Blog
What Is an SEC Subpoena and Why Did I Get One?
The envelope changes nothing. By the time an SEC subpoena reaches your desk, the investigation that produced it has been running for months, sometimes longer, through channels you were not aware of and on the basis of information you may not have seen. The subpoena is not the beginning; it is the moment the Commission decides you are permitted to know.
Most of what follows addresses the mechanics of responding. But the mechanics matter less than the posture, and the posture matters less than the timing. A subpoena answered well in the first week produces a different record than one answered identically in the third.
The Formal Order of Investigation
Before the SEC can compel anything from you, a majority of the Commission must issue what is called a formal order of investigation. The formal order is an internal Commission document, not filed with any court, that authorizes designated staff attorneys to issue subpoenas, take sworn testimony, and require the production of records. Without that order, the SEC’s enforcement attorneys can request your cooperation, but they cannot demand it.
The distinction matters in practice. In the months or years before a formal order issues, SEC staff conduct what the agency calls informal inquiries: telephone calls to employees, voluntary requests for documents, conversations with compliance officers that are framed as routine. These conversations are not casual. The information gathered during an informal inquiry is the information used to justify the formal order. What you said on that call last autumn, the one that seemed procedural and brief, may have been the catalyst.
In March 2025, the Commission adopted a rule requiring a majority vote of its commissioners to approve every formal order. For the prior fifteen years, that authority had been delegated to the Director of the Division of Enforcement, which allowed staff attorneys to obtain subpoena power without a full Commission vote. The change added a step that has, in practice, slowed the pace at which new investigations open. Whether it has also reduced their number is a question the enforcement data has not yet resolved.
Six months after that rule took effect, the SEC lost roughly fifteen percent of its workforce to retirements and other departures. The practical result has been fewer investigators, longer timelines, and a stated intention by the Commission’s current leadership to concentrate on what it describes as core fraud and market manipulation. The subpoena you received passed through a narrower gate than it would have two years ago. It means someone at the Commission decided your matter was worth the diminished capacity.
Subpoenas for Documents and Subpoenas for Testimony
The SEC issues two forms of subpoena, and you may receive both.
A subpoena duces tecum compels the production of documents: emails, contracts, financial records, correspondence, trading logs, and communications on platforms the Commission now treats as part of the documentary record. Under the revised 2026 Enforcement Manual, the definition of “document” includes WhatsApp, iMessage, Signal, Slack, Teams, Discord, Telegram, and messages sent or received on personal devices. The subpoena will specify a deadline and an address for production. It will not explain why those documents matter.
A subpoena ad testificandum compels you to appear at a designated time and place to give sworn testimony before a court reporter and one or more staff attorneys. Your counsel may be present, may advise you during breaks, and may note objections for the record. Your counsel cannot, however, object to questions the way one would before a judge. There is no judge in the room. The objections are preserved but not adjudicated in the moment.
The third possibility is that you receive both: a document request followed, weeks or months later, by a demand that you testify about the documents you have already produced.
The 2025 Rule Change and the 2026 Enforcement Manual
The enforcement environment in which your subpoena was issued is not the one that existed three years prior.
The March 2025 de-delegation rule changed how investigations begin. Under the prior arrangement, a senior enforcement official could open a matter and authorize subpoenas within days. The new process requires a written memorandum to the full Commission, review by each commissioner’s office, and then a vote. How much this has slowed the average investigation is, if we are being precise, not something anyone outside the Commission can state with authority. The enforcement statistics for fiscal year 2025 reflected a decline in both the number of actions filed and total monetary settlements, though the causation is entangled with staff reductions, a prolonged government shutdown, and a reorientation toward individual liability.
In February 2026, the SEC released a revised Enforcement Manual, the first update of its kind in close to a decade. Several provisions affect what your subpoena requires. The preservation obligations now extend to encrypted and ephemeral communications on personal devices. The Manual codified a criminal referral framework, specifying six factors the staff must consider when deciding whether to refer a matter to the Department of Justice. Whether the framework produces more referrals or fewer is something no one can say yet; the factors themselves (harm to investors, the respondent’s gain, specialized knowledge, awareness of harm, recidivism, and whether DOJ involvement would add protection) read more as a checklist than a standard.
The subpoena itself tells you what to produce and when. It does not tell you why, or what has already been said about you, or whether the investigation carries a second track through a different agency entirely.
Whether a criminal referral has been made in your case is something the staff will not disclose. Your counsel can assess the likelihood from the nature of the inquiry and the scope of the document requests. These are inferences, drawn from tone and scope, and they are the best available.
The First Seventy-Two Hours
The letter arrives on an ordinary day, often a Friday, often when the person receiving it has something else requiring attention. The first response is almost always the wrong one: to read the subpoena alone, to telephone a colleague and describe it in general terms, to begin pulling files before understanding what the document request actually encompasses. We have observed this sequence enough times to describe it from memory. The recipient has made three calls and sent two emails about it before speaking with an attorney. Each of those communications is now potentially within the scope of what can be requested.
Engage counsel before engaging anyone else. Before discussing the subpoena with a business partner, a compliance officer, or a family member. Before opening the filing cabinet or the inbox. The preservation obligation attaches at the moment of service, and in certain cases before: the 2026 Manual directs enforcement staff to issue preservation letters early in an investigation, which means the duty to preserve may predate the subpoena by weeks.
Your Rights and Their Limits
You have the right to be represented by counsel. You have the right to have that counsel present during sworn testimony. You have the right, under the Fifth Amendment, to decline to provide testimony that might incriminate you, provided the subpoena addresses you in your individual capacity. These protections are real. They are also more limited than most recipients expect.
The Fifth Amendment protects individuals. It does not extend to corporations. If the subpoena names you as custodian of records for a corporate entity, you cannot invoke the privilege to withhold corporate documents, even if those documents expose you personally. The privilege attaches to the capacity in which you are compelled, not to the content of what is compelled. A fund manager in the Eastern District learned this several years ago (who believed, on the advice of prior counsel, that invoking the privilege on the individual subpoena would protect him from the custodial one, only to discover that the two subpoenas operated on separate tracks). The privilege covered one.
And if you hold a FINRA registration, the calculus becomes more constrained. FINRA’s position, applied without exception in every case we have examined, is that invoking the Fifth Amendment in response to a Rule 8210 request results in an industry bar. The SEC investigation and the FINRA inquiry may proceed in parallel, and the strategic decision made in one shapes the outcome of the other in ways that are not easy to reverse.
Attorney-client privilege and the work product doctrine also protect certain material, though their application demands precision at the outset. When we receive a subpoena on behalf of a client, the first step is not to begin producing documents. The first step is to map the universe of potentially privileged material and construct a privilege log before anything else leaves the office. Most firms build the log alongside production, adding entries as documents are reviewed and gathered. We prepare it first, because the log signals to the SEC what categories of material exist, what conversations occurred, and what professional advice was sought. A privilege log put together in a rush tends to give the SEC more information than it protects.
Whether to invoke the Fifth Amendment during testimony is a question I find myself less certain about than the prevailing consensus suggests. The standard recommendation is to assert broadly and early. There are circumstances where selective assertion, question by question, produces a better outcome, particularly where the witness can describe events without personal exposure and where cooperation (which the 2026 Manual defines as something beyond mere compliance with subpoenas) carries material weight in the staff’s recommendation. The statute is not entirely clear on where that line falls, which is part of the difficulty.
What the Subpoena Does Not Tell You
The subpoena specifies what to produce. It does not specify whether you are a target, a subject, or a witness. It does not disclose whether a parallel criminal investigation is underway. It does not reveal what other parties have already produced or what testimony has been given. The subpoena functions the way a one-way mirror functions in a police precinct that has not been renovated since the 1970s: it is a surface, but only one side can see through it.
Your attorney can request a copy of the formal order and, from its language, derive some understanding of the scope. Enforcement staff may, in preliminary conversations, provide context beyond what the subpoena contains. The 2026 Manual’s provisions on the Wells process (which is the stage at which the SEC informs a target of its intent to recommend charges, affords four weeks for a written response, and now requires that staff disclose the salient, probative evidence from the investigative file) apply only if the investigation reaches that stage. Most do not.
Whether the Commission views the subpoena as a step toward litigation or as the start of a conversation is something the document itself cannot answer.
After Compliance
After you have responded, the investigation continues on the SEC’s timeline. You may hear nothing for months. You may receive a second subpoena, a request for testimony, or a call from your attorney about a particular document the staff wants to discuss. This is the ordinary rhythm of a federal securities investigation.
You produce the documents and then you wait, and the waiting is the part no one accounts for.
The investigation may close with no action. The staff may issue a Wells notice, beginning the process that can lead to charges. The staff may refer the matter to the Department of Justice for criminal prosecution. In certain cases, the SEC offers settlement before filing. In others, it proceeds through an administrative hearing or a civil action in federal court. These are distinct paths with distinct consequences, and the path selected is shaped by decisions made in the first weeks of your response.
The first conversation with counsel is where this process begins, and it costs nothing. Not because the work that follows is inexpensive, but because the initial reading of the subpoena, the review of the formal order, the first assessment of where the exposure concentrates, is work that must precede any strategy. We treat that conversation as a diagnosis, not an obligation. The subpoena has already committed you to a process. What remains is whether you enter it with counsel or without.