← Security Frontier 11 min read

AI-Washing Liability: The Enforcement Landscape Every CEO and GC Must Understand

Brandon Sneider | March 2026

Executive Summary

  • Federal enforcers are prosecuting AI-washing across every channel: the SEC has charged companies for overstating AI capabilities in investor communications, the FTC has brought 12+ cases against deceptive AI marketing claims since 2024, and the DOJ has filed criminal charges carrying 20-year maximums for AI-related securities fraud.
  • Private securities litigation is accelerating faster than enforcement. Stanford Law School’s Securities Class Action Clearinghouse identifies 53 AI-related class actions through H1 2025, with filings doubling year-over-year. Median settlement: $11.5 million.
  • The enforcement pattern is clear and bipartisan. The SEC’s new Cybersecurity and Emerging Technologies Unit (CETU), established February 2025 under the current administration, lists AI-washing as a named enforcement priority. The FTC continued Operation AI Comply through the administration transition without interruption.
  • Mid-market companies face asymmetric risk. The same marketing claims that large companies defend with legal teams become existential threats at the 200-500 person scale — where a $2.75 million settlement (GigaCloud’s AI-washing class action) represents real capital, and a cease-and-desist order damages customer trust irreparably.
  • The line between legitimate AI positioning and actionable misrepresentation is now defined by case law, not speculation. Four patterns of claims trigger enforcement: fabricated AI capabilities, inflated automation rates, undisclosed human intervention, and AI claims in securities filings that diverge from operational reality.

The Enforcement Landscape: Three Agencies, One Message

SEC: From Fines to Criminal Referrals

The SEC’s AI-washing enforcement has escalated from administrative penalties to parallel criminal prosecutions in 18 months.

Phase 1 — Warning shots (March 2024). The SEC settled with two investment advisers, Delphia ($225,000 penalty) and Global Predictions ($175,000 penalty), for making false claims about AI-driven investment models. Delphia claimed it used client data to power AI investment strategies. It did not. Global Predictions called itself the “first regulated AI financial advisor” without substantiation. These were small penalties against small firms — but they established the enforcement theory (SEC Press Release 2024-36, March 2024).

Phase 2 — Public company enforcement (January 2025). The SEC charged Presto Automation, a Nasdaq-listed restaurant technology company, for misleading statements about its AI drive-through product, Presto Voice. The company claimed the technology was proprietary and eliminated the need for human order-taking. Reality: the underlying technology was developed by a third party, and over 70% of orders required human intervention from workers in the Philippines and India. At some locations, 100% of orders required human processing. Presto had no established process for reviewing the accuracy of its public filings — no disclosure controls, no review procedures (SEC Administrative Proceeding 33-11352, January 2025; source credibility: SEC primary enforcement action).

Phase 3 — Criminal prosecution (April 2025). The SEC and DOJ filed parallel actions against Albert Saniger, founder of Nate Inc., who raised $42 million by marketing a “cutting-edge mobile shopping app” powered by “AI, machine learning and neural networks.” The automation rate was “essentially zero.” Transactions were processed manually by hundreds of contract workers at call centers in the Philippines and Romania. Saniger fabricated automation metrics, claiming rates above 90%. The DOJ charges carry a maximum of 20 years for securities fraud and 20 years for wire fraud (SEC Litigation Release lr-26282, April 2025; source credibility: SEC and DOJ primary enforcement filings).

Acting U.S. Attorney Matthew Podolsky stated the prosecution targets those “who seek to harm investors by touting false innovation,” adding that such deception “diverts capital from legitimate startups” and “impedes the progress of AI development.”

Phase 4 — Institutional infrastructure (February 2025-present). The SEC established the Cybersecurity and Emerging Technologies Unit (CETU), replacing the Crypto Assets and Cyber Unit. CETU names AI-washing as a specific enforcement priority. The SEC’s November 2025 examination priorities for fiscal year 2026 integrate AI oversight into virtually every examination category — cybersecurity, emerging technology, automated investment tools, and operational resiliency. AI-washing scrutiny is no longer a specialty investigation; it is a component of routine examinations (SEC Press Release 2025-42, February 2025).

FTC: Operation AI Comply and the Consumer Protection Track

The FTC launched Operation AI Comply in September 2024 with five initial enforcement actions. The program has produced 12+ cases through early 2026, targeting companies that overstate what AI products can do.

The enforcement pattern: claims about AI-powered passive income, autonomous agents replacing employees, and AI-driven accuracy that cannot be substantiated.

Air AI (August 2025) — the case most relevant to mid-market companies. Air AI sold “conversational AI technology” called Odin, claiming it could “conduct long phone conversations that sound like a REAL human” and replace sales representatives autonomously across “5,000 plus applications.” The FTC found the AI was either unavailable or “faulty” at basic tasks — making calls, scheduling, recording emails, answering questions. Small business buyers lost as much as $250,000 each. This case is notable as potentially the first consumer protection action targeting claims about agentic AI replacing human employees (FTC Press Release, August 2025; source credibility: FTC primary enforcement action).

Click Profit (March 2025) — defendants promised “passive income” through an AI-powered e-commerce system selling on Amazon, Walmart, and TikTok. The scheme defrauded consumers of at least $14 million. Settlement imposed partially suspended monetary judgments of $7.3 million and $13.6 million, plus permanent bans from operating any business opportunity (FTC Case, August 2025 final order; source credibility: FTC primary enforcement action).

Growth Cave (January 2026) — the company claimed its AI software “GrowthBox” would “automate nearly 100% of the process” of operating an online education business. The FTC found this claim unsubstantiated (DLA Piper analysis, February 2026; source credibility: law firm analysis of FTC enforcement action).

A critical signal: the FTC vacated its 2024 consent order against Rytr (an AI writing tool) in December 2025, responding to the Trump Administration’s AI Action Plan. But the same administration’s FTC continued filing new AI-washing cases throughout 2025 and into 2026. The message: overstating AI capabilities remains a priority regardless of the political environment’s stance on AI innovation.

State Attorneys General: The Emerging Front

Thirty-six state attorneys general formed a bipartisan coalition opposing federal preemption of state AI laws. State enforcement is building:

  • Texas AG (September 2024): Settlement with an AI healthcare technology company for false claims about accuracy and safety (Paxton announcement, September 2024).
  • California AG guidance: Examples of AI-related deception include “claiming an AI system has capabilities it does not” and “representing that a system is completely powered by AI when humans perform some functions” (AG Bonta public guidance, 2025).
  • North Carolina and Utah AGs (November 2025): Joint task force with OpenAI and Microsoft focused on consumer safeguards.

Until courts resolve the federal preemption question, state AI laws remain enforceable. Companies operating across multiple states face overlapping enforcement jurisdiction.

Private Litigation: Where the Real Financial Exposure Lives

Government enforcement gets headlines. Private securities litigation drives settlements.

Stanford Law School’s Securities Class Action Clearinghouse has identified 53 AI-related securities class actions through H1 2025. The trajectory:

Year AI-Related Securities Filings
2020-2023 5-8 per year
2024 15
H1 2025 12 (on pace for 24+)

Of the 53 cases, 10 have been dismissed. Seven have settled — and the settlement data reveals the exposure:

Metric Amount
Median settlement $11.5 million
Average settlement (all cases) $38.4 million
Average settlement (excluding one $189M outlier) $13.3 million
Largest non-outlier settlement $39 million

For context, overall securities class action averages from 2020-2024 run $39.6 million with a $12 million median — meaning AI-washing settlements track close to the general securities class action range. This is not a discount category (WTW analysis, November 2025, citing Stanford SCAC data; source credibility: independent litigation analytics firm using academic clearinghouse data).

Companies in active litigation include:

  • GigaCloud Technology — settled AI capability misrepresentation claims for $2.75 million (S.D.N.Y., 2025)
  • SoundHound AI — class action alleging overstated internal controls and inflated goodwill following acquisitions (filed 2025)
  • C3.ai — class action after revenue missed guidance by 30% ($70M actual vs. $100-109M projected), with allegations of misleading AI adoption claims (filed August 2025)
  • Opendoor, Upstart — allegations that AI algorithms failed to perform as claimed

The litigation targets are predominantly technology companies (33 of 53 cases), followed by services (10) and financial firms (4). California (18 cases) and New York (15) dominate venue selection.

The Four Patterns That Trigger Enforcement

Across SEC, FTC, DOJ, and private litigation, four claim patterns consistently trigger enforcement:

1. Fabricated AI capabilities. The company claims AI powers its product, but the technology does not exist or does not function. Nate Inc. (zero automation), Mozaic Payments ($20 million raised, zero revenue, non-functioning product), and e-Smart Technologies (off-the-shelf components marketed as proprietary biometrics) all fall here.

2. Inflated automation rates. The company uses AI for some functions but overstates the degree of automation. Presto Automation claimed its drive-through AI eliminated human intervention; 70-100% of orders required human processing. Air AI claimed autonomous sales agents; the technology could not make phone calls reliably.

3. Undisclosed human intervention. The AI label masks substantial human labor. Presto and Nate both maintained offshore call centers (Philippines, India, Romania) processing work marketed as AI-powered.

4. AI claims in securities filings that diverge from operational reality. GigaCloud’s IPO registration statement and prospectus contained AI capability claims the court found sufficiently actionable to survive a motion to dismiss. The SEC’s 2026 examination priorities specifically target “alignment of operations with disclosures” — whether stated AI capabilities match actual deployment.

Key Data Points

  • 53 AI-related securities class actions filed through H1 2025 (Stanford Law School SCAC)
  • 100% year-over-year increase in AI-related securities filings from 2023 to 2024 (7 to 15 cases)
  • $11.5M median settlement in AI-washing securities class actions (WTW/Stanford SCAC, November 2025)
  • $42M raised by Nate Inc. on fabricated AI claims before DOJ criminal prosecution (SEC, April 2025)
  • 12+ FTC AI-washing enforcement actions since September 2024 (FTC Operation AI Comply)
  • 70-100% of Presto Automation orders required human intervention despite “AI-powered” marketing (SEC, January 2025)
  • 20 years maximum sentence for securities fraud in DOJ’s Nate Inc. prosecution
  • $2.75M GigaCloud settlement for AI capability misrepresentations in IPO documents (S.D.N.Y., 2025)
  • $14M defrauded from consumers by Click Profit’s fake AI e-commerce system (FTC, 2025)
  • 36 state attorneys general opposing federal preemption of state AI enforcement authority (NAAG, 2025)

What This Means for Your Organization

The enforcement pattern targets one behavior: claiming AI does something it does not do, or does not do well. This is simpler than most compliance problems — and more dangerous than most executives realize.

A 200-500 person company faces three specific exposure points. First, marketing materials and website claims. Every statement about AI capabilities — on the company website, in sales decks, in RFP responses — is now potential evidence in an FTC action or private lawsuit. The FTC does not distinguish between a Fortune 500 company and a 300-person firm when evaluating deceptive claims. The Air AI case targeted a company selling to small business buyers. Second, investor communications. Any company that has raised capital, has outside investors, or is considering a transaction must treat AI claims in pitch decks, board presentations, and offering documents with the same discipline applied to financial projections. The SEC’s Presto enforcement action turned on statements in periodic filings that no one at the company had reviewed for accuracy — a disclosure controls failure, not a technology failure. Third, vendor claims passed through to clients. If a company markets a vendor’s AI tool as its own capability — or fails to disclose that “AI-powered” features rely on third-party technology or human intervention — the Presto precedent applies directly.

The practical response is a claims audit: inventory every external statement about AI, map each claim to documented technical capability, and flag anything that cannot be substantiated with evidence. The companies that will be in the 5% capturing AI’s value are the ones that market what AI actually does — which, done right, is impressive enough without embellishment.

If this raised questions specific to your organization’s AI positioning and disclosure practices, I’d welcome the conversation — brandon@brandonsneider.com

Sources

  1. SEC Press Release 2024-36, “SEC Charges Two Investment Advisers with Making False and Misleading Statements About Their Use of Artificial Intelligence,” March 2024. https://www.sec.gov/newsroom/press-releases/2024-36 — Primary source: SEC enforcement action.

  2. SEC Administrative Proceeding 33-11352-s, “SEC Charges Restaurant-Technology Company Presto Automation for Misleading Statements About AI Product,” January 2025. https://www.sec.gov/enforcement-litigation/administrative-proceedings/33-11352-s — Primary source: SEC enforcement action.

  3. SEC Litigation Release lr-26282, SEC v. Alberto Saniger Mantinan, April 2025. https://www.sec.gov/enforcement-litigation/litigation-releases/lr-26282 — Primary source: SEC enforcement filing.

  4. SEC Press Release 2025-42, “SEC Announces Cyber and Emerging Technologies Unit to Protect Retail Investors,” February 2025. https://www.sec.gov/newsroom/press-releases/2025-42 — Primary source: SEC organizational announcement.

  5. SEC Division of Examinations, “2026 Examination Priorities,” November 2025. https://www.sec.gov/files/2026-exam-priorities.pdf — Primary source: SEC regulatory guidance.

  6. FTC Press Release, “FTC Announces Crackdown on Deceptive AI Claims and Schemes” (Operation AI Comply), September 2024. https://www.ftc.gov/news-events/news/press-releases/2024/09/ftc-announces-crackdown-deceptive-ai-claims-schemes — Primary source: FTC enforcement program.

  7. FTC Press Release, “FTC Sues to Stop Air AI from Using Deceptive Claims,” August 2025. https://www.ftc.gov/news-events/news/press-releases/2025/08/ftc-sues-stop-air-ai-using-deceptive-claims-about-business-growth-earnings-potential-refund — Primary source: FTC enforcement action.

  8. FTC Case, Click Profit LLC, 2025. https://www.ftc.gov/legal-library/browse/cases-proceedings/click-profit-llc — Primary source: FTC enforcement action.

  9. FTC Press Release, “FTC Reopens and Sets Aside Rytr Final Order in Response to the Trump Administration’s AI Action Plan,” December 2025. https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-reopens-sets-aside-rytr-final-order-response-trump-administrations-ai-action-plan — Primary source: FTC administrative action.

  10. WTW, “More Buzz Than Sting: The State of AI-Related Securities Litigation,” November 2025. https://www.wtwco.com/en-us/insights/2025/11/more-buzz-than-sting-the-state-of-ai-related-securities-litigation — Independent litigation analytics (citing Stanford SCAC data).

  11. Stanford Law School Securities Class Action Clearinghouse, AI-washing litigation tracking, through H1 2025. https://securities.stanford.edu/ — Academic primary source.

  12. Holland & Knight, “SEC and DOJ Warm Up to Enforcement over AI Washing,” July 2025. https://www.hklaw.com/en/insights/publications/2025/07/sec-and-doj-warm-up-to-enforcement-over-ai-washing — Law firm analysis of enforcement trends.

  13. DLA Piper, “SEC Emphasizes Focus on ‘AI Washing’ Despite Perceived Enforcement Slowdown,” 2025. https://www.dlapiper.com/en/insights/publications/ai-outlook/2025/sec-emphasizes-focus-on-ai-washing — Law firm analysis of SEC priorities.

  14. The D&O Diary, “Guest Post: Would Specific SEC Disclosure Guidelines Deter AI-Washing?” January 2026. https://www.dandodiary.com/2026/01/articles/securities-enforcement/guest-post-would-specific-sec-disclosure-guidelines-deter-ai-washing/ — Legal commentary (citing SEC Investment Advisory Committee recommendations).

  15. Benesch, “One Year In, FTC’s ‘Operation AI Comply’ Continues Under New Administration,” 2025. https://www.beneschlaw.com/insight/one-year-in-ftcs-operation-ai-comply-continues-under-new-administration-signaling-enduring-enforcement-focus/ — Law firm analysis of FTC enforcement continuity.

  16. NAAG, “Bipartisan Coalition of 36 State Attorneys General Opposes Federal Ban on State AI Laws,” 2025. https://www.naag.org/press-releases/bipartisan-coalition-of-36-state-attorneys-general-opposes-federal-ban-on-state-ai-laws/ — Primary source: state AG coalition statement.

  17. Darrow, “AI Washing Sparks Investor Suits and SEC Scrutiny,” 2025. https://www.darrow.ai/resources/ai-washing — Legal analytics platform (aggregating enforcement data).

Brandon Sneider | brandon@brandonsneider.com March 2026