Understanding Offering Risk Signals: What Form D Filings Reveal About Private Placements

Every Reg D private placement filed with the SEC includes a Form D – a short notice that discloses key facts about the offering, the issuer, and the investors involved. Most of these facts are straightforward: who’s raising money, how much, under which exemption.

But some combinations of facts have historically appeared in offerings that later turned out to be fraudulent. FilingFlow’s Risk Signals feature extracts these patterns automatically, giving you an instant read on which filings warrant a closer look.

TL;DR

• FilingFlow scores every Form D filing against 10 risk flags across three severity tiers (high, medium, low).
• Flags are factual observations drawn from patterns in real SEC enforcement cases – not compliance judgments or pass/fail verdicts.
• A single flag is common in legitimate deals. Multiple flags, especially high-severity ones, tell you where to focus your due diligence.
• Each filing gets a flag count (0-10), not a score. Context determines what the flags mean.
• The strongest warning signs are combinations: high commissions + yet-to-be-formed entities, or indefinite offerings + no revenue + no minimum investment.

What Risk Signals Are (and Aren’t)

Risk signals are factual observations, not compliance judgments. The SEC already validated that a filing meets its regulatory requirements before accepting it. We don’t second-guess that.

Instead, we surface characteristics that have historically correlated with investor losses. A filing with risk flags isn’t necessarily fraudulent – many legitimate early-stage deals trigger one or two flags. But a filing with several flags, especially high-severity ones, tells you where to spend your due diligence time.

Each filing receives a flag count (0 to 10), not a pass/fail score.

Three Severity Tiers

We group the 10 risk flags into three tiers based on how strongly each pattern has correlated with fraud in historical SEC enforcement actions.

Tier	Flags	What It Means
High	High Commission Ratio, Yet to Be Formed, Unregistered Pooled Fund	Historically correlated with fraud or significant investor losses
Medium	No Revenue, Concentrated Investors, Non-Accredited Under 506(b), Indefinite Offering	Require due diligence but are common in legitimate early-stage deals
Low	Revenue Not Disclosed, New Entity, No Minimum Investment	Informational – common and often benign

---

High Severity Flags

These flags have appeared prominently in some of the largest SEC enforcement actions of the past two decades.

High Commission Ratio

What it means: The issuer is paying sales commissions exceeding 10% of the amount sold.

Why it matters: Excessive commissions incentivize aggressive, sometimes unsuitable sales. They also divert capital away from the stated business purpose. In several major fraud cases, high commissions were the mechanism that recruited an army of unregistered salespeople to push the investment.

Real case – Woodbridge Group of Companies (2017): Robert Shapiro’s Woodbridge Group operated a $1.2 billion Ponzi scheme targeting over 8,400 retail investors, many of them seniors. The firm paid $64.5 million in commissions to unregistered sales agents who pitched the investments as “low risk” and “conservative.” Over a dozen unregistered brokers were subsequently charged by the SEC. (SEC Press Release 2017-235)

What to investigate: Compare the commission ratio to industry norms (typically 1-7% for legitimate placements). Check whether the compensated solicitors listed on the Form D are registered broker-dealers.

---

Yet to Be Formed

What it means: The issuing entity has not yet been incorporated or organized at the time of the Form D filing.

Why it matters: While Form D allows this status for legitimate pre-formation capital commitments, it’s an extreme outlier. An entity that doesn’t legally exist yet has no assets, no operations, and no track record – making it nearly impossible to verify any claims the promoter makes about the business.

Real case – DC Solar (2011-2018): Jeffrey and Paulette Carpoff raised $910 million from investors through a web of shell entities and special-purpose vehicles that sold investment contracts for mobile solar generators. Many subsidiary entities were newly formed shells with no real operations, created specifically to facilitate each tranche of the fraud. Most of the generators were never manufactured. Jeff Carpoff was sentenced to 30 years in prison. (SEC Press Release 2020-18)

What to investigate: Verify the entity’s actual formation date and state of organization. Look for any operating history, physical office, or employees beyond the listed principals.

---

Unregistered Pooled Fund

What it means: The issuer is a pooled investment fund (hedge fund, private equity fund, venture fund) that is not registered under the Investment Company Act of 1940.

Why it matters: Unregistered funds operate with less regulatory oversight, no mandatory custody requirements, and limited reporting obligations. This doesn’t make them inherently dangerous – most legitimate private funds are unregistered – but it removes guardrails that can catch problems early.

Real case – Bayou Hedge Fund Group (1996-2005): Samuel Israel III and Daniel Marino operated a $450 million hedge fund fraud. They fabricated performance records, created a sham accounting firm to issue fake audit reports, and steered commissions back into the funds to mask trading losses. From 1998 onward, the fund was a Ponzi scheme. Israel was sentenced to 20 years in prison. (SEC Press Release 2005-139)

What to investigate: Verify the fund’s auditor is a legitimate, independent firm. Check whether the fund administrator is independent of the fund manager. Review the fund’s track record claims against publicly available performance databases.

---

Try FilingFlow’s risk signal analysis for free →

Medium Severity Flags

These flags are common in legitimate early-stage offerings but deserve attention, especially when combined with other flags.

No Revenue

What it means: The issuer reports “No Revenues” in the revenue range field on Form D.

Why it matters: Pre-revenue companies are inherently riskier – their valuations rest entirely on projections and promises rather than demonstrated market demand. This is normal for seed-stage startups, but it also means investors have no financial performance to verify independently.

Real case – IRL / Get Together Inc. (2019-2023): Abraham Shafi raised $170 million for his social media app “IRL” by claiming 12 million organic users. A forensic analysis later revealed most users were bots, and the company hid millions in paid advertising spend. As a pre-revenue startup, IRL’s valuation was based entirely on self-reported user metrics that turned out to be fabricated. (SEC Press Release 2024-92)

What to investigate: Scrutinize the basis for any valuation claims. For pre-revenue companies, look for independent verification of the key metrics being used to justify the raise (users, contracts, LOIs).

---

Concentrated Investor Base

What it means: The offering has 3 or fewer investors despite raising over $1 million.

Why it matters: A small number of investors in a large offering can indicate related-party transactions, insider dealing, or a lack of independent due diligence. When all the investors know (or are) the principals, there’s no outside check on the issuer’s claims.

Real case – Jay Peak / Ariel Quiros EB-5 Fraud (2008-2016): Quiros and Stenger raised over $350 million through a series of limited partnerships tied to the Jay Peak ski resort in Vermont. Each project entity had a small pool of investors contributing $500K each. Quiros commingled funds across entities, using newer projects to cover shortfalls in older ones, while diverting $50 million for personal use. He was sentenced to 60 months in federal prison. (SEC Press Release 2016-69)

What to investigate: Verify whether the investors are truly independent parties. Look for family relationships, business ties, or shared addresses among the listed investors.

---

Non-Accredited Investors Under 506(b)

What it means: The offering uses Rule 506(b) and includes non-accredited investors.

Why it matters: Rule 506(b) allows up to 35 non-accredited investors, but they must be “sophisticated” – meaning they have sufficient knowledge and experience in financial matters to evaluate the investment. In practice, the presence of non-accredited investors in a private placement raises the risk that the offering was sold to people who couldn’t afford to lose their investment.

Real case – GPB Capital Holdings (2013-2018): GPB Capital raised $1.8 billion from 17,000 investors through private placements sold by more than 60 broker-dealers. Many investors were retirees who should not have been in high-risk, illiquid private placements. Brokers received 11% commissions, incentivizing unsuitable sales. CEO David Gentile was convicted. (SEC Press Release 2021-24)

What to investigate: Consider whether the investment’s risk profile and liquidity constraints are appropriate for non-accredited investors. Check whether the issuer provided the additional disclosures required when including non-accredited investors under 506(b).

---

Indefinite Offering

What it means: The offering has no stated maximum amount – the issuer can raise an unlimited amount of capital.

Why it matters: While some legitimate open-ended funds use indefinite offerings, the structure also enables the perpetual inflow of new money that characterizes Ponzi schemes. An offering that never closes can continuously raise capital to pay earlier investors without ever needing to generate real returns.

Real case – Stanford International Bank (1991-2009): Allen Stanford operated an $8 billion Ponzi scheme over 20 years through the continuous sale of certificates of deposit with no defined end date or maximum amount. The SEC described it as a “massive, ongoing fraud” and had been aware of the likely Ponzi scheme since 1997 but failed to act until 2009. Stanford was sentenced to 110 years in federal prison. (SEC Press Release 2009-26)

What to investigate: For indefinite offerings, verify whether the fund has a legitimate reason for open-ended fundraising (e.g., an evergreen venture fund). Check whether distributions to existing investors come from investment returns or from new investor capital.

---

Low Severity Flags

These flags are informational. They’re common across many legitimate offerings but can add context when combined with higher-severity flags.

Revenue Not Disclosed

What it means: The issuer selected “Decline to Disclose” for the revenue range on Form D.

Why it matters: Revenue non-disclosure is common and often reflects a legitimate desire for competitive confidentiality. However, it can also conceal deteriorating financial performance.

Real case – Aequitas Management (2014-2016): Aequitas defrauded 1,500 investors out of $350 million. When their primary revenue source (student loan receivables from Corinthian Colleges) collapsed in 2014, executives concealed the firm’s insolvency while continuing to raise money to pay operating expenses and earlier investors. Revenue non-disclosure helped mask the financial collapse. (SEC Press Release 2016-49)

---

New Entity

What it means: The issuing entity was incorporated within the last 5 years.

Why it matters: Most startups are new entities, so this flag by itself isn’t alarming. But new entities lack the operating history that helps investors evaluate management competence and business viability.

Real case – Mantria Corporation (2005-2009): Founded by recent college graduates, Mantria claimed to develop “carbon negative” communities and produce “biochar.” The SEC found the green energy claims were fraudulent. Over $54 million was raised from 300+ investors with promises of 17-100%+ annual returns. The company had no track record and no profitable operations. (SEC Press Release 2009-247)

---

No Minimum Investment

What it means: The offering accepts investments of any size, with no minimum amount.

Why it matters: Private placements typically set minimums ($25,000-$250,000) to ensure investors have meaningful financial capacity. A zero minimum can indicate the offering is designed to attract a large number of small, unsophisticated investors rather than the institutional or high-net-worth individuals that private placements typically target.

Real case – CryptoFX (2020-2022): CryptoFX raised $300 million from over 40,000 predominantly Latino investors with low minimum investments and promises of 15-100% returns from crypto trading. The scheme used affinity-based recruiting to attract as many small investors as possible. Seventeen individuals were charged. (SEC Press Release 2024-35)

---

Combining Flags

Individual flags tell a story. Multiple flags tell a louder one.

Strongest warning combinations:

• High commission + yet to be formed – An entity that doesn’t exist yet is paying large commissions to sell its securities. This is the pattern seen in many of the most egregious SEC enforcement actions.
• Unregistered fund + concentrated investors – A small number of investors in an unregistered fund suggests potential related-party dealing with minimal independent oversight.
• Indefinite offering + no revenue + no minimum – An open-ended raise by a company with no revenue and no investor minimums. While possible for a legitimate seed-stage raise, this combination maximizes the issuer’s ability to continuously raise money from unsophisticated investors.

Context matters:

A pre-revenue startup with 2 investors raising its seed round will trigger no_revenue, concentrated_investors, and possibly new_entity. That’s three flags on a perfectly normal deal. The flags don’t mean “fraud” – they mean “do your diligence on these specific characteristics.”

The value is in knowing where to look, not in rendering a verdict.

---

See Risk Signals in Action

FilingFlow’s Risk Signals feature scores every Form D filing against these 10 flags automatically, giving you an instant read on which filings warrant a closer look.

If you’re evaluating Form D filings as part of your deal sourcing workflow, read our guide on how to source deals 30-90 days before press releases. For a plain-English introduction to Form D filings, see What Is a Form D Filing?.

For API integration details, see the FilingFlow API documentation.

Start using FilingFlow for free →