Equity Crowdfunding Rules Rely on Limits and Disclosures to Protect Investors

Equity crowdfunding lets a private company sell securities to the general public online in amounts small enough for ordinary investors to participate. In the United States, the practice operates under a specific federal framework, Regulation Crowdfunding, built on one idea: when a startup asks strangers online for money, you can’t assume trust. It must be engineered through limits, disclosures, and intermediaries. This explainer walks through how those safeguards work, where they are thinnest and what founders and investors can check before money changes hands.

It is an educational overview, not legal or investment advice. The figures below come from Securities and Exchange Commission (SEC) and FINRA pages reviewed in October 2026, and anyone planning an offering should confirm the current rules with securities counsel.

Where Equity Crowdfunding Rules Come From

The SEC describes crowdfunding as an evolving way to raise money online to fund a variety of projects. Donation and rewards campaigns have existed for years, but selling securities to the public normally requires registration under the Securities Act of 1933. The JOBS Act created an exemption that allows crowdfunding to offer and sell securities to the general public, and the SEC implemented it through Regulation Crowdfunding, which relies on Section 4(a)(6) of the Securities Act.

That exemption is one of several routes a company can use to raise capital without a full registration. According to the SEC’s small business pages, Rule 506(b) of Regulation D allows private placements without general solicitation and limits sales to no more than 35 non-accredited investors in any 90 days. Rule 506(c) permits general solicitation only when every purchaser is accredited, and the issuer takes reasonable steps to verify that status. Regulation A covers offerings of up to $75 million and shares many features with registered deals.

Regulation Crowdfunding differs because it targets the retail public. Anyone can invest, subject to limits, and the offering is public by design. That openness is why the rules lean heavily on disclosure and registered intermediaries rather than investor sophistication.

The Limits That Shape Every Offering

The first layer of protection is arithmetic. A company can raise to $5 million in aggregate through Regulation Crowdfunding in 12 months, according to the SEC. Amounts sold under the regulation during the prior 12 months count toward that ceiling, while money raised through other exemptions does not.

Investors face caps too. Under the SEC staff guidance for issuers, a non-accredited investor whose annual income or net worth is below $124,000 may invest the greater of $2,500 or 5 percent of the greater of their annual income or net worth across all crowdfunding offerings in 12 months. If both figures are at or above $124,000, the limit is 10 percent of the greater of the two, and total purchases by a non-accredited investor cannot exceed $124,000 in that period. Spouses may calculate jointly.

These caps do not make an investment safe. They are a ceiling on how much of a household’s finances can be concentrated in a category of offering the SEC itself surrounds with warnings. FINRA’s investor guidance says it plainly: startups and early-stage ventures can and do fail, and investors can lose everything.

Why the dollar figures move

Readers comparing older articles with current ones will notice different numbers. An SEC compliance guide last updated in 2017 listed a raise limit of $1,070,000 and investor thresholds of $107,000. The current staff guidance uses $5 million and $124,000. Anyone citing a limit should check the source date, because some JOBS Act figures are adjusted for inflation and the rules were amended in 2020.

What Issuers Must Disclose, and When

Disclosure is the second layer. Before selling anything, an issuer files Form C on the SEC’s EDGAR system and with its intermediary. SEC guidance says the filing must describe officers, directors, and owners of 20 percent or more of voting equity; the business and its planned use of proceeds; the price, target amount, and deadline; related-party transactions; and a discussion of the company’s financial condition.

Financial statement requirements scale with the amount being raised over the prior 12 months:

• $124,000 or less: financial statements and certain tax return information, certified by the principal executive officer.
• More than $124,000 up to $618,000: statements reviewed by an independent public accountant.
• More than $618,000: first-time crowdfunding issuers raising to $1,235,000 may provide reviewed statements, while larger first-time raises and any repeat issuer must provide audited statements.

Disclosure does not end at launch. If something material changes, the issuer files an amendment on Form C/A, and investors must reconfirm their commitments within five business days, or those commitments are canceled. Progress updates on Form C-U are due within five business days of reaching 50 percent and 100 percent of the target, unless the intermediary posts frequent updates, in which case only a final report is needed.

After a successful raise, the company files an annual report on Form C-AR no later than 120 days after its fiscal year ends and posts it on its website. Neither an audit nor a review is required for that report. The obligation continues until a defined exit point, such as filing at least one annual report while having fewer than 300 holders of record, or filing three annual reports. At the same time, total assets stay at or below $10 million.

What disclosure cannot do

Required disclosure is not the same as verified truth. A Form C tells investors what the company says about itself, in a standard structure, with financial statements whose level of assurance depends on the raise size. A chief executive’s certification is not an audit, and investors who keep that difference in mind can weigh each filing more realistically.

The Gatekeepers: Funding Portals and Broker-Dealers

The third layer is the intermediary. Every Regulation Crowdfunding offering must run exclusively through one online platform operated by a broker-dealer or funding portal registered with the SEC and a member of FINRA. FINRA suggests investors confirm registration through its list of regulated funding portals, and check broker-dealers and individuals through BrokerCheck.

Funding portals operate under tight boundaries. FINRA’s investor guidance notes that a funding portal cannot give investment advice and cannot solicit purchases, sales or offers to buy the securities listed on its platform. The intermediary must also have a reasonable basis for believing an issuer complies with the regulation, a duty FINRA cites from Rule 301(a). Issuers may rely on the intermediary to confirm that investors stay within their limits, unless the issuer knows an investor would exceed them.

FINRA’s examination reports show where those gatekeepers have fallen short. Its 2023 findings on funding portals included offerings missing required issuer disclosures, such as the names of officers and directors; electronic messages that recommended investments or solicited purchases; uncorrected misleading statements on portal websites; delays in sending funds to issuers; and failures to return money when offerings were canceled or oversubscribed. FINRA also flagged portals that did not deny access to issuers after warning signs appeared.

None of those findings mean the model is broken. They show that a registered platform is a starting point for diligence, not a substitute. ur venture news section regularly shows how much information professional investors gather before committing money, and crowdfunding investors rarely have that access.

Where Trust Breaks Down in Crowdfunding Campaigns

Most weak points in equity crowdfunding are ordinary. They come from the gap between a polished campaign page and the legal documents underneath it.

Promotion and paid voices

Advertising of offering terms outside the platform is restricted. Under SEC rules, an off-platform notice may state that the offering relies on Section 4(a)(6), name the intermediary with a link to its platform, give basic terms such as amount, security type, price and closing date, and identify the issuer. Inside the platform, people acting for the company must identify their affiliation, and anyone paid to promote the offering must clearly disclose that compensation in each communication.

Testing the waters

Before filing Form C, an issuer may gauge public interest under Rule 206. Still, the materials must state that no money is being solicited or accepted, that no offer can be accepted until the filing requirements are met, and that an indication of interest creates no obligation. Solicitation materials must later be filed with Form C. A company that collects deposits during this phase is out of compliance.

Who is behind the company?

Rule 503 disqualifies so-called bad actors. Covered persons include the issuer, its directors and officers, owners of 20 percent or more of voting equity, promoters and anyone compensated for soliciting investors. Disqualifying events include certain criminal convictions, injunctions and regulatory orders, with look-back periods such as five years for certain injunctions and ten years for certain regulatory orders. Events before May 16, 2016 do not disqualify but must be disclosed if they fall within the look-back period.

FINRA separately advises investors to look for legal or regulatory concerns about company officials and for news reports that raise red flags. Our security section reports on fraud cases, showing why that background check is worth doing.

Liquidity and exit

Crowdfunding securities generally cannot be resold for one year, except to the issuer, an accredited investor, in a registered offering or to family members and certain trusts. FINRA cautions that an investor might need to hold the investment indefinitely. There is no guarantee of a secondary market after the first year.

Cancellation Rights and Investor Protections in Practice

Crowdfunding commitments are not final the moment an investor clicks. FINRA explains that an investor can cancel for any reason up to 48 hours before the offering period ends. During those final 48 hours, investors can no longer cancel, even for commitments made during that window. If the company makes a material change to the offering, investors have five business days to reconfirm, and unconfirmed commitments are canceled.

These rights work only if investors know about them and track deadlines. Campaigns often build momentum near their closing date, which is exactly when cancellation rights stop applying. A careful investor reads the amendment history on EDGAR, notes the deadline and treats a late flurry of updates as a reason to slow down rather than speed up.

Some companies also use crowdfunding vehicles, special purpose entities formed under Investment Company Act Rule 3a-9. In those structures, the issuer and the vehicle are co-issuers and file one Form C together. Investors in a vehicle hold an interest in the vehicle, which in turn holds the company’s securities.

Questions Founders and Investors Should Ask

The questions below focus on specifics. They are meant to help readers evaluate an offering’s transparency, not to recommend for or against any investment.

For investors reviewing a campaign:

• Is the platform operated by a broker-dealer or funding portal that appears on FINRA’s lists?
• Does the Form C on EDGAR match the claims on the campaign page, including the target, deadline and use of proceeds?
• Are the financial statements certified, reviewed or audited, and does that level fit the raise size?
• Have there been Form C/A amendments, and what changed?
• Do any promoters disclose compensation, and do company representatives identify themselves in platform discussions?
• What happens to the security if the company raises again, is acquired or fails?

For founders weighing the route:

• Is the company eligible? Non-U.S. companies, Exchange Act reporting companies, certain investment companies, disqualified issuers and companies without a specific business plan cannot use the exemption.
• Has every covered person been screened for bad actor events, and is that inquiry documented?
• Can the company sustain annual reporting on Form C-AR for several years after the raise?
• Would a Regulation D offering, which the SEC says requires a Form D filing within 15 days after the first sale, fit the company’s investor base better?

The choice of route shapes the whole cap table and communications plan, a theme that runs through many funding stories in our startups coverage. Securities counsel should review any offering documents before launch.

What to Watch Next

Regulation Crowdfunding has changed before. The SEC’s current guidance reflects 2020 amendments, including changes to how it treats crowdfunding vehicles, and the agency continues to publish staff guidance and inflation adjustments. Shifts in federal securities policy, tracked in our government policy section, can change the economics of small offerings quickly.

Examination reports are another signal. FINRA’s findings on funding portals provide a checklist of what regulators see going wrong, from missing disclosures to slow handling of investor money. Platforms that publish clear disclosure standards and correct errors quickly tend to be easier to evaluate.

The underlying bargain stays the same. Equity crowdfunding opens early-stage companies to the public and, in return, requires structured disclosure, registered intermediaries, and hard caps on exposure. Those safeguards reduce some risks without removing the basic risk of backing a young company. Knowing which protections exist, and where each one stops, makes it easier to judge an offering on its own record.