Sometimes a scam doesn’t need to invent a whole new system—it can simply borrow the look and feel of an official one. That’s the idea behind the U.S. Securities and Exchange Commission’s latest enforcement sweep, which charged 38 entities with using regulatory paperwork to fake legitimacy. According to the SEC, these businesses submitted Forms ADV between 2025 and 2026, a standard regulatory document used by investment advisers and by firms that claim to be exempt reporting advisers. The SEC alleges the forms were filled with information that was false, misleading, or impossible to verify. The goal, regulators say, was to make the entities look like legitimate investment advisory firms while attracting U.S. investors. All 38 complaints were filed in the U.S. District Court for the District of Colorado, and the SEC is asking the court for permanent injunctions, civil penalties, and conduct-based injunctions barring the defendants from filing Forms ADV as exempt reporting advisers in the future. Announced in late August, the sweep is unusually broad; the agency published a separate complaint for each entity, with names ranging from Abrdn Canada Limited to Robin Markets Inc. and Web3 University. The variety of names alone suggests the problem isn’t limited to one corner of the investing world. The broader message for ordinary investors is simple but easy to forget: a filing in an SEC database is not a stamp of approval. It isn’t even a sign that regulators have looked under the hood. Forms ADV are supposed to provide transparency; in this case, the SEC says, they were used as props to create an appearance of legitimacy. That’s an important distinction for anyone who might be tempted to relax after seeing a company’s name in an official-looking database. If anything, this case proves that scammers will use every available tool—even government filing systems—to make themselves look real.
The details in the SEC’s complaints paint a picture of shortcuts, copied paperwork, and a lot of smoke and mirrors. Some entities listed Colorado business addresses where they had no actual presence. Phone numbers were disconnected or belonged to unrelated businesses. Some filings included ownership structures and numerical information that were identical or nearly identical to those submitted by numerous other purported exempt reporting advisers. The SEC also says the companies claimed that financial statements for the private funds they supposedly advised had been audited by one of two independent public accounting firms—but neither firm could be located in public federal or state accountancy registries. Investigators found that some defendants accessed the SEC’s filing system using IP addresses traced to foreign jurisdictions. And when SEC attorneys asked for records to support the information in the filings, several defendants simply didn’t respond. The pattern is a textbook example of how fraudulent operators cobble together just enough official-looking detail to fool someone who isn’t looking too closely. Laura D’Allaird, chief of the SEC Enforcement Division’s Cyber and Emerging Technologies Unit, described the matter as an alleged large-scale abuse of adviser filings. She noted that in several instances the people behind the entities were likely operating overseas and trying to capitalize on investor interest in emerging technologies—cryptocurrency, artificial intelligence, online trading platforms, and the like. The SEC’s response, she said, was to disrupt operations that use fraudulent filings to create a false impression of legitimacy. The action also sends a signal to other would-be bad actors: filing a form with the SEC does not give anyone license to trick investors, and the agency is watching for misuse of its own systems.
Perhaps the most troubling part of the case is the fake certificates. The SEC alleges some websites for the charged entities displayed certificates that looked official and suggested the firms were registered with the SEC when they were not. The SEC’s Office of Investor Education and Assistance issued an investor alert on the same day as the enforcement action, warning that scammers are using exempt reporting adviser, or ERA, filings to create a false impression of legitimacy. Some of these schemes also involve advance-fee fraud, where a victim is asked to pay upfront for services or investments that never materialize. According to the alert, some fake certificates contained legitimate-looking regulatory identifiers, including Central Registration Depository and SEC file numbers that had actually been assigned when a Form ADV was filed. The certificates used those numbers to make false claims about SEC status. This is where the distinction gets confusing. An exempt reporting adviser is not the same as an SEC-registered adviser. An ERA is an investment adviser that is not required to register with the SEC but still has to file reports, keep records, and follow certain federal rules. ERAs generally advise private funds like hedge funds, venture capital funds, and private equity funds. They cannot legally provide investment advice directly to individual retail investors. Yet because the phrase “exempt reporting adviser” sounds technical and official, and because the forms show up in public systems, it’s easy for investors to assume more than they should. The SEC is clear: it does not evaluate the abilities or qualifications of ERAs, and it does not issue certificates to ERAs—or even to registered advisers—indicating SEC approval. So if a company claims to be both an ERA and “SEC registered,” or displays a certificate that seems to prove government endorsement, that inconsistency is a red flag you shouldn’t ignore.
Why does Form ADV look so convincing? For registered investment advisers, the form includes extensive information about an adviser’s business, ownership, clients, employees, practices, affiliations, and disciplinary history. Different parts of the form add detail about fees, conflicts, services, and other important matters. It’s understandable for investors to assume that if a company’s name appears in a government-related system, someone in the government must have reviewed the company. But that assumption can be dangerous. The SEC says it has removed the 38 ERA filings associated with the defendants from the Commission’s website. That removal is significant because the defendants allegedly used those filings to create a false sense of legitimacy. The agency also issued a new investor alert explaining how the technique works. A bad actor files a Form ADV, receives a number, posts a fake certificate online, and then points to the filing or the number as if it were proof of SEC approval. The SEC’s advice in response is blunt. If someone claiming to be an ERA points to an SEC filing or a website as proof that it’s registered with the SEC, do not trade with the entity, do not send money, do not transfer cryptocurrency, and do not provide personal information. The existence of a filing doesn’t mean the SEC has registered, approved, endorsed, or verified anything. It simply means someone clicked “submit.” Investors need to separate information from endorsement. A filing is information. It can be accurate, or it can be a carefully designed lie. In this case, the SEC alleges the lie was the whole point.
Investors who want to check out an unfamiliar adviser have some free tools available. The Investment Adviser Public Disclosure database and Investor.gov’s “Check Out Your Investment Professional” search allow you to review registration status, Form ADV information, business practices, and certain disciplinary information. But these tools are only a starting point. You should independently verify any contact information instead of relying solely on a phone number, email address, or website provided by someone soliciting your money. You should be suspicious anytime a company claims the SEC has “approved,” “certified,” or endorsed an investment opportunity or advisory operation. The SEC explicitly says it does not issue certificates to ERAs or registered advisers. It’s also important to look for mismatches between an entity’s regulatory status and what its representatives are saying. If someone claims to be an exempt reporting adviser but is trying to give direct investment advice to you as an individual retail investor, that’s a major warning sign. ERAs are supposed to advise private funds, not individual clients. The SEC’s latest case is also a reminder to be extra careful with unsolicited opportunities involving cryptocurrency, artificial intelligence, or other emerging technology themes. Those are exactly the areas where scammers like to plant fake names and flashy websites. A name like “Web3 University” or “Pinnacle Crypto Exchange” might sound cutting-edge, but in this case, those names were attached to entities the SEC says were part of an alleged scheme. The lesson is not to assume that a modern-sounding name, a professional-looking website, or a familiar regulatory term means the opportunity is real.
The FBI assisted in the SEC’s investigation through Operation Level Up, a program designed to help fraud victims and disrupt criminal schemes. The SEC’s cases are civil, not criminal, and the allegations have not been proven in court. The defendants can contest the charges, and the filing of a civil complaint does not amount to a finding of liability. Still, the broader lesson for investors is immediate. An SEC filing should be the beginning of due diligence, not the end of it. Before handing over money to an unfamiliar adviser, take time to confirm the firm’s actual registration or reporting status. Look at its regulatory disclosures carefully. Double-check its physical address and phone number. Search for independent information about the people running the operation. Be especially skeptical if the contact came through an unsolicited call, message, or advertisement. And understand that official-looking paperwork can be faked or misused. Regulators can remove fraudulent filings and bring civil charges, but they can’t always undo a transfer of funds. The SEC’s action against these 38 entities is a reminder that in a world where brochures, websites, and forms can all be manufactured, the most valuable investment tool is independent verification. A little caution can go a long way. If something feels wrong—if an entity claims to be registered but can’t give a clear answer, or if it says the SEC approved it—walk away and check before you invest. The few minutes it takes to verify could save you from becoming the next victim.