SEC Sues Netcapital: What the Reg CF Fraud Case Teaches Investors About Vetting Platforms, Not Just Startups

TL;DR: On August 10, 2026, the SEC sued Netcapital Inc. (Nasdaq: NCPL), the Boston-based Reg CF crowdfunding portal, alleging its consulting arm booked roughly $14 million in sham revenue from startups secretly controlled by Netcapital insider John Fanning, inflating reported revenue by about 345% between October 2021 and January 2024. According to the SEC complaint, investors put more than $25.6 million into Netcapital's own securities offerings during that same overstated-revenue window. I want to walk you through what the SEC alleges happened, and more important, what it should change about how you vet a crowdfunding platform itself, not just the startups listed on it.

The angle nobody talks about

Every article about Reg CF crowdfunding tells you to research the startup. Check the founders. Read the offering circular. Look at the cap table. That advice is correct, and I have given it myself. But the Netcapital case, if the SEC's allegations hold up, exposes a blind spot that almost nobody checks: the financial health and related-party dealings of the platform running the marketplace.

Think about what a Reg CF portal actually is. It is a registered funding portal, regulated by the SEC and FINRA, that lists early-stage companies raising money from retail investors under the JOBS Act's crowdfunding exemption. You trust the portal to police the listings. You trust the portal's own public filings, because Netcapital itself is a publicly traded, Nasdaq-listed company that non-accredited investors can buy shares of directly. That second layer of trust is exactly where the SEC says things broke down.

Here is the uncomfortable symmetry: the same disclosure loophole that is supposed to protect you from conflicted deals on the startup side is, according to the SEC's complaint, the loophole Netcapital insiders allegedly used to hide conflicts at the platform level. If a portal operator can game its own numbers using the identical mechanism meant to flag related-party risk in the companies it lists, then "the platform vetted this deal" stops being reassuring. You need a second checklist, one aimed at the portal, not the pitch.

What the SEC alleges happened, in plain numbers

According to the SEC's litigation release, Netcapital Advisors, the consulting subsidiary of Netcapital Inc., recognized close to $13.9 million in consulting revenue between October 2021 and January 2024 that the agency says was largely fictitious. That inflated the company's reported top line by approximately 345% over what its real, cash-generating business would have shown. InvestmentNews reported that roughly $5.1 million of that $13.9 million was booked in periods when, according to the SEC, no consulting agreement existed yet. The paperwork, the complaint alleges, came later.

The mechanics the SEC describes are not exotic. At least 11 startups allegedly paid Netcapital Advisors $1 million to $2 million each in equity (not cash) in exchange for consulting services. The SEC alleges these startups were secretly controlled by John Fanning, the Napster co-founder who the complaint says acted as a de facto officer of Netcapital despite not holding a formal executive title. If a company's own consulting revenue is coming from businesses one of its insiders quietly controls, that is not new revenue changing hands between arm's-length parties. It is money and equity moving in a circle, with an accounting entry that makes it look like growth.

The complaint also names Coreen Kraysler, Netcapital's CFO and Fanning's wife, and Martin Kay, a former CEO and board member, as participants in the alleged scheme. A separate figure, CPA Paul Riss, is tied to the revenue-recognition decisions the SEC is challenging, according to Bloomberg Law's coverage of the complaint. One defendant has already resolved her portion of the case. Former CEO Cecilia Lenk settled with the SEC, agreeing to a permanent injunction and a conduct-based injunction plus a $50,000 civil penalty, without admitting or denying the allegations. That settlement structure is standard SEC practice and is not, by itself, evidence about the merits of the claims against the other defendants, who are contesting the case in the U.S. District Court for the District of Massachusetts, as Law360 reported.

The 20% trick, explained

Reg CF rules require a funding portal to disclose when an issuer, or a person tied to it, has a financial relationship or a significant ownership stake in a company being promoted on the platform. The trigger for mandatory related-party disclosure is generally structured around ownership thresholds, and a common one in practice is 20%. Cross that line and you have to tell investors about the relationship in plain language.

According to InvestmentNews' reporting on the SEC's complaint, the intermediary entities involved in the alleged scheme were structured to keep individual ownership stakes below that 20% disclosure trigger, even while the underlying economic control, the SEC alleges, sat with Fanning across the whole web of entities. That is the part I want you to sit with. A bright-line ownership percentage is easy to design around if nobody is checking who actually controls the entity below the line. Splitting a stake across several shell-like layers, each individually under 20%, is a known workaround in securities law generally, and the SEC's complaint suggests it was allegedly used here at the platform-operator level, not just between a listed startup and its promoters.

Why this matters more for platforms than for individual deals

A single fraudulent Reg CF startup can cost you your investment in that one deal. A compromised platform can cost you across every deal you did through it, plus your position in the platform's own stock if, like Netcapital, it is separately publicly traded. Netcapital Funding Portal is the FINRA-registered entity that lists deals. Netcapital Inc. is the separate Nasdaq-listed parent whose shares trade on the open market. The SEC's complaint concerns the parent's own financial statements. If you owned NCPL shares believing the company's consulting business was real and growing, the alleged inflation directly overstated the asset you held, independent of anything happening with any individual crowdfunded startup.

What actually happened to investors' money

The SEC's complaint states that Netcapital raised more than $25.6 million from investors through its own public and private securities offerings during the period when its revenue was allegedly overstated, a figure also cited in Reuters' report on the charges. That is the number that should get your attention if you are an investor rather than a regulator. It means capital-raising activity, and by extension investor decision-making, occurred while the company's headline growth metric was, according to the SEC, largely manufactured.

Nasdaq has separately flagged Netcapital for a listing-compliance issue, with a deadline around February 1, 2027, tied to the company's ability to meet continued-listing standards. That is a consequence that can follow from restated or challenged financials, delayed filings, or governance concerns, and it is a distinct process from the SEC's enforcement action. I am not going to tell you the stock is worthless or that the company will be delisted. I don't know that, and neither does anyone writing about this case today. What I will tell you is that a Nasdaq compliance deadline sitting alongside an active SEC fraud complaint is the kind of double-signal that belongs on your radar if you hold the stock or are considering deals listed on the portal.

Read the allegations as allegations

I want to be precise about where we are procedurally, because it matters. Everything above describing the alleged sham revenue, the alleged insider control, and the alleged disclosure workaround comes from the SEC's civil complaint, filed August 10, 2026, in the U.S. District Court for the District of Massachusetts. None of it has been proven in court. The defendants who have not settled are entitled to contest every factual claim, and litigation of this kind commonly takes one to three years to resolve through motions, discovery, and potentially trial. Cecilia Lenk's settlement resolved her exposure without any admission of wrongdoing, which is the norm in SEC settlements and should not be read as a finding against the remaining defendants.

If this case follows the pattern of comparable SEC accounting-fraud actions, expect motions to dismiss, possible partial settlements, and a timeline measured in years rather than months. Treat every number in this article as "the SEC alleges," not as an adjudicated fact, until a court or a further settlement says otherwise.

What to actually check before you fund through any Reg CF portal

Here is the due-diligence layer I think most retail crowdfunding investors skip. Before you put money into any deal on a Reg CF portal, or into the portal's own stock if it has one, spend twenty minutes on the platform operator itself.

• Pull the portal's own SEC filings (10-K, 10-Q, or Form C if it self-funds) and check whether its revenue is cash-based or largely non-cash, equity-for-services arrangements. Non-cash revenue concentrated in one subsidiary is not automatically fraud, but it is a line item worth tracing.
• Check whether the portal's executives, board members, or their immediate family hold stakes in companies the portal is promoting or providing paid services to. Look specifically for ownership structured just under standard disclosure thresholds like 20%. That pattern, splitting stakes across entities, is a documented workaround, not a hypothetical one.
• Look up whether the portal or its executives have prior FINRA or SEC actions, using FINRA BrokerCheck and the SEC's own litigation release archive.
• Ask whether the same accountant or CPA firm signed off on both the portal's revenue recognition and the financials of the startups it is allegedly consulting for. A CPA appearing on both sides of a related-party transaction is a signal, not proof.
• Check the portal's Nasdaq or exchange listing status directly, since a pending compliance deadline is public information and takes two minutes to find.

None of this requires a securities law degree. It requires treating the platform as a company you are extending trust to, with its own incentives, rather than as neutral plumbing that only exists to connect you to a startup's pitch deck.

For more AIN coverage on this:

• Reg D vs Reg A+ vs Reg CF: Securities Exemptions Explained
• How to Verify a GP's Track Record When the Deals Were Done at a Prior Firm

Frequently Asked Questions

Is Netcapital shutting down because of this lawsuit?

No. As of this writing, Netcapital Inc. continues to operate and its funding portal continues to list deals. The SEC's complaint is a civil enforcement action, not a shutdown order, and the company is contesting the allegations along with the other non-settled defendants in federal court in Massachusetts.

Did any Netcapital executive admit to fraud?

No. Former CEO Cecilia Lenk settled her portion of the case, agreeing to a permanent injunction, a conduct-based injunction, and a $50,000 civil penalty, but the settlement explicitly did not include an admission or denial of the SEC's allegations. The remaining defendants have not settled and are contesting the claims.

Does this mean money invested in startups listed on Netcapital's portal is at risk?

Not directly. The SEC's complaint concerns Netcapital Inc.'s own consulting revenue and financial statements, not the individual startups that raised money through the Netcapital Funding Portal. Still, if you invested in any of the roughly 11 startups the SEC says paid equity to Netcapital Advisors for consulting, it is worth checking whether that arrangement was disclosed to you at the time you invested.

How can I check if a Reg CF platform has related-party conflicts before I invest?

Search the SEC's EDGAR database and litigation release archive for the platform operator's name, check FINRA BrokerCheck for the portal and its executives, and read the "Risks" and "Related Party Transactions" sections of the platform's own filings if it is publicly traded. If a platform will not tell you plainly who owns what across the deals it lists, treat that opacity itself as the red flag.

Author Disclosure: Jeff Barnes, MBA has no personal position in any company, fund, or platform named in this article. Angel Investors Network has no current commercial relationship with any party mentioned. AIN provides marketing and education services, not investment advice. Past performance does not guarantee future results. All investments involve risk, including loss of principal.