SEC Launches Pioneering Cybersecurity Unit to Tackle Emerging Tech Threats

• The U.S. Securities and Exchange Commission (SEC) created a Cyber and Emerging Technologies Unit in February 2025.
• The unit replaced the old Crypto Assets and Cyber Unit inside the Division of Enforcement.
• Its stated goal is protecting retail investors from fraud that uses new technology.
• It covers AI-driven fraud, hacking for inside information, account takeovers and crypto fraud.

Introduction: What the SEC Announced

On February 20, 2025, the U.S. Securities and Exchange Commission announced a new Cyber and Emerging Technologies Unit (CETU). It sits in the Division of Enforcement and replaced the Crypto Assets and Cyber Unit. The SEC said the change would let it focus enforcement on fraud that targets retail investors through new technology.

What the Unit Does

The unit is staffed by about 30 fraud specialists and attorneys drawn from several SEC offices and is led by Laura D’Allaird. It is an enforcement team, not a new rule-making body. Its job is to find and bring cases against people who use technology to cheat investors.

Its Priority Areas

The SEC listed several targets. They include fraud carried out with artificial intelligence or machine learning, scams spread through social media, the dark web or fake websites, and hacking to steal material nonpublic information for trading. Takeovers of retail brokerage accounts are on the list too. So are fraud involving blockchain technology and crypto assets, and failures by public companies or regulated firms to follow cybersecurity rules or disclose incidents honestly.

A Narrower Focus

The new unit is smaller than the one it replaced and more tightly focused on fraud that hurts individual investors. Observers read the change as part of a broader shift at the SEC under Acting Chairman Mark Uyeda toward fewer cases built on technical registration violations, especially in crypto.

Working With Others

Cyber fraud rarely stays inside one country or one agency, so the unit is expected to work with other SEC divisions, criminal authorities and foreign regulators when cases cross borders. The SEC did not announce any formal new partnerships when it created the unit.

Challenges Ahead

Technology-driven fraud moves fast. AI-generated voices and fake investment sites can be built in hours, while cases take months or years. A team of about 30 people also has limits on how many investigations it can carry at once.

What to Watch

The real test will be the cases the unit brings. Watch for actions involving AI-washing, account takeovers and misleading cyber incident disclosures by public companies.

The Takeaway

The SEC’s new unit is a reshaping of an old one, with a clear message: technology-enabled fraud against everyday investors is now a top enforcement priority. Whether it makes a difference will depend on how quickly it can turn complaints into cases, and how well it keeps up with the tools scammers are using.

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.