The U.S. Securities and Exchange Commission and Coinbase reached a settlement in late July 2026 in a Freedom of Information Act dispute over SEC communications related to crypto policy. The case centered not only on what the agency searched for, but also on whether some messages existed in the first place after certain records were reportedly wiped. The FOIA litigation ran alongside the SEC's broader enforcement action against Coinbase, filed in June 2023, which alleged the company operated as an unregistered securities exchange, broker, and clearing agency.

Under the settlement, the SEC will pay $150,000 in fees, produce two documents that had previously been withheld, and review its internal record-retention practices, including the preservation of text messages, according to reporting from The Block and Law360. Reports also tied the settlement to findings that some SEC messages had been erased, a point that helped keep the FOIA dispute alive and pushed the agency toward a policy review, according to Reuters.

Coinbase framed the matter as a transparency dispute, arguing that the public should be able to see how crypto policy is developed when it affects billions of dollars in market value. FOIA does not decide whether the SEC or Coinbase is correct on the underlying crypto policy questions. It determines what the public can inspect and whether an agency's search and retention practices meet legal standards.

For crypto firms and other market participants, the dispute highlights a practical issue: recordkeeping discipline is not optional. If the regulator itself is reviewing how records are preserved, firms with crypto exposure may face similar scrutiny over their own communications systems.

What the Settlement Covers

Coinbase supported a FOIA case seeking SEC communications about crypto policy. After an extended dispute, the parties reached a settlement reflected in contemporaneous reporting and filings.

The settlement includes a $150,000 payment by the SEC to cover attorney costs tied to the litigation, according to Reuters and Law360.

It also requires the SEC to produce two documents that were withheld during earlier phases of the request process, according to The Block.

In addition, the SEC agreed to conduct an internal review and pursue improvements to its record-retention practices, with specific attention to how text messages are preserved, according to The Block and Law360.

Coinbase Chief Legal Officer Paul Grewal wrote in a Wall Street Journal op-ed that the SEC had "automatically wiped" certain data, according to Reuters. That statement placed the dispute's focus on missing messages, rather than only on the pace or scope of disclosure.

In records disputes, there is a key distinction between what exists and what was properly searched. FOIA can only surface records that still exist. Retention rules determine what is available to search in the first place.

Why Missing Texts Became Central

FOIA litigation often turns on whether an agency's search was adequate, reasonable, and non-cumulative. If an agency conducts a defensible search across systems that actually contain the relevant records, courts are often satisfied. But if a system never captured the messages, or if messages were deleted by default, the analysis changes.

Coverage of the settlement connected it to earlier Inspector General findings about wiped messages and to the view that missing texts were a central reason the FOIA case continued before ending in settlement, according to Reuters and The Block.

That point is significant because search terms do not matter if the relevant channel was never preserved. Records that were not retained cannot be found later. The settlement's requirement that the SEC review text-message retention therefore goes to the core of the dispute. If retention is improved, future FOIA requests are less likely to stall on the claim that the agency does not have the requested records.

In FOIA and discovery disputes, process can shape outcomes. If communications systems do not preserve records, the available record may fail to reflect how decisions were actually discussed.

Why FOIA Disputes Matter for Crypto Policy

Many members of the public do not read FOIA productions, but the possibility of disclosure can influence how agencies document and communicate policy decisions. In crypto, that matters because policy has often been developed through speeches, staff guidance, enforcement actions, and other forms of regulatory signaling rather than through formal rulemaking. Under former Chair Gary Gensler, the SEC brought dozens of enforcement actions against crypto platforms and token issuers, which made the internal deliberations behind those decisions a subject of significant public interest.

Coinbase sought clarity on how SEC positions were formed and communicated. The relevant questions included whether policy lines were debated over email, chat, or text, and which offices participated in those discussions. A record does not need to contain a dramatic revelation to affect public understanding. Even a message thread showing who asked particular questions can influence how courts, Congress, and market participants interpret a regulator's intent.

FOIA is not a forum for deciding whether tokens are securities. It is a mechanism for testing whether government decisions were made with enough transparency for the public to follow the process. When an agency agrees to improve retention, it acknowledges that the public's ability to inspect government decision-making depends on more than final public statements.

Recordkeeping Standards the SEC Applies to Others

The settlement also carries an institutional irony. The SEC and other market regulators have spent years telling registrants to capture off-channel communications. Since 2022, the SEC has imposed more than $2 billion in cumulative penalties on broker-dealers, investment advisers, and other financial firms for failures involving WhatsApp messages, personal texts, and other unmonitored channels. Supervisory systems are expected to log, archive, and retrieve business communications across devices and platforms.

When a regulator's own systems fall short of that standard, the issue is not only reputational. It can weaken the authority behind enforcement positions that demand strict retention from private firms. That is why the settlement's commitment to review text retention is material. It moves the agency closer to the recordkeeping expectations it applies to the market.

What Strong Recordkeeping Looks Like

Effective recordkeeping generally includes mobile-device management that disables unapproved apps for business communications or routes those communications through capture tools.

It also includes retention schedules that align with legal holds, with overrides that can be triggered and audited when litigation or investigations are reasonably anticipated.

A defensible system should allow centralized search across email, chat, text, and collaboration platforms, with documented queries and hit reports.

It should also include clear attestations covering who certifies compliance, how often certifications occur, and what exceptions were granted.

These are the types of controls examination teams expect firms to demonstrate. For trading desks, exchanges, custodians, issuers, and other crypto businesses, waiting for an audit or investigation to identify the gaps can leave the firm negotiating under pressure.

Possible Changes Inside the SEC

The settlement is not expected to produce a public overhaul. Internal records programs usually change through incremental steps, such as revised policies, new device controls, updated training, and different default settings for what is saved. Based on reporting from The Block, the settlement obligates the SEC to review how texts are captured and preserved.

Short-term changes could include an inventory of communication channels, a gap analysis, and a freeze on auto-delete settings while legal reviews are underway.

Medium-term changes could include approved-messenger lists, routing of texts through capture systems, and policy refreshers that make FOIA and litigation holds explicit.

Longer-term changes could involve improved enterprise search and a playbook for high-profile records requests, including future crypto-related FOIA demands.

The settlement does not directly change the merits of active SEC enforcement cases. However, improved records could affect timelines, the completeness of administrative records in rule challenges, and the agency's responsiveness to congressional requests involving crypto policy.

Recordkeeping Checklist for Crypto Firms

Crypto firms that build, list, custody, or market digital assets should treat recordkeeping as part of their broader operational risk framework, alongside liquidity, custody, and key-management controls.

Firms should map all communication channels, including email, Slack, Microsoft Teams, Telegram, SMS, iMessage, Signal, and any informal or shadow channels.

They should approve specific business-communication paths and enforce them. If a channel cannot be captured, it should not be used for business communications, including by senior staff.

Retention should be enabled by default. Auto-delete settings can create gaps, while legal holds should override ordinary retention windows when litigation or investigations are reasonably anticipated.

If employees use personal phones, firms should route business communications through containerized applications or virtual desktop infrastructure that captures messages server-side.

Search capabilities should be tested regularly with real queries. If a firm cannot reproduce a message thread quickly, its system may not be defensible in a regulatory or litigation setting.

Firms should also archive evidence of compliance, including policy acknowledgments, exception approvals, and administrative changes to retention settings.

Tabletop exercises can help identify weaknesses. One practical test is to simulate a regulator requesting six months of text messages from two senior leaders and then document what breaks.

Common mistakes include allowing executives or other VIPs to use unlogged channels, confusing backup systems with retention systems, and relying on manual screenshots or exports that are not defensible at scale.

Market and Policy Implications

For traders, builders, and policy teams, the settlement may produce several process-related effects.

In the near term, FOIA responses on crypto topics could become faster and cleaner if the SEC tightens retention and search practices. Advocacy groups may also file narrower and more targeted requests if they better understand which systems are within scope. That could reduce disputes over what constitutes a reasonable search.

The dispute may also increase attention on informal communications. When text messages become central to public records litigation, staff at agencies and firms may reassess how and where they discuss sensitive topics.

Over the medium and longer term, rulemaking records could become more robust. If crypto rule challenges arise, a cleaner administrative record may reduce process disputes and shift more attention to the merits.

Discovery posture could also improve for agencies, exchanges, and issuers if all sides have clearer information about what records exist and what records do not. That clarity can shorten litigation or narrow contested issues.

FOIA remains only one source of pressure on crypto policy. It does not guarantee a more favorable regulatory environment for any token or platform. But transparency can reduce uncertainty by replacing speculation about internal deliberations with a clearer public record.

What Happens When Records Do Not Exist

FOIA has limits. Agencies are not required to create new records. They are required to search for existing records. If messages were wiped before a legal hold attached, courts typically evaluate whether the search across available systems was adequate, rather than whether the agency should have retained more records in the abstract.

That is why retention is the key issue in the Coinbase-SEC settlement. Improved preservation practices can help future requesters avoid the dead end of being told that responsive records do not exist. It can also help the agency defend its search process more effectively.

The same lesson applies to private operators: the best time to fix retention is before the record is needed.

Coinbase's View of the Outcome

Coinbase emphasized the transparency component of the settlement. In coverage of Paul Grewal's Wall Street Journal op-ed, Reuters reported that Grewal highlighted the automatic deletion of certain SEC data and described the settlement terms, including the fee payment and records review, as meaningful corrections.

The Block also reported that missing messages were central to the case and that the settlement requires the SEC to review and improve its retention practices.

The settlement was not a full public release of all requested materials. It was a procedural resolution that gave Coinbase fees, additional documents, and a review of agency retention practices. For future crypto policy records requests, those process changes may prove important.

Frequently Asked Questions

What did the SEC agree to in the settlement?

According to reporting and associated filings, the SEC agreed to pay $150,000 in attorney fees, produce two previously withheld documents, and review how it preserves text messages and other records. Coverage came from Reuters, The Block, and Law360.

Why were missing texts important?

FOIA can only return records that exist. Reports linked the settlement to earlier findings that some SEC messages had been wiped, shifting the focus from search adequacy to retention practices.

Does the settlement affect the merits of SEC crypto enforcement cases?

Not directly. The dispute concerned records access and internal retention practices, not whether any specific token is a security. Better records could indirectly affect timelines and transparency around future policy and enforcement decisions.

Will the public see more SEC communications because of the settlement?

Potentially. The settlement includes a review of how texts and other records are preserved, which could improve future FOIA productions. However, FOIA exemptions still apply, and not every preserved document will necessarily be releasable.

What should crypto firms take from the dispute?

Crypto firms should strengthen recordkeeping controls by approving only channels they can capture, blocking channels they cannot preserve, defaulting to retention rather than auto-delete, and testing their ability to search and produce messages quickly.

Did Coinbase get everything it sought?

No settlement provides complete victory for every party. Coinbase secured fees, additional documents, and a policy review. That is not total transparency, but it advances Coinbase's stated goal of greater visibility into how crypto policy is discussed and developed.

Disclaimer: This article is provided for informational purposes only and is not intended as legal, tax, investment, financial, or other advice.