Every chapter that follows responds, directly or indirectly, to the regulatory record reconstructed in Report No. OIG-509. The other essays in this volume — on the Markopolos submission, the mathematics of the returns, the auditor question, the feeder funds, and the SIPA litigation — take as given the facts that the SEC Office of Inspector General established in 2009. Read this chapter first; the rest of the book assumes its findings.
On the morning of December 11, 2008, when Bernard L. Madoff was arrested in his Manhattan apartment and told FBI agents there was "no innocent explanation," the dollar figure attached to his confession was already staggering: approximately $50 billion, the number Madoff himself volunteered that morning. What was not yet public was that the United States Securities and Exchange Commission had, by its own subsequent admission, received credible written warnings about Madoff's investment advisory business as early as 1992. The Commission had opened files, written memos, taken testimony, and even produced examination reports. It had simply never picked up a telephone and called the Depository Trust Company to ask whether Madoff's purported trades had actually occurred.
Madoff himself was no obscure operator. He had founded Bernard L. Madoff Investment Securities LLC ("BLMIS") in 1960 with $5,000 in savings, built it into one of the largest market-makers on the over-the-counter equity desk, served as chairman of the NASDAQ Stock Market, and sat on SEC advisory committees on market structure. The legitimate broker-dealer business operated on the 18th and 19th floors of the Lipstick Building at 885 Third Avenue; the advisory business — the fraud — operated quietly on the 17th floor, behind a locked door, run by a handful of clerical employees and a single programmer. Throughout this book, subsequent chapters will cite that geography and that biography without recapitulating them. They belong here.
The 457-page Report of Investigation issued by the SEC Office of Inspector General in August 2009, designated Investigation of Failure of the SEC to Uncover Bernard Madoff's Ponzi Scheme, Report No. OIG-509, is the primary forensic record of the regulatory failure. Drafted under Inspector General H. David Kotz and based on more than 140 interviews and 3.7 million emails, it is the document every later academic, journalist, and litigant has had to reckon with. For a law student, OIG-509 is not merely background reading; it is a slow-motion case study in how a sophisticated regulator with statutory authority, subpoena power, and an explicit investor-protection mandate can nonetheless fail at the granular, almost clerical level where regulation actually lives or dies.
Six Complaints, Sixteen Years
The report's organizing finding is deceptively simple. Between June 1992 and December 2008, the OIG concludes, the Commission received "six substantive complaints that raised significant red flags concerning Madoff's hedge fund operations." OIG-509, supra, at 21. Three came from Harry Markopolos, the Boston-based derivatives analyst whose 21-page November 2005 submission identified 29 red flags and concluded that Madoff was running either a front-running operation or a Ponzi scheme. That submission is reproduced and dissected in chapter [markopolos-no-one-would-listen]; here it is enough to note that it landed at the Commission and went nowhere. The other complaints came from an anonymous informant in 2000, a series of articles in Barron's and MARHedge in 2001, and a hedge fund manager in 2003. None produced a meaningful investigation of the advisory business.
The 1992 episode is instructive. The Commission's New York office investigated Avellino & Bienes, a feeder fund operation that had funneled roughly $440 million to Madoff while promising guaranteed returns of 13.5 percent to 20 percent. The Commission obtained an injunction against the feeders, required them to return investor funds, and accepted Madoff's representation that he had executed the underlying trades legitimately. The agency did not ask, in 1992, the question it would not ask in 2006 either: where are the trade tickets, and do the counterparties confirm them? Avellino & Bienes were treated as the problem; Madoff was treated as the solution.
The Verification That Never Happened
If OIG-509 has a single doctrinal lesson, it concerns the elementary nature of the verification step the Commission failed to take. Madoff claimed to be implementing a split-strike conversion strategy — buying a basket of large-cap equities, selling out-of-the-money index calls, and buying out-of-the-money index puts — on the S&P 100. Every share of stock and every option contract he purportedly traded would have settled through the Depository Trust Company for equities and the Options Clearing Corporation for listed options. Confirmation required a single records request. As the OIG put it, an outside trading expert "opined that had the SEC team verified Madoff's trading with an independent third party, such as the DTC, they would have uncovered Madoff's Ponzi scheme in 2006." OIG-509, supra, at 24. The team never asked. The mathematical impossibility that even a cursory verification would have surfaced — returns uncorrelated with any plausible execution of the stated strategy — is the subject of chapter [bernard-boyle-amazing-returns].
Instead, the 2005 Enforcement investigation accepted Madoff's representation that he traded through European counterparties and never confirmed it. When staff did belatedly send a request to a European entity in 2006, Madoff was permitted to learn of the inquiry in advance and to coach the counterparty's response. The report describes a senior Madoff employee fabricating a DTC report on demand. The fact that this fabrication was never detected is not a story about Madoff's cleverness; it is a story about institutional incuriosity.
"The SEC never took the necessary, but basic, steps to determine if Madoff was operating a Ponzi scheme."
Statutory Architecture and Its Discontents
The report's significance for a securities-law student lies in how it maps the gap between statutory authority and its exercise. BLMIS's advisory business was, after September 2006, registered under the Investment Advisers Act of 1940, which subjects advisers to the antifraud provisions of section 206, 15 U.S.C. § 80b-6, and to examination authority under section 204, 15 U.S.C. § 80b-4. The Office of Compliance Inspections and Examinations had unambiguous power to demand books, records, and counterparty confirmations. The Division of Enforcement had subpoena authority under section 21(b) of the Securities Exchange Act of 1934, 15 U.S.C. § 78u(b), and could have compelled DTC production with a single administrative subpoena.
The conduct that went unexamined would have violated multiple provisions: Rule 10b-5, 17 C.F.R. § 240.10b-5, under the Exchange Act; Advisers Act § 206(1) and (2); and the custody and recordkeeping requirements of 17 C.F.R. § 275.206(4)-2 (the custody rule) and 17 C.F.R. § 275.204-2. BLMIS's advisory business held custody of client assets without the independent verification by an accountant that the custody rule contemplates, and its auditor, Friehling & Horowitz, was a three-person shop operating out of a strip mall in New City, New York — a fact that examiners had in front of them and never pursued. That failure, and the auditor-as-red-flag literature it generated, is the subject of chapter [fuerman-solo-auditor-red-flag].
The Sociology of the Examination
OIG-509 also functions as an organizational ethnography. The 2005 examination was led by a staff attorney with "no prior experience with equity or options trading," and the team accepted Madoff's "evasive or contradictory" testimony without follow-up. OIG-509, supra, at 248. Madoff's stature — former chairman of NASDAQ, member of Commission advisory committees, regulatory insider — produced a measurable deference effect. One examiner reported being told by a supervisor that Madoff was "a very well-respected person." The report carefully avoids alleging corruption, finding instead a more banal failure: junior staff, weak supervision, and an institutional preference for closing files over chasing leads.
What the Report Leaves Unresolved
OIG-509 is, by its terms, a backward-looking accountability document. It audits the Commission's performance; it does not propose statutory reform, it does not adjudicate private-sector gatekeeping, and it does not address the downstream civil-recovery machinery that would consume the next two decades. Each of those omissions is a thread the rest of this book picks up. The Fairfield Sentry Limited and Fairfield Greenwich Group feeder funds, the auditor's complicity, the affinity-fraud sociology of the investor base, the SIPA-trustee litigation pursued by Irving H. Picard, and the net-winner/net-loser distinction that determined who could claw back what — none of these appear in Kotz's report, because none of them were the Commission's failure to investigate. They were everyone else's failures, or successes, around the edges of the regulatory void OIG-509 documents.
Doctrinal Takeaway
For the law student, OIG-509 illuminates three doctrinal levers and one institutional one. The first is the Investment Advisers Act's section 204 examination authority, which gave the Commission unrestricted access to BLMIS's books and records and which the Commission declined to exercise meaningfully. The second is 17 C.F.R. § 275.206(4)-7, the compliance-program rule, which required (and requires) registered advisers to adopt written policies "reasonably designed to prevent violation" of the Advisers Act — a standard against which BLMIS's nonexistent compliance infrastructure should have failed instantly upon its 2006 registration. The third is the custody rule, 17 C.F.R. § 275.206(4)-2, whose surprise-verification regime, properly enforced against an adviser with self-custody, would have required an independent accountant to confirm assets that did not exist. The institutional lever is the OCIE/Enforcement coordination failure: examination staff who suspected wrongdoing referred matters to Enforcement, which staffed them with attorneys who lacked the trading literacy to follow the referrals. Every subsequent reform — Dodd-Frank Title IV's consolidation of adviser oversight, the creation of the Division of Examinations, the empowerment of whistleblowers under Exchange Act § 21F — is best read as a response to one or more of these specific failures.