Securities Fraud Schemes

Why Securities Fraud Schemes Matter for the CFE Exam

Securities fraud is a core topic within the Financial Transactions and Fraud Schemes section of the Certified Fraud Examiner (CFE) exam. The ACFE devotes significant attention to this area because securities schemes cause some of the largest financial losses in the world, often affecting thousands of victims at once. Think of Bernard Madoff, whose Ponzi scheme destroyed an estimated $65 billion in paper wealth, or Enron, whose accounting manipulation wiped out employee retirement savings. Fraud examiners are frequently called upon to investigate investment losses, trace commingled funds, and testify about how a scheme operated.

From an exam standpoint, this topic is heavily definition-driven. The exam expects you to recognize a scheme from a short fact pattern, distinguish between schemes that look alike (such as Ponzi versus pyramid schemes), and understand the regulatory environment that governs securities markets. Mastering these distinctions earns reliable points.

What Is a Security?

Before you can understand securities fraud, you must understand what a security is. A security is broadly defined to include stocks, bonds, notes, debentures, options, warrants, limited partnership interests, and investment contracts. The term is interpreted expansively so that creative fraudsters cannot escape regulation simply by giving their product a different name.

In the United States, the leading test for whether an arrangement is an investment contract (and therefore a security) comes from the Supreme Court case SEC v. W.J. Howey Co. Under the Howey Test, an investment contract exists when there is:
1. An investment of money,
2. In a common enterprise,
3. With an expectation of profits,
4. Derived primarily from the efforts of others.

This test matters because many frauds involve products that promoters claim are not securities (ostrich farms, pay telephones, cryptocurrency tokens, viatical settlements). If the Howey elements are met, securities laws apply, and the promoter has likely sold unregistered securities.

Securities Fraud Defined

Securities fraud generally refers to any deceptive practice in connection with the offer, purchase, or sale of securities. It includes making false statements, omitting material facts, manipulating markets, trading on confidential information, and misusing investor funds. The core legal foundation in the U.S. is Rule 10b-5 under the Securities Exchange Act of 1934, which prohibits any device, scheme, or artifice to defraud; any untrue statement or omission of a material fact; and any act or practice that operates as a fraud in connection with the purchase or sale of any security.

The Regulatory Framework (Know the Basics)

The CFE exam is international, but it draws heavily on U.S. securities law as a model. Key laws and bodies include:

- Securities Act of 1933 (the truth in securities law): Governs the initial issuance of securities. Requires registration of new offerings with the SEC and full disclosure through a prospectus. Prohibits fraud in the offer and sale of securities.
- Securities Exchange Act of 1934: Created the Securities and Exchange Commission (SEC). Regulates secondary trading, exchanges, broker-dealers, and requires periodic reporting (10-K, 10-Q, 8-K) by public companies. Contains Section 10(b) and Rule 10b-5.
- Investment Company Act of 1940: Regulates mutual funds and other investment companies.
- Investment Advisers Act of 1940: Regulates those who are paid to advise others about securities.
- Sarbanes-Oxley Act of 2002: Enacted after Enron and WorldCom. Created the PCAOB, required CEO/CFO certification of financial statements, strengthened auditor independence, and enhanced whistleblower protections.
- Dodd-Frank Act of 2010: Expanded the SEC Whistleblower Program, offering monetary awards to tipsters.
- FINRA (Financial Industry Regulatory Authority): A self-regulatory organization that oversees broker-dealers and registered representatives.
- CFTC (Commodity Futures Trading Commission): Regulates commodity futures and options markets.
- State securities regulators: Enforce blue sky laws, which are state-level securities statutes.

Exam tip within this section: The 1933 Act deals with new issues (primary market); the 1934 Act deals with trading (secondary market) and created the SEC. This distinction is a classic test question.

Major Securities Fraud Schemes: How They Work

1. Ponzi Schemes

Named after Charles Ponzi, who in 1920 promised investors a 50 percent return in 45 days through international postal reply coupons. A Ponzi scheme is an investment fraud in which returns paid to earlier investors come not from any legitimate business profit but from the capital contributed by newer investors. The promoter typically claims to have a secret or proprietary strategy. Hallmarks include:
- Consistently high returns regardless of market conditions
- Returns that are unusually steady with little volatility
- Difficulty withdrawing principal or pressure to roll over funds
- Unregistered investments and unlicensed sellers
- Secretive or complex strategies that cannot be explained
- Paperwork errors, missing or inconsistent account statements

The scheme collapses when new investment slows, when too many investors seek redemptions at once, or when the promoter absconds. The promoter does not need a product; the investment itself is fictitious.

2. Pyramid Schemes

A pyramid scheme compensates participants primarily for recruiting new participants rather than for selling a genuine product or service to end consumers. Each new member pays a fee, part of which flows up the chain. Because the number of recruits required grows geometrically, the scheme is mathematically doomed. Pyramid schemes are often disguised as multi-level marketing (MLM) programs.

Ponzi vs. Pyramid, the Critical Distinction:
- In a Ponzi scheme, the promoter interacts with all investors directly, and investors are passive. They believe they are earning returns from an investment; they do not know their money is paying earlier investors.
- In a pyramid scheme, participants are active. They know they must recruit others to make money, and the structure is hierarchical with money flowing upward through multiple levels.
- Legitimate MLM companies derive revenue mainly from product sales to real customers; pyramid schemes derive revenue mainly from recruitment fees and inventory loading.

3. Pump-and-Dump Schemes

Promoters acquire a large block of a thinly traded, low-priced stock (often a microcap or penny stock), then aggressively pump the price through false or misleading promotional statements via newsletters, social media, spam emails, or cold calls. Once unsuspecting investors drive the price up, the promoters dump their shares at the inflated price. The price then collapses, leaving late buyers with losses. Microcap stocks are favored because limited public information makes false claims harder to disprove and low trading volume makes prices easy to move.

The reverse variant is short-and-distort: the fraudster shorts a stock, spreads negative rumors to drive the price down, and then covers the short position at a profit.

4. Market Manipulation Techniques

These are specific tactics used to create an artificial appearance of trading activity or price movement:
- Wash sales (wash trades): Buying and selling the same security simultaneously, or nearly so, with no change in beneficial ownership, to create the illusion of volume.
- Matched orders: Two or more parties collude to place buy and sell orders of the same size at the same time and price, again faking activity.
- Painting the tape: A series of transactions designed to give the impression of active trading or price movement to lure other investors.
- Marking the close: Placing trades at or near the end of the trading session to influence the closing price, which may affect portfolio valuations, margin requirements, or option settlements.
- Spoofing and layering: Placing orders with no intention of executing them in order to move the price, then cancelling them.
- Cornering the market: Acquiring enough of a security or commodity to control its price.
- Parking: Temporarily transferring securities to another party to conceal true ownership, often to evade disclosure or net capital rules.

5. Insider Trading

Insider trading is buying or selling a security while in possession of material, nonpublic information in breach of a duty of trust or confidence. Information is material if a reasonable investor would consider it important in making an investment decision (for example, an unannounced merger, earnings surprise, or FDA decision). Two main theories:
- Classical theory: Corporate insiders (officers, directors, employees) trade on confidential company information, breaching a duty to shareholders.
- Misappropriation theory: An outsider (lawyer, printer, consultant, family member) misuses confidential information in breach of a duty owed to the source of the information, not to the shareholders.
- Tipper/tippee liability: The person who leaks information (tipper) and the person who trades on it (tippee) can both be liable if the tipper received a personal benefit and the tippee knew or should have known the information was improperly disclosed.

6. Broker-Dealer and Investment Adviser Misconduct

- Churning: Excessive trading in a client account to generate commissions, without regard to the client's investment objectives. Indicators include high turnover ratios and cost-to-equity ratios.
- Unauthorized trading: Executing trades without client permission in a non-discretionary account.
- Unsuitable recommendations: Recommending investments inconsistent with the client's risk tolerance, age, financial situation, or objectives.
- Front running: A broker trades for his own account ahead of a large client order he knows will move the price.
- Misappropriation of client funds: Simply stealing from accounts, often concealed with falsified statements.
- Selling away: A registered representative sells securities not approved by his firm, outside the firm's supervision.
- Excessive markups: Charging undisclosed, unreasonable spreads on principal transactions.
- Soft dollar abuses: Using client commissions to pay for goods or services that benefit the adviser rather than the client without proper disclosure.

7. Boiler Rooms and Bucket Shops

A boiler room is a high-pressure sales operation where salespeople cold-call prospects using scripted pitches and aggressive tactics to sell worthless or overpriced securities. A bucket shop is a sham brokerage that accepts customer orders but never actually executes them in the market, instead betting against the customer or simply pocketing the money.

8. Prime Bank Schemes and High-Yield Investment Programs (HYIPs)

Promoters claim access to secret trading programs involving instruments issued by the world's top (prime) banks, such as standby letters of credit, bank guarantees, or medium-term notes, allegedly yielding enormous risk-free returns. These instruments and markets do not exist as described. Red flags include claims of secrecy, references to the Federal Reserve or ICC, use of jargon like roll programs, and demands that investors sign non-disclosure agreements.

9. Affinity Fraud

The fraudster targets members of an identifiable group (religious congregations, ethnic communities, professional associations, the elderly) and exploits the trust within the group. Often the promoter is a member or recruits respected leaders to vouch for the investment. Madoff's scheme and many Ponzi schemes relied heavily on affinity fraud. Victims are reluctant to report because of community loyalty and embarrassment.

10. Advance Fee Schemes

Investors are required to pay a fee upfront, such as a processing fee, insurance fee, or tax, to release a larger payout or to participate in a lucrative deal. Once the fee is paid, the promised investment never materializes.

11. Offering Frauds and Unregistered Securities

Companies raise capital through private placements, Regulation D offerings, or initial coin offerings using false statements about the business, its management, its financial condition, or the use of proceeds. Funds may be diverted to personal use. Selling securities without registration or a valid exemption is itself a violation, regardless of fraud.

12. Corporate Securities Fraud (Financial Statement Fraud)

Public companies may deceive the market by overstating revenue, hiding liabilities, backdating stock options, or making false forward-looking statements. Because shareholders buy and sell based on these disclosures, financial statement fraud is a form of securities fraud. Enron, WorldCom, and HealthSouth are the classic case studies.

13. Commodity and Futures Fraud

Schemes involving precious metals, foreign currency (forex), energy contracts, and agricultural futures. Common tactics include unregistered pools, misrepresenting risk, fictitious trading, and leveraged metals scams where the dealer never actually purchases the metal.

Red Flags of Securities Fraud

- Promises of guaranteed, risk-free, or unusually high returns
- Returns that are consistently positive regardless of market swings
- Pressure to invest immediately (limited time offer)
- Unregistered investments or unlicensed sellers
- Overly complex or secretive strategies
- Lack of independent custody or audited financial statements
- Reluctance to provide written documentation
- Difficulty receiving payments or withdrawing funds
- Account statements generated by the promoter rather than an independent custodian
- Commingling of investor funds with operating or personal accounts
- Small, unknown auditing firm for a large fund

Investigation and Detection Approaches

Fraud examiners investigating securities schemes typically:
- Verify registration status of the security, the firm, and the individual through regulators (SEC EDGAR, FINRA BrokerCheck, state securities commissions)
- Trace the flow of funds to determine whether money was invested as represented or used to pay earlier investors
- Compare reported returns to actual market performance and independent custodian records
- Examine trading records for turnover ratios (churning), timing relative to news releases (insider trading), and patterns of offsetting trades (wash sales)
- Review marketing materials and communications for misrepresentations and omissions
- Interview investors to understand what they were told and what they received
- Analyze the economic plausibility of claimed strategies

How to Answer Exam Questions on Securities Fraud Schemes

CFE exam questions in this area tend to follow predictable patterns. Most are either (a) a short scenario asking you to name the scheme, (b) a definition asking you to identify the correct term, (c) a question about which law or regulator applies, or (d) a true/false statement about scheme characteristics. Use this approach:

Step 1: Identify the key fact in the scenario. Ask who is paying whom and why. If early investors are paid with later investors' money and investors are passive, it is a Ponzi scheme. If participants earn by recruiting, it is a pyramid scheme. If someone trades on confidential information, it is insider trading. If someone creates fake trading activity, it is market manipulation.

Step 2: Look for the discriminating word. Exam writers embed a single clue: recruit points to pyramid; steady returns points to Ponzi; thinly traded or penny stock points to pump-and-dump; excessive trading points to churning; end of trading day points to marking the close; no change in beneficial ownership points to wash sale; secret bank instruments points to prime bank fraud; church members points to affinity fraud.

Step 3: Eliminate near-miss distractors. Wrong answers are often related schemes. Know the precise boundaries: wash sales involve one party, matched orders involve colluding parties; front running is a broker trading ahead of a client, insider trading is trading on nonpublic corporate information; a boiler room sells real (if bad) securities with pressure, a bucket shop never executes trades at all.

Step 4: For regulatory questions, anchor on dates and purposes. 1933 equals registration and disclosure of new issues. 1934 equals SEC, secondary trading, periodic reporting, and Rule 10b-5. 1940 equals investment companies and advisers. 2002 equals Sarbanes-Oxley and the PCAOB. 2010 equals Dodd-Frank and expanded whistleblower awards.

Step 5: Apply the Howey Test when asked whether something is a security. Investment of money, common enterprise, expectation of profits, efforts of others. If all four are present, it is an investment contract and therefore a security regardless of the label.

Exam Tips: Answering Questions on Securities Fraud Schemes

1. Memorize the Ponzi versus pyramid distinction cold. This is one of the most frequently tested concepts. Ponzi equals passive investors, central promoter, fictitious investment returns. Pyramid equals active participants, hierarchical recruitment, income from new member fees.

2. Know that a Ponzi scheme does not require a real product or business. Questions may state that a promoter actually operated a legitimate business on the side; the scheme is still a Ponzi if returns to investors came from new investor money.

3. Remember that insider trading liability extends beyond corporate insiders. Under the misappropriation theory, outsiders who breach a duty to the source of information are liable. Tippees can be liable too.

4. Materiality is judged by the reasonable investor standard. If a question asks whether information is material, think: would a reasonable investor consider it important?

5. Distinguish manipulation techniques by mechanics, not outcome. All of them aim to deceive about price or volume; the exam tests which method was used.

6. Churning is about the broker's motive, not the client's loss. An account can be churned even if it is profitable; the test is whether trading was excessive relative to the client's objectives and controlled by the broker for commission purposes.

7. Be alert to the word unregistered. Selling unregistered securities without an exemption is a violation on its own. Many scheme questions also note that the seller was unlicensed, which is a red flag the exam expects you to recognize.

8. Prime bank schemes are always fictitious. If a question describes secret trading programs in bank instruments with guaranteed returns, the answer is fraud. There is no legitimate version.

9. Affinity fraud is defined by the targeting method, not the underlying scheme. An affinity fraud may be a Ponzi, pyramid, or offering fraud; what makes it affinity fraud is exploitation of group trust.

10. Know what the SEC does and does not do. The SEC is a civil enforcement agency; it can seek injunctions, disgorgement, and civil penalties, but criminal prosecution is handled by the Department of Justice. FINRA is a self-regulatory organization, not a government agency.

11. Recognize red flags as a category. Some questions list several investment features and ask which is not a red flag. Guaranteed returns, secrecy, consistent returns, and pressure tactics are red flags; a prospectus filed with regulators and an independent custodian are not.

12. Read every word of the question stem. Words like not, except, most likely, and best describes change the answer. Securities fraud questions often use which of the following is NOT a characteristic of a given scheme.

13. Do not overthink international variations. The exam uses U.S. law as the primary framework but focuses on concepts that are universal: disclosure, registration, manipulation, insider dealing, and investor protection.

14. Practice with scenarios. Write out three-sentence fact patterns for each scheme and quiz yourself on identification. The exam rewards fast pattern recognition more than deep legal analysis.

Quick Reference Summary

- Ponzi: Old investors paid with new investors' money; passive victims.
- Pyramid: Income from recruiting; active participants; often disguised as MLM.
- Pump-and-dump: Inflate microcap price with hype, then sell.
- Short-and-distort: Short the stock, spread negative rumors, cover cheaply.
- Wash sale: Same party buys and sells; no change in ownership.
- Matched orders: Colluding parties place offsetting orders.
- Painting the tape: Series of trades to fake activity.
- Marking the close: Late-day trades to set closing price.
- Insider trading: Trading on material nonpublic information in breach of duty.
- Churning: Excessive trading for commissions.
- Front running: Broker trades ahead of client order.
- Boiler room: High-pressure cold-call sales operation.
- Bucket shop: Fake brokerage that never executes trades.
- Prime bank: Fictitious secret bank instrument trading programs.
- Affinity fraud: Exploits trust within an identifiable group.
- Advance fee: Pay upfront to unlock a payout that never comes.
- Howey Test: Money, common enterprise, expected profits, efforts of others.
- 1933 Act: New issues, registration, disclosure.
- 1934 Act: SEC created, secondary market, Rule 10b-5.
- SOX 2002: PCAOB, executive certification, auditor independence.
- Dodd-Frank 2010: Expanded SEC whistleblower awards.

Master these definitions and distinctions, and securities fraud questions on the CFE exam will become some of the most reliable points you earn.