What Happens If You Break Securities Law?

If you break securities law, the most common consequences are: investors may be able to demand their money back, regulators may investigate or sue, and the issue can derail your next financing or acquisition. In more serious cases, it can lead to civil penalties, disgorgement, officer-and-director bars, and, if the conduct was willful or fraudulent, criminal exposure.

For startups, most problems come from three predictable mistakes: raising money without a valid registration exemption, making statements that are false or misleading, and running the offering in a way that does not match the exemption’s rules. “We only took a few checks” is not a legal category.

A valid exemption is not optional. It is what makes a private round legal.

What counts as a securities law problem in a startup fundraise?

In the U.S., offering or selling a security generally must be registered with the SEC unless an exemption applies. Most startups rely on exemptions such as Regulation D for private offerings or Regulation Crowdfunding for Reg CF raises.

If the exemption does not actually fit the way you ran the raise, you may have made an unregistered offering. That is true even if you had a deck, signed documents, and good intentions.

Separate from registration, anti-fraud rules apply in every offering. You can have a valid exemption and still create liability if your pitch, emails, data room, or calls contain material misstatements or leave out facts a reasonable investor would need to evaluate the deal.

Good paperwork does not cure a misleading pitch.

What happens if you break securities law?

Potential outcome	Who drives it	What it means in practice
Rescission claims	Investors	Investors may seek to unwind the deal and get their money back, sometimes with interest
SEC enforcement	SEC	Investigations, subpoenas, cease-and-desist orders, injunctions, penalties, disgorgement, and possible officer-and-director bars
State enforcement	State securities regulators	Blue sky enforcement, administrative actions, and state-law claims
Private lawsuits	Investors or other claimants	Litigation over misstatements, omissions, exemption failures, or side promises
Criminal exposure	Government prosecutors	Rare for technical mistakes, but possible in cases involving willful violations or fraud
Diligence fallout	Future investors, acquirers, and their counsel	The issue surfaces in diligence and delays, reprices, or kills the next round or exit

1) Investors may be able to get their money back

One of the most practical risks is rescission: a claim that the investor can unwind the investment and recover the money they put in. The exact remedy depends on the claim, the governing law, and the facts, but the business risk is straightforward.

If the company already spent the cash, a rescission demand can turn into an immediate liquidity problem. This risk often appears when the company sold securities without a valid exemption or when investors argue they were misled in a way that supports a statutory or contractual remedy.

If you have already spent the money, rescission risk becomes a cash crisis.

2) The SEC can bring civil enforcement actions

The SEC can investigate and bring civil cases for violations of the federal securities laws. Depending on the facts, that can include subpoenas, cease-and-desist orders, injunctions, civil monetary penalties, disgorgement, and orders restricting someone from serving as an officer or director.

Enforcement risk generally rises when there are investor complaints, obvious solicitation mistakes, a larger investor base, or evidence that statements to investors were inaccurate or incomplete.

3) State regulators can act too

Federal law is not the whole picture. States have their own securities laws, often called blue sky laws, and their own regulators.

Even if you rely on a federal exemption, you may still have state notice filings, fees, or other state-law issues to manage. The details vary by exemption and jurisdiction. State regulators can bring enforcement actions, and investors may also have state-law claims.

4) Investors can sue even if regulators never do

Regulatory action is not required for this to become expensive. Investors can sue directly over alleged misstatements, omissions, exemption failures, or disputes about what was promised during the raise.

Even when the company ultimately prevails, litigation is slow, expensive, distracting, and damaging to credibility with future investors.

The SEC is not the only audience that matters. Your investors are, too.

5) Criminal cases are rare, but they are real

Criminal prosecution is usually not the outcome for a technical filing mistake or a good-faith process error. It is more commonly associated with willful violations, fraud, or other egregious conduct.

The line matters. Sloppiness is dangerous. Intentional deception is much worse.

If you are worried that your conduct may be viewed as knowingly misleading or fraudulent, get counsel immediately.

6) The problem often surfaces later, in diligence

Securities-law problems are often discovered at the worst time: during the next round, a major investor diligence process, or an acquisition. A company can live with a bad process for months or years before someone asks the questions that expose it.

That does not make the issue old or harmless. It just means the bill arrives late.

Common ways startups accidentally violate securities law

• Taking checks or wires before deciding which exemption the company is relying on and before setting up the offering documents and process.
• Using Rule 506(b) and then broadly marketing the round in a way that looks like general solicitation, including public social posts or blast outreach.
• Assuming everyone is accredited without doing the level of investor qualification or verification the exemption requires.
• Using pitch materials that overstate revenue, traction, pipeline, partnerships, customer adoption, or investor interest.
• Describing metrics without important qualifiers such as churn, refunds, one-time revenue, channel concentration, or unusual accounting treatment.
• Using customer logos, endorsements, or “committed” investor references without permission or accurate context.
• Leaving out key negatives that would materially change how a reasonable investor understands the opportunity.
• Missing required filings, notices, or ongoing reporting obligations tied to the exemption being used.

How to stay compliant when raising money

Start with three questions before taking money

Before you accept funds, you should be able to answer three basic questions:

1. What exemption are we relying on?
2. What communications are allowed under that exemption?
3. What investor qualification, filing, and reporting steps does that exemption require?

If you cannot answer those questions clearly, you are not ready to take money.

If you are using Reg CF

Reg CF offerings must be conducted through a registered intermediary, such as a broker-dealer or registered funding portal. That structure can reduce risk because the process is more constrained and standardized.

But the platform does not take responsibility off the founders. You still need accurate disclosures, compliant communications, and complete, non-misleading information.

A platform can reduce process risk. It does not make your statements safe by default.

If you are using Reg D

Reg D is the usual path for private startup rounds, but the rule you choose matters. Rule 506(b) and Rule 506(c) are not interchangeable.

• Rule 506(b) is often simpler from an investor-verification standpoint, but it comes with important limits on general solicitation.
• Rule 506(c) allows general solicitation, but it requires a more formal accredited-investor verification process.

The biggest mistake is treating the marketing plan and the exemption choice as separate decisions. They are the same decision.

In every offering

• Do not take money until the exemption and process are clear.
• Assume everything you say to investors may later be reviewed by regulators, opposing counsel, or future investors in diligence.
• Keep the story consistent across the deck, subscription documents, emails, social posts, data room, and live calls.
• When in doubt, disclose and contextualize rather than imply or gloss over.
• Work with securities counsel who regularly handles startup financings, not just general corporate work.

What to do if you think you already made a mistake

Do not try to “paper over” a securities-law issue by sending casual follow-up emails or improvising a fix. That often makes the factual record worse.

A practical first response is usually:

• pause the offering activity that may be creating the problem, especially public promotion;
• preserve the record, including decks, emails, messages, portal content, social posts, subscription documents, and who received what;
• map the timeline, including when money came in, what exemption you thought you were using, and how investors were contacted;
• get securities counsel involved before you accept more money or make corrective statements.

Some violations can sometimes be remediated. Some cannot be cleanly fixed after the fact. The answer depends heavily on the rule involved, the timing, the disclosures, the investor mix, and the jurisdictions in play.

Examples: what this looks like in real life

Scenario A: “We just took a few friends-and-family checks”

If you accepted investments without clearly fitting into an exemption and without proper process and documents, you may have created an unregistered offering problem. That risk often surfaces later, when the company hits trouble or a new investor asks hard questions.

Scenario B: You run a Rule 506(b) round and publicly post “Anyone can invest”

Rule 506(b) has restrictions on general solicitation. If your promotion crosses that line, you may have compromised the exemption for the offering.

The right response, if any, is highly fact-specific. This is the kind of issue to escalate to counsel immediately, not to crowdsource on founder Twitter.

Scenario C: Your traction slide is “directionally true”

“Directionally true” is not a securities-law standard. If your metrics cannot be substantiated, omit important qualifiers, or imply a level of traction or partnership support that is not real, you are creating anti-fraud risk.

“Directionally true” is not a defense to a materially misleading statement.

Frequently asked questions

Can investors really get their money back?

Sometimes, yes. In some securities-law violation scenarios, investors may have rescission rights or other remedies that effectively seek a return of their investment. The exact remedy depends on the claim, the governing law, and the facts.

Can a technical mistake become a major problem?

Yes. A mistake that feels technical during the raise can become major later if it affects the validity of the exemption, triggers investor claims, or shows up in diligence for the next round or an acquisition.

Will I go to jail for a securities-law mistake?

Usually not for a technical or good-faith compliance mistake. Criminal exposure is more closely tied to willful violations, fraud, or intentional deception. But “rare” does not mean “impossible.”

Can a securities-law violation be fixed after the fact?

Sometimes, but not always. Possible remediation steps can depend on what happened, when it happened, what rule was involved, what investors were told, and whether money has already been accepted or spent. This is highly fact-specific and should be handled with securities counsel.

Does using Wefunder or another funding portal protect me?

Using a registered funding portal for a Reg CF raise can reduce compliance risk because the offering runs through a structure designed for that exemption. It does not eliminate your responsibilities. Founders are still responsible for accurate, complete, and non-misleading disclosures and communications.

Do state securities laws still matter if I use a federal exemption?

Often, yes. A federal exemption may preempt some state registration requirements, but state notice filings, fees, anti-fraud rules, and other state-law issues may still apply. The details depend on the exemption and the states involved.

Bottom line

If you break securities law, the most common real-world outcomes are investors demanding their money back, costly legal cleanup, regulator attention, and a future financing or exit getting slowed down or derailed. Most startup violations are not exotic. They come from using the wrong exemption, saying things that are inaccurate or incomplete, or improvising the process.

The practical rule is simple: choose the exemption first, run the raise to fit that exemption, and be relentlessly accurate in what you tell investors. When you are unsure, do not guess. Get securities counsel.