SEC pivots crypto enforcement toward fraud as Atkins pushes clearer rules
Key Takeaways
- •SEC Chairman Paul Atkins and Enforcement Director David Woodcock said on the October 16 Material Matters podcast that the agency will gauge by real investor harm and intentional misconduct rather than the number of cases filed.
- •September 29 SEC lawsuits allege that entities behind Cryptoaiml and TSAI defrauded investors of at least $15 million combined, using WhatsApp, false regulatory approval claims, and AI trading products that allegedly did not exist.
- •A March 17 interpretation issued jointly with the CFTC states that most crypto assets are not securities in themselves, though the manner in which they are offered or sold can still trigger securities laws.
- •An August 18 SEC proposal would exempt offerings under $5 million over four years and under $75 million within 12 months, but its timing and final form remain undetermined.
- •Chainalysis traced $14 billion in losses to crypto scammers in 2025 and projected the total could climb to nearly $17 billion, with AI-linked scams earning 4.5 times more per operation than those without AI connections.

The US Securities and Exchange Commission is reorienting its enforcement strategy in the cryptocurrency sector to concentrate on fraud and concrete investor losses. On the October 16 episode of the agency's Material Matters podcast, Chairman Paul Atkins and Enforcement Director David Woodcock argued for clearer rules from the outset and harsher action against deliberate misconduct. The approach effectively runs on two tracks: rulemaking meant to define what is permitted, and enforcement aimed at conduct that causes measurable losses. For the industry, however, greater clarity will not provide immunity from prosecution.
“Back to basics” instead of case counts
The shift goes beyond the fact that the SEC has been filing fewer cases. Woodcock wants investigators to focus on the kind of misconduct that causes real losses, because he does not consider case counts a meaningful measure of success. As he put it on the podcast aired on October 16:
“Back to basics means looking for real investor harm, looking for real intentional misconduct.”
— David Woodcock, SEC Material Matters podcast
Atkins, for his part, said companies should not have to wait for an SEC lawsuit to find out what the rules are; in his view, clarity should come first:
“When we talk about not having regulation through enforcement, we’re talking about setting clear expectations, clear rules.”
— Paul Atkins, SEC Material Matters podcast
Woodcock's remarks in September had already signaled the direction of travel. He pledged to pursue insider trading, accounting fraud, and compliance failures, while at the same time asserting that the number of cases alone is not a sufficient gauge of investor protection. The priorities he listed are long-standing concerns of securities enforcement, now framed as the explicit yardstick for the agency's crypto work.
The fraud cases that fit the template
The SEC's September 29 lawsuits illustrate exactly the kind of misconduct Woodcock is asking investigators to pursue. In two separate complaints, the agency alleged that Cryptoaiml Ltd. and Cryptoaiml Capital Foundation stole more than $12.5 million from investors, while TSAI Pro Ltd. and TSAI Capital Foundation allegedly took another $2.8 million — schemes the SEC says totaled at least $15 million combined. Both cases involve allegations that have yet to be proven in court.
According to the SEC, the companies used WhatsApp to earn investors' trust while falsely claiming to have received regulatory approval. Cryptoaiml promoted AI trading signals with fabricated gains and required clients to pay fees before they could withdraw their money. TSAI promised returns through AI trading bots that allegedly never existed.
The lawsuits show where the SEC is drawing the line: clearer crypto rules will not shield businesses accused of deceiving investors and taking their money. They also give companies a concrete picture of the enforcement risk that continues while the rulemaking work is still underway.
Clearer rules still mostly on paper
The agency has also been working to clarify the regulatory framework for crypto companies. In a March 17 interpretation issued jointly with the Commodity Futures Trading Commission (CFTC), the SEC stated that most crypto assets are not securities in themselves, though the way those assets are offered or sold can still bring them under securities laws.
An August 18 proposal could simplify the fundraising process. It features exemptions for offerings under $5 million conducted over four years and offerings under $75 million within a 12-month period, and it suggests a conditional safe harbor to clarify when investment contract status ceases to exist.
For now, the proposed changes remain just that — proposals. Crypto companies still do not know when they may take effect or what they will ultimately look like in practice. Until something is finalized, the March 17 interpretation stands as the operative guidance: how a crypto asset is offered or sold determines whether securities laws attach.
Lawsuits and disclosure risks
Clearer regulations will not remove the legal challenges. Skadden has indicated that lawsuits could arise from false commitments made by issuers as well as misleading transitional disclosures. New offering paths could change how firms raise money, but they would not eliminate liability for what issuers tell investors. The SEC has formed a Financial Reporting and Accounting Unit, led by Timothy Zimmerman, to target misconduct relating to reports or disclosures — an effort that can also place pressure on crypto companies.
A global scam problem and a market that held
Crypto scams pose a serious challenge worldwide. Chainalysis said $14 billion has already been traced to scammers in 2025 and that the figure may climb to nearly $17 billion. Scams with identified AI links proved particularly lucrative, bringing in 4.5 times more per operation than those without AI-vendor connections. Those loss figures describe the scale of harm that the SEC's fraud-first enforcement posture is aimed at.
Despite these losses, people continue to use cryptocurrency. Chainalysis reported $9.4 trillion in global crypto activity in the year through June 2026, a drop of just 1.6%, even though the market lost almost half its value over the period.
For regulators, the challenge is to protect investors from fraud without making it harder for legitimate crypto businesses to operate. Whether the August 18 proposal is finalized — and in what form — and what cases the new Financial Reporting and Accounting Unit brings will show how that balance takes shape. How well the SEC manages it could matter far beyond the United States.