Key lessons for sponsors, warehouse lenders, underwriters, investment advisers and compliance officers after the SEC alleged an $800 million Tricolor collateral shortfall
Executive Summary: SEC Tricolor Allegations and Collateral Verification Risk
On August 18, 2026, the Securities and Exchange Commission filed a civil complaint in the Southern District of New York against Daniel Chu, Tricolor’s founder and former chief executive officer; Jerome Kollar, former chief financial officer; and Ameryn Seibold, former Senior Director of Finance and Director of Treasury. The SEC alleges that these three used double-pledged, delinquent and fictitious subprime auto loans to obtain warehouse financing and to support asset-backed securities offerings. These are allegations, and the SEC still has to prove them. Tricolor raised more than $1.9 billion through 14 Tricolor Auto Securitization Trust offerings from 2013 through 2025, and at least three broker-dealers served as underwriters, managers, bookrunners or structuring agents. When Tricolor filed for Chapter 7 on September 10, 2025, seven offerings remained partially outstanding, with approximately $945.4 million in unpaid principal. The SEC estimates that the gap between reported pledged collateral and the collateral actually available to lenders and securitization trusts reached approximately $800 million.
How the Collateral Shortfall Was Detected—and What It Teaches Us
We can learn a lot from the way this problem surfaced. In August 2025, an analyst at a warehouse lender that had also invested in several of the offerings noticed loans reported as current even though their principal balances had not moved for months. Further analysis identified approximately $365.5 million of double-pledged principal across seven securitizations. A later review allegedly found that at least 6,850 of the 12,486 loans in the June 2025 offering had been pledged to another counterparty, and that more than 5,000 of the 18,377 loans in the March 2025 offering had been double pledged. The complaint does not charge Tricolor’s underwriters, lenders, investors, indenture trustee or auditors, and it creates no new diligence rule for any of them. What it does is lay out the questions that regulators, counterparties and plaintiffs will ask after a collateral pool fails. A firm should be able to show that the assets exist, that the originator owns them, that prior liens have been released, that cash activity supports reported loan status, and that its reviewers received native data they could test on their own.
Key Takeaways
- Collateral existence and lien status require independent testing. Transaction documents, officer certificates and eligibility representations will not tell a reviewer whether a receivable has already been pledged or transferred. Each asset should be tested against warehouse tapes, prior securitization schedules, title or contract custody records and documented releases.
- Cash performance should support reported loan status. A loan carried as current should show a credible pattern of borrower payments and principal reduction. Unchanged balances, repeated round-dollar payments, backdated entries and unusual deferments call for a check against bank records and the servicing system.
- Native data access is a substantive diligence issue. A PDF-only response can defeat sorting, matching and duplicate testing. If a reviewer cannot obtain machine-readable, loan-level information from an authoritative system, that limitation should be documented and escalated before funding or closing.
- Audits and certifications have defined limits. An audit speaks to the procedures performed and the evidence supplied. It does not independently establish collateral ownership or lien priority unless the engagement tested those matters, and a clean report does not resolve contrary data, scope limits or restricted access.
- Regulatory duties depend on the firm’s role. FINRA Rule 3110 governs a broker-dealer’s supervisory system and written procedures, and FINRA’s private-placement guidance may apply depending on the offering exemption and the firm’s role. Investment advisers answer to their fiduciary duty and Advisers Act Rule 206(4)-7.
- Exception governance requires authority to stop a transaction. A firm should know who owns each test, which exceptions must be escalated and who may delay or stop funding, placement or purchase. Any waiver should record the exception, the supporting evidence, the decision-maker and the basis for the decision.
- Recordkeeping controls reach deal communications. The complaint alleges that executives moved discussions to an encrypted messaging application and later deleted a group chat. Broker-dealers and investment advisers should capture business communications covered by their respective recordkeeping rules and issue legal holds promptly.
Background and the SEC Action
How Tricolor’s Auto Loan Securitization Structure Worked
Tricolor sold used vehicles and originated loans to borrowers with limited or no credit history. Its funding came from warehouse credit facilities and repeated securitizations. Tricolor typically pledged receivables to warehouse lenders, moved them into bankruptcy-remote special purpose vehicles and used the securitization proceeds to repay part of its warehouse borrowings. In a structure like that, collateral identity, ownership and release status sit at the center of every funding decision.
Timeline of the SEC and Criminal Proceedings
The SEC alleges that the scheme ran from at least 2020 through September 2025. Kollar and Seibold pleaded guilty on December 16, 2025, to bank fraud, wire fraud, securities fraud and destruction of evidence. Federal prosecutors charged Chu in December 2025 and added securities fraud allegations in a June 2026 superseding indictment. Chu is presumed innocent unless and until proved guilty, and his counsel has publicly denied the allegations.
Market Impact for Buy-Here Pay-Here Lenders and Private Credit
Auto Finance News reported on August 19, 2026, that lenders in the buy-here, pay-here market had already responded to Tricolor’s collapse with higher capital costs, more frequent collateral audits and requirements that third-party custodians hold titles and contracts. Market participants quoted in the report said the SEC action had not materially changed capital availability, because lenders had tightened their requirements after the bankruptcy. The near-term effects are therefore likely to show up in pricing, diligence conditions, custody arrangements, covenants and stop-funding provisions.
What the SEC Alleges: Double-Pledged and Fictitious Receivables
According to the SEC, the defendants placed the same loans in multiple securitization pools or pledged already-securitized loans back to warehouse facilities. They also allegedly included loans that were delinquent, charged off or fictitious. The complaint states that personnel altered vehicle identification numbers, payment terms and delinquency fields so that ineligible loans would appear eligible for financing or transfer.
The alleged duplication was substantial. The SEC states that 3,225 loans in the June 2025 offering also appeared in a 2022 securitization, and the complaint describes duplicate pledges across warehouse facilities and seven outstanding securitizations. Multiple creditors, in other words, believed they held rights in the same receivables.
Data Manipulation, Company 23 and False Payment Records
Off-the-Books Data Manipulation and Servicing Reports
The complaint alleges that Chu directed Kollar to set up an off-the-books entity identified as Company 23. Tricolor allegedly moved nonperforming loans to that entity and applied false payments that made them appear current. Chu and Kollar then allegedly signed monthly servicing reports, along with certifications describing those reports as complete and accurate.
The lesson for reviewers is to test how loans move between systems and entities. A collateral register should record each pledge, transfer, substitution, repurchase, charge-off and recovery, and it should keep an immutable history of every change to delinquency, payment, title and eligibility fields.
Financial Statements and Offering Materials
Offering Materials, Lien Representations and Investor Disclosure
The SEC also claims that Chu and Kollar deferred wholesale inventory losses, changed fair-value assumptions to meet coverage ratios and recorded approximately $100 million in bad-debt adjustments tied to fictitious collateral. Offering documents allegedly represented that the collateral was free of other liens, validly transferred and eligible under the stated delinquency and charge-off criteria.
The complaint further alleges that Tricolor kept recoveries on charged-off loans that should have flowed to investors under the transaction documents. Reported loan status, reviewed on its own, would not catch that. A reviewer has to reconcile cash collections, charge-offs and recoveries to the servicing records and the transaction waterfall.
Audit Manipulation, Native Data Access and Scope Limits
Audit Scope, Native Data Access and Collateral Testing
The complaint states that Kollar at times supplied PDF reports so that auditors could not inspect the underlying detail. It further alleges that Kollar and Seibold falsified account ledgers and vehicle identification numbers, withheld information from auditors and altered data to obtain clean audit results. None of this establishes that an auditor or any other gatekeeper violated the law.
But they do offer a clear illustration of why the scope of an engagement and the format of the data matter. Audit and agreed-upon-procedures instructions should cover cross-pool duplication, cash-to-principal reconciliation, title or contract custody, delinquency aging, charge-offs, recoveries and changes to material data fields. Where feasible, the provider should take its information directly from authoritative systems, and it should report material limitations to the financing party or control function.
Detection and the Alleged Collateral Shortfall
How a Warehouse Lender Detected the Alleged Collateral Shortfall
The lender analyst’s review turned on an elementary economic inconsistency: loans were reported as current, yet their principal balances had not changed for months. That one test led to the broader duplicate analysis. The complaint states that a forensic firm later identified at least $675 million of borrowing-base inflation, and the SEC estimates the overall collateral difference at approximately $800 million.
The same test adapts to other collateral classes. Identify the fields that ought to move together and flag the records where they do not. For auto receivables, cash receipts, principal balances, delinquency status, charge-off status, vehicle identification numbers and title custody should tell one consistent account history.
Charges and Requested Relief
SEC Charges, Relief Sought and What Remains Alleged
The SEC charges Chu and Kollar with violating Securities Act Section 17(a), Exchange Act Section 10(b) and Rule 10b-5. It charges Seibold with violating Securities Act Sections 17(a)(1) and 17(a)(3), Exchange Act Section 10(b) and Rule 10b-5(a) and (c). The complaint also pleads aiding-and-abetting theories against all three defendants and control-person liability under Exchange Act Section 20(a) against Chu.
The SEC seeks permanent injunctions, disgorgement with prejudgment interest and civil penalties, together with officer-and-director bars against Chu and Kollar. The prayer for relief does not ask the court for a general prohibition on any defendant owning, buying or selling securities.
Wider Enforcement Context: Private Credit, Collateral Fraud and Data Integrity
Tricolor is one of several recent federal matters involving private financing backed by assets that allegedly did not exist, were already encumbered or were reported at false values. In January 2026, federal prosecutors charged former First Brands executives in a case involving alleged fake invoices and double- and triple-pledged assets. The SEC’s November 2025 litigation release concerning 777 Partners and its former executives describes alleged false financial information, a concealed credit-facility overdraw and misuse of offering proceeds.
These matters are not proof that collateral fraud is common, but they reflect sustained federal attention to collateral identity, off-balance-sheet obligations, data integrity and the use of financing proceeds. A firm that depends on originator-supplied data should expect regulators and counterparties to ask whether its controls were designed to catch duplicate, fictitious or previously transferred assets.
Regulatory Framework for Collateral-Dependent Securities
Securities Act Section 17(a), Exchange Act Section 10(b) and Rule 10b-5
The SEC’s principal fraud claims arise under Securities Act Section 17(a), Exchange Act Section 10(b) and Rule 10b-5. The complaint alleges material misstatements and deceptive conduct in connection with the warehouse financing and the asset-backed securities offerings, and it alleges that Chu controlled Tricolor for purposes of Exchange Act Section 20(a). The claims and the requested relief remain for the court to decide.
FINRA Rule 3110: Supervision
The complaint charges no broker-dealer and announces no new broker-dealer rule. FINRA Rule 3110 still requires each member to establish and maintain a supervisory system and written procedures reasonably designed to achieve compliance with applicable securities laws and FINRA rules, and Rule 3110(b)(2) requires written principal review of transactions relating to the member’s investment banking or securities business.
A member that structures, underwrites, places or recommends collateral-dependent securities should be able to say who owns each verification step, what evidence the reviewer must obtain, which exceptions require escalation and who may delay or stop the transaction. That analysis should track the firm’s actual role, the offering structure and any red flags known to the firm.
FINRA Regulatory Notice 10-22: Private Placement Diligence
FINRA Regulatory Notice 10-22 is a useful reference point when a broker-dealer recommends a Regulation D security. The notice states that a member must conduct a reasonable investigation and may not rely blindly on issuer representations or issuer’s counsel. Audited financial statements do not end the inquiry when red flags exist, and an underwriter may owe a more searching inquiry than a broker that only recommends a security.
The SEC complaint does not identify the exemption used for each Tricolor offering. Firms should therefore apply Regulatory Notice 10-22 according to the governing exemption and their own conduct, not as a statement that every Tricolor offering was subject to Regulation D.
Advisers Act Fiduciary Duty and Rule 206(4)-7
A registered investment adviser must give advice in the client’s best interest, based on a reasonable understanding of the client’s objectives, and must weigh an investment’s risks in the context of the managed portfolio. Advisers Act Rule 206(4)-7 requires written policies and procedures reasonably designed to prevent Advisers Act violations, together with an annual review of their adequacy and effectiveness.
An adviser that buys asset-backed securities or private credit for a client should be able to show how its investment process addressed the material risks behind the decision, including collateral existence, lien priority, servicing data, cash-flow performance, structural protections and the reliability of third-party reports. The complaint does not make an adviser strictly liable for an issuer’s fraud, but it leaves no doubt that unexplained data limitations and unresolved inconsistencies are material to the adviser’s investment file.
Books and Records Requirements
Broker-dealers must preserve required records under Exchange Act Rule 17a-4 and FINRA Rule 4511; registered investment advisers have their own obligations under Advisers Act Rule 204-2. Firms should designate approved business channels, capture the communications that fall within those requirements and issue a legal hold when a collateral dispute, audit anomaly, default or regulatory inquiry creates a preservation duty.
Collateral and Data Red Flags in Private Credit and ABS Deals
- The same loan, contract or vehicle identification number appears in more than one pool. Duplicate testing should cover current warehouse tapes, prior securitization schedules, repurchased assets and the records of substitutions and releases.
- A loan stays current while its principal balance never declines. Compare the reported status with bank collections, servicing history, deferments and any manual payment entries.
- Payment data contain round-dollar, bulk, backdated or repeated entries. There may be an innocent explanation, but each pattern should be traced to borrower-level cash and an authorized adjustment record.
- Material fields change shortly before a borrowing-base report or offering cutoff. Any change to a delinquency, title, charge-off, eligibility or vehicle-identification field should show the user, the time, the prior value, the new value and the supporting evidence.
- The originator supplies only PDF reports or restricts access to native data. A format that prevents duplicate testing, sorting or matching is an access limitation, not a clerical issue.
- Title or contract custody does not reconcile to the asset schedule. The custodian’s inventory should match the borrowing base and the trust schedule, and exceptions should go directly to the lender, investor or designated control function.
- Audit responses are repeatedly late, incomplete or routed through a single executive. Pressure from management to clear exceptions, unexplained scope restrictions and recurring manual adjustments all warrant further inquiry and a documented escalation.
Practical Compliance Steps for Lenders, Underwriters and Investment Advisers
- Maintain one collateral register with an immutable change history. Give each receivable a unique identifier and record every pledge, release, sale, securitization transfer, substitution, repurchase, charge-off and recovery. The system should block a second pledge unless an authorized release has been recorded.
- Verify ownership and encumbrances outside the originator’s reporting chain. Depending on the asset, that means title or contract custodians, applicable lien searches, authoritative electronic contracts and direct confirmation that releases occurred before transfer.
- Run cross-pool duplicate tests before each funding and offering. Compare the proposed asset tape against open warehouse facilities, outstanding securitizations, repurchased-loan files and recent substitutions, and keep the query, the source files, the exceptions and their resolution.
- Reconcile cash activity to principal and reported status. Trace a risk-based sample from the lender or investor report back to the servicing system, bank collection records, contract and title. Then run the test in reverse, from source systems to the report, to catch omitted or reclassified assets.
- Require machine-readable, loan-level data and define the audit scope. Engagement instructions should name the source systems, the tests, the sample design, the duplicate logic and the treatment of limitations. A clean report is not evidence on matters outside that scope.
- Create a written escalation path with stop-funding authority. The record should capture the issue, the evidence reviewed, the decision-maker, the basis for resolution and any condition or waiver. If reliable evidence cannot be obtained, the firm should decide, and document, whether to pause funding, placement, purchase or continued reliance on the report.
- Assign diligence and supervisory responsibilities by role. Broker-dealers should match their procedures to Rule 3110 and to their actual work on the transaction. Advisers should tie investment diligence to their fiduciary and Rule 206(4)-7 processes. Lenders, trustees and custodians should document their contractual responsibilities and reporting lines.
- Separate compensation from control over evidence and exceptions. A financing or audit-completion bonus becomes dangerous when the person receiving it can select collateral, change eligibility data, control what reviewers see and approve the resulting certification without an independent check.
- Preserve business communications and act promptly when a dispute arises. Approved-channel policies should match the firm’s recordkeeping duties, and a collateral anomaly, default or inquiry should trigger a documented preservation assessment and, where appropriate, a legal hold.
Frequently Asked Questions About the SEC Tricolor Case
Does the SEC complaint create a new collateral-diligence rule?
No. The complaint pleads fraud and related claims against three former Tricolor executives. It promulgates no rule and creates no strict liability for a lender, investor, broker-dealer, trustee, custodian, auditor or adviser. Existing statutes, FINRA rules, fiduciary duties, contractual obligations and the facts of the firm’s own role continue to govern.
Did the SEC charge Tricolor’s underwriters, lenders, investors, trustee or auditors?
Not in this action. The complaint names Chu, Kollar and Seibold as defendants, and firms should not describe it as a finding that any uncharged gatekeeper violated the law. The allegations may still shape how market participants evaluate diligence, disclosure, valuation, impairment and contractual remedies.
Does an audit or officer certificate satisfy collateral diligence?
Not by itself. The answer depends on the legal standard, the firm’s role, the scope of the audit, the evidence supplied and any known red flags. A report that never tested ownership, duplicate pledges or source-system data cannot establish those matters simply because it is called an audit.
Why is a PDF-only data response significant?
Because the format can stop a reviewer from sorting records, matching identifiers, running duplicate tests or examining changes to underlying fields. A firm should document the native data it requested, the response it received, the tests that could not be performed and the decision to proceed, pause or impose conditions.
What relief does the SEC seek?
Permanent injunctions, disgorgement with prejudgment interest and civil penalties, plus officer-and-director bars against Chu and Kollar. The complaint does not ask for a general order prohibiting any defendant from owning, buying or selling securities.
Conclusion: Building Defensible Collateral Verification Controls
The Tricolor complaint is a direct test of collateral-verification controls. The alleged scheme rested on a basic failure of asset identity: the same receivable could sit in more than one financing pool, while manipulated fields and false payments made ineligible loans look current. Detection, when it came, began with a simple comparison of reported loan status against principal movement. For firms with comparable exposure, the immediate task is to find out whether current procedures can establish existence, ownership, lien release, cash performance and custody at the loan level. The answer should come from retained data and completed tests, not from a description of the process. Unresolved access limits or exceptions should reach someone with authority to impose conditions or stop the transaction. The complaint also calls for careful characterization. It contains allegations against three former executives, not findings against every participant in the financing chain. Firms should address the control issues it identifies while keeping their legal analysis tied to their own role, the offering structure, the evidence available and the rules that apply to them.
About Robert Moreiro
Robert Moreiro is a Securities Regulation Partner with Practus, LLP. He has more than 20 years of experience advising broker-dealers, registered investment advisers, financial institutions and associated persons on securities regulation, compliance, regulatory examinations, investigations and enforcement matters. He previously served as Senior Counsel in FINRA’s Enforcement Department and has served as Chief Compliance Officer and AML Compliance Officer for regulated financial-services firms. He is recognized in the 2025 and 2026 editions of The Best Lawyers in America for Securities Regulation and holds the Investment Adviser Certified Compliance Professional and Certified Securities Compliance Professional designations.
Authorities and Sources
SEC Complaint. Complaint, SEC v. Daniel Chu, Jerome Kollar and Ameryn Seibold, No. 26-cv-7041 (S.D.N.Y. filed Aug. 18, 2026), paragraphs 1-16, 23-43, 52-138, 147-170 and Prayer for Relief.
