SEC's First Rule 18f-4 Enforcement: What Every ETF Investor Needs to Know

TL;DR: The SEC just issued its first-ever enforcement action under Rule 18f-4 — the derivatives risk management rule for investment companies. The target was Simplify Asset Management. The penalty was $400,000. The violations were textbook: VaR breaches that peaked at 291% of the allowed limit, delayed board notifications, and seven ETFs that failed shareholder disclosures for three years. This sets a compliance precedent for every ETF adviser running leveraged or derivatives-heavy strategies.

On July 27, 2026, the SEC issued Administrative Order IC-36269 against Simplify Asset Management — the first enforcement action under Investment Company Act Rule 18f-4, the derivatives risk management rule that took effect in August 2022. The $400,000 civil penalty is modest relative to Simplify's assets under management, but the case establishes a compliance roadmap that every ETF adviser using options, futures, or structured products needs to study.

What Rule 18f-4 Actually Requires

Rule 18f-4 governs how registered investment companies, including ETFs and mutual funds, manage derivatives exposure. Before this rule, funds operated under a patchwork of no-action letters and staff guidance that dated back to 1979. The SEC finalized 18f-4 in October 2020 with an August 2022 compliance date.

The rule has four primary requirements for funds that use derivatives beyond a de minimis threshold:

• Written Derivatives Risk Management Program: The fund must maintain a formal program documenting how it identifies, measures, and limits derivatives risk.
• Designated Derivatives Risk Manager: A named individual responsible for administering the program and reporting to the board.
• Value-at-Risk (VaR) Limits: The fund's portfolio VaR cannot exceed 200% of a specified reference portfolio's VaR under the "relative VaR" test, or 20% of fund assets under the "absolute VaR" test.
• Board Oversight and Reporting: The board must receive quarterly written reports from the derivatives risk manager and be promptly notified of material violations.

Simplify violated all four categories simultaneously.

What Actually Happened at Simplify

The SEC's order centers on the Simplify Macro Strategy ETF, ticker FIG. From April 26 to May 16, 2024, FIG's portfolio VaR peaked at 291% of its reference portfolio , 91 percentage points above the 200% maximum. The fund's VaR monitoring system flagged the breach. The portfolio manager was aware. But the designated derivatives risk manager did not notify the fund's board for more than three months, until August 2024.

During that breach period, on May 2, 2024, the fund lost more than 8% of its value in a single day as the portfolio manager unwound the leveraged position. Shareholders took that loss. The board did not know the fund was operating in violation of 18f-4 when it happened.

The rule requires "prompt" board notification of material violations. Three months is not prompt. The SEC's position is that the notification obligation is essentially immediate once the breach is identified and confirmed.

On top of the VaR violations, seven Simplify ETFs failed to provide required return-of-capital notices to shareholders from 2021 to 2024 , a separate violation under Rule 30b1-10. These were ETFs making distributions that included return of capital, which carries different tax treatment than ordinary income. Shareholders were not told, which prevented them from filing their taxes correctly.

Why This Enforcement Matters Beyond Simplify

Simplify is a boutique. The SEC's target was not Simplify's assets. It was the compliance culture of the ETF industry.

According to Alston + Bird's analysis of the settlement, the SEC staff has indicated that Rule 18f-4 exam questions are now a standard component of investment company inspections. Every adviser running an ETF with meaningful options or futures exposure should assume the SEC knows their VaR numbers and has already asked internal questions about their compliance infrastructure.

The case also highlights a governance gap that exists across the industry. The "designated derivatives risk manager" role under 18f-4 is frequently assigned to a portfolio manager or chief risk officer who also has P&L responsibility. When VaR breaches occur, there is an implicit incentive to delay notification , because notifying the board triggers a remediation requirement, which means unwinding positions, which means realizing losses. The Simplify case shows what happens when that conflict plays out.

What Investors in Leveraged ETFs Should Know

If you own leveraged or derivatives-heavy ETFs, here is what this enforcement action should prompt you to check:

Question	Where to Find the Answer
Does my ETF use derivatives?	Fund prospectus, principal investment strategies section
Who is the designated derivatives risk manager?	SAI (Statement of Additional Information)
Has the fund ever disclosed a Rule 18f-4 breach?	Form N-RN filings on SEC EDGAR
What is the fund's VaR test methodology?	SAI, derivatives risk management section
Have any ETFs in the family missed return-of-capital notifications?	Form 1099-DIV reclassifications, prior year

The SEC's EDGAR N-RN filing database is publicly searchable. N-RN is the form ETF advisers must file when they experience certain rule violations under 18f-4, including VaR limit exceedances. If an ETF adviser filed an N-RN on a fund you own, you can read exactly what happened.

The Broader Regulatory Signal

This enforcement action fits a broader pattern at the SEC under current leadership. The Commission has made investment company compliance with specific technical rules a priority, rather than only pursuing cases involving investor fraud or large-scale misconduct.

Rule 18f-4 was four years old when the SEC brought its first case. That gap was deliberate , the staff gave the industry time to build compliance programs. Now that window has closed. The JD Supra analysis of the Simplify settlement notes that the SEC's Division of Examinations has listed derivatives risk programs as an exam priority for 2026.

Accredited investors holding institutional shares in ETFs , through IRAs, brokerage accounts, or qualified plans , have limited direct recourse when an ETF adviser violates 18f-4. The SEC enforcement action compensates the regulator, not the investors who took the 8% one-day loss in FIG. That is the honest limitation of securities regulation: it deters future conduct but rarely makes damaged investors whole after the fact.

Frequently Asked Questions

Q: Does the $400,000 penalty compensate Simplify ETF shareholders who lost money?
A: No. The civil penalty goes to the U.S. Treasury, not to shareholders. The Simplify FIG holders who took the 8% loss on May 2, 2024 have no direct recovery from this settlement. Class action litigation would be a separate matter.

Q: What is the VaR test under Rule 18f-4?
A: The relative VaR test compares the fund's full-portfolio VaR to a reference portfolio representing the fund's unlevered exposure. The fund's VaR cannot exceed 200% of the reference. If the reference portfolio has a 5% daily VaR at 95% confidence, the fund's VaR cannot exceed 10%.

Q: How can I tell if my ETF has a Rule 18f-4 derivatives risk management program?
A: Any fund exceeding the de minimis derivatives threshold (10% of fund net assets in notional value of derivative transactions) is required to have a written program. Check the fund's SAI for the derivatives risk management section, and the prospectus for derivatives-related risk factors.

Author Disclosure: Jeff Barnes, MBA has no personal position in any company, fund, or platform named in this article. Angel Investors Network has no current commercial relationship with any party mentioned. AIN provides marketing and education services, not investment advice. Past performance does not guarantee future results. All investments involve risk, including loss of principal.