Securities Fraud and Crypto Scams in California: Defending Against SEC & DFPI Investigations

Current as of: October 31, 2026 White-Collar Crimes California
California securities fraud carries up to 5 years in prison and $10 million in fines per willful violation. Under People v. Salas, 37 Cal. 4th 967 (CA Supreme Court 2006), lack of guilty knowledge is a vital affirmative defense.

Receiving a confidential subpoena from state regulators or a federal Wells Notice in Silicon Valley, San Francisco, or Los Angeles can freeze a Web3 project or technology startup overnight. While many tech founders and digital asset developers assume that securities enforcement is strictly a federal matter handled in Washington, D.C., California enforces some of the most aggressive state-level blue sky and cryptocurrency statutes in the nation.

In California, civil regulatory inquiries regularly run parallel to state and federal felony investigations. When venture capital rounds sour, token prices crash, or disgruntled investors file complaints, regulators scrutinize every pitch deck, Discord message, whitepaper, and smart contract deployment. Securing experienced legal counsel at the earliest subpoena stage is critical to protecting both your company's survival and your personal freedom.

Role of the DFPI vs. the SEC in California Enforcement

Founders and fund managers operating in California face dual-sovereignty oversight. At the federal level, the U.S. Securities and Exchange Commission, San Francisco Regional Office, San Francisco and the U.S. Securities and Exchange Commission, Los Angeles Regional Office, Los Angeles police violations of the federal securities laws, including Rule 10b-5 under the 15 U.S.C. § 78j(b).

At the state level, the California Department of Financial Protection and Innovation, Sacramento, alongside its enforcement branches at the California Department of Financial Protection and Innovation, San Francisco and the California Department of Financial Protection and Innovation, Los Angeles, enforces the Corporate Securities Law of 1968 and the Cal. Fin. Code § 3101. The DFPI possesses sweeping administrative authority to issue immediate Desist and Refrain Orders, levy hefty administrative penalties, demand investor restitution, and refer targets to the California Attorney General or local District Attorneys for felony prosecution under Cal. Corp. Code § 25540 and Cal. Corp. Code § 25541.

Specific Defense Scenarios in Crypto and Venture Capital

Because blockchain assets and early-stage venture financing evolve rapidly, regulators often apply decades-old statutory frameworks to modern fundraising models. Defense strategies must be customized to the technical and economic realities of the transaction.

NFT Rug Pulls and Failed Web3 Roadmaps

When a Non-Fungible Token (NFT) collection or decentralized finance (DeFi) protocol loses market value or halts development, prosecutors frequently characterize the collapse as an intentional rug pull. Authorities charge founders with federal wire fraud under 18 U.S.C. § 1343 and state securities fraud under Cal. Corp. Code § 25541, alleging that developers made false promises about utility, metaverse integration, or staking rewards before draining liquidity pools.

A rigorous defense separates an unfortunate business failure or external smart contract exploit from a premeditated scheme to defraud. Blockchain forensic specialists can trace on-chain treasury wallets to demonstrate that mint proceeds were legitimately spent on software engineers, artists, marketing, and infrastructure rather than misappropriated for personal luxury purchases.

Unregistered Initial Coin Offerings (ICOs) and Governance Tokens

Under Cal. Corp. Code § 25110, it is unlawful to offer or sell any security in California unless it is qualified with the DFPI or falls under a specific statutory exemption. Regulators evaluate whether a digital token is a security using two distinct legal tests:

  • The Federal Howey Test: Under SEC v. W.J. Howey Co., 328 U.S. 293 (US Supreme Court 1946), an asset is an investment contract if there is an investment of money in a common enterprise with a reasonable expectation of profits derived from the entrepreneurial or managerial efforts of others.
  • California's Risk Capital Test: California courts also apply the broader risk capital test, which examines whether investors contributed risk capital subject to the risk of loss without having the right to exercise practical control over the enterprise.

Defense counsel challenges unregistered offering allegations by demonstrating sufficient network decentralization, utility-driven token consumption, or compliance with private placement exemptions supported by timely filings of Form D, Federal, U.S. Securities and Exchange Commission, Notice of Exempt Offering of Securities and Form DFPI-260.102.14(c), California, Department of Financial Protection and Innovation, Notice of Transaction Pursuant to Corporations Code Section 25102(f).

Silicon Valley Startup Founders Exaggerating Metrics to Venture Capitalists

In high-pressure fundraising environments across Santa Clara and San Francisco Counties, startup founders are increasingly targeted under Cal. Corp. Code § 25401 for allegedly exaggerating Annual Recurring Revenue (ARR), user retention metrics, artificial intelligence capabilities, or enterprise pipeline contracts during Series A or Series B pitches.

Defense attorneys counter these allegations by analyzing the complete due diligence data room provided to sophisticated Venture Capital (VC) funds. Under California precedent such as Bowden v. Robinson, 67 Cal. App. 3d 705 (CA Ct. App. 1977), liability under Section 25401 hinges on material misstatements of existing fact. Optimistic forward-looking revenue projections, bespoke cautionary disclaimers, and raw financial data made available to institutional investors during diligence strongly negate claims of material deception.

The Lack of Criminal Intent and Good-Faith Reliance Defenses

The single most powerful weapon in a California securities fraud defense is the absence of criminal intent (scienter). For decades, prosecutors argued that selling an unqualified security or making an inaccurate statement was a strict liability crime. However, the California Supreme Court fundamentally changed the landscape in two landmark rulings:

  • Knowledge Required for Misrepresentations: In People v. Simon, 9 Cal. 4th 493 (CA Supreme Court 1995), the court overturned a securities conviction and held that criminal liability under Cal. Corp. Code § 25401 requires proof that the defendant knew-or was criminally negligent in failing to know-that the statements made to investors were materially false or misleading.
  • Good-Faith Belief in Exemption: In People v. Salas, 37 Cal. 4th 967 (CA Supreme Court 2006), the California Supreme Court affirmed that a defendant's good-faith lack of knowledge that a security was not exempt from qualification under Cal. Corp. Code § 25110 is an affirmative defense that requires a specific jury instruction whenever supported by substantial evidence.

Additionally, demonstrating good-faith reliance on legal counsel-showing that the founder disclosed all material facts of a token launch or equity round to corporate attorneys and followed their legal opinion-can defeat the willfulness requirement under Cal. Corp. Code § 25540.

Enforcement TrackPrimary Statutory AuthorityPotential Financial PenaltiesLiberty & Career Consequences
DFPI Administrative ActionCal. Corp. Code § 25110 and Cal. Fin. Code § 3101Up to $25,000 to $100,000+ per violation plus full investor disgorgementImmediate Desist and Refrain Order; public enforcement record
California Felony ProsecutionCal. Corp. Code § 25401 and Cal. Corp. Code § 25540Fines up to $10,000,000 for fraud Violations (Cal. Corp. Code § 25540)2, 3, or 5 years imprisonment per count; lifetime industry stigma
Federal SEC Civil Action15 U.S.C. § 78j(b)Tier 3 civil penalties, prejudgment interest, and profit disgorgementPermanent Officer and Director bar; bad actor disqualification
Federal DOJ Criminal Indictment18 U.S.C. § 1343 (Wire Fraud)Up to $250,000 or twice the gross pecuniary gain or lossUp to 20 years in federal prison; asset forfeiture

Step-by-Step Defense Process in California Securities Investigations

If you are an executive, founder, or promoter targeted in San Jose, San Francisco, Los Angeles, or anywhere in California, strategic defense follows a disciplined progression.

Step 1: Analyze the Subpoena and Form SEC 1662

Investigations typically surface through an investigative subpoena from the DFPI or the SEC accompanied by Form SEC 1662, Federal, U.S. Securities and Exchange Commission, Supplemental Information for Persons Requested to Supply Information Voluntarily or Directed to Supply Information Pursuant to a Commission Subpoena. This form explicitly warns that any information you provide may be shared directly with criminal prosecutors at the Department of Justice or California District Attorney's offices. Defense counsel immediately contacts enforcement staff to assess whether you are viewed as a third-party witness, a subject, or a target.

Step 2: Preserve Ephemeral Messaging, Slack, and On-Chain Data

Never delete Telegram chats, Discord channels, Slack threads, or private wallet keys after learning of an inquiry. Regulators view the deletion of encrypted messages as consciousness of guilt and obstruction. Your attorney will oversee a forensic collection of communications and negotiate narrowed search terms with agency attorneys.

Step 3: Evaluate Fifth Amendment Privileges Before Testimony

Before appearing for an investigative deposition (on-the-record testimony), defense counsel weighs the risks of testifying against invoking the Fifth Amendment privilege against self-incrimination. While invoking the Fifth Amendment in a civil SEC proceeding allows an adverse inference, it prevents you from making statements that could be used in a criminal trial at the U.S. District Court for the Northern District of California, San Jose or the Superior Court of California, County of Santa Clara, San Jose.

Step 4: Draft a Strategic Wells Submission

When SEC staff preliminarily decide to recommend enforcement action, they issue a Wells Notice. You typically have 14 to 30 days to submit a written Wells Submission arguing why charges are legally or factually unwarranted. Because a Wells Submission can be used as an admission in court, experienced counsel crafts it carefully to highlight lack of scienter and flaws in the agency's damages calculation.

Step 5: Coordinate Parallel Civil and Criminal Resolutions

When state prosecutors at the Superior Court of California, County of San Francisco, San Francisco or federal prosecutors conduct parallel probes, defense counsel works to resolve civil DFPI or SEC claims on a neither-admit-nor-deny basis while securing formal declination letters from criminal authorities. Connect with a veteran California securities fraud lawyer through our directory to protect your rights at every stage.

How Much Does Securities and Crypto Fraud Defense Cost in California?

Securities litigation and white-collar crypto defense involve massive electronic discovery and expert financial analysis. Typical legal and forensic costs include:

  • Subpoena Response & Initial Document Production: Legal fees generally range from $20,000 to $50,000, depending on the volume of emails, Slack messages, and wallet records requested.
  • On-the-Record Testimony Preparation & Wells Process: Retaining seasoned SEC/DFPI defense counsel through investigative testimony and a Wells Submission typically costs between $40,000 and $100,000.
  • Blockchain Forensics & Economic Expert Reports: Tracing cryptocurrency flows or rebutting loss calculations usually ranges from $10,000 to $35,000.
  • Full Criminal Trial Defense: Defending a multi-count state or federal securities fraud indictment in California typically requires retainers ranging from $150,000 to $500,000+, though corporate Directors and Officers (D&O) insurance policies often advance these defense costs.

How Long Does an SEC or DFPI Investigation Take?

Regulatory and criminal securities investigations move deliberately across multiple years:

  • DFPI Administrative Inquiry to Desist & Refrain Order: Typically spans 6 to 18 months, though emergency orders halting ongoing crypto staking or token sales can be issued without prior notice.
  • SEC Formal Order Investigation: Generally takes 12 to 24 months from initial subpoena to a Wells Notice or closure letter.
  • California Criminal Statute of Limitations: Under Cal. Pen. Code § 801.5 and Cal. Pen. Code § 803(c), prosecutors have 4 years after the discovery of the fraud or the completion of the offense (whichever is later) to file criminal charges for California securities violations. Federal securities fraud carries a 5-year to 6-year criminal statute of limitations.

Frequently Asked Questions (FAQ)

Are all cryptocurrencies and NFTs considered securities under California law?

No. Whether a digital asset is a security depends on the economic reality of how it is marketed and sold. Purely collectible NFTs or decentralized utility tokens that are not sold with promises of passive profit generated by a core development team generally fall outside both the federal Howey test and California's risk capital test.

What happens if my startup forgot to file a Form 25102(f) notice with the DFPI?

Failing to file Form DFPI-260.102.14(c), California, Department of Financial Protection and Innovation, Notice of Transaction Pursuant to Corporations Code Section 25102(f) within 15 days of a sale does not automatically destroy your private placement exemption or make you guilty of a felony, though it can trigger late fees or administrative penalties if demanded by the Commissioner. Promptly consulting counsel to cure delinquent filings is essential.

Can the DFPI share my subpoenaed documents with criminal prosecutors?

Yes. Both the DFPI and the SEC routinely share investigative files, bank records, and deposition transcripts with the California Attorney General, county District Attorneys, and the U.S. Department of Justice. Anything you submit in a civil regulatory inquiry can be used as evidence in a criminal prosecution.

What is the difference between a DFPI Desist and Refrain Order and a criminal charge?

A Desist and Refrain Order is an administrative injunction issued by the DFPI Commissioner ordering you to immediately stop offering unregistered securities or making misleading statements, often paired with civil fines. If you request an administrative hearing within 30 days, the agency must prove its case before an Administrative Law Judge. Criminal charges, by contrast, are filed in Superior Court and carry prison time.

Can a startup founder be prosecuted if venture capitalists lost money when the company failed?

Losing investor money in a high-risk startup is not a crime. Under People v. Simon, 9 Cal. 4th 493 (CA Supreme Court 1995), criminal liability only attaches if the founder knowingly made false statements or omitted material facts about the company's existing finances, technology, or customers at the time the securities were sold.

Will Directors and Officers (D&O) insurance pay for my SEC or DFPI defense lawyer?

In many cases, yes. Most modern Side A and Side B D&O insurance policies cover legal fees incurred by executives responding to formal SEC and DFPI subpoenas, Wells Notices, and criminal investigations until a final, non-appealable adjudication of fraud occurs.


No reviews yet. Be the first to share your experience!
×
Need legal help? I'm here!
Legal AI
Assistant