How to Verify an Investment Adviser Is Legitimate Before You Wire Money
On August 27, 2026, the SEC charged 38 entities with filing fraudulent Form ADVs to fake their way into looking like registered investment advisers, some listing Colorado addresses where they had no p

Key Takeaways
- Every SEC-registered adviser and exempt reporting adviser (ERA) has a Form ADV on file at adviserinfo.sec.gov. If the firm is not there, or its ADV was recently pulled, that alone should stop you.
- An auditor's name on a pitch deck means nothing unless that firm shows up in the PCAOB's public registry. The 38 entities the SEC charged in August 2026 all claimed audits from accounting firms that do not exist in any public registry.
- Form ADV Item 9 tells you who actually holds client money. When the fund's own manager or an affiliate serves as custodian instead of an independent qualified custodian, you have the same structural gap that let Pacific Private Money move investor cash between funds for years.
- A phone call, a look at the listed address on a map, and a direct call to the named auditor catch problems no database search will surface.
Two 2026 Cases That Show Exactly How the Con Works
Start with the fake-adviser sweep. According to the SEC's complaints, filed in the U.S. District Court for the District of Colorado, the 38 defendants disclosed ownership structures and numerical data nearly identical to a long list of other purported exempt reporting advisers. Several used IP addresses traced to foreign jurisdictions to file with the SEC's own system. Some marketed themselves on websites that displayed a fake certificate claiming "SEC RIA permission," complete with a real CRD number, even though ERAs are never registered with the SEC and the agency never issues certificates to anyone. The investor alert from investor.gov is blunt about it: do not trust any firm that points to an ERA filing as proof it is registered.
Pacific Private Money Group is a different kind of failure, and arguably a scarier one, because the firm was real, was licensed as a California lender, and operated for over a decade before it collapsed. Mark Hanf founded the company in 2010. Nam Phan became chief operating officer in 2015. Per the SEC's complaint, described in detail by InvestmentNews, the two raised more than $80 million from roughly 190 investors through the Pacific Fund and the Pacific Freedom Fund, promising steady returns from real estate-backed lending. Both funds ran at a loss for most of the period between December 2021 and November 2025. Hanf and Phan allegedly used new investor money to pay "Ponzi-like" distributions to earlier investors, keeping a running list of unpaid redemption requests and paying out first to whoever was most likely to complain. By February 2026, the funds owed investors close to $121 million and held less than $17 million in recoverable assets. Parallel criminal charges from the U.S. Attorney's Office in San Francisco, reported by the San Francisco Chronicle, put the broader fraud figure at $103 million across 175 investors over the full life of the scheme. Both men settled with the SEC the same day charges were filed, without admitting or denying the allegations.
Neither disaster required insider access to catch. The fake ERAs would have failed a basic PCAOB audit-firm lookup. Pacific Private Money's custody structure and its practice of moving money between affiliated funds were disclosed, at least partially, in filings that any investor could have pulled and read before writing a check.
Step One: Search the Adviser on IAPD Before You Do Anything Else
Go to adviserinfo.sec.gov, the SEC's Investment Adviser Public Disclosure (IAPD) system. Search by firm name, individual name, or CRD number (the Central Registration Depository number assigned when a firm or person first registers). You are looking for three things. First, registration status: is this a firm registered with the SEC, one registered with a state regulator, or an ERA that files a shortened Form ADV but is not registered with anyone? Those are three very different levels of oversight, and the marketing materials rarely explain the difference honestly. Second, disciplinary history, labeled "disclosures" on IAPD, which will show past regulatory actions, civil judgments, and terminations for cause. Third, the actual Form ADV. Part 1 is the check-the-box filing with ownership structure, assets under management, and custody arrangements. Part 2 is the narrative brochure, written in plain English, covering fees, conflicts of interest, and strategy.
Read the brochure closely, not just skim it. If the strategy section reads like it was written to avoid saying anything specific, that itself is information. Compare the assets-under-management figure against what the firm's pitch materials claim. A mismatch is a reason to ask a direct question, not to walk away automatically, but it needs an answer before you invest.
Step Two: Confirm the Auditor Is Real, Not Just Named
Any private fund manager will tell you their financials are "audited." That word carries no weight until you check who did the auditing. The Public Company Accounting Oversight Board maintains a public registry of every accounting firm authorized to audit SEC-related entities, searchable at pcaobus.org's Registered Firms page, which links through to the underlying RASR search system. Type the firm's name in exactly as given to you. If nothing comes up, try variations, since some fraudsters use a name deliberately close to a real, well-known accounting firm. If the name still does not appear anywhere in the registry, the audit claim is fabricated. This was precisely the pattern in the August 2026 SEC sweep: the complaints state that the defendants claimed audits by two independent accounting firms, and neither firm exists in any public registry of federal or state accountancy firms. A five-minute search would have flagged every one of those 38 entities.
Go one step further when the money involved is meaningful to you: call the accounting firm's listed office number and ask whether they actually performed an audit for the specific fund named in the pitch deck. Auditors will generally confirm or deny an engagement relationship without disclosing confidential financial detail.
Step Three: Run FINRA BrokerCheck If There Is Any Broker-Dealer Angle
If the adviser, or anyone selling you the investment, is also registered as a broker or works for a broker-dealer, run their name and firm through FINRA BrokerCheck. Search by name, CRD number, or employing firm. BrokerCheck surfaces customer disputes, regulatory actions, and termination disclosures going back years, plus links into FINRA's Disciplinary Actions Online database for the underlying case documents. A registered investment adviser who is not also a broker will not show up here, and that is expected. But anyone offering to sell you a security, a note, or shares in a fund, rather than purely giving advice, likely needs broker-dealer registration somewhere, and its absence on both IAPD and BrokerCheck is itself worth asking about directly.
Red Flags Hiding Inside the Form ADV Language Itself
Once you have the actual Form ADV in front of you, three sections deserve close attention beyond the disclosures page.
Item 9, Custody. This section discloses who physically holds client money and securities. Under SEC Rule 206(4)-2, described in the Code of Federal Regulations, client assets should sit with an independent qualified custodian, typically a bank or registered broker-dealer with no ownership tie to the adviser. If Item 9 shows the adviser itself, its general partner, or an affiliated entity acting as custodian, the rule requires extra protections, including an annual surprise examination and an internal control report from a PCAOB-registered accountant. Ask whether those extra protections actually exist and ask to see the surprise exam letter. This is close to the exact gap that let Pacific Private Money shuffle money between affiliated funds for years while calling the transfers "loans."
Item 11, Disciplinary Information and Related-Party Transactions. Look for transactions between the fund and entities the manager or its family members control. Related-party deals are not automatically fraudulent, but undisclosed or vaguely disclosed ones are a documented pattern in nearly every private-fund fraud case of the last decade.
Vague strategy language. Strategy descriptions that lean on words like "proprietary," "diversified," or "opportunistic" without naming actual asset types, geographies, loan-to-value ratios, or return calculation methods should prompt a direct follow-up question, in writing, so you have a record of the answer.
Steps Beyond the Paperwork
Databases catch fabricated filings. They do not catch a legitimate-looking filing attached to a firm that is quietly falling apart, which is closer to what happened at Pacific Private Money. Three low-cost habits close that gap.
Call the phone number listed on the Form ADV and on the firm's website, unprompted, at a time you choose. See who answers and whether the person can speak knowledgeably about the fund's strategy without reading from a script.
Check the physical address on a map before you send anything. A UPS Store, a shared executive-suite building, or a residential address for a firm claiming tens of millions in assets under management is not disqualifying by itself, but it is a prompt to ask harder questions about where operations actually happen.
Ask directly for the fund's most recent audited financial statements, not a summary or a one-page performance sheet. Then call the audit firm using the phone number you find independently, not one supplied by the fund, and confirm the engagement and the reporting period. If the fund resists sharing audited financials with a prospective investor of meaningful size, treat that resistance as the answer.
The 15-Minute Verification Checklist
- Search the firm and any individual adviser by name and CRD number on adviserinfo.sec.gov, and note whether it is SEC-registered, state-registered, or an unregistered ERA.
- Read the disclosures/disciplinary history section on IAPD in full, not just the summary flag.
- Open the current Form ADV Part 2 brochure and read the fee, conflict-of-interest, and strategy sections.
- Check Item 9 (custody) for whether an independent qualified custodian holds client assets, or whether the adviser or an affiliate does.
- Check Item 11 for related-party transactions involving the manager, family members, or affiliated entities.
- Search the named audit firm on pcaobus.org's Registered Firms page, and confirm the exact legal name matches.
- Call the audit firm directly and confirm the engagement for this specific fund.
- Run any broker-dealer affiliated individual through brokercheck.finra.org.
- Call the firm's listed phone number unannounced.
- Look up the physical address on a map to confirm it is a real office, not a mailbox service.
- Request audited financial statements directly rather than relying on a summary provided by the fund.
For more on this, see our coverage of Form ADV: How to Check Your Investment Adviser Before You Write a Check and SEC Fraud Alert: How a Fake Form ADV Fooled Investors in 2026.
Frequently Asked Questions
Is an exempt reporting adviser the same as an SEC-registered adviser?
No. An exempt reporting adviser files a shortened Form ADV and is not registered with or examined by the SEC, while a registered adviser goes through a full application and is subject to ongoing SEC oversight. The August 2026 sweep of 38 fake entities exploited exactly this distinction to appear legitimate.
What if the adviser or fund is not listed on IAPD at all?
Treat that as a serious warning sign rather than a technicality. Every legitimate registered adviser and every legitimate ERA has a Form ADV on file, and its absence, or its recent removal, is disqualifying on its own until the firm can explain it in writing.
Does a PCAOB registration guarantee the audit was done properly?
No, registration only confirms the accounting firm exists and is authorized to perform the type of audit claimed. It does not confirm the specific engagement happened or that the audit opinion was accurate, which is why calling the auditor directly to confirm the engagement matters.
Why did Pacific Private Money's fraud take years to surface if the firm was licensed and real?
Licensing and years of operating history are not proof of solvency. Hanf and Phan allegedly knew as early as December 2021 that key loans were failing, but continued soliciting new investors while moving money between affiliated funds to cover redemptions, a pattern that only became visible once payments stopped in October 2025 and the funds filed for Chapter 11 bankruptcy in June 2026.
Author Disclosure: Jeff Barnes, MBA has no personal position in any company, fund, or platform named in this article. Angel Investors Network has no current commercial relationship with any party mentioned. AIN provides marketing and education services, not investment advice. Past performance does not guarantee future results. All investments involve risk, including loss of principal.
Looking for investors?
Browse our directory of 750+ angel investor groups, VCs, and accelerators across the United States.
About the Author
Jeff Barnes, MBA
Continue Reading

ERA vs. RIA: What Adviser Registration Actually Protects You From

SEC Charges 38 Fake Advisers: How to Verify Any ERA Before You Invest

Fake Advisory Firms Are Filing Real SEC Paperwork: What the 38-Entity Crackdown Reveals About EDGAR's Blind Spot

Qualified Purchaser vs. Accredited Investor: The $4 Million Difference That Decides What You're Allowed to Buy

Databricks Filed a $5 Billion Form D. Here Is What It Actually Tells You.
