The Verification File: What Rule 506(c) Methods Produce and What Issuers Should Retain
VerifyInvestor.com
Most writing about accredited investor verification stops at whether an investor qualifies. The harder question arrives later, often years later, when someone asks the issuer to prove what it did and when. A regulator conducting an examination, a plaintiff seeking rescission, an acquirer running diligence on a cap table, or a fund administrator reconciling a closing all ask the same thing: show me the file.
The Securities and Exchange Commission said as much when it adopted Rule 506(c). In the adopting release, the Commission wrote that "because the issuer has the burden of demonstrating that its offering is entitled to an exemption from the registration requirements of Section 5 of the Securities Act," it "will be important for issuers and their verification service providers to retain adequate records regarding the steps taken to verify that a purchaser was an accredited investor." The footnote attached to that sentence cites SEC v. Ralston Purina Co., the 1953 Supreme Court decision holding that the party claiming an exemption bears the burden of proving it.
That is the whole problem in one sentence. Verification is not an event. It is evidence you will need to produce later.
Why the File Matters More Than the Conclusion
Rule 506(c) contains a protection that issuers routinely overlook. In the adopting release, the Commission addressed what happens when an investor lies. If a purchaser who does not meet any accredited investor category buys into the offering anyway, the Commission said the issuer "will not lose the ability to rely on Rule 506(c) for that offering," so long as the issuer "took reasonable steps to verify that the purchaser was an accredited investor" and "had a reasonable belief that such purchaser was an accredited investor at the time of sale."
Read that carefully. The exemption survives a dishonest investor. It does not survive an issuer who cannot demonstrate what steps it took. An issuer with a complete file and a lying investor is in a defensible position. An issuer with a correct conclusion and no file is not, because nothing establishes that the steps were taken or that the belief was reasonable.
That is why the rest of this article treats each verification method as a document-production exercise rather than a decision procedure.
The Standard Behind the Methods
Verification under Rule 506(c) is principles-based. The Commission identified the factors an issuer should weigh in its facts and circumstances analysis:
the nature of the purchaser and the type of accredited investor that the purchaser claims to be
the amount and type of information that the issuer has about the purchaser
the nature of the offering, such as the manner in which the purchaser was solicited to participate in the offering
the terms of the offering, such as a minimum investment amount
These factors interact. An investor the issuer has known for a decade, participating in a deal with a high minimum, reasonably requires less than an anonymous respondent to a public advertisement. The practical consequence is that the file should record not only what was collected but why it was sufficient here.
Method by Method, and the Evidence Each Produces
Rule 506(c)(2)(ii) sets out four non-exclusive methods for natural persons. Each produces a different artifact, and each fails in a different way.
Income
The issuer reviews Internal Revenue Service forms reporting income for the two most recent years and obtains a written representation that the purchaser reasonably expects to reach the required level in the current year.
What the file holds: copies of or documented review of the two years of IRS forms, plus the signed current-year representation.
Where it goes wrong: accepting one year instead of two; accepting a self-prepared summary rather than an actual IRS form; and, on joint income, failing to capture the spouse or spousal equivalent consistently across both years.
Net Worth
The issuer reviews documentation of assets and liabilities dated within the prior three months and obtains a written representation that all liabilities have been disclosed. In practice the liabilities side generally requires a consumer credit report, because an asset statement alone cannot establish what is owed.
What the file holds: dated asset statements, a credit report, and the signed liabilities representation.
Where it goes wrong: stale documents; omitting the liabilities representation, which is a rule requirement and not a formality; and failing to exclude the primary residence correctly, including the treatment of any mortgage exceeding the residence's fair market value.
Third-Party Written Confirmation
The issuer obtains written confirmation, given within the prior three months, from a registered broker-dealer, an SEC-registered investment adviser, a licensed attorney, or a certified public accountant, stating that the person has taken reasonable steps to verify the purchaser's status.
What the file holds: the signed confirmation letter, dated, on the professional's letterhead, with enough detail to identify the professional and their qualifying capacity.
Where it goes wrong: letters from professionals outside the four listed categories, which fall outside the safe harbor and require an independent reasonable basis to rely; letters asserting a conclusion without stating that reasonable steps were taken; and undated letters, which cannot establish the three-month window.
Existing Investor Certification
For a person who purchased in the same issuer's Rule 506(b) offering before September 23, 2013 and still holds those securities, the issuer obtains a certification of accredited status at the time of sale.
What the file holds: the certification, plus evidence of the prior holding and its date.
Where it goes wrong: applying it to investors from a different issuer or a later offering. This method is narrow and shrinking, and most issuers today cannot use it.
The Minimum Investment Pathway
Separately, the SEC staff issued a no-action letter in March 2025 under which a sufficiently high minimum investment, combined with written representations, can constitute reasonable steps. The thresholds are at least $200,000 for natural persons and at least $1,000,000 for legal entities, with a per-owner alternative for entities with fewer than five natural person owners.
What the file holds: the subscription documents showing the committed amount, the representation that the purchaser is accredited, and the representation that the purchaser is not financing any part of the minimum with third-party funds provided for that purpose.
Where it goes wrong: two failure modes dominate. First, subscription documents carrying the accreditation representation but omitting the financing representation, which is a condition of the staff's position and not optional. Second, treating the pathway as a rule. It is staff guidance, which binds no court and can produce a different result on different facts. The file should show that every stated condition was satisfied, because partial compliance earns nothing.
Entities, Trusts, and Look-Through Investors
The four methods above address natural persons. Entities are where files most often thin out, because the rule provides no safe harbor for them and issuers improvise.
An entity may be accredited on its own footing, for example as an entity owning more than $5 million in investments, or derivatively because all of its equity owners are accredited. The two require different evidence. The first calls for financial or account statements establishing the entity's own position, plus organizational documents confirming it is the type of entity claimed. The second requires an individual analysis for every underlying owner, plus an ownership schedule or operating agreement establishing who those owners are.
Trusts deserve particular attention, because the category relied on determines the evidence entirely. A revocable grantor trust, an irrevocable trust with more than $5 million in assets, and a trust whose purchases are directed by a sophisticated person are three different analyses producing three different files. The most common entity defect is a file recording that an entity is accredited without recording which category supports it. A conclusion without a category cannot be reconstructed later by anyone, including the issuer's own counsel.
How Long to Keep It
There is no provision of Regulation D that sets a retention period for verification records. That absence is frequently misread as permission to discard them. It is better read as an absence of a ceiling, because the periods that actually govern come from elsewhere.
Private claims. Section 12(a)(1) of the Securities Act gives a purchaser of an unregistered security the right to recover the consideration paid, with interest, on tender of the security. Under Section 13, such an action must be brought within one year after the violation, with no discovery rule extending it, and in no event more than three years after the security was bona fide offered to the public. Those are the outer federal boundaries for that specific claim.
Everything else runs longer. State blue sky statutes have their own limitation periods, some longer than the federal ones. Contract and fraud claims follow state law. And a limitation period on one claim is not a retention schedule, because the file may be needed for reasons unrelated to litigation.
Adviser baselines. An SEC-registered investment adviser is already required under Advisers Act Rule 204-2(e)(1) to maintain its books and records for not less than five years from the end of the fiscal year in which the last entry was made, the first two years in an appropriate office. That rule does not by its terms name accredited investor documentation, so it should not be cited as requiring it. It is useful as a floor: a sponsor already operating on a five-year baseline has little reason to hold verification records to a shorter standard.
The practical answer. Keep verification records for the life of the investment plus a margin, and set the margin by whichever period above runs longest for the offering. For a fund with a ten-year life and extension options, that is considerably more than three years. Secondary transfers, audits, and acquisition diligence all reach back into the original subscription file, and an issuer that cannot produce it does not get the benefit of the doubt.
What a Defensible File Contains
Reduced to its essentials, a verification record should make five things reconstructable by someone who was not there:
The category relied on. Not "accredited," but which prong of Rule 501(a), and for entities, on what basis.
The method used. Which of the available methods was applied, and for non-safe-harbor approaches, why it was reasonable here.
The evidence reviewed. The actual documents or confirmations, dated.
The determination. Who made it, when, and on what date the investor was deemed accredited.
The surrounding facts. The minimum investment, how the investor was solicited, and anything known to the issuer that bore on the analysis.
Two further points are worth stating plainly. AML and KYC screening is a separate obligation that no accreditation check satisfies, and its records belong in a separate workstream with their own retention treatment. And investor financial documents are sensitive personal information, so what the issuer holds directly is a data security question as much as a compliance one. Many sponsors route verification through a third party precisely so that tax returns and credit reports never enter the issuer's own systems, while the issuer retains the dated confirmation the rule contemplates.
Closing Note
Rule 506(c) lets an issuer market a private placement publicly. The price of that freedom is an evidentiary one, and it is paid at the file, not at the pitch. An issuer that treats verification as a gate to clear will usually clear it. An issuer that treats it as a record to build will still be able to prove it years later, which is the only moment the question is ever actually asked.
VerifyInvestor.com, which publishes this blog, provides attorney-reviewed accredited investor verification and related investor eligibility and AML/KYC services, and is majority-owned by tZERO Group. This article is general information about regulatory requirements and is not legal advice. Issuers should consult securities counsel about their particular offerings.