Does a Crypto Scam Fall Under SEC or CFTC Jurisdiction?

Updated July 13, 2026 6 min read

Reporting a crypto scam sounds simple until the question of which federal agency actually has authority comes up. The honest answer is that it depends on how the scheme was structured, not just on the fact that money was lost.

The short answer

The Securities and Exchange Commission generally has jurisdiction when a crypto scam involves something structured and marketed like an investment contract or security, while the Commodity Futures Trading Commission generally oversees fraud involving commodities and derivatives trading, a category that includes many crypto assets treated as commodities. In practice, both agencies can have overlapping interest depending on exactly how a scheme was set up.

Why jurisdiction depends on structure, not just outcome

Federal securities and commodities law wasn’t written with crypto specifically in mind, so both agencies apply older legal frameworks to determine whether a given token, offering, or trading scheme falls under their authority. The SEC has generally focused on offerings that promise returns based on the efforts of a promoter or third party, a hallmark of what’s traditionally considered an investment contract under securities law. The CFTC has generally focused on crypto assets treated as commodities and on fraud connected to derivatives trading, margin trading, or manipulation of commodity markets. A single scam can sometimes touch both categories, which is part of why jurisdiction isn’t always a clean, single answer.

How the two agencies typically split focus

Other agencies that may also have a role

Jurisdiction over crypto scams isn’t limited to just these two agencies. State securities regulators often have parallel authority, the Federal Trade Commission handles broader consumer fraud complaints, and the FBI’s Internet Crime Complaint Center collects reports that can feed into criminal investigations regardless of which regulatory agency ultimately has civil jurisdiction. Because crypto exchanges themselves operate under a patchwork of federal law that doesn’t map cleanly onto older regulatory categories, victims are often better served reporting broadly rather than trying to determine the single correct agency in advance.

Why this distinction matters for victims

Filing a complaint with the wrong agency generally doesn’t waste the complaint outright, since agencies do share information and can refer cases, but understanding the rough distinction helps set realistic expectations about which agency is more likely to act, and how quickly. It’s also worth being clear-eyed about outcomes: regulatory action against a scam operator doesn’t necessarily translate into recovered funds for victims, since enforcement and restitution are separate processes that don’t always align.

What to weigh

Because jurisdiction depends on the specific structure of a scam rather than a fixed rule, the most practical approach for a victim is to file reports with multiple relevant agencies rather than trying to guess the single correct one. Regulatory boundaries here are genuinely unsettled and continue to evolve, and no report or investigation ever comes with a guarantee of recovering lost funds.