The Crowdfunding Law Guide: Navigating Regulation CF for Startups

Regulation Crowdfunding — commonly called Reg CF — is the SEC exemption that lets an early-stage company raise capital from the general public without registering the offering under Section 5 of the Securities Act. It was created by Title III of the JOBS Act, opened for use in 2016, and updated in 2021 to raise the annual cap to $5 million. For founders, it is often the fastest legal path to a public capital raise. For a crowdfunding attorney, it is also one of the most procedurally exacting exemptions on the books: the safe harbor collapses the moment an issuer, an intermediary, or a promoter drifts outside the rulebook.

This guide walks through the framework the way Frederick M. Lehrer, P.A. walks clients through it — the eligibility gate, the funding-portal channel, the Form C disclosure package, the investor limits, the advertising rules, and the ongoing reporting duties that follow a successful raise.

Who Can Use Regulation CF

Reg CF is limited to U.S. and Canadian issuers organized as corporations, LLCs, or similar entities. The exemption is off-limits to:

• › SEC-reporting companies (public issuers file under different regimes),
• › Investment companies as defined in the Investment Company Act of 1940,
• › Blank-check companies with no specific business plan or a plan to merge with an unidentified target,
• › Issuers that have failed to file the required annual reports during the two years before the offering, and
• › Issuers or their covered persons subject to a Rule 503 "bad actor" disqualification.

The bad-actor lookback is the most frequently overlooked eligibility issue. A single covered person — an officer, director, 20%+ beneficial owner, promoter, or paid solicitor — with a disqualifying event (certain SEC orders, criminal convictions, or state regulatory actions within the lookback window) can void the exemption for the entire company. Every Reg CF engagement should begin with a written bad-actor questionnaire and a documented file of the responses.

The $5 Million Cap and the 12-Month Aggregation Rule

An issuer may raise a maximum of $5 million through Reg CF in any rolling 12-month period. The clock is measured backwards from the date of each new sale, not from a calendar year, and it aggregates every Reg CF sale by the issuer and by any entity the issuer controls or is controlled by.

Amounts raised under other exemptions — Rule 506(b), Rule 506(c), Regulation A, an intrastate offering — are generally not counted against the Reg CF cap under the SEC's post-2020 integration framework, but the integration analysis is fact-specific. A crowdfunding attorney will typically map the last 12 months of capital raises, the next 12 months of planned raises, and every parallel offering channel before advising on the maximum Reg CF target.

Investor Investment Limits

Regulation CF also caps how much any one investor may invest across all Reg CF offerings in a 12-month period. For accredited investors, there is no cap. For non-accredited investors:

• › If both annual income and net worth are less than $124,000, the limit is the greater of $2,500 or 5% of the greater of annual income or net worth.
• › If either annual income or net worth is $124,000 or more, the limit is 10% of the greater of annual income or net worth, capped at $124,000.

The issuer is not required to verify these numbers itself; the funding portal collects a self-certification from each investor and enforces the limit at the point of subscription. That reliance, however, does not protect the issuer from liability if the offering materials are materially misleading — the anti-fraud provisions of Rule 10b-5 apply to Reg CF offerings without modification.

The Funding-Portal Channel

Every Reg CF offering must be conducted through a single online intermediary that is either a registered broker-dealer or a "funding portal" registered with the SEC and a member of FINRA. Selling Reg CF securities through the issuer's own website, an email list, or a general-purpose crowdfunding platform that is not a registered intermediary is a Section 5 violation, full stop.

The intermediary is responsible for:

• › Conducting a background and regulatory check on the issuer and its covered persons,
• › Providing the investor education materials and communication channels mandated by Rule 302,
• › Confirming investor commitments, holding funds in escrow, and returning them if the target is not met, and
• › Filing the required post-offering forms.

The issuer is responsible for the accuracy of the offering materials. This division of labor sounds clean; in practice it is the source of most Reg CF disputes. A funding portal that discovers a materially misleading statement in the offering documents may cancel the offering and return funds, and the issuer may face SEC or investor claims for the disclosure failure regardless of what the portal did or did not review.

Form C: The Core Disclosure Document

Form C is the offering statement that must be filed on EDGAR before any solicitation begins. It is the Reg CF equivalent of a private-placement memorandum, and its content requirements are set by Rule 201. At a minimum, Form C must disclose:

• › Basic information about the company, officers, directors, and 20%+ beneficial owners,
• › A description of the business and the anticipated business plan,
• › The number of employees,
• › A discussion of material risk factors,
• › The target offering amount, the deadline, whether oversubscriptions will be accepted, and how proceeds will be used,
• › The price of the securities or the method for determining price,
• › A description of the ownership and capital structure, including the terms of the securities being offered and the terms of any outstanding securities,
• › Related-party transactions,
• › The identity of the intermediary and any compensation paid to the intermediary, and
• › Financial statements at the level of detail required by the offering size (see below).

Two disclosure items deserve particular attention. First, the "material risk factors" section is where the SEC and plaintiffs' lawyers look first when a Reg CF offering turns into an enforcement matter or a private suit — generic risk disclosures copied from a template do not satisfy the rule. Second, the "use of proceeds" section is binding: a material departure from disclosed uses, without an amended Form C, can support a fraud claim.

Financial Statement Requirements

The financial-statement tier depends on the size of the current offering and the aggregate amount raised under Reg CF in the preceding 12 months:

• › Offerings of $124,000 or less: financial statements and specified line items from the issuer's federal income tax returns, both certified by the principal executive officer.
• › Offerings above $124,000 up to $618,000: financial statements reviewed by an independent public accountant.
• › Offerings above $618,000: financial statements audited by an independent public accountant, unless it is the issuer's first Reg CF offering above $124,000, in which case reviewed financials remain acceptable.

The tiers move on periodic SEC inflation adjustments; the numbers above reflect the current schedule. Getting the tier wrong — for example, launching a $700,000 offering with only reviewed financials when audited financials are required — is a strict-liability defect in the exemption.

Advertising, Testing the Waters, and Communications

Rule 204 sharply restricts what an issuer may say outside the funding portal's channel. Once Form C is filed, the issuer may publish notices that direct investors to the portal, but those notices are limited to:

• › A statement that the issuer is conducting an offering,
• › The name of the intermediary and a link to its platform,
• › The terms of the offering (amount, security, price, closing date), and
• › Factual business information (name, address, website, contact details, description of the business).

Any additional promotional content — projections, testimonials, competitive comparisons — must be posted on the intermediary's platform in the communication channels Rule 303(c) requires, where investors can see it in context and where the intermediary's compliance staff can monitor and moderate.

Reg CF issuers may also "test the waters" under Rule 206 before filing Form C, using generic solicitations of interest that make clear no money is being accepted and no securities are being sold. Test-the-waters materials must be filed with the Form C when it is eventually submitted.

Ongoing Reporting: Form C-U and Form C-AR

The compliance calendar does not end at the closing. Rule 202 requires the issuer to file an annual report on Form C-AR within 120 days after the end of the fiscal year covered, posted on the issuer's website and filed on EDGAR. Progress updates on Form C-U are required for material changes during the offering and to report final results.

The annual reporting obligation continues until one of the specified terminating events occurs — for example, the issuer becomes a reporting company under the Exchange Act, files at least one Form C-AR and has fewer than 300 shareholders of record with total assets not exceeding $10 million, or repurchases all Reg CF securities. Failure to file the required annual reports for two consecutive years disqualifies the issuer from any future Reg CF offering.

Common Compliance Failures

The SEC's Reg CF enforcement docket is small but instructive. The recurring themes are familiar:

• › Solicitation before Form C is filed, especially through founder social-media accounts.
• › Off-portal communications that include projections, comparisons, or testimonials that would be permissible on the portal but are not permissible in a paid ad or influencer post.
• › Overshooting the $5 million cap by integrating a parallel Rule 506(b) raise the issuer failed to analyze under the integration framework.
• › Missed or late Form C-AR filings that quietly disqualify the issuer from a follow-on Reg CF round.
• › Bad-actor questionnaires that were never sent, or were sent and never reviewed.

Each of these is a strict-liability defect. There is no scienter requirement for the loss of the exemption, and once the exemption is lost, every sale in the offering is a Section 5 violation with a one-year rescission right for every purchaser.

When to Bring in a Securities Lawyer

Regulation CF was designed to be usable by early-stage companies without a full-time general counsel, and the funding-portal channel does a great deal of the compliance work in the background. But the exemption's strict-liability structure, the anti-fraud exposure on Form C, and the integration analysis for parallel raises are not areas where a template will do.

Frederick M. Lehrer, P.A. counsels startups and their boards on Reg CF eligibility, Form C drafting, integration planning with parallel Rule 506 raises, post-offering reporting, and the response to SEC or state inquiries when things go wrong. To discuss a planned Reg CF raise, contact Attorney Lehrer directly.

Related Reading

• › Pillar guide: Regulation D Enforcement Triggers
• › How Can Companies Mitigate Risks in Securities Offerings?
• › What Are the Challenges of Complying With SEC Reporting Requirements?

<!-- related-links-injected -->

About the Author

Frederick M. Lehrer

Former SEC Enforcement Attorney  ·  Former SAUSA, S.D. Florida  ·  25+ Years in Securities Law

Frederick M. Lehrer served as an enforcement attorney in the SEC's Division of Enforcement at the Southeast Regional Office from 1991 through 2000, and concurrently as a Special Assistant United States Attorney in the Southern District of Florida from 1997 through 1999, prosecuting securities-related financial crimes. He has practiced securities and corporate law in private practice for more than twenty-five years, advising issuers worldwide on SEC registration, disclosure obligations, Regulation D private placements, Regulation A offerings, and going public transactions. The firm is based in Florida and serves clients internationally.