEC cannot imprison anyone; that requires the Department of Justice. It can order disgorgement of ill-gotten gains, civil monetary penalties, injunctions against future violations, and bars that keep individuals from serving as officers, directors, or securities-industry participants. In the largest frauds, such as Terraform, an SEC civil settlement often runs in parallel with a separate DOJ criminal case.
By the HOGE Wire regulation desk. This article is informational and does not constitute legal or investment advice.