SEC skipped the warrant, bought the boarding pass 🧾

The Securities and Exchange Commission purchased access to a global airline ticketing database containing more than one billion records, according to SEC documents obtained by 404 Media through a Freedom of Information Act request. The data came from Airlines Reporting Corporation, a clearinghouse co-owned by American, Delta, and United that processes bookings made through sites including Expedia and Kayak. The records held passenger names, credit card numbers, departure and arrival cities, and flight numbers. The SEC's subscription included an alert system that screened new bookings against a list of monitored individuals, flagging travel from the prior 24 hours, with the agency requesting between one and 25 alerts per day. No court order was required; the agency purchased the data rather than obtaining it through legal process.

The records map the same trail that links centralized exchange accounts to identifiable users: a credit card on file, a flight to an industry conference, a border crossing timestamped in a government database. The SEC's mandate covers insider trading, fraud, and market manipulation rather than travel surveillance, and the documents do not specify which investigations triggered each alert request. Airlines Reporting Corporation's Travel Intelligence Program had previously sold the same post-9/11 monitoring infrastructure to the FBI, IRS, and Department of Homeland Security before congressional pressure forced its shutdown in 2025. ARC told 404 Media that TIP "was established after the September 11, 2001, terrorist attacks" and "has likely contributed to the prevention and apprehension of criminals involved in... money laundering" and terrorism.

The SEC's consumer data request tied to last year's Coinbase probe illustrates the same demand for exchange user information. Separately, the IRS has pursued comparable crypto investor surveillance through third-party data brokers. Coverage arrives as the SEC has drawn back from major crypto enforcement actions during the second Donald Trump presidency, a year after the agency scaled back its Coinbase case. The newly released documents show the database's reach extended beyond domestic itineraries to foreign-to-foreign journeys that also sat within ARC's systems. The acquisition highlights how financial regulators can obtain transactional and travel data without the warrant that would be required for a direct subpoena to a carrier or exchange.