NextFin News - The Securities and Exchange Commission charged 38 entities on Thursday, alleging they filed false paperwork with the agency to pose as legitimate investment advisers and draw in retail investors, with some of the defendants connecting to the SEC's filing system from IP addresses traced to foreign jurisdictions.
The complaints, filed Aug. 27, 2026, in the U.S. District Court for the District of Colorado, say the defendants made material misrepresentations in Forms ADV filed between 2025 and 2026 and then failed to respond when the SEC asked for records to back up what they had reported. The agency is seeking permanent injunctions, conduct-based injunctions that would bar the defendants from filing Forms ADV as exempt reporting advisers, and civil penalties. Separately, the ERA filings of all 38 entities have been removed from the SEC's Investment Adviser Public Disclosure website.
The action lands at the intersection of two trends the SEC has been tracking for years: the exploitation of emerging-technology hype and the misuse of regulatory filings as marketing props. It also raises a question that outlasts these 38 defendants: what happens when a disclosure system designed to inform investors becomes, in the hands of bad actors, a costume that looks like a badge?
The Allegations: Identical Filings, Phantom Auditors, Fake Certificates
The core allegation is that the defendants made material misrepresentations and statements that could not be substantiated in their Form ADV filings. The complaints describe a pattern that is both broad and oddly specific. The defendants listed places of business at addresses in Colorado where they had no presence and provided phone numbers that were disconnected or belonged to unrelated businesses.
More tellingly, the SEC says the defendants disclosed an ownership structure and numerical data that was identical or nearly identical to a multitude of other purported exempt reporting advisers. That is not the signature of 38 independent advisory businesses; it is the signature of a template.
The complaints also allege that the defendants claimed the financial statements of the private funds they purportedly advised had been audited by one of two independent public accounting firms, neither of which can be found in any public registry of federal or state accountancy firms. And some of the defendants were marketed on websites, some of which displayed a fake certificate indicating that the defendant was registered with the SEC, even though it was not.
The SEC's accompanying investor alert adds detail to the fake certificates: they included the Central Registration Depository and SEC file numbers assigned to the entity upon filing its Form ADV, and falsely stated that "SEC RIA permission" was granted to the defendant. The phrase matters. "RIA" means registered investment adviser. The certificate implied a status the entity never held.
"Our complaints allege large-scale abuse of SEC adviser filings by persons, several of whom are likely located overseas, exploiting interest in emerging technologies. When we find bad actors using fraudulent SEC filings to feign legitimacy with retail investors, we will act decisively to disrupt these operations."
Laura D'Allaird, Chief of the SEC Enforcement Division's Cyber and Emerging Technologies Unit, said the complaints allege large-scale abuse of SEC adviser filings by persons likely located overseas who were exploiting interest in emerging technologies.
The complaints charge violations of Sections 204(a) and 207 of the Investment Advisers Act of 1940. Section 204(a) requires advisers to make and keep such records and reports as the SEC prescribes; Section 207 makes it unlawful to make any untrue statement of a material fact in any registration application or report filed with the Commission, or to omit a material fact necessary to make the statements not misleading.
Why the ERA Status Is the Perfect Vehicle
To understand why this scheme works, it helps to understand what an exempt reporting adviser actually is. An ERA is an investment adviser that is not registered with the SEC but is subject to certain reporting, recordkeeping, and other obligations. It reports some information on Form ADV but is not required to complete all of the form the way a registered adviser must. And by rule, an ERA can provide investment advice only to private funds — hedge funds, venture capital funds, private equity funds — not to individual investors.
The SEC's own investor alert states the boundary plainly: "An ERA is not registered with the SEC." The agency does not review the abilities or qualifications of ERAs, and it does not issue any type of certificate to them. ERAs are subject to the same prohibitions against fraud as registered advisers, but they are not subject to some of the regulations that apply to registered advisers, many of which are designed to protect investors.
Here is the mechanism, and it is a design feature that became a vulnerability. The filing system was built for disclosure, not verification. An adviser files its Form ADV; the information becomes publicly searchable on the SEC's disclosure website; the filing carries identifiers — a CRD number, an SEC file number — that look official because they are official. What the system does not do, as a matter of course, is confirm that the address is real, that the phone number works, that the auditor exists in any registry, or that the ownership chart is anything more than a copy of another filer's chart.
For a legitimate adviser, that light-touch regime is a feature: it reduces compliance cost for small private-fund managers who do not need the full apparatus of registered-adviser regulation. For a bad actor, the same regime reduces the cost of looking legitimate. The marginal expense of feigning legitimacy is a filing fee and a few hours of templated paperwork. The marginal benefit is the trust signal that a retail investor, scanning for reassurance, is likely to read as a seal of approval.
The complaints suggest the defendants understood this asymmetry and priced it. They filed. They displayed the identifiers. They added a certificate that said "SEC RIA permission." And when the SEC's counsel asked for the records that would substantiate the filings, they did not respond. Silence, in this context, is data.
Enforcement Is Catching Up, but the Incentive Survives the Sweep
This action did not arrive in a vacuum. The SEC acknowledged the assistance of the FBI and its Operation Level Up, an initiative launched in January 2024 to identify and notify people currently falling victim to cryptocurrency investment fraud. The FBI says the program has surpassed 8,000 victims notified and reduced losses by more than $500 million. The SEC's investor alert explicitly links the ERA-filing scam to advance fee fraud and to the broader pattern of scammers directing victims to filings or websites as evidence of registration.
The 38-entity action also follows a line of smaller SEC moves aimed at Form ADV integrity. In November 2025, the agency charged six investment advisory entities with material misrepresentations and unsubstantiated statements in Form ADV filings concerning their organizations, office locations, assets under management, and clients. The agency's fiscal 2025 enforcement report recorded 456 enforcement actions overall, with registration-related and book-and-record cases among them.
But there is a difference between policing the filings and fixing the incentive that makes them attractive. Every injunction and penalty removes a set of bad actors; it does not change what the next retail investor sees when they encounter a fresh ERA filing with a plausible address, a working phone number, and a convincing certificate. Enforcement is retrospective by nature. The vulnerability it addresses is prospective by design.
The SEC's Office of Investor Education and Assistance has now issued an investor alert warning that scammers are using SEC ERA filings to create a false impression of legitimacy and to lure investors into scams. The alert's guidance is blunt: do not trust a purported ERA that offers investment advice directly to individual investors or claims to be registered with the SEC. If individuals or firms falsely claim they are registered, the agency says, do not trade with them, do not give them money, do not transfer crypto assets to them, and do not share personal information.
The Cyclical Read Versus the Structural Read
One reading of this action is cyclical. Enforcement sweeps come in waves; this wave targets ERA misuse; once these 38 entities are enjoined and penalized, the visible problem recedes until the next wave. Under that view, the appropriate response is more examinations, faster takedowns, and heavier penalties. The pattern of identical filings and phantom auditors is treated as a cohort problem — a group of bad actors who happened to find the same loophole at the same time.
The stronger reading is structural. The vulnerability is not that 38 entities broke the rules; it is that the rules create a status whose public-facing signal — "files with the SEC" — outruns its regulatory substance — "not registered, not reviewed, not certified." As long as that gap exists, and as long as the filing system accepts templated data without contemporaneous verification, the marginal cost of feigning legitimacy stays low. Enforcement raises the cost after the fact. Design changes the cost before the fact.
This is not an argument that the ERA regime should be abolished. The exemption exists for a reason: small venture capital and private fund advisers do not need the full apparatus of registered investment adviser compliance, and layering it onto them would raise costs without a commensurate investor-protection benefit. But the public disclosure layer was never meant to double as a seal of approval, and the evidence in these complaints suggests retail investors treat it as one anyway.
The second-order implication is where the story gets uncomfortable for the broader market. The ERA case is one instance of a wider pattern: regulatory disclosure systems that are trusted precisely because they are government-run, but that verify little of what they display. Fake Form 4 filings, fake audit reports bearing real accountants' signatures, and now fake ERA credentials all point to the same weakness. If investors cannot distinguish a verified credential from a filed one, then the value of the entire disclosure infrastructure erodes at the margin — not because the data is wrong, but because the trust attached to it is wrong.
The Counter-Thesis, and What Would Falsify This View
The counter-thesis deserves its due. The informational gap is far narrower today than it was when these filings were made. The SEC has now issued an investor alert, removed the 38 filings from the public database, and paired the enforcement action with explicit guidance on what an ERA is and is not. Compliance coverage of the six-entity action in late 2025 means advisers, gatekeepers, and platforms have been on notice for months. Under this view, the 38-entity cohort was an exploit of a moment — the period after the filing regime expanded and before the market learned how to read it — and the fix is awareness, not architecture.
There is also a practical argument against redesign. Adding contemporaneous verification to ERA filings would raise costs for legitimate small advisers, slow the filing process, and require the SEC to resource a verification function it has never performed at scale. The marginal fraud prevented might not justify the marginal compliance burden imposed on honest filers. Regulators routinely make exactly this trade-off, and often correctly.
The falsifying signal is specific. If the SEC's next round of ERA-focused examinations finds that new ERA entrants no longer show the identical-data, fake-address, phantom-auditor pattern at anything like the 2025–2026 scale — meaning the 38-entity cohort was an outlier rather than the leading edge — then enforcement, not design, was the answer, and the cyclical read wins. Until that data prints, the structural reading holds: the system rewards appearance over substance, and appearance is cheaper to manufacture than substance.
What Comes Next
In the near term, the cases move through the District of Colorado, where the SEC will ask the court for permanent injunctions enjoining the defendants from violating the charged provisions of the federal securities laws, conduct-based injunctions prohibiting them from filing Forms ADV as exempt reporting advisers, and civil penalties. The removed filings mean the 38 entities no longer appear on the public disclosure site, but copycat filings can appear quickly in a system that accepts reports without verifying them.
Over the medium term, the question is whether the disclosure architecture changes. A regime that depends on post-hoc enforcement to police pre-trade legitimacy is, by design, always one filing behind the next bad actor. The 38 charges are the cleanup. The test is whether the system that made them possible gets redesigned before the next cohort arrives.
For investors, the SEC's alert is explicit and worth following literally: an ERA is not registered, the SEC issues no certificates, and any firm that offers investment advice directly to an individual while claiming ERA status is violating the boundary the regime was built on. The presence of a filing, a CRD number, or an SEC file number is not evidence of registration. It is evidence only that a form was filed.
The real story here is not that scammers lied — scammers always lie. It is that the filing system handed them a costume that looked, to the people most likely to be harmed, exactly like a badge. Enforcement can take the costume back. Only design can make it unwearable.
Explore more exclusive insights at nextfin.ai.
