SEC Investigation Process: From SEC Subpoena to Wells Notice and Enforcement Action
By David R. Chase, Esq. — Former SEC Enforcement Senior Counsel and SEC Defense Attorney
David R. Chase is a former Senior Counsel in the U.S. Securities and Exchange Commission’s Division of Enforcement and a former Special Assistant United States Attorney with more than 30 years of securities-law experience. He represents individuals and companies in SEC investigations and enforcement matters nationwide.
Read David Chase’s Attorney Profile
If you have received an SEC subpoena, been contacted by the U.S. Securities and Exchange Commission, or learned that you are the subject of an SEC investigation, one of the first questions you are likely asking is:
What happens next?
The answer depends on the nature of the investigation. An SEC investigation can progress from an informal inquiry or voluntary request for information to a formal SEC subpoena, document production, sworn testimony, a Wells Notice, settlement discussions, and, in some cases, an SEC enforcement action.
Understanding the SEC investigation process is important because decisions made at the beginning of an investigation can critically affect what happens later.
I know this process from both sides.
Before becoming an SEC defense attorney, I served as a Senior Counsel in the SEC’s Enforcement Division. During my time at the SEC, I saw firsthand how investigations are developed, how evidence is evaluated, how witnesses are examined, and how Enforcement staff makes charging recommendations.
After leaving the SEC, I have spent more than 30 years using my institutional SEC knowledge to strategically represent individuals and companies in SEC investigations and enforcement matters. In numerous cases over the years, I have secured “no action letters” for my clients– meaning no charges were filed.
If you have received an SEC subpoena or have been contacted by the SEC, call 800-760-0912 for a confidential consultation.
What Is an SEC Investigation?
An SEC investigation is an inquiry by the Securities and Exchange Commission into potential violations of the federal securities laws or SEC rules.
The SEC’s Division of Enforcement’s mission includes investigating potential violations of the federal securities laws and litigating the SEC’s civil enforcement actions. The SEC also explains that investigations may involve informal inquiries, witness interviews, records, trading data, and other investigative methods. SEC+1
SEC Division of Enforcement — Official SEC.gov Resource
SEC investigations can involve many different types of conduct, including:
- Insider trading
- Securities fraud
- Market manipulation
- Accounting and financial-reporting issues
- Investment adviser violations
- Broker-dealer conduct
- Securities offerings
- Cryptocurrency and digital-asset matters
- Ponzi schemes
- Other potential violations of federal securities laws
An SEC investigation does not necessarily mean that charges will be filed.
The SEC may ultimately close an investigation without enforcement action. It may continue investigating, seek a negotiated resolution, or recommend that the Commission authorize an enforcement action.
The SEC’s decision depends upon the evidence developed during the investigation, the applicable law, and the circumstances of the particular case.
How Does an SEC Investigation Begin?
An SEC investigation can begin in several different ways.
The SEC may contact an individual or company and request information voluntarily. The SEC may also issue a formal subpoena requiring the production of documents or testimony.
The distinction is important.
A voluntary request is different from a formal subpoena that legally compels a response. The appropriate strategy therefore depends upon precisely what the SEC is requesting, the authority under which it is acting, and the circumstances of the investigation.
The SEC itself explains that, with a formal order of investigation, Enforcement staff may compel witnesses by subpoena to testify and produce books, records, and other relevant documents. SEC
How SEC Investigations Work — Official SEC.gov Resource
This is one reason I strongly recommend that anyone contacted by the SEC consult experienced SEC defense counsel before providing substantive information to the agency.
An apparently simple telephone call or document request can be the beginning of a much larger investigation.
What Can You Learn From an SEC Subpoena?
An SEC subpoena can contain important clues about the nature and scope of an investigation.
For example, the title of the investigation, the identity of the entity or individuals referenced, and the categories of documents requested may provide information about what SEC staff is examining.
I have written separately about how I analyze an SEC subpoena to determine what the SEC may be investigating and whether the recipient may be a target or simply a witness.
Analyzing an SEC Subpoena: Understanding What and Who the SEC Is Investigating
There are no universal “tells” that definitively identify the SEC’s “target”, but carefully analyzing the subpoena can provide important information at the beginning of the investigation.
Phase One: SEC Subpoenas, Document Production, and Sworn Testimony
What Is an SEC Subpoena?
An SEC subpoena is a formal demand for information, documents, records, or testimony.
An SEC subpoena may be directed to an individual or company and can request a broad range of information.
Depending upon the investigation, the SEC may seek:
- Emails
- Text messages
- Social-media communications
- Financial records
- Business records
- Contracts
- Trading records
- Electronic files
- Internal communications
- Other documents and information relevant to the investigation
A subpoena may request records covering several years.
The resulting volume of information can be substantial. Responding may require the collection, preservation, review, organization, and production of significant amounts of electronic and hard-copy information.
What Should You Do After Receiving an SEC Subpoena?
The first mistake is to treat an SEC subpoena as a routine document-production exercise.
It is not.
Before responding, the subpoena should be carefully reviewed to determine precisely what the SEC is requesting, the relevant time periods, the categories of documents sought, and the applicable deadlines.
Potentially responsive information should also be preserved.
My firm has a dedicated resource addressing the immediate steps someone should consider after receiving an SEC subpoena.
SEC Subpoena Defense Lawyer: Three Critical Steps to Take Immediately
I have also published a detailed SEC Subpoena FAQ addressing questions concerning subpoena compliance, privilege, the Fifth Amendment, and how counsel can assist with the response.
SEC Subpoena FAQs
Why Should Electronic Evidence Be Preserved?
In my experience, it is often critical to involve a qualified computer-forensic specialist when an SEC subpoena seeks substantial electronic information.
A forensic specialist can help image and preserve electronic communications, search for potentially responsive information, maintain an inventory of collected and produced documents, and provide the materials to SEC defense counsel for review.
This can be particularly important when the SEC requests years of emails, text messages, social-media communications, or other electronically stored information.
Preservation should begin promptly.
Deleting or altering potentially relevant documents after learning of an SEC investigation can create serious additional problems.
Why Is SEC Subpoena Defense More Than Gathering Documents?
A common misconception is that responding to an SEC subpoena is primarily logistical:
Find the documents. Copy the documents. Give them to the SEC.
That approach can be dangerous.
An SEC subpoena response may involve thousands of pages of documents and enormous amounts of electronic data. SEC defense counsel needs to understand what the documents show, what they do not show, and what legal and factual issues SEC staff may identify from them.
The document-production process can therefore become an important part of the defense strategy.
Counsel may identify potentially problematic evidence, inconsistencies, missing information, or other issues that should be addressed before documents are produced, or testimony is given.
At the same time, counsel must ensure that responsive materials are appropriately preserved and produced.
The goal is not merely to satisfy a document request.
The goal is to strategically respond while protecting the client’s legal interests.
Can the SEC Issue Additional Subpoenas?
Yes.
After receiving and reviewing a document production, SEC staff may ask questions about the documents, seek clarification, request additional materials, or issue additional subpoenas.
This is a normal part of an investigation as SEC staff develops a better understanding of the facts.
An investigation can therefore evolve significantly after the initial subpoena.
I have also written about the importance of taking an SEC subpoena seriously and the potential consequences of failing to comply appropriately.
SEC Subpoena: A Word of Caution About Compliance
SEC Sworn Testimony: What Happens When You Testify Under Oath?
Another critical stage of an SEC investigation is sworn testimony.
During SEC testimony, the witness answers questions under oath before SEC Enforcement staff. A court reporter creates a transcript of the testimony.
The resulting transcript becomes part of the investigative record.
Why Is SEC Testimony So Important?
In my years of experience, sworn testimony is one of the most consequential stages of an SEC investigation.
A witness needs to be thoroughly prepared—not to manufacture answers, but to understand the process, the subject matter being investigated, the documents likely to be discussed, and the types of questions that may be asked.
The witness must provide truthful and accurate testimony.
At the same time, an experienced SEC defense lawyer understands that seemingly minor statements can become significant when viewed alongside documents, testimony from other witnesses, and the SEC’s developing theory of the case.
The SEC may rely upon the testimony, together with other evidence, when deciding whether to recommend enforcement action.
For that reason, preparation for SEC testimony should begin well before the witness appears for examination.
Can You Invoke the Fifth Amendment in an SEC Investigation?
There are circumstances in which truthful testimony could potentially incriminate a person.
In those situations, the Fifth Amendment privilege against self-incrimination may become an important consideration.
Invoking the Fifth Amendment during an SEC investigation is a serious legal decision and should be evaluated with experienced counsel.
A witness may still be required to appear for testimony and assert the privilege in response to questions for which the privilege applies.
The consequences of asserting the privilege also need to be carefully considered. The SEC may take the assertion into account when evaluating the investigation, while the privilege can protect a person from being compelled to provide potentially self-incriminating testimony.
There can also be circumstances in which an SEC investigation overlaps with a criminal investigation by the Department of Justice or another law-enforcement agency.
The SEC itself does not have criminal prosecutorial authority. It is a civil regulatory agency. But an SEC investigation can be referred to criminal authorities, making the intersection between SEC enforcement and federal criminal exposure an important consideration in some cases.
I discuss this distinction in greater detail in my article explaining why an SEC investigation should not automatically be approached in the same manner as a DOJ criminal investigation.
The SEC Is Not the DOJ: Why You Need a Former SEC Attorney for an SEC Investigation
Phase Two: What Happens After the SEC Investigation?
After SEC staff has reviewed the evidence, documents, and testimony, the investigation may move in several directions.
The SEC may:
- Close the investigation without enforcement action
- Continue investigating
- Request additional information
- Engage in settlement discussions
- Issue a Wells Notice
- Recommend an enforcement action
The outcome depends upon the facts and evidence developed during the investigation.
What Is an SEC Closing Letter?
If the SEC decides not to pursue enforcement action, it may issue a closing letter.
A closing letter generally indicates that, based upon the information known to SEC staff at that time, the SEC has decided not to recommend an enforcement action.
A closing letter does not necessarily constitute a formal declaration that the recipient was exonerated, and the SEC may reserve rights concerning subsequently discovered information.
Nevertheless, in my decades of experience, a closing letter is an extremely favorable outcome.
The SEC investigation has consumed time, money, attention, and often enormous emotional energy. Having the SEC close the investigation without enforcement action can therefore be a significant result.
What Is a Wells Notice?
If SEC staff believes that enforcement action may be appropriate, the recipient may receive a Wells Notice.
A Wells Notice is a formal notification that SEC staff is considering recommending that the Commission bring an enforcement action.
The Wells process gives the recipient an opportunity to respond before the Commission makes a final decision regarding whether to authorize enforcement action.
The SEC describes the Wells process as an opportunity for a potential defendant or respondent to address the proposed charges and the basis for those charges before Enforcement staff recommends that the Commission authorize an enforcement action. SEC
SEC Enforcement Manual — Official SEC.gov Resource
Potential remedies can include, depending upon the claims and circumstances:
A closing letter does not necessarily constitute a formal declaration that the recipient was exonerated, and the SEC may reserve rights concerning subsequently discovered information.
What Is a Wells Notice?
- Civil monetary penalties
- Disgorgement
- Injunctive relief
- Industry or securities-related bars
- Officer-and-director bars
- Other forms of equitable or administrative relief
Receiving a Wells Notice is serious, but it does not necessarily mean that an enforcement action will ultimately be filed.
The Wells process provides an important opportunity for the recipient and defense counsel to present their position to SEC staff.
How Long Do You Have to Respond to a Wells Notice?
This is one area where older descriptions of the SEC process can now be misleading.
In February 2026, the SEC announced updates to its Enforcement Manual providing that recipients of Wells Notices will ordinarily receive four weeks to make a Wells submission. The SEC also announced that Wells meetings will generally be scheduled within four weeks after receipt of the Wells submission and will include a member of senior leadership within the Division of Enforcement.
The specific deadline in an individual matter should always be confirmed from the actual Wells Notice and communications from SEC staff.
How Does an SEC Lawyer Respond to a Wells Notice?
The Wells process is an opportunity to challenge the SEC staff’s proposed enforcement recommendation before it reaches the Commission.
At this stage, defense counsel may seek a detailed understanding of:
- The SEC’s factual allegations
- The legal theories underlying the proposed charges
- The evidence supporting those theories
- The potential violations
- The remedies the SEC is considering
Counsel may also seek access to relevant portions of the SEC’s investigative file.
Once counsel understands the SEC’s position, counsel may prepare a written Wells submission and request a Wells meeting.
The objective may be to persuade SEC staff not to recommend enforcement action at all.
Alternatively, counsel may attempt to narrow the proposed charges, challenge particular legal theories, or negotiate a resolution on more favorable terms.
In my own practice, I have successfully persuaded the SEC not to pursue charges at this stage.
That is why I view the Wells process as far more than a procedural formality.
It can be a critical opportunity to change the direction of an SEC investigation.
I have written extensively about the strategic importance of the Wells process, including circumstances in which a Wells submission can be used to challenge the SEC’s proposed conclusions.
SEC Wells Submission and Enforcement Defense
Phase Three: What Happens If the SEC Brings an Enforcement Action?
If the SEC decides to proceed after the investigative and Wells processes, it may bring an enforcement action.
Depending upon the claims, remedies sought, and applicable law, SEC enforcement matters may proceed in federal court or through an administrative proceeding.
The SEC’s own materials explain that its Enforcement Division litigates civil enforcement actions in federal court and in administrative proceedings, depending on the circumstances. SEC+1
SEC Enforcement and Litigation — Official SEC.gov Resource
The law governing SEC administrative proceedings has also changed in important ways in recent years.
What Did the Supreme Court Decide in SEC v. Jarkesy?
In SEC v. Jarkesy, the U.S. Supreme Court held that when the SEC seeks civil penalties against a defendant for securities fraud, the Seventh Amendment entitles the defendant to a jury trial.
That decision is important when evaluating the potential forum and procedures in an SEC enforcement matter.
The precise procedural path of an SEC case depends on the claims the SEC brings and the remedies it seeks.
For that reason, older descriptions of the SEC enforcement process should not be relied upon without considering subsequent legal developments.
What Happens During SEC Litigation?
Once an SEC enforcement action reaches litigation, the case can involve many of the familiar components of civil litigation.
Depending upon the forum and applicable procedures, the defendant may have the opportunity to:
- Challenge the SEC’s factual allegations
- Challenge the SEC’s legal theories
- Examine and cross-examine witnesses
- Present witnesses
- Present documentary evidence
- File motions
- Make legal arguments
- Participate in hearings or trial proceedings
In a federal civil enforcement action, the applicable burden of proof depends upon the claims being asserted.
The SEC’s burden in a civil case is different from the government’s burden in a criminal prosecution, where proof beyond a reasonable doubt is required.
That distinction is important when evaluating an SEC investigation that may potentially overlap with a DOJ criminal investigation.
Can an SEC Investigation Become a Criminal Case?
An SEC investigation is civil in nature, but that does not mean criminal exposure can always be ignored.
The SEC can refer matters to the Department of Justice, and an investigation can sometimes proceed on parallel civil and criminal tracks.
The SEC itself explains that its Enforcement Division works with law-enforcement agencies to bring criminal cases when appropriate. SEC
That possibility makes early strategic decisions particularly important.
Statements made to the SEC, documents produced to the SEC, and testimony given under oath can potentially become relevant to other government investigations.
This is one reason I believe that a lawyer handling an SEC investigation should understand not only SEC enforcement, but also the potential interaction between SEC investigations and federal criminal securities prosecutions.
My experience includes both sides of that divide: serving as an SEC Enforcement Senior Counsel and later serving as a Special Assistant United States Attorney prosecuting securities-fraud matters.
What Can Make an SEC Investigation Worse?
One of the most important lessons I have learned from both my SEC Enforcement experience and my years representing SEC investigation targets is that early mistakes can have lasting consequences.
Common mistakes can include:
- Speaking to SEC staff without first obtaining legal advice
- Producing documents without understanding what the subpoena actually requests
- Failing to preserve electronic communications
- Deleting or altering potentially relevant information
- Treating sworn testimony as an informal conversation
- Failing to prepare adequately for testimony
- Assuming that receiving a subpoena means you are definitely a target
- Assuming that doing nothing wrong means the investigation will simply disappear
- Waiting until a Wells Notice arrives before developing a defense strategy
I recently addressed these issues in greater detail in an article focused specifically on mistakes that can make an SEC investigation worse.
5 Critical Mistakes That Can Make an SEC Investigation Worse
How an Experienced SEC Defense Lawyer Can Help
An SEC investigation can be overwhelming because the stakes can be extraordinarily high.
An experienced SEC defense lawyer can assist with:
- Responding to SEC subpoenas
- Evaluating voluntary SEC requests
- Preserving electronic evidence
- Managing document productions
- Preparing witnesses for SEC testimony
- Evaluating Fifth Amendment issues
- Analyzing the SEC’s evidence
- Responding to a Wells Notice
- Preparing a Wells submission
- Participating in Wells meetings
- Negotiating potential resolutions
- Defending SEC enforcement actions
- Evaluating potential DOJ or criminal exposure
The earlier counsel becomes involved, the more opportunities there may be to shape the investigation rather than simply react to developments after SEC staff has formed its case.
Why Former SEC Enforcement Experience Matters
There are many excellent securities lawyers and criminal defense lawyers.
But an SEC investigation has its own investigative process, institutional culture, personnel, procedures, and strategic considerations.
I know those processes from the inside.
I previously served as a Senior Counsel in the SEC’s Enforcement Division, where I learned firsthand how SEC investigations are developed and prosecuted.
After leaving the SEC, I spent more than 30 years representing individuals and companies in SEC investigations and enforcement matters nationwide.
I have also served as a Special Assistant United States Attorney, prosecuting securities-fraud matters and gaining experience with the potential intersection between SEC enforcement and federal criminal prosecution.
Today, I focus my practice on representing clients facing SEC investigations and enforcement matters.
Learn More About David R. Chase’s SEC Enforcement Experience
Frequently Asked Questions About the SEC Investigation Process
Does receiving an SEC subpoena mean I am being charged?
No. An SEC subpoena is part of the investigative process. It does not necessarily mean that the SEC has decided to bring an enforcement action.
The SEC may close an investigation without enforcement action, continue its investigation, pursue settlement discussions, or ultimately recommend enforcement.
How long does an SEC investigation take?
There is no standard length for an SEC investigation.
Some investigations may be relatively focused, while others can take substantially longer because of the number of witnesses, volume of documents, complexity of the transactions, or number of potential violations being investigated.
What should I do after receiving an SEC subpoena?
You should promptly preserve potentially responsive documents and electronic communications and have the subpoena reviewed by experienced SEC defense counsel.
Do not assume that you should simply begin turning over documents on your own.
Does the SEC subpoena emails and text messages?
It can.
Depending on the investigation, an SEC subpoena may seek emails, text messages, social-media communications, and other electronically stored information.
What happens during SEC sworn testimony?
A witness answers questions under oath before SEC staff, and the testimony is generally transcribed by a court reporter.
The testimony can become an important part of the SEC’s investigative record.
What is a Wells Notice?
A Wells Notice is a formal notification that SEC staff is considering recommending enforcement action.
It gives the recipient an opportunity to respond before the Commission makes its decision regarding whether to authorize enforcement action.
Does a Wells Notice mean the SEC will definitely charge me?
No.
A Wells Notice indicates that SEC staff is considering recommending enforcement action. The Wells process gives the recipient an opportunity to challenge the proposed recommendation.
How long do I have to respond to a Wells Notice?
Under the SEC’s updated 2026 procedures, Wells recipients will ordinarily have four weeks to make a Wells submission, although the specific deadline in a particular case should be confirmed from the Wells Notice and communications with SEC staff. SEC
Can an SEC investigation become a criminal investigation?
Yes.
The SEC itself does not prosecute criminal cases, but it can refer matters to the Department of Justice. In appropriate circumstances, SEC and DOJ investigations may proceed in parallel. SEC
Should I hire an SEC defense lawyer before responding to the SEC?
In many circumstances, obtaining legal advice before providing substantive information to the SEC can be extremely important.
The appropriate strategy depends on the circumstances of the investigation, what the SEC is requesting, whether a subpoena has been issued, and whether there may be civil or criminal exposure.
Official SEC Resources
The SEC publishes information about its Division of Enforcement, investigative procedures, enforcement actions, and Enforcement Manual. Readers who want to review the SEC’s own description of its procedures can consult these primary-source resources:
These materials describe the SEC’s procedures and policies. They should not be viewed as a substitute for legal advice concerning a particular investigation.
Contact David Chase, Former SEC Enforcement Senior Counsel
An SEC investigation can begin with something as seemingly simple as an unexpected telephone call or request for documents.
It can then develop into a formal subpoena, extensive document production, sworn testimony, a Wells Notice, settlement negotiations, or an enforcement action.
Every stage matters.
I have experienced the SEC investigative process from both sides: first as a Senior Counsel in the SEC’s Enforcement Division and later as an SEC defense attorney representing individuals and companies in investigations and enforcement matters.
If you have received an SEC subpoena, been contacted by SEC staff, received a Wells Notice, or believe you may be the subject of an SEC investigation, obtaining experienced counsel early can help you understand your options and protect your interests.
View David Chase’s Full Attorney Profile
Call David Chase at 800-760-0912 for a confidential consultation.
This article is provided for general informational purposes and does not constitute legal advice. SEC investigations are fact-specific, and the applicable law and procedures can change. You should consult qualified counsel regarding your particular circumstances.
