For years, the crypto industry argued that the Securities and Exchange Commission was making up the rules as it went along, using enforcement actions as a substitute for actual policy. On Tuesday, the SEC more or less agreed.
In its fiscal year 2025 enforcement report released Tuesday, the Commission took aim at the actions of its prior leadership, saying that resources had been “misapplied in prior years to pursue media headlines and run up numbers,” leading to what it described as misguided expectations about what effective enforcement actually looks like.
The self-criticism was pointed and, by the standards of federal agency communications, unusually blunt.
The SEC’s case against its own prior conduct
Since fiscal year 2022, the prior Commission brought 95 actions and $2.3 billion in penalties against firms for book-and-record violations, specifically failures to maintain and preserve off-channel communications.
Together with seven crypto firm registration-related cases and six “definition of a dealer” cases, the current Commission said these actions identified no direct investor harm, produced no investor benefit or protection, and demonstrated a misinterpretation of federal securities laws, a misallocation of Commission resources, and a bias for volume of cases over genuine investor protection.
That’s a fairly striking admission from a regulator, effectively declaring that billions of dollars in penalties collected under its prior chair, Gary Gensler, were legally and strategically misguided.
The report characterized the period leading up to the January 2025 presidential inauguration as involving an unprecedented rush to bring cases, a rush that the current Commission believes produced enforcement actions not sufficiently grounded in federal securities law.
SEC Chairman Paul Atkins said the Commission had “put a stop to regulation by enforcement” and recentered its program on fraud, market manipulation, and abuses of trust.
“We have redirected resources toward the types of misconduct that inflict the greatest harm,” Atkins said, adding that the agency had moved “away from approaches that prioritized volume and record-setting penalties over true investor protection.” The language is quite notable particularly for what it signals going forward.
What actually changed and what it means for crypto
The shift in posture didn’t begin with this report. Beginning in February 2025, the Commission dismissed seven enforcement actions brought by the prior Commission involving crypto assets, including cases against Coinbase, Kraken, Binance, Consensys, and Cumberland DRW.
Those dismissals were widely read at the time as political signals. This report frames them instead as legal corrections, cases that shouldn’t have been brought in the first place.
The current Commission has deliberately refocused on fraud-based matters, which it acknowledges take longer and require more resources, often needing two years or more before results show up in enforcement statistics. That’s worth keeping in mind when looking at the raw FY 2025 numbers.
The Commission filed 456 enforcement actions in fiscal year 2025, including 303 standalone actions, with orders for monetary relief totaling $17.9 billion, though when certain deemed-satisfied amounts and long-running litigation judgments are excluded, the actual monetary relief for the year totals closer to $1.4 billion in disgorgement and $1.3 billion in civil penalties. The headline figure flatters the picture considerably.
The broader regulatory reset has been accelerating on multiple fronts. On March 17, 2026, the SEC and CFTC jointly issued a landmark interpretive release clarifying which crypto assets are securities and which are not, replacing the prior “regulation by enforcement” approach and superseding all prior staff statements on the topic.
The guidance separates digital assets into five distinct categories: digital commodities, digital collectibles, digital tools, stablecoins, and digital securities, with only the last category treated as inherently a security.
Critically, the guidance identifies 18 examples of digital assets the SEC views as commodities, including five, XRP, Cardano, Solana, Algorand, and LBRY Credits, that the agency had previously asserted in enforcement actions were securities.
That last detail is hard to overstate. LBRY, the blockchain content platform, shut down in October 2023 after losing a case in which a federal court sided with the Gensler-era SEC. The new guidance now classifies the very asset at the center of that case as a commodity. The company no longer exists to benefit from the correction.
There are legitimate critiques of the current Commission’s approach too. Some legal analysts argue the new guidance, while a marked improvement, stops short of a full course correction, particularly on the Howey test for investment contracts, where the agency has yet to clearly reject the prior administration’s overbroad interpretation that allowed it to piece together a securities classification from developer tweets, white papers, and marketing materials.
The Commission returned approximately $262 million to harmed investors in FY 2025 and awarded roughly $60 million to 48 whistleblowers, while receiving a record 53,753 tips, complaints, and referrals, nearly 19% more than the prior year. On investor protection in the traditional sense, fraud, Ponzi schemes, manipulation, the agency says it’s leaning in harder than ever.
The question hanging over all of this is accountability. Acknowledging that prior enforcement was legally flawed is one thing. The companies and projects that were fined, forced to restructure, or driven out of business under those actions aren’t getting made whole. The SEC’s course correction, however genuine, arrives too late for some.