How to Verify Accredited Investors for a 506(c) Offering (2026 Guide)

Rule 506(c) requires fund managers to take 'reasonable steps' to verify that every investor in their offering is accredited. Self-certification is not sufficient. This guide covers exactly what the SEC requires, what documentation you need to collect, and how to run the verification process without turning it into a six-week compliance bottleneck.

Step 1: Determine Which Verification Method Applies to Each Investor

The SEC provides a safe harbor with four primary verification methods. You do not have to use all four — you pick the method that fits each investor's situation. Using one of the safe harbor methods protects the fund manager from enforcement action even if an investor later turns out to not be accredited.

Method 1: Income-based verification

Review the investor's IRS Form 1040 for each of the last two years showing income above $200,000 (or $300,000 joint). Pair this with a written representation from the investor that they reasonably expect to reach the same income level in the current year. This is the most common method for individual investors.

Method 2: Net worth-based verification

Review bank statements, brokerage statements, or other asset documentation from the last three months. Pair with a credit report to confirm no liabilities that would reduce net worth below $1M (excluding primary residence). Obtain a written investor representation that they have disclosed all material liabilities.

Method 3: Third-party confirmation

A licensed CPA, attorney, registered investment adviser, or registered broker-dealer provides written confirmation that they have verified the investor's accredited status within the last 90 days. This is often the fastest method for sophisticated investors who have an existing relationship with a financial professional.

Method 4: Prior verified investor

If the investor has invested in a prior 506(c) offering by the same issuer and provided a written representation that they continue to qualify as an accredited investor, this can satisfy the reasonable steps requirement for subsequent offerings.

Step 2: Collect the Required Documentation Securely

Document collection is where most manual verification processes break down. Email threads with sensitive financial attachments create security risk and compliance liability. The investor experience is poor — PDFs, follow-up requests, and week-long delays.

The right approach is a secure, investor-facing portal that collects documents directly, encrypts them at rest and in transit, and maintains a clear chain of custody. This is what generates a defensible audit trail.

• Send the investor a secure, personalized verification link
• The investor uploads documents directly — no email attachments
• Documents are encrypted and stored with access logging
• The platform confirms receipt and initiates review

Step 3: Review and Confirm Accredited Status

Someone qualified must review the documentation and confirm it supports the investor's accredited status claim. This can be your compliance team, your counsel, or a third-party verification platform. The key is that the review is documented — who reviewed it, when, and what conclusion was reached.

Step 4: Generate and Store the Audit-Ready Verification Record

For each verified investor you need a complete record: the verification method used, the documents reviewed, the reviewer's identity, the date of verification, and the investor's signed representation. This record must be retained and producible in the event of an SEC examination.

How Long Does 506(c) Verification Take?

Manual verification — chasing documents by email, internal review queues, back-and-forth with investors — typically takes three to six weeks per investor. With an automated verification platform like Fassport, the process runs in under 24 hours. The investor receives a secure link, completes the upload, and gets verified. The fund manager has a complete, audit-ready record the same day.

Common Mistakes That Create Compliance Exposure

• Relying on self-certification for a 506(c) offering — this is only allowed under 506(b)
• Accepting verification that is more than 90 days old without updating for third-party confirmations
• Failing to collect representations alongside documentation
• No documented review — someone must confirm the documents support the claim
• Documents stored in email with no chain of custody or access log