The SEC changed how it counts. Here is what that means for you.

The envelope arrived in her email on a Thursday afternoon. It was a quarterly update from a private placement fund, which is a type of investment sold directly to individuals rather than on a public stock exchange. Linda Tran, sixty-one years old, retired dental hygienist from outside Albuquerque, had put two hundred and forty thousand dollars into this fund eighteen months earlier. The update showed a number. The number had not moved. Not up. Not down. Just sitting there, the same as it was the quarter before, and the quarter before that.

She called the number in the footer. She left a message.

She did not know that twelve miles from the office that sent her those quarterly updates, the fund's principals had incorporated a second entity in Wyoming, a state that does not require the names of company owners to appear in any public record. She did not know that entity had received two wire transfers from the fund's account in the prior sixty days. She did not know what the SEC's Division of Enforcement had just announced it was going to do about situations like hers.

She did not know, because the announcement was made at a conference in Washington, D.C., and nobody sent her an envelope about that.

I.

What Changed at the Top

On March 16, 2026, a judge named Margaret Ryan resigned as the director of the SEC's Division of Enforcement. She had held the job for a little over six months. The SEC named Sam Waldon as the acting director the same afternoon.

Three days later, at the 2026 SEC Speaks Conference in Washington, Waldon stood in front of an audience of lawyers and regulators and described the new enforcement philosophy.

He used the phrase "quality over quantity."

What that means, in plain language: the Enforcement Division is no longer going to measure its performance by how many cases it brings, how many penalties it collects, or what the total dollar figure looks like at the end of the year. Those were the old scorecards. Waldon said they are not effective measures of what the division does.

The new scorecard is the weight of each case. Not the count. The weight.

If you are someone who has money in a private placement, which is an investment that exists outside the regulated public markets and relies heavily on the good faith of the person selling it, that single sentence is worth sitting with.

II.

What the Old Count Was Hiding

There is a reason enforcement agencies count cases. Counting is visible. A press release that says "the SEC brought two hundred enforcement actions this year and collected eight hundred million dollars in penalties" is a number a senator can read. It is a number a headline writer can use. It is a number that signals activity.

What the count does not tell you is whether any of those two hundred actions stopped the thing that was actually hurting people.

Here is what I have seen from two decades of following money. The cases that get counted are often the easiest ones to bring. The boiler room that kept sloppy records. The promoter who sent promotional emails from his own name. The adviser who moved client funds into his own account and bought a truck. Those cases are real. They are fraud. But they are also the low-hanging fruit of a complex tree.

The cases that do not get counted, or that take years to build and may not count toward any annual metric, are the ones involving layers. A fund with nominee directors, which are people who lend their names to corporate filings without running the company, so that whoever is actually making decisions stays invisible. A private placement memorandum, which is the legal document describing a private investment, that tells investors their money goes into one category of asset while a side agreement moves it into another. A chain of LLCs, limited liability companies, where each one owns the next one, and by the time you reach the entity that actually holds the money, you are three jurisdictions away from where the investor wrote the check.

Those cases take time. They do not fit neatly into annual scorecards.

If Waldon is saying the division is going to stop rewarding itself for volume and start rewarding itself for impact, that is either a significant change in how fraud gets policed or it is a way to explain why fewer cases get brought.

Both possibilities live in the same sentence.

III.

What They Said They Are Coming For

Here is what the acting director said the division will focus on.

Offering fraud. That is the category that covers private placements. An offering is what happens when someone raises money from investors. Fraud in an offering is when they lie about what the money is for, who controls it, what returns it has generated, or what the risks are.

Insider trading. Buying or selling securities, which are financial instruments like stocks, based on material information that has not been made public.

Financial accounting fraud. When a public company lies about its numbers, either in its official filings with the SEC or on earnings calls or at investor presentations.

Market manipulation. Engineering the price of a security through coordinated buying, fake volume, or promotional campaigns that are not disclosed as paid.

Fiduciary violations by investment advisers. A fiduciary is someone who is legally required to act in your interest, not their own. When an investment adviser breaches that duty, steering clients into products that pay the adviser a higher fee than the client knows about, for example, that is the category.

And then there is one more: pump-and-dump schemes involving foreign companies listed on U.S. markets. A pump-and-dump is when someone acquires shares in a company cheaply, promotes the company publicly to drive up the stock price, then sells their shares into the elevated price while retail investors, everyday people, are still buying. The division has a cross-border task force working specifically on this, focused on foreign-based companies that accessed U.S. markets with the help of auditors, underwriters, and other professional intermediaries who knew or should have known what was happening.

Waldon called those intermediaries "gatekeepers." He was not complimentary about what some of them have done.

IV.

The SOX Group and What It Actually Means

The thing that caught my attention in the conference notes was not the language about fraud. Every enforcement chief says they are coming for fraud. What caught my attention was the announcement of a new unit.

They are calling it the SOX Group.

SOX is short for the Sarbanes-Oxley Act of 2002. That is a federal law passed after Enron and WorldCom collapsed, when Congress decided that accountants and auditors who sign off on financial statements needed to be held to a higher standard. The law created new criminal penalties for executives who certify false financial statements and established independent oversight of accounting firms.

The SOX Group will investigate violations of auditing and professional standards. That means accountants who sign off on fraudulent books. Auditors who miss, or choose not to find, what they were paid to find.

Here is why that matters if you have money in a private placement.

When someone sells you a private placement, they often show you financial statements. Those statements may come with something that looks like an audit, or a review, or a certification from an accounting firm. The implication is that a professional with a license has looked at the numbers and found nothing wrong.

The SOX Group is not investigating whether the fund lied. The SOX Group is investigating whether the people who were supposed to catch the lie were doing their job.

That is a different target. And it is the right one.

V.

The Manual and the Wells Letter

The division also updated its Enforcement Manual, the internal document that governs how SEC investigations are conducted. The last update was in 2017. The new one came out February 24, 2026.

The most significant change for people who are currently under investigation, or who represent people under investigation, is what they revised around the Wells process.

A Wells notice is a letter the SEC sends to someone before it files charges. The letter tells them: we think you did something wrong, here is roughly what we think it is, and you have the right to respond before we decide whether to proceed. Receiving a Wells notice does not mean you are charged. It means the staff has concluded their investigation and is considering recommending an action.

The old process could feel like a formality. The new manual says the default is four weeks for a response, that a meeting with senior enforcement leadership should be scheduled, and that staff should share more of the actual evidence with the target before the response is due.

This matters for a reason that goes beyond legal procedure.

When investigators are required to show their cards before charging, they have to have cards worth showing. The quality-over-quantity standard and the improved Wells process are connected. If the staff knows they will have to sit across from experienced defense lawyers and explain why a case is worth bringing, the cases they bring will be the ones they are sure about.

That filters out the marginal case. The borderline situation. The file where someone made a mistake that looked like fraud but was not.

It also means the cases that do get filed after that process are not ambiguous.

VI.

What This Does Not Change

Here is what I want Linda Tran to understand, if she ever reads something like this.

The SEC investigating better cases more carefully does not mean there are fewer people out there running private placement fraud right now.

It does not mean the Wyoming LLC her fund set up has been noticed.

It does not mean the quarterly update sitting in her email was reviewed by anyone at 100 F Street in Washington, D.C.

The revised enforcement philosophy is about what happens after a case is opened. It is not about how fast a case gets opened. It is not about how many tips get acted on. It is not about the gap between "we know" and "we can prove," which is where most victims live, sometimes for years, while the investigation builds.

What you should take from this is a single fact about how the machine operates.

The SEC is now saying it will not count cases for counting's sake. It will bring actions against people who it believes lied, cheated, and stole, and it will build those cases carefully enough to be confident it can win them. The division's chief accountant said, in those days in Washington, that financial accounting cases are "not dead." That the message sent by an action matters more than the volume of actions. That a company whose executives create top-down pressure to produce false financial narratives should expect to be investigated.

Read that last part again. Top-down pressure to create a false financial narrative.

If you are sitting on a private placement investment and the quarterly update shows numbers that do not move, and when you call the number in the footer no one calls back, the question is not whether the SEC will eventually care about your situation.

The question is whether the trail they would follow still exists by the time they get there.

Because the entity in Wyoming does not file annual reports. The nominee director does not return calls either. And the wire transfer records are only required to be kept for so long.

The machine is still running.

The enforcement division just told you it is serious about stopping machines like this.

What it did not tell you is how long that takes.

VII.

What to Do Before the Division Gets There

You are not waiting passively. You should not be.

Pull the private placement memorandum you were given when you invested. That is the document, sometimes dozens of pages long, that described the offering. Find the section on how your money is held. Find the name of the custodian, which is the institution responsible for holding the actual funds. Call the custodian directly. Not the fund manager. The custodian.

If the fund manager cannot tell you who the custodian is, or if the answer changes between conversations, write that down.

Look up the entity in the state where it was incorporated. If it was incorporated in Wyoming or Delaware or Nevada, the registered agent, which is the person or company officially designated to receive legal notices on behalf of the company, may be a commercial service. That is legal. It is also common in structures where the beneficial owner, the actual human being who controls the money, does not want their name in a public database.

Ask for the audited financial statements. Not the quarterly update. The audited statements, meaning the ones reviewed and signed by an independent accounting firm. Ask for the name of the firm. Look the firm up. If the firm has three employees and was incorporated in the same month your fund began raising money, write that down too.

None of this tells you whether a crime was committed. What it tells you is what the trail looks like before you decide whether to call a lawyer.

The ugly question is not whether you trust the person who sold you this investment. The ugly question is whether you can verify any single thing they told you from a source that does not report to them.

If you cannot, call a lawyer who handles securities fraud before you call the SEC. Not because the SEC cannot help. Because the lawyer will know how to present what you have found in a way that moves faster than a tip in a queue.

Linda Tran's phone has been dark in her hand for three days now.

She does not know yet whether the money is still there.

Neither do I. But I know where to look.