SEC Crypto Enforcement in 2026: The Quiet After the Crackdown

On October 1, 2026, the US Securities and Exchange Commission turned off most of its lights. A lapse in appropriations pushed the agency into its shutdown operating plan, leaving fewer than one in ten staff members at their desks and freezing a pipeline of more than 90 crypto exchange-traded fund filings, with new reviews, effective registration statements and fresh comment letters all on hold. A day later, Hester Peirce, the commissioner that crypto insiders had nicknamed “Crypto Mom,” cleared out her office for the last time, leaving the five-seat Commission with only two sitting members.

It made for a dramatic week. But for anyone who tracks SEC crypto enforcement, the silence was not new. The agency’s enforcement machine had already gone still, and not because of a budget fight. The people now running it had decided the machine was pointed at the wrong targets, and they spent 2025 and most of 2026 taking it off crypto almost entirely. The October shutdown only turned a deliberate quiet into a literal one.

This is an explainer for how US crypto enforcement actually works in 2026: what the Gensler-era crackdown was, how the SEC builds a case, why the numbers have fallen to a 16-year low, what still gets prosecuted, and what is quietly replacing litigation as Washington’s main tool for governing digital assets. Prices are in USD and the regulator throughout is the SEC.

What “Regulation by Enforcement” Meant

Under Gary Gensler, who chaired the SEC from April 2021 to January 2025, the agency’s working position was blunt: most crypto tokens were unregistered securities, and most of the platforms that traded them were operating as unregistered exchanges, brokers or clearing agencies. The preferred tool for that position was not a rulebook. It was a lawsuit.

The legal engine behind every one of those suits is the Howey test, named for a 1946 Supreme Court case about Florida orange groves. An asset is sold as an investment contract, and therefore a security, when there is an investment of money in a common enterprise with a reasonable expectation of profits derived from the efforts of others. Gensler argued that most tokens cleared that bar, because buyers were betting on a team to build a network and deliver gains. Rather than write crypto-specific rules to map that theory onto a new asset class, the SEC sued and told firms to “come in and register,” insisting the law was already clear.

The result was a docket, not a doctrine. According to Cornerstone Research, the Gensler-era SEC brought 125 crypto-related enforcement actions and collected roughly $6.05 billion in monetary penalties between April 2021 and December 2024, up sharply from the 70 actions filed under his predecessor Jay Clayton. Coinbase, Kraken, Binance, Ripple and others were all pulled into federal court on variations of the same unregistered-securities theory. Critics, including much of the industry and two future SEC chairs, called it regulation by enforcement: making policy case by case instead of through notice-and-comment rules that market participants could read in advance.

How an SEC Enforcement Case Is Built

To understand what changed, it helps to see the machinery that stayed the same. An SEC enforcement action moves through a fixed set of gates, and crypto cases are no exception.

It usually starts with a tip. The agency takes in tens of thousands every year; its fiscal 2025 report logged 53,753 tips, complaints and referrals. Digital-asset fraud now routes to the Cyber and Emerging Technologies Unit, or CETU, a team of about 30 specialists that replaced the old Crypto Assets and Cyber Unit in February 2025 and was deliberately refocused on fraud rather than registration theory. Staff open an informal inquiry, and if it has legs the Commission issues a formal order of investigation that authorizes subpoenas for documents and sworn testimony.

Before recommending charges, the staff sends a Wells notice, a formal heads-up that lets the target file a Wells submission arguing why no case should be brought. Then the commissioners themselves vote on whether to authorize an action. Most defendants settle; the ones who fight end up in federal district court or, historically, before an in-house administrative law judge. Whistleblowers who provide original information that leads to sanctions above $1 million can collect between 10 and 30 percent of what the agency recovers, and in fiscal 2025 the program paid about $60 million to 48 tipsters.

One Supreme Court decision reshaped that last stretch. In SEC v. Jarkesy (June 2024, decided 6 to 3), the justices held that the Seventh Amendment entitles defendants to a jury trial whenever the SEC seeks civil penalties for fraud. That pushed contested fraud cases out of the agency’s in-house forum and into federal court, where they cost more and move slower. The machinery still exists in 2026. What changed is how often the agency bothers to aim it at the question of whether a token is a security.

The Atkins Pivot: Dropping the Marquee Cases

Paul Atkins was sworn in as chair in April 2025, after a transitional stretch under acting chair Mark Uyeda. On January 21, 2025, days into the new administration, the SEC had already stood up a Crypto Task Force led by Hester Peirce. Its first visible product was not a rule. It was a series of retreats.

Coinbase went first. The Commission voted to dismiss its case, and a joint filing landed in late February 2025. Coinbase chief legal officer Paul Grewal wrote that the agreement was “righting a major wrong” and that the case “should never have been filed in the first place.” Kraken, ConsenSys and Cumberland DRW followed, all dismissed with prejudice in March. Binance and its founder Changpeng Zhao were cut loose in May. In August, the SEC and Ripple both dropped their appeals, leaving standing only the roughly $125 million penalty a court had already imposed on Ripple for institutional XRP sales. The long-running Justin Sun and Tron matter settled in early 2026.

Beyond the dismissals, the agency quietly closed investigations into Robinhood, Uniswap Labs, OpenSea, Gemini, Crypto.com, Yuga Labs, Immutable, Helium, PayPal, Aave and Ondo Finance without bringing a single charge. Taken together, the roster is the clearest signal of the pivot. The unregistered-securities theory that defined the Gensler years was not refined. It was abandoned.

The Numbers: A 16-Year Low

The statistics match the mood. The SEC’s fiscal 2025 enforcement results, announced in April 2026, counted 456 total actions, 303 of them standalone, and a headline $17.9 billion in monetary relief. That number flatters the record, because about $14.9 billion of it traced to a single 2009-era Allen Stanford Ponzi judgment, leaving a real underlying figure closer to $2.7 billion. Atkins framed the year as a reset: the agency, he said, had “put a stop to regulation by enforcement” and had “redirected resources toward the types of misconduct that inflict the greatest harm,” singling out “fraud, market manipulation, and abuses of trust.”

The crypto-specific collapse is sharper. Cornerstone Research counted 33 crypto enforcement actions in fiscal 2024 and just 13 in fiscal 2025, a drop of roughly 60 percent, with digital-asset penalties of about $142 million, under 3 percent of the prior year’s total. Of those 13, five were filed before Gensler left in January 2025; all eight brought under the new leadership carried fraud allegations. Crypto was also removed entirely from the Division of Examinations’ 2026 exam priorities, a quiet administrative signal that the topic had fallen off the agency’s worry list.

The slowdown is not limited to crypto. A Cornerstone and Brattle analysis found the SEC filed only 92 new enforcement actions in the first half of fiscal 2026, against an average near 225 for the same period across fiscal 2018 to 2025, and brought just five actions against public companies and subsidiaries, the fewest in 16 years. The agency did not merely retreat from crypto. It recentered its entire enforcement posture around individual fraud.

Fraud Is Still Fraud

The retreat was from registration theory, not from fraud. The Atkins SEC runs what amounts to a two-track model: write rules for how tokens are issued and traded, and keep prosecuting the people who steal. CETU holds the crypto fraud specialists, and in September 2025 the agency added a Cross-Border Task Force aimed at pump-and-dump and ramp-and-dump schemes, negligent gatekeepers such as auditors and underwriters, and foreign-based issuers reaching US investors.

The biggest number on the books is still a fraud case. Terraform Labs and its founder Do Kwon, whose TerraUSD stablecoin collapse erased tens of billions of dollars in 2022, produced a settlement totaling about $4.47 billion after a 2024 jury verdict. Kwon pleaded guilty to criminal fraud charges in August 2025 and was sentenced to 15 years in prison that December. Nothing about the enforcement pivot softened that outcome.

The pattern held right up to the shutdown. On September 29, 2026, two days before the funding lapse, the SEC charged four entities in the Southern District of New York over two schemes that together drained more than $15 million from retail investors. The Cryptoaiml entities allegedly took over $12.5 million from more than 300 investors through WhatsApp groups pushing fake AI-generated trading signals, while the related TSAI entities allegedly took at least $2.8 million from roughly 1,715 people. There was no real platform, no real trades, and withdrawals were blocked behind bogus advance fees. One outfit even displayed a screenshot of a falsified SEC Form D as proof it was certified by regulators. The irony was hard to miss: a case about faking SEC paperwork landed days before the real SEC went dark.

This is the enforcement that survives in 2026. It targets theft, deception and market manipulation, the conduct that would be illegal whether the instrument involved were a token, a stock or a timeshare. The question the Gensler SEC spent years litigating, whether a given token was itself an unregistered security, has moved almost entirely out of the courtroom and into a rulebook that is still being drafted.

From the Courtroom to the Rulebook

If enforcement is the stick the SEC put down, rulemaking is the carrot it picked up. The groundwork came in Project Crypto, unveiled in an Atkins speech in July 2025, which promised to move digital-asset policy from case-by-case litigation to written rules that builders could plan around.

The first major deliverable was a joint interpretive release with the Commodity Futures Trading Commission in March 2026, which stated plainly that most crypto assets are not securities. It sorted digital assets into five buckets: digital commodities, digital collectibles, digital tools, payment stablecoins and tokenized securities. It named 16 tokens as digital commodities rather than securities, including Bitcoin, Ether, Solana, XRP and Chainlink, and treated mining, staking rewards and airdrops as generally outside securities status on their own.

That taxonomy hands the market-structure job to the CFTC, now led by chair Michael Selig, who was sworn in at the end of 2025 after serving as chief counsel of the SEC’s own Crypto Task Force. Payment stablecoins got their own lane under the GENIUS Act, the stablecoin law signed in July 2025, which treats compliant payment stablecoins as neither securities nor commodities. That is a different animal from the crypto-collateralized CDP stablecoins that mint dollars on-chain without a bank, but both now sit outside the SEC’s securities perimeter by design.

Regulation Crypto Assets: The Safe Harbor in Draft

The centerpiece of the new rulebook is Regulation Crypto Assets, proposed on August 18, 2026 and published in the Federal Register three days later. The roughly 400-page package tries to do in rule text what years of lawsuits never settled: tell a founder, in advance, how to launch a token without accidentally selling an unregistered security.

It does three big things. First, it creates two new exemptions from registration under the Securities Act of 1933: a startup exemption to raise up to $5 million over as much as four years with whitepaper-style disclosure, and a larger fundraising exemption for up to $75 million over 12 months. Second, it offers a Rule 400 safe harbor under which the investment contract wrapped around a token can formally come to an end once the network is functional enough that buyers no longer depend on a central team. Third, and most controversially, it carves a pathway that would preempt state securities registration for covered offers and certain secondary-market trades, leaving states only their antifraud authority.

The preemption piece is where the fight is. Eighteen state attorneys general, led by New York’s Letitia James, have come out against overriding state securities enforcement, warning that it would strip away a layer of investor protection that has operated for decades. The proposal advanced by written vote of Atkins, Peirce and Uyeda with no dissent, poses more than 150 discrete requests for comment, and had drawn hundreds of comment letters by early October. A companion Innovation Exemption order followed on September 17. Comments close on October 20, 2026, and the agency does not expect a final rule before the first quarter of 2027, by which point it could look materially different from the draft.

The Custody Question: Who Holds the Keys

The second big docket arrived on the worst possible day. On October 1, 2026, the SEC proposed a roughly 760-page overhaul of how investment advisers and regulated funds may custody crypto, amending both the Investment Advisers Act of 1940 and the Investment Company Act of 1940. The timing was almost comic: the proposal landed the same day the funding lapse took hold, prompting CNBC to note that while Washington’s big crypto bill was stuck, the SEC was pushing ahead anyway.

The proposal opens two paths. State-chartered trust companies could serve as qualified custodians for crypto, provided their state regulator explicitly authorizes crypto custody and they maintain audited financials, internal-control reports and strict segregation of client assets. And an adviser could hold a client’s crypto itself, through conditional self-custody, but only after a written determination that no qualified custodian will hold the asset, only while that stays true, and only if the adviser alone controls the keys. Atkins put the gap bluntly in a statement accompanying the proposal: “For too many assets a qualified third-party custodian simply does not exist yet,” adding that since Bitcoin’s 2008 debut the agency’s rules “have not kept pace.”

The subtext is an accounting fight the industry already won. Staff Accounting Bulletin 121, issued in 2022, had effectively pushed custodians to carry customer crypto on their own balance sheets, a capital penalty that kept most banks out; SAB 122 rescinded it in January 2025, and the separate 2023 Safeguarding Rule was withdrawn later that year. Who holds the keys is the oldest question in crypto, and in practice it is a key-management problem, the subject of our guide to multisig best practices. Investors who reach crypto through a fund rather than a wallet face a quieter version of the same question and should read the custody and tax fine print that comes bundled with any crypto ETF.

Then the Lights Went Out: The October Shutdown

All of this collided with a budget. On October 1, 2026, the SEC entered a lapse in appropriations and switched to its shutdown operating plan, keeping fewer than one in ten staff members on duty. An agency that had spent 18 months deliberately quieting its crypto enforcement was now quiet by force.

The plan is specific about what stops. During a lapse, non-emergency enforcement, litigation and examinations are discontinued. A skeleton crew stays on for emergencies “involving the safety of human life or the protection of property, including law enforcement,” and for time-sensitive matters such as a statute of limitations about to expire. In practice that means an active fraud or a threat to market integrity, the Cryptoaiml type of case, can still move, while routine investigations and the slow grind of contested litigation simply pause.

The most visible casualty was the ETF pipeline. With reviewers furloughed, more than 90 crypto ETF filings stalled: the 19b-4 and S-1 review pathways were suspended, registration statements could not be declared effective, and no new comment letters went out. Already-trading products such as BlackRock’s IBIT and Fidelity’s FBTC kept changing hands, but anything waiting on a sign-off was stuck. The freeze also squeezed the rulemaking calendar, because the Regulation Crypto Assets comment window closes on October 20, in the middle of the shutdown; the electronic docket can still receive letters, but the staff who would read and answer them are mostly at home.

So by early October, SEC crypto enforcement was quiet on two levels at once. The structural retreat had already cut new actions to a trickle, and the funding freeze layered a hard stop on top of whatever remained. For a brief, strange window, the agency charged with policing the market was barely at its desk.

A Commission of Two (or One)

Behind the quiet is a thinning roster. Caroline Crenshaw, the last Democrat on the Commission and the most persistent internal critic of the crypto pivot, left when her term lapsed in early 2026. Hester Peirce’s last day was October 2. That leaves Chairman Atkins and Commissioner Uyeda, both Republicans, running a five-seat body with three empty chairs and no nominees publicly in line.

Peirce’s exit carries weight beyond the headcount. Nicknamed “Crypto Mom” for years of pushing clearer digital-asset rules, she served more than eight years, built the Crypto Task Force, and was the only sitting commissioner on record defending self-custody as something close to a fundamental right. In her resignation letter she described the job of “maximizing people’s freedom to choose what is best for themselves and their families within sensible regulatory parameters” as “a delicate and vitally important task for the regulator,” and called her tenure “the honor of my professional lifetime.” She is headed to Regent University School of Law.

Her departure coincided with a quieter structural change. On September 30, the SEC amended its quorum rule so that a single non-recused commissioner can constitute a quorum when the others are disqualified, a move critics promptly labeled a Commission of One. The mechanics matter for enforcement, because every charging decision and every final rule needs a Commission vote. A two-member panel can deadlock, a one-member quorum invites legal challenge, and a thinner commission is easier to attack in court as unrepresentative of the balanced, bipartisan body Congress designed.

How Durable Is the Retreat?

Here is the uncomfortable part for anyone cheering the new posture: almost all of it can be undone. The staff statements that shelter staking, mining and airdrops are non-binding, can be withdrawn by a future staff, and bind no court. A final Regulation Crypto Assets rule would be sturdier, but it does not exist yet, and the interpretive release that reclassified 16 tokens is guidance, not statute.

Congress could have hard-wired the new framework into law, and nearly did. The CLARITY Act, which would have written the SEC and CFTC division of labor into statute, failed a Senate cloture vote on September 15, 2026, by 49 to 50, far short of the 60 needed to proceed, and not a single Democrat voted to advance it. Its collapse left the entire SEC-versus-CFTC settlement resting on agency interpretation rather than law. The politics behind that vote, including the role of crypto spending in the coming elections, are the subject of our look at crypto’s midterm math.

A Supreme Court ruling made the ground shakier still. In Trump v. Slaughter (June 2026), the justices overturned the 1935 precedent Humphrey’s Executor, holding that the president may remove the heads of independent agencies at will. Nominally an FTC case, it reaches the SEC and CFTC directly, stripping away the removal protection that had made the whole enforcement pivot look permanent. A future chair, or a future president, now faces far fewer legal guardrails if they want to swing the pendulum back.

Not everyone sees enlightened modernization. Lee Reiners, a lecturing fellow at Duke University, argued that the Regulation Crypto Assets proposal delivers the industry’s wish list almost verbatim: “easier access to retail investors, immediate token liquidity, broad preemption of state securities laws, and a mechanism for exiting federal securities regulation altogether.” His verdict was caustic: “Welcome to policymaking by crypto, for crypto.” Whether that reads as capture or as a long-overdue correction is, increasingly, the central argument in US crypto policy.

What It Means for Builders and Investors

Strip away the drama and a few practical rules of thumb survive the 2026 turbulence.

• Fraud is still prosecuted. Fake trading bots, pump-and-dumps and plain misappropriation are squarely in scope. The quiet is about registration theory, not about theft, and CETU plus the Cross-Border Task Force are still open for business even during a shutdown.
• Guidance is not law. Staff statements and interpretive releases can be withdrawn or challenged. A token that looks safe under 2026 guidance is not safe the way a statute would make it, and the CLARITY failure means no statute is coming soon.
• The safe harbor is a draft. The $5 million and $75 million exemptions and the Rule 400 off-ramp do not exist yet. Building as if they are final is a bet, not a compliance plan; watch the October 20 comment close and a likely first-quarter 2027 final rule.
• Custody rules are moving. If you reach crypto through an adviser or a fund, the pending custody proposal will shape who can legally hold the keys. If you self-custody, that problem is yours to solve.
• The ETF queue is frozen by the shutdown, not the merits. The roughly 90 pending filings are stuck on process, not rejected. When funding resumes, the backlog resumes with it.

The through-line is uncertainty of a new kind. The dominant risk of 2021 to 2024, being sued for selling an unregistered security, has receded almost to zero. In its place sits the risk that the permissive settlement of 2026 is built on sand, vulnerable to the next election, the next chair, or the next court ruling.

The View From Europe: MiCA as the Mirror Image

For contrast, look across the Atlantic. While the SEC governs crypto through dropped cases, draft rules and a government shutdown, the European Union runs a finished statute. The Markets in Crypto-Assets regulation, MiCA, saw its transitional period end on July 1, 2026, and the rulebook is now fully live across the bloc, with a few hundred licensed firms operating under a single regime.

Three differences matter for enforcement. MiCA is law, not staff guidance, so it does not evaporate when a chairman changes or an appropriation lapses. It is harmonized across member states, so there is no federal-versus-state preemption fight of the kind now stalling Regulation Crypto Assets. And a funding gap in one capital does not switch off the rulebook, because supervision sits with national regulators backed by a standing EU framework rather than a single agency that can be furloughed.

The contrast is about method, not ambition. The US still prosecutes fraud aggressively, and its capital markets dwarf Europe’s. But the two blocs are running a live experiment in how to govern a new asset class. The US is betting it can reach durable clarity through rulemaking and a two-agency split; Europe legislated first and is now arguing about the rewrite. Which approach proves more resilient is the real question lurking behind a dark SEC, and the answer will shape where the next cycle of builders chooses to incorporate.

Frequently Asked Questions

Did the SEC stop enforcing crypto rules in 2026?

No. It largely stopped suing companies over whether tokens are unregistered securities, which fell to a 16-year low, but it still prosecutes fraud, market manipulation and misappropriation. The September 2026 Cryptoaiml case, charging a fake AI-trading scheme, shows that investor-harm enforcement continues even as registration cases disappear.

Why are SEC crypto enforcement actions at a 16-year low?

Chair Paul Atkins ended the Gensler-era approach critics called regulation by enforcement, dropped marquee cases such as Coinbase and Kraken, and redirected the Enforcement Division toward fraud. Cornerstone Research counted crypto actions falling from 33 in fiscal 2024 to 13 in fiscal 2025, a drop of roughly 60 percent.

How does the October 2026 government shutdown affect the SEC?

A funding lapse on October 1 left the SEC operating with fewer than 10 percent of its staff. ETF reviews and more than 90 pending filings are frozen, non-emergency enforcement and litigation are paused, and no new comment letters are issued, though emergency matters such as active fraud continue.

What is Regulation Crypto Assets and when could it become final?

It is the SEC’s roughly 400-page August 2026 proposal creating two token-offering exemptions, a safe harbor that lets a token exit securities treatment, and a state-preemption pathway. The comment period closes on October 20, 2026, and a final rule is not expected before the first quarter of 2027.

Is crypto now safe from US securities law?

Not reliably. Many protections are staff guidance or draft rules that can be withdrawn or challenged, the CLARITY Act failed in the Senate, and Trump v. Slaughter made commissioners removable at will. Today’s permissive posture is real but not locked in, so builders should treat it as provisional.

By Priya Reddy, regulation desk, HOGE Wire.