SEC Slams HSBC and Scotia Capital With $22.5 Million in Penalties for Widespread Recordkeeping Failures

The U.S. Securities and Exchange Commission delivered another blow to Wall Street’s compliance standards on May 11, 2023, charging HSBC Securities (USA) Inc. and Scotia Capital (USA) Inc. with widespread and longstanding failures to maintain and preserve electronic communications. The two firms agreed to pay combined penalties of $22.5 million to settle the charges, marking the latest chapter in the SEC’s sweeping crackdown on off-channel communications across the financial industry.

The enforcement action came on the same day that crypto markets were already reeling from news that major market makers Jane Street and Jump Crypto were pulling back from U.S. digital asset trading, sending Bitcoin below $27,000. While the SEC’s charges against HSBC and Scotia were not specifically tied to cryptocurrency activities, they underscored the broader regulatory tightening that was reshaping financial markets — including digital assets.

TL;DR

• SEC charged HSBC Securities and Scotia Capital for widespread failures to preserve electronic communications
• HSBC agreed to pay a $15 million penalty; Scotia Capital will pay $7.5 million
• Employees at both firms used personal devices and WhatsApp for business communications without proper recordkeeping
• Both firms self-reported the violations and cooperated with the SEC investigation
• The action is part of a broader SEC initiative targeting off-channel communications across the financial industry

What the SEC Found

According to the SEC’s orders, the investigation uncovered pervasive and longstanding use of off-channel communications at both HSBC Securities and Scotia Capital, both registered broker-dealers. Employees routinely discussed securities business matters on their personal devices using messaging platforms such as WhatsApp, without maintaining or preserving the substantial majority of these communications.

The violations were not isolated incidents. The SEC found that the failings involved employees at multiple levels of authority, including supervisors and senior executives. This pattern of widespread non-compliance with federal recordkeeping requirements suggested systemic gaps in both firms’ compliance infrastructure.

Neither firm was able to produce the required records when asked, in direct violation of the federal securities laws that mandate the preservation of all communications related to securities business. These rules are designed to ensure that regulators can access a complete record of trading discussions, client interactions, and internal deliberations during investigations.

Self-Reporting and Cooperation

A notable aspect of this case was that both HSBC and Scotia Capital self-reported their recordkeeping failures. After gathering communications from the personal devices of a sample of their personnel, the firms brought the violations to the SEC’s attention and cooperated with the subsequent investigation.

SEC Division of Enforcement Director Gurbir S. Grewal emphasized the importance of voluntary disclosure, stating that the actions should remind firms not only of their recordkeeping obligations but also of the value of disclosing violations when they occur. Both firms acknowledged that their conduct violated the recordkeeping provisions of federal securities laws and agreed to settle the charges.

The Broader Regulatory Campaign

The charges against HSBC and Scotia Capital were part of a much larger SEC enforcement initiative targeting off-channel communications across the financial services industry. Since late 2021, the SEC had brought similar charges against dozens of Wall Street firms, resulting in billions of dollars in cumulative penalties.

The campaign reflected a fundamental tension in modern finance: as communication technology evolved faster than compliance infrastructure, many firms failed to adapt their recordkeeping systems to capture conversations happening on personal devices and messaging apps. The SEC made clear that regardless of the platform used, all business-related communications must be preserved.

Implications for Crypto Markets

While HSBC and Scotia are traditional financial institutions, the enforcement action carried significant implications for the cryptocurrency sector. As digital asset firms increasingly sought to operate within regulatory frameworks, the SEC’s recordkeeping requirements applied equally to broker-dealers handling crypto securities. The action reinforced the message that compliance with communications preservation rules was non-negotiable, regardless of the asset class involved.

The timing was particularly pointed: the crypto industry was already grappling with heightened regulatory pressure, including the CFTC’s lawsuit against Binance and the SEC’s own enforcement actions against multiple crypto firms. For crypto-native companies looking to attract institutional capital, the HSBC and Scotia case served as a reminder that traditional compliance standards — including meticulous recordkeeping — would be expected of any firm operating in or adjacent to U.S. markets.

Why This Matters

The $22.5 million in penalties against HSBC and Scotia Capital may seem modest relative to these firms’ overall operations, but the message was anything but small. The SEC was establishing a clear standard: self-report, remediate, and cooperate — or face significantly harsher consequences. For the crypto industry, where many firms were still building their compliance infrastructure from scratch, the enforcement action served as both a warning and a roadmap. Firms that proactively address recordkeeping gaps before regulators come knocking will fare far better than those that wait. As the line between traditional finance and digital assets continues to blur, the expectation of institutional-grade compliance applies to everyone.

Disclaimer: This article is for informational purposes only and does not constitute legal or financial advice. Cryptocurrency investments carry significant risk, and readers should conduct their own research before making any decisions.