Quick Answer
Injured investors, and clients harmed by a paid adviser's registration, advisory-activities, or antifraud violation, sue civilly to recover their loss plus interest, costs, and attorney's fees, minus income received, within 3 years of the sale (or of the advice) or 2 years of discovery, whichever comes first. Willful violators face criminal prosecution by the attorney general or a local prosecutor: up to a $5,000 fine and 3 years in prison. A timely written rescission offer can head off a civil suit.
With the administrator's powers and actions covered, let's turn to what happens through the courts under the Uniform Securities Act (USA): civil liability for injured investors, criminal penalties for willful violators, and two important procedural provisions.
Civil Liability
When securities laws are violated, investors can sue. The USA provides specific civil remedies for buyers:
Grounds for Civil Action
A buyer may bring a civil action if they purchased securities through:
- Strict-liability violations, no fraud required: selling an unregistered security, transacting as an unregistered broker-dealer or unregistered agent, implying registration means the Administrator approved the security, using sales literature without required affirmative approval, or violating specified registration conditions
- Offer or sale by means of fraud or misrepresentation (an untrue statement or omission of a material fact, where the buyer didn't know of it). Here the seller has a defense: proving they neither knew, nor with reasonable care could have known, of the untruth or omission defeats the claim
A client who pays for investment advice has a separate civil action against an adviser who violates the specified registration, advisory-activities, or sales-literature-approval provisions in giving that advice (no fraud required), or who defrauds the client for compensation.
What the Buyer or Client Can Recover
- If the buyer still owns the security: Recover the consideration paid (purchase price), plus interest, costs, and reasonable attorney's fees, minus any income received (such as dividends), upon tendering the security back
- If the buyer no longer owns the security: Recover damages (the amount recoverable on a tender, minus the security's value when the buyer disposed of it, plus interest from the disposition date)
- A client harmed by a paid adviser's registration, advisory-activities, or antifraud violation recovers the consideration paid for the advice, plus any loss caused by the advice, plus interest, costs, and reasonable attorney's fees, minus income received from the advice
Exam Tip: Gotchas
- The formula includes costs and attorney's fees, not just purchase price, interest, and income offset. The buyer (or the harmed advisory client) gets made whole, plus litigation costs and any loss caused by the advice. This is a form of rescission (unwinding the transaction).
Who Is Liable?
Liability is not limited to the person who directly made the sale or gave the advice:
- The seller or adviser
- Any person who controls that seller or adviser
- Every partner, officer, or director of that person, or anyone occupying a similar status or performing similar functions
- Every employee who materially aids the conduct giving rise to the liability
- Broker-dealers and agents who materially aided in that conduct (not just "the transaction," since advisory liability may not involve one)
All of these secondary parties are jointly and severally liable, to the same extent as the primary violator, UNLESS they can prove they neither knew, nor with reasonable care could have known, of the facts giving rise to the liability.
Exam Tip: Gotchas
- Controlling persons are liable too, but they have a defense. If a supervisor failed to supervise an agent who sold unregistered securities, the supervisor and the firm can both be sued (controlling person liability) unless they prove they neither knew, nor with reasonable care could have known, of the underlying facts.
Statute of Limitations
- From discovery of the violation: 2 years
- From the date of sale (or the rendering of the advice, for an adviser-liability claim): 3 years
- Whichever deadline comes first applies
- If an investor discovers the violation 1 year after the sale, both clocks point to the same date: 2 years from discovery lands at year 3, matching the 3-year absolute deadline from the sale
- If an investor does not discover the violation until 2.5 years after the sale, they only have 6 months left (the 3-year absolute deadline cuts them off before the 2-year-from-discovery clock would)
Exam Tip: Gotchas
- The 3-year deadline is absolute. Even if the investor has not discovered the violation yet, the clock runs out. Discovery can shorten the window (2 years from discovery) but never extend it beyond 3 years from the sale.
Criminal Penalties
Criminal prosecution is the most serious consequence of violating the USA, but it involves a different process entirely.
Key Elements
- Any person who willfully violates the act (except the misleading-filings provision, which instead requires knowingly making a materially false or misleading filed statement) or any rule or order under the act is subject to criminal prosecution
- Willful means the person intentionally engaged in the conduct; it does NOT require knowing that the conduct violated the law
- However, no one may be imprisoned for violating a rule or order if they can prove they had no knowledge of that rule or order
Penalties Per Violation
- Fine: Up to $5,000 per violation
- Imprisonment: Up to 3 years per violation
- Fine and imprisonment can be imposed together
Memory Aid: 5 and 3: $5,000 fine and 3 years imprisonment.
Who Brings Criminal Charges?
- The state administrator does NOT bring criminal charges directly
- The administrator refers cases to the state attorney general or local prosecutor
- The prosecutor decides whether to file charges and pursue the case in court
Exam Tip: Gotchas
- The administrator does NOT prosecute criminal cases. The administrator refers cases to the attorney general or local prosecutor. If the exam asks "Who brings criminal charges?" the answer is the prosecutor, never the administrator.
Rescission Offers
A person who has violated the act has one way to avoid civil liability: by proactively making the investor whole.
How It Works
- The violator makes a rescission offer to the buyer before the buyer brings an action
- The offer must give the buyer the opportunity to recover the consideration paid plus interest minus income received. This is narrower than the full civil-recovery formula: it doesn't include costs or attorney's fees, since there's no lawsuit yet
- The offer must be in writing
- The buyer has 30 days to respond, and the required response depends on whether the buyer still owns the security
If the Buyer Still Owns the Security
- The offer is an offer to repurchase the security: the consideration paid plus interest, minus income received
- The buyer must accept within 30 days or lose the right to sue
- If the buyer accepts, the transaction is unwound and the violator is relieved of further liability
If the Buyer No Longer Owns the Security
- The offer is an offer to pay damages
- The buyer must reject the offer in writing within 30 days to preserve the right to sue
- If the buyer accepts the offer, the matter is closed and the violator is relieved of further liability
Exam Tip: Gotchas
- Silence forfeits the right to sue in both scenarios. A buyer who still owns the security and fails to accept within 30 days, or who no longer owns it and fails to reject in writing within 30 days, loses the right to sue. Doing nothing always gives up the claim.
- The rescission offer must come BEFORE the buyer files a lawsuit. Once a lawsuit is filed, it is too late for a rescission offer to eliminate liability.
Consent to Service of Process
This is a procedural provision that ensures the state can reach people who have left:
- Every applicant for registration, and every issuer proposing to offer a security in the state through a common-law agent, must file an irrevocable consent appointing the administrator as their attorney for service of process
- This means: even if the person moves out of state or closes their office, the state can still serve them legal papers through the administrator
- The consent is irrevocable: once filed, it cannot be withdrawn
- It covers noncriminal suits, actions, or proceedings arising under the act; this applies to all registrants (broker-dealers, agents, investment advisers, IARs) and covered issuers, though notice-filing provisions may separately require their own consents
Exam Tip: Gotchas
- Consent to service of process is irrevocable. A person cannot withdraw it even after leaving the state or letting their registration lapse. The state always has a way to reach them.
Three Enforcement Tracks
| Track | Who Initiates | Forum | Standard | Remedies |
|---|---|---|---|---|
| Administrative | Administrator | Administrative hearing | Deny/suspend/revoke registration needs public interest (a required finding) plus a statutory ground; a cease and desist order needs neither, just an actual or imminent violation | Deny/suspend/revoke registration, cease and desist |
| Civil | Injured investor, or a client harmed by a paid adviser's registration/advisory-activities/antifraud violation | Civil court | Preponderance of evidence | Damages, rescission (money) |
| Criminal | Attorney general/prosecutor | Criminal court | Beyond reasonable doubt | Fines up to $5,000, imprisonment up to 3 years |
These tracks are not mutually exclusive: the administrator can pursue a court injunction alongside (not instead of) a cease and desist order, so administrative and court-ordered relief can run in parallel.
Exam Tip: Gotchas
- "Public interest" is a required finding, not a point on a burden-of-proof scale. It's not comparable to "preponderance of evidence" or "beyond reasonable doubt"; it's simply one of the two elements every disciplinary action needs.
- Civil actions aren't limited to securities buyers. A client who paid for investment advice and was defrauded, or harmed by advice given in violation of the Act, has a separate civil action too. The administrator handles administrative remedies; the prosecutor handles criminal charges; either can run alongside a civil suit by the injured party.
What Should You Check on Exam Day?
- Can you state the civil recovery formula: consideration paid plus interest, costs, and attorney's fees, minus income received, and that a client harmed by a paid adviser's registration, advisory-activities, or antifraud violation has this same kind of claim, plus any loss caused by the advice?
- Do you know who else can be liable besides the seller (controlling persons, partners/officers/directors, materially-aiding employees, and broker-dealers/agents), and that they can defend by proving they neither knew nor could reasonably have known the underlying facts?
- Can you distinguish the strict-liability unregistered-securities claim from the fraud/misrepresentation claim, which lets the seller raise a reasonable-care defense?
- Can you apply the statute of limitations: 2 years from discovery or 3 years from sale, whichever is first, and that the 3-year deadline is absolute?
- Do you know criminal liability requires willful (intentional) conduct, but not knowledge that the conduct was illegal, and that there's a narrow no-imprisonment defense for violating a rule or order you didn't know about?
- Can you state the criminal penalty ceiling (up to $5,000 fine and up to 3 years imprisonment per violation) and who actually brings the charges?
- Do you know a rescission offer must be made before the buyer sues, and what the buyer must do within 30 days depending on whether they still own the security?
- Can you explain why consent to service of process is irrevocable, who specifically must file it, and that it's limited to noncriminal actions?
- Can you match each of the three enforcement tracks (administrative, civil, criminal) to who initiates it, the forum, and the standard of proof, and explain why administrative and court remedies can run in parallel rather than being mutually exclusive?