Many companies treat financial harm as the trigger for serious legal risk. If nobody lost money, complaints can appear less urgent, investigations may receive less attention and enforcement exposure can seem limited. A unanimous U.S. Supreme Court decision suggests that assumption may be far more dangerous than many businesses realise.
The ruling came in Sripetch v. Securities and Exchange Commission, where the Court held that the SEC can seek disgorgement from securities fraud defendants without proving that investors suffered measurable losses. The decision resolves a split among federal appeals courts and strengthens a key enforcement tool relied upon by the regulator. Yet the most significant lesson may have little to do with securities fraud itself and far more to do with how organisations assess legal risk.
The failure point in this case was straightforward. Ongkaruck Sripetch argued that the SEC should not be able to recover more than $4.1 million because the agency had not shown investors suffered pecuniary harm. The Supreme Court rejected that argument. According to the Court, traditional principles underlying disgorgement focus on stripping unlawful gains from a wrongdoer and do not require proof that a victim suffered a corresponding economic loss.
Many compliance teams make the same mistake exposed by this case. Internal decision-makers often evaluate exposure through a damages-based framework. The first question becomes whether anybody lost money. If the answer is unclear or the losses appear limited, the matter may be viewed as lower risk. Regulators often start somewhere else entirely. They examine whether protected rights were violated, whether misconduct occurred and whether somebody obtained a benefit that should never have been obtained.
Liability and enforcement do not always follow the same logic as civil damages claims. A business may conclude that a problem presents limited exposure because monetary harm cannot easily be measured. A regulator may instead focus on the conduct itself, the advantage gained from it and the obligations that were breached along the way. The gap between those two assessments is where significant compliance failures often emerge.
The Court rejected the idea that a victim must always show a corresponding financial loss before a wrongdoer can be forced to surrender unlawful gains. Writing for a unanimous Court, Justice Neil Gorsuch explained that courts applying traditional equitable principles have historically required wrongdoers to give up profits obtained through interference with legally protected interests, even where measurable losses cannot be shown. The Court pointed to a long line of cases demonstrating that unlawful gains and investor losses are not always mirror images of one another.
For compliance officers and in-house legal teams, the decision serves as a warning against informal risk assessments that focus too heavily on financial impact. Questions about damages remain important, but they are not always the question regulators ask first. Conduct that creates an improper benefit, circumvents legal obligations or interferes with protected rights may attract enforcement scrutiny even when identifying direct economic harm proves difficult.
Securities enforcement is only one setting where this problem appears. Similar reasoning can be found in professional discipline matters, fiduciary disputes, regulatory investigations and corporate misconduct cases. Organisations that measure risk solely through the lens of measurable harm can overlook the legal significance of the conduct itself. In practice, that can lead to delayed escalation, incomplete investigations and misplaced confidence that exposure is limited.
The Supreme Court’s decision reinforces an uncomfortable reality for regulated businesses. “Nobody lost money” may sound like a strong defence inside a boardroom or compliance meeting. Increasingly, however, regulators and courts are asking a different question: whether someone obtained a benefit through conduct that the law does not permit. When that happens, the absence of measurable losses may offer far less protection than many organisations assume.