Accredited investor verification under Rule 506(c) requires the issuer to take reasonable steps to confirm, with documentary evidence, that each investor meets the SEC’s financial thresholds. A self-certification checkbox does not meet that standard. The issuer must review income or net worth documents, or accept a written confirmation from a qualified professional, and retain the file for each investor.
Key Takeaways
- Rule 506(c) permits general solicitation and advertising, and in return it requires the issuer to take reasonable steps to verify each investor’s accredited status.
- A self-certification checkbox works under Rule 506(b), but it does not count as verification under Rule 506(c).
- The SEC recognizes three primary methods: income documentation for the prior two years, net worth documentation, or written confirmation from a qualified professional.
- The thresholds are income above $200,000 for an individual or $300,000 for a couple, or net worth above $1 million excluding the primary residence.
- Defective verification can cost the offering its exemption under Section 5 and expose it to rescission liability, so retain a complete verification file for every investor.
What does accredited investor verification require?
Founders who skip the verification step do not face a paperwork problem. They face the prospect that every dollar raised under the offering has to go back to investors, along with civil and criminal exposure under federal securities law. Accredited investor verification, the documented process of confirming that each investor in a private placement meets the SEC’s financial eligibility thresholds, is not a formality. Under Rule 506(c) of Regulation D, the federal framework that governs private placements exempt from full SEC registration, verification is the obligation that unlocks the ability to advertise and solicit investors in the open.
The confusion has a source. Many founders enter a capital raise having read a blog post or spoken with a well-meaning colleague who described accredited status as something investors confirm about themselves. That description holds for one type of offering and fails for another. The offering a founder chooses decides whether a self-reported statement is enough or whether documented, third-party evidence is required by law. Getting that distinction wrong before the first dollar arrives ranks among the most preventable and expensive mistakes in early-stage capital formation.
What is the difference between 506(b) and 506(c)?
Rule 506(b) and Rule 506(c) are both exemptions under Regulation D that let private companies raise capital without registering the offering with the SEC. The difference that matters is advertising. Under Rule 506(b), the issuer, the company raising capital, cannot use general solicitation or advertising to find investors. Because the offering stays inside a pre-existing network of relationships, the SEC lets issuers accept an investor’s own written representation that they meet the accredited standard. A self-certification questionnaire holds up in that context, as long as the issuer has no reason to doubt it.
Rule 506(c) came from the Jumpstart Our Business Startups Act of 2012, the JOBS Act. Congress built it to let founders advertise their offerings in public, on social media, in press releases, and through crowdfunding-style campaigns. In exchange for that privilege, the SEC set a hard requirement: the issuer must take reasonable steps to verify that each purchaser is an accredited investor. The word “verify” in 506(c) carries a legal meaning that runs well past asking someone to check a box. It calls for documented, objective evidence, gathered through a defined set of approved methods.
Why is a checkbox not verification?
A checkbox on a subscription agreement asks an investor to assert a fact about themselves. It does not confirm that fact. The SEC’s accredited definition rests on specific financial thresholds: an individual must have earned more than $200,000 in income in each of the prior two years, or more than $300,000 combined with a spouse or spousal equivalent, with a reasonable expectation of the same income in the current year. In the alternative, the individual must hold net worth above $1 million, excluding the value of the primary residence. Those thresholds call for evidence, not assertions.
When a founder accepts a checkbox as verification under a 506(c) offering, the file holds no documentary basis for the conclusion that the investor was eligible. The SEC’s adopting release for Rule 506(c) rejected self-certification as a standalone verification method. The agency noted that because founders using 506(c) solicit investors from unknown pools of people, the risk runs high that unqualified investors will misstate their status, whether on purpose or through a genuine misread of the criteria. A checkbox in that setting does not amount to a reasonable verification step. It leaves the offering exposed.
What are the three approved verification methods under 506(c)?
The SEC’s adopting release for Rule 506(c) describes a non-exclusive list of methods that satisfy the reasonable steps standard. Non-exclusive means these are not the only approaches, but they are the ones the SEC has confirmed as compliant. Use one of these methods, document it, and a founder holds a defensible compliance record. Depart from them and you need a careful legal analysis of whether the alternative still meets the standard, a question for a qualified securities attorney. The three primary methods map onto how accredited status gets established:
- Income verification, based on the investor’s earnings for the prior two years.
- Net worth verification, based on the investor’s assets and liabilities.
- Third-party written confirmation, based on a qualified professional’s review and sign-off.
Each method requires the issuer, and its counsel or compliance service, to collect and retain specific documentation for each investor. The documentation is not a courtesy record. It is the legal basis for the claim that verification happened. If an SEC examination or an investor complaint triggers a review, the documentation is what stands between the issuer and a finding of a defective offering. Founders who grasp this at the outset build file practices that protect the offering. Those who learn it after the fact often find that retroactive remediation is hard and, in some cases, out of reach.
How does income-based verification work?
To verify accredited status on income, the issuer must review tax documents that confirm the investor’s earnings for the prior two years. Acceptable documents include:
- IRS Form W-2s
- Form 1099s
- Schedule K-1s, which report partnership and S-corporation income
- Filed tax returns
The documents must cover both of the two preceding calendar years and must show income above the applicable threshold: $200,000 for an individual or $300,000 for an investor and their spouse or spousal equivalent combined. The issuer must also obtain a written representation from the investor confirming a reasonable expectation of the same income in the current year, since past income alone does not satisfy the forward-looking part of the definition.
Founders underestimate how many investors carry complicated income pictures. An investor pool that includes entrepreneurs, real estate operators, or professionals with variable pay will bring W-2s that show modest salaries alongside large K-1 or 1099 income. The issuer or its compliance team has to read those documents with accuracy and request supplemental materials when a single document type does not tell the whole story. Incomplete income verification, a review of one year of tax documents instead of two, does not meet the standard and creates a deficiency in the offering file.
How does net worth-based verification work?
Verifying accredited status on net worth requires the issuer to review both asset and liability documentation. Assets show up through recent bank statements, brokerage account statements, and real property appraisals or tax assessments. Liabilities get confirmed through a consumer credit report, which the investor must consent to, along with any other outstanding debt the investor discloses. The net worth calculation must exclude the value of the primary residence. If the mortgage on the primary residence runs above its fair market value, that negative equity counts as a liability.
The primary residence exclusion is one of the most mishandled elements of net worth verification. Investors who own a home with substantial equity get tempted to include it, and founders who are not tracking the exclusion with care let that error pass through the file. Any offering file that counts primary residence equity toward the qualifying net worth holds a defective verification for that investor. The SEC has been explicit about this rule since the Dodd-Frank Wall Street Reform and Consumer Protection Act amended the accredited definition in 2010. Founders and their compliance teams must flag this at the document review stage.
How does third-party written confirmation work?
The third method lets a founder accept written confirmation from a qualified professional who has already reviewed the investor’s financial information and concluded, on their own, that the investor meets the accredited standard. The qualified professionals under this method include:
- Licensed CPAs (certified public accountants)
- Licensed attorneys
- Registered broker-dealers (firms registered with FINRA, the Financial Industry Regulatory Authority, to buy and sell securities)
- Registered investment advisers (firms registered with the SEC or a state securities regulator to give investment advice for compensation)
This method suits offerings that target investors who hold ongoing relationships with wealth management professionals or accounting firms. Rather than collect and review raw financial documents, the issuer obtains a signed letter from the investor’s CPA or attorney confirming that, on a professional review of the investor’s finances, the investor qualifies as accredited. The letter must be current, dated within three months of the investment, and must cite the relevant threshold. A generic character reference or a letter that skips the accredited standard does not suffice. The confirmation must be precise, and the issuer should retain the original letter in the investor’s file.
Why does self-certification fail, and what does it cost founders?
Self-certification as a standalone verification practice under 506(c) is not a gray area. The SEC addressed it head-on in the rulemaking that created 506(c) and rejected it as insufficient. A founder who builds an offering on self-certification questionnaires is not sitting in legal uncertainty. They are sitting on a compliance failure baked into the structure of every investor file. The question is not whether that failure creates risk. The question is when the risk turns into a realized cost.
The financial and operational cost of a defective offering is not a theory. Founders who find a verification deficiency after the offering closes face a set of remediation choices that all cost money and none run straight. Reading the enforcement landscape and the consequences of defective verification matters for any founder who has launched or is about to launch under 506(c).
What is the SEC enforcement risk?
The SEC enforces securities laws through its Division of Enforcement, which can investigate issuers, bring civil actions, and, in fraud cases, refer matters for criminal prosecution. A 506(c) offering that misses the verification standard risks losing its exemption from Section 5 of the Securities Act of 1933. Section 5 bars the offer or sale of securities unless the offering is registered with the SEC or qualifies for a valid exemption. If the exemption falls because the verification requirement went unmet, the offering counts as a Section 5 violation, whether or not the issuer acted in good faith.
The SEC has brought enforcement actions against issuers who claimed Regulation D exemptions and failed to meet the conditions. Many early actions centered on fraud and misrepresentation rather than pure verification failures, and the agency holds broad authority to pursue technical violations. The growth of 506(c) offerings since the JOBS Act has raised regulatory attention on this space. An examination that surfaces defective investor files can escalate fast, above all if the SEC finds the issuer knew the requirement and reached for a shortcut. Founders should not bet on technical violations going unnoticed.
What happens to your offering if verification is defective?
If verification comes back defective, investors gain a right of rescission. Rescission lets the investor demand the return of their investment, with interest, on the ground that the securities were sold in violation of federal law. In a $1 million raise with ten investors, a rescission demand from even a portion of them can wipe out the capital the founder needed to operate. Rescission liability compounds once the offering has funded operations that cannot be unwound, which means the founder may face demands to return money already spent.
Past rescission, defective verification can trigger state securities consequences. Most states run their own securities regulations, the Blue Sky laws, and many require Regulation D offerings to be noticed with state regulators. A federal exemption failure can shift the state exemption analysis too, stacking liability across jurisdictions. The practical result for a founder is a capital raise that funds legal defense and investor settlements instead of growth. The cost of proper verification at the outset is a fraction of the cost of remediation after the fact.
How do founders get this wrong in practice?
The most common pattern is not deliberate evasion. It is a gap between what the founder believes is required and what the rules demand. A founder who raised a friends-and-family round under 506(b) is used to a process where investor self-certification is standard. When they move to 506(c) to reach a wider pool through general solicitation, they carry the same process forward without noticing that the legal standard changed. The subscription documents look similar, the questionnaires ask the same questions, and the investor experience feels the same. The difference stays invisible until an examination or a dispute makes it visible.
A second failure mode is outsourcing the process to an unqualified party. Some founders use online platforms or document automation tools that generate accredited investor questionnaires and store the results. Those tools produce well-formatted documents that look professional. If the underlying process still leans on investor self-reporting with no documentary review, the file is defective no matter how it looks. The SEC’s standard is not about the polish of the paperwork. It is about whether documentary evidence was reviewed and retained. A folder full of neat self-certification forms is not a verification file under 506(c).
A third failure mode involves timing. Founders sometimes run verification at the start of a relationship with an investor and then accept additional tranches from the same investor months or years later with no re-verification. The SEC’s position is that verification should be current at the time of each investment. An investor who qualified two years ago may not qualify today, and an offering that takes additional capital without re-verification adds new risk to each later close. Founders who run rolling closes over a long period need a verification process that applies to every close, not the first one alone.
What does a well-documented 506(c) verification file look like?
A compliant verification file for a single investor under 506(c) holds several elements in a logical, retrievable format. The first is the investor’s completed subscription agreement, which carries representations about accredited status but does not stand alone as verification. The second is the documentary evidence collected to support the conclusion: tax documents for income-based verification, account statements and credit reports for net worth-based verification, or a third-party confirmation letter. The third is a verification checklist or memorandum from the issuer or its compliance counsel that names which method was used, which documents were reviewed, and the conclusion reached.
The fourth element is a record of when verification finished relative to the date of the investment. Verification must precede or run concurrent with the acceptance of funds. A file where the investment arrived before the documentation was collected does not show that the issuer took reasonable steps to verify before the sale. The fifth element, above all for net worth-based verification, is the investor’s signed consent to the credit report pull. That consent has to be retained, because pulling a consumer credit report without authorization opens a separate legal issue under the Fair Credit Reporting Act.
Founders should treat verification files as permanent records, not temporary documents. In a securities enforcement context, the SEC can request records from offerings that are years old. The absence of documentation reads the same as evidence of non-compliance. Retain investor files for at least five years after the final close, with some securities counsel recommending indefinite retention. Store the file in a format that can be produced fast and in full on request, whether a secure cloud-based document system or a physical file with indexed tabs. A clean file here also strengthens the private placement memorandum that sits alongside it in the offering record.
Frequently asked questions
Does verification expire?
Verification carries no fixed expiration date, and it is understood to be current at the time of a specific investment. If an investor joins a new closing more than 90 days after the initial verification, most securities counsel recommend re-verifying before accepting additional funds. The SEC has issued no hard expiration rule, and the reasonable steps standard implies that stale documentation is not a current verification. Founders running offerings with multiple closes over a long period should build re-verification into the process as a standard step at each close.
There is a practical side to the expiration question too. An investor’s finances can shift within a year. A loss of income, a leveraged real estate transaction, or a market downturn hitting an investment portfolio can push an investor below the accredited threshold. Accepting an investment from someone who no longer qualifies, on documents that are 18 months old, creates the same exposure as no verification at all. The burden sits with the issuer to hold a current basis for its conclusion, not with the investor to volunteer that their circumstances changed.
Can a founder verify their own investors without outside help?
A founder can, in principle, run the document review without a third-party verification service, provided they collect and review the required documents and keep a proper file. There are practical reasons founders seldom do this well on their own. The income and net worth calculations involve financial documents that need accurate interpretation. Errors in that interpretation create compliance deficiencies. A founder juggling operations, investor relations, and product development is not well-placed to apply the precision verification demands. Many founders retain a securities attorney, a verification platform staffed by qualified reviewers, or a compliance firm to run the process for them.
The third-party written confirmation method, where a qualified professional confirms the investor’s eligibility, shifts the document review burden to the investor’s own professional. This is the path of least resistance for investors who hold long-term relationships with an accountant or attorney. Rather than send financial documents to the issuer, the investor asks their CPA to issue a confirmation letter. The issuer collects and retains that letter. The result is a clean verification file without the founder having to analyze complex financial records. The trade-off: not all investors hold a relationship with a qualifying professional, and the process can slow the close for those who do not.
What if an investor refuses to provide verification documents?
An investor who refuses to provide the documents needed for verification cannot join a 506(c) offering. There is no legal workaround. The verification requirement applies to every purchaser, without exception. Some investors object on privacy grounds, and the founder’s response should stay empathetic and firm: the obligation exists under federal law, not as a discretionary policy. If an investor is not comfortable providing income documents or consenting to a credit report pull, offer the alternative of the third-party professional confirmation method. If that alternative is also unacceptable, the investment cannot proceed under a 506(c) structure.
Founders who meet frequent investor objections may want to reconsider whether 506(c) is the right exemption. If most investors are known through pre-existing relationships, a 506(b) structure, which allows self-certification and limits advertising, may fit better. The choice of exemption belongs at the offering design stage with input from qualified securities counsel, not after investors have been solicited. Switching exemptions mid-offering is complicated and may require rescinding earlier solicitations. Building the right structure before launch avoids that problem.
Founders working through the compliance requirements of a Rule 506(c) offering do not have to figure this out alone. ACG works with founders to structure capital raises, from the private placement memorandum through investor verification, that meet regulatory requirements and are built to close. Learn more about how ACG approaches 506(c) offering compliance at AseaCapitalGroup.com.
Prepared by Asea Capital Group, a capital-formation consulting firm in Miami, Florida. This article is educational and is not investment, legal, or tax advice. ACG is not a broker-dealer or a law firm.
