SEC Civil Penalties Explained

SEC Civil Penalties Explained

The penalty is never the point. The penalty is the instrument the Commission employs to extract something more durable than money: a change in conduct, a public record of wrongdoing, a signal to the market that certain behavior carries a cost the wrongdoer did not anticipate when the behavior seemed profitable. What arrives in the enforcement order as a dollar figure began, months or years earlier, as a set of decisions made in conference rooms where the consequences felt abstract.

The Securities and Exchange Commission possesses authority to impose civil monetary penalties under several statutes: Section 20(d) of the Securities Act of 1933, Section 21(d)(3) of the Exchange Act of 1934, and parallel provisions in the Investment Company Act and the Investment Advisers Act. The authority was not original to the agency. It was conferred by the Securities Enforcement Remedies and Penny Stock Reform Act of 1990, which granted the Commission a tool it had previously lacked. Before that Act, the SEC could seek injunctions and disgorgement in federal court, but it could not, in its own name, impose a financial punishment calibrated to the severity of the violation.

That distinction matters more than most practitioners acknowledge.

The Three-Tier Structure

Every civil penalty the SEC imposes operates within a statutory framework of three escalating tiers, each governed by the nature of the violation and, at the highest level, by the harm it produced. The tiers apply per act or omission, a phrase whose implications one should consider before dismissing the maximum figures as remote.

Tier I applies to any violation of the securities laws, regardless of intent. The current inflation-adjusted maximum, effective January 15, 2025, stands at $11,823 per violation for a natural person and $118,225 per violation for an entity. These figures represent the floor of the Commission’s penalty authority. They apply to technical infractions, recordkeeping failures, late filings, and the category of violations that involve no fraud and no identifiable victim. A company that fails to preserve certain electronic communications, for instance, encounters Tier I. The amounts are not large in isolation, but in isolation is not how penalties are calculated.

Tier II applies where the violation involved fraud, deceit, manipulation, or a deliberate or reckless disregard of a regulatory requirement. The ceiling rises to $118,225 per violation for individuals and $591,127 for entities. The distinction between Tier I and Tier II rests on the mental state of the violator. A negligent misstatement in a quarterly filing may remain at Tier I. The same misstatement, made with knowledge of its falsity or with reckless indifference to accuracy, crosses into Tier II. The line between these two tiers is, if we are being precise, not always drawn where the statute suggests it should be.

Tier III requires everything Tier II requires and adds a further condition: the violation must have resulted in substantial losses to other persons, created a substantial risk of such losses, or produced a substantial pecuniary gain to the violator. The maximums per violation reach $236,451 for individuals and $1,182,251 for entities under the Exchange Act. In federal court actions, the court may also impose a penalty equal to the defendant’s gross pecuniary gain, which carries no fixed ceiling at all. For insider trading violations by controlling persons, a separate provision applies under Exchange Act Section 21A(a)(3), with a current maximum of $2,626,135.

The phrase “per act or omission” is where the arithmetic becomes consequential. A company that misstates its financial results to fifty thousand investors has not committed one violation; it has, under a plausible reading of the statute, committed fifty thousand, each one carrying a separate penalty ceiling that compounds the exposure into figures that no balance sheet was designed to absorb, figures that the Commission rarely pursues to their theoretical limit but that function, in settlement negotiations, as the architecture within which all concessions are measured. The Commission’s discretion operates in the distance between the per-violation ceiling and the penalty it actually extracts. That distance is considerable, and it is not governed by the same principles in every case.

These penalty amounts are adjusted each year for inflation under the Federal Civil Penalties Inflation Adjustment Act Improvements Act of 2015. The CPI-U multiplier for 2025 was 1.02598. The adjustments are mechanical, applied to the prior year’s figures and rounded to the nearest dollar.

Civil Penalties After Jarkesy

In June 2024, the Supreme Court held in SEC v. Jarkesy that when the Commission seeks civil penalties for securities fraud, the Seventh Amendment entitles the defendant to a jury trial. The 6-3 decision, authored by Chief Justice Roberts, eliminated the Commission’s ability to impose fraud-based civil penalties through administrative proceedings before its own administrative law judges. The practical consequence: the SEC must now bring such actions in federal court, before an Article III judge and a jury.

The ruling was consequential. It was also, in certain respects, already reflected in the Commission’s behavior. The SEC had been filing contested fraud cases in federal court for several years, in part because constitutional challenges to the ALJ process had made administrative proceedings an unreliable vehicle for litigated matters. Data cited in Justice Gorsuch’s concurrence suggested that the Commission won approximately ninety percent of contested in-house proceedings, compared with sixty-nine percent of federal court cases. The incentive to litigate before a tribunal that one also administers is not difficult to perceive.

But the decision raised questions that remain unresolved. The Jarkesy holding addressed fraud-based penalty actions, leaving open whether the Commission may still impose penalties administratively for non-fraud violations: failure to supervise, books-and-records infractions, “causing” liability under the securities statutes. The dissent warned that the majority’s reasoning could implicate dozens of agencies and more than two hundred statutes. Whether that prediction materializes is a question the lower courts have only begun to address, and I am less certain than most commentators about how far the reasoning will extend.

What Jarkesy did not disturb is the Commission’s ability to settle enforcement matters administratively, including those involving penalties, because defendants may waive Seventh Amendment rights by consent. The settlement process, which accounts for the great majority of enforcement resolutions, remains intact. The shift applies to contested proceedings. The economics of settlement, for better or worse, have not changed.

Cooperation and the Seaboard Factors

The Commission’s cooperation framework traces to the 2001 Seaboard Report, which identifies four broad considerations: self-policing, self-reporting, remediation, and cooperation with the investigation. These are not statutory criteria. They are the Division of Enforcement’s published framework for exercising discretion, and the weight assigned to each factor varies in ways that the published orders do not always make transparent.

In early 2026, the SEC updated its Enforcement Manual for the first time since 2017. The revised Manual confirms that the Division may recommend reduced penalties, or no penalty at all, where meaningful cooperation is demonstrated. Self-reporting credit applies when an entity discloses misconduct before the staff discovers it through other channels. The Manual also states that self-reporting credit is rarely appropriate for conduct already receiving media coverage or under investigation by another regulator.

The off-channel communications enforcement sweep from recent years illustrates the practical weight of cooperation. One broker-dealer (which, it should be noted, had self-reported its violations and cooperated throughout the investigation while other firms in the same sweep stonewalled or delayed production for months) agreed to pay a civil penalty of $2.5 million. Other firms charged in the same initiative, which had not self-reported, paid penalties several times larger.

The lesson is plain enough. Something like forty percent of the companies I encounter in these matters still do not appear to have absorbed it.

The Penalty Calculus Under Atkins

The current Commission, under Chairman Paul Atkins, has adopted a posture that differs from the preceding administration’s approach. Atkins has stated that large corporate penalties penalize shareholders for the misconduct of employees. Enforcement resources, in his view, should be directed toward individual accountability and cases involving genuine investor harm.

In fiscal year 2025, overall monetary settlements against public companies fell to the lowest level recorded in a year of SEC administration change. The largest penalties were all imposed before Inauguration Day. The Commission dismissed several actions from the prior era, including its litigation against Coinbase and parts of its case against Ripple. The Division’s workforce has contracted by roughly fifteen percent, and the fiscal year 2026 budget contemplates staffing that remains at current levels.

Margaret Ryan, who assumed the role of Enforcement Director in September 2025, has indicated that the Division will focus on core fraud and market integrity cases. Insider trading, offering fraud, and accounting fraud remain priorities. Whether these stated priorities produce lower aggregate penalties or merely redirect attention toward fewer, larger fraud cases is a question that the data from the coming fiscal year will answer. The Commission has continued to bring insider trading actions at a steady pace.

One should not confuse a more measured posture with an absence of enforcement. The statutory penalty authority remains unchanged. The tier structure remains unchanged. What has shifted is the institutional willingness to deploy that authority against companies for violations that do not involve identifiable investor harm. Even that shift may prove impermanent. Every enforcement philosophy in the Commission’s history has been.

What a Penalty Represents

The penalty is the part of the enforcement order that the public remembers. It is almost never the part that matters most.

Disgorgement returns ill-gotten gains to harmed investors. Injunctions restrain future conduct. Officer-and-director bars remove individuals from positions of authority. Civil penalties, alone among these remedies, serve a punitive and deterrent function, and the Supreme Court in Jarkesy grounded its Seventh Amendment analysis on precisely that distinction: penalties punish and deter, while disgorgement and restitution restore the status quo. The penalty is legal relief. The rest is equitable.

The penalty figure also determines the size of any whistleblower award under the Dodd-Frank Act, since such awards are calculated as a percentage of total monetary sanctions exceeding one million dollars. The relationship between the penalty amount and the whistleblower payout creates an incentive structure that operates quietly beneath the surface of the enforcement apparatus.

If you have received a Wells notice, or if your firm has been contacted in connection with a Commission investigation, the penalty is the beginning of a conversation. How the Commission’s discretion operates, how the tier structure interacts with the cooperation framework, and how the current enforcement leadership weighs the factors that determine whether a matter resolves at Tier I or Tier III: these are questions that counsel answers before the first settlement discussion begins. A first conversation with our firm costs nothing and assumes nothing. It is the beginning of a diagnosis, and in these matters, the diagnosis determines whether the resolution is measured in thousands or in something considerably larger.