How can a fake release reach a real wire service?

Usually by compromising or impersonating the issuer's account with the service, or by using a lookalike domain and email address that a distribution service accepts without verification. Some incidents have involved intrusion into the wire service itself.

Why do prices move if the release is obviously false?

Because the reaction is automated and immediate. Headline-reading algorithms trade within milliseconds of a wire item appearing, long before any human evaluates it. The window between publication and denial is where the whole scheme lives.

How long does the window last?

Typically minutes. A company must find out, verify, and issue a denial, and the exchange may halt trading in the meantime. Minutes are ample: the perpetrator has a position in place before publication and exits into the spike.

Securities fraud under Rule 10b-5 and Section 17(a), and criminally, wire fraud. Where credentials were compromised, the Computer Fraud and Abuse Act applies as well, which often carries the more straightforward proof.

Are companies liable for a fake release about them?

No, where they had no involvement. They are the victim. Their obligation is to correct the record promptly, which is why exchanges halt trading to give them the chance.

Is this the same as EDGAR filing fraud?

Closely related. A fake press release abuses a distribution channel; EDGAR filing fraud abuses the official filing system, which carries more authority and is correspondingly more effective and more serious.

What defends against it?

Authentication at the wire service, prompt issuer denial, and exchange halts. Automated trading systems increasingly cross-check wire items against filings before acting, which narrows the window considerably.

Does it work in crypto?

Yes, and better. Fabricated partnership and exchange-listing announcements move token prices sharply, there is no filing system to contradict them, and no trading halt mechanism exists to interrupt the reaction.

Fake press releases

A fake press release is a fabricated corporate announcement issued through a wire service or a lookalike site, designed to move a share price for the few minutes before the company can deny it.

Also called hoax announcements, spoofed releases. Observed in equities, crypto. One of the information-based manipulation techniques. 16 enforcement actions in the library.
Updated 2026-09-07

How do fake press releases work?

A fake press release exploits a gap in time.

Corporate announcements reach markets through a small number of distribution services. When an item appears on one of those wires, a great deal of trading responds within milliseconds — headline-reading algorithms parse the text, classify it, and act. No human has read it. No human could have.

Verification, by contrast, is slow. The company has to notice, confirm internally, and issue a denial. The exchange may halt trading to allow this, but the halt itself takes minutes to arrange.

The scheme lives entirely in the interval between those two speeds.

Build the position first. Shares, or more often short-dated call options, which give the most leverage on a known event.
Publish. Through a compromised wire account, a distribution service that accepted an unverified submission, or a lookalike domain registered days earlier and designed to be mistaken for the company’s own.
Let the machines react. A takeover at a large premium, a regulatory approval, a major contract. The claim is chosen to be unambiguous, because ambiguity slows automated parsing.
Sell into the spike. Within minutes, sometimes seconds.
The denial arrives. The price returns to where it started, typically within the same session.

The perpetrator needs no relationship with the company, no inside information, and no capital beyond the option premium. What they need is a distribution channel that will publish without checking.

Publication is instant. Verification is not.

A worked example with real numbers

A company trading at $31.40 with liquid options. A fabricated release announces an all-cash acquisition at $52 a share.

The position. Ninety minutes before publication, weekly call options struck at $35, expiring in three days, are bought at $0.22.

900 contracts × 100 shares × $0.22 = $19,800 committed

The publication. The release crosses a wire at 10:14. It names no adviser, states no financing, and appears in no filing.

The reaction. By 10:16 the stock is at $46.80. The $35 calls, now deep in the money with three days to expiry, are marked around $11.90.

The exit. Sold between 10:16 and 10:19 at an average of $9.40, as liquidity thins:

Proceeds  900 × 100 × $9.40  =  $846,000
Cost                             $19,800
Gross gain                    =  $826,200

The correction. At 10:31 the exchange halts trading. At 11:05 the company denies the release. On resumption the stock trades at $31.60.

Roughly $826,000 from a $19,800 outlay, over seventeen minutes.

The leverage is the point, and it is why options rather than shares are the usual instrument. The same $19,800 in stock would have bought 630 shares and made about $9,700. The option position made eighty-five times that, because the perpetrator knew something about the next three minutes that the option price did not reflect.

That leverage is also the detection signal. An account with no options history buying 900 short-dated out-of-the-money calls ninety minutes before a fabricated release about the underlying is not a subtle pattern.

Why are fake press releases illegal?

This is among the least ambiguous conduct on this site.

Rule 10b-5 prohibits untrue statements of material fact in connection with the purchase or sale of a security. A fabricated takeover announcement is an untrue statement of material fact; the perpetrator’s trading is the connection. Section 17(a) covers the same conduct in offers and sales, and Exchange Act § 9(a)(4) reaches false statements made to induce trading.

Wire fraud under 18 U.S.C. § 1343 is the criminal charge, and it fits so directly — a scheme to obtain money by materially false pretences, executed over interstate wires — that it is frequently the lead count.

The Computer Fraud and Abuse Act applies where credentials were compromised or a system was accessed without authorisation, which is common. Prosecutors often prefer this route: proving unauthorised access to a wire service account is a documentary question, whereas proving materiality and reliance is an evidentiary one.

Impersonation and domain offences may apply where a lookalike site was used.

There is no serious argument on the other side. Unlike open-market manipulation, where lawful trades are alleged to be unlawful because of intent, everything here is false on its face: the release did not come from the company, and it says something that is not true.

The crypto position is different only in enforcement, not in principle. Fabricated partnership and exchange-listing announcements move token prices sharply, and there is no filing system to contradict them and no halt mechanism to interrupt the reaction. Where the token is a security, the securities provisions apply; where it is not, wire fraud does the work, and it does not care what the asset is.

Provisions most often charged
Provision	Citation	Primary text
SEC Rule 10b-5	17 C.F.R. § 240.10b-5	Read the text
Securities Exchange Act — general antifraud	15 U.S.C. § 78j(b)	Read the text
Securities Act — fraud in the offer or sale	15 U.S.C. § 77q(a)	Read the text
Wire fraud	18 U.S.C. § 1343	Read the text
Computer Fraud and Abuse Act	18 U.S.C. § 1030	Read the text

Which real enforcement actions have alleged fake press releases?

This library holds 16 enforcement actions tagged fake press releases. The table shows the largest by civil penalty together with the most recently filed. Every row links to a page carrying the regulator's own release and, where one was published, the complaint.

Selected fake press releases actions
Action	Agency	Filed	Penalty	Status
SEC v. Randy A. Hamdan and Oracle Consultants, LLC (fake press releases, 2016)	SEC	2016-02-17	$150k	judgment
SEC v. Muhammad Saad Shoukat and others (fake press releases, 2026)	SEC	2026-01-06	—	filed
SEC v. In Ovations Holdings, Inc. and Mark Goldberg (fake press releases, 2022)	SEC	2022-12-09	—	judgment
SEC v. Michael J. Starkweather and Andiamo Corporation (fake press releases, 2021)	SEC	2021-12-03	—	judgment

All 16fake press releasesactions →

How do fake press releases get detected?

Detection is fast, because the position is conspicuous and the timing is exact.

Pre-publication position analysis. Reconstructing who bought in the minutes and hours before the release. The window is narrow enough that the candidate set is small, and out-of-character options activity narrows it further.

Distribution channel forensics. Which service published it, from which account, submitted from which address. Wire services retain this and hand it over quickly.

Domain and infrastructure analysis. Registration dates, hosting, and payment details for lookalike sites. A domain registered four days before the release is not a coincidence.

Document comparison. Fabricated releases differ from genuine ones in formatting, boilerplate, contact details and legal language, because the author has copied the form without knowing the conventions.

Filing reconciliation. A materially significant development requires a Form 8-K. Its absence, alongside a dramatic wire item, is the single fastest indicator that something is wrong.

A position established in the minutes or hours before the release, and closed within the session.
Release distributed through a channel the issuer has never used, or from a domain registered days earlier.
Formatting, contact details or boilerplate that differ from the company's genuine releases.
No corresponding filing, which a genuinely material development would require.
Options positions taken shortly before the release, in accounts with no history of trading options.

What penalties does fake press releases actually attract?

The numbers below are computed from this site's own case records at build time, not quoted from a secondary source. They change whenever a new action is added to the library.

Actions recorded: 16
Median penalty: $150k
Largest penalty: $150k
Criminal parallel: 44%
Median sentence: —

Computed from 16enforcement actions in our own case library tagged fake-press-releases , filed between 2015 and 2026. Median penalty covers the 1action where a civil monetary penalty was disclosed; median sentence covers the 0 defendants who received a custodial term. Penalties exclude disgorgement and prejudgment interest, which are reported separately on each case page.

Largest single penalty: SEC v. Randy A. Hamdan and Oracle Consultants, LLC (fake press releases, 2016) .

What are the red flags?

A dramatic announcement that appears on a wire but not in the company's filings.
A press release linking to a domain that is a near-miss of the company's own.
A takeover announcement with no named adviser, no premium stated, and no confirmation from the acquirer.
Price spiking and fully retracing within one session.

For anyone trading on announcements: check the filing, and check the domain. A genuine transformative announcement appears in the company’s filings, usually within minutes. One that exists only on a wire, linking to a domain that is nearly but not quite the company’s own, has told you everything before you read a word of it.

What fake press releases are not

They are not corporate optimism. Companies overstate constantly in genuine releases, which is a disclosure problem rather than a forgery.

They are not analyst speculation. Third parties may speculate about takeovers freely, provided they do not present speculation as an announcement.

They are not satire or error. Wire services publish corrections; a mistake is not a scheme. The offence requires knowledge of falsity and a position that profits from it.

They are not EDGAR filing fraud, which abuses the official filing system rather than a distribution channel and is treated more seriously for exactly that reason.

Frequently asked questions about fake press releases

How can a fake release reach a real wire service?: Usually by compromising or impersonating the issuer's account with the service, or by using a lookalike domain and email address that a distribution service accepts without verification. Some incidents have involved intrusion into the wire service itself.
Why do prices move if the release is obviously false?: Because the reaction is automated and immediate. Headline-reading algorithms trade within milliseconds of a wire item appearing, long before any human evaluates it. The window between publication and denial is where the whole scheme lives.
How long does the window last?: Typically minutes. A company must find out, verify, and issue a denial, and the exchange may halt trading in the meantime. Minutes are ample: the perpetrator has a position in place before publication and exits into the spike.
What charges apply?: Securities fraud under Rule 10b-5 and Section 17(a), and criminally, wire fraud. Where credentials were compromised, the Computer Fraud and Abuse Act applies as well, which often carries the more straightforward proof.
Are companies liable for a fake release about them?: No, where they had no involvement. They are the victim. Their obligation is to correct the record promptly, which is why exchanges halt trading to give them the chance.
Is this the same as EDGAR filing fraud?: Closely related. A fake press release abuses a distribution channel; EDGAR filing fraud abuses the official filing system, which carries more authority and is correspondingly more effective and more serious.
What defends against it?: Authentication at the wire service, prompt issuer denial, and exchange halts. Automated trading systems increasingly cross-check wire items against filings before acting, which narrows the window considerably.
Does it work in crypto?: Yes, and better. Fabricated partnership and exchange-listing announcements move token prices sharply, there is no filing system to contradict them, and no trading halt mechanism exists to interrupt the reaction.

EDGAR filing fraud — EDGAR filing fraud is submitting a false document through the SEC's official filing system, exploiting the authority of the system of record to move a share price before the issuer can correct it.
False rumours — Spreading false rumours is seeding an untrue claim about a company into channels traders read, in order to move the price and trade against the reaction before the claim can be checked.
Pump and dump — A pump and dump is a scheme in which shares are accumulated cheaply, promoted with misleading claims to drive the price up, and then sold into the demand the promotion created, leaving later buyers with the loss.
Social media ramps — A social media ramp is a coordinated posting campaign designed to drive attention and buying into a thinly traded security, so that the organisers can sell into the demand their posts created.

Terms defined on this page

Misstatement · Materiality · Form 8 K · EDGAR · Price Discovery

Sources

SEC Rule 10b-5 — Electronic Code of Federal Regulations
18 U.S.C. § 1343 — wire fraud — Cornell Legal Information Institute
Form 8-K — current report — US Securities and Exchange Commission

Reviewed September 7, 2026. Every statute link points at the primary text. If something here is wrong, tell us — corrections are logged in public.