In brief
- SEC documents obtained by 404 Media show the agency subscribed to Airlines Reporting Corporation's Travel Intelligence Program, which held over one billion ticket records.
- The data included names, credit card numbers, routes, and an alert system that flagged new bookings by people the agency was monitoring — likely without a warrant.
- ARC, co-owned by Delta, United, and American, sold the data until lawmaker pressure forced a shutdown in 2025.
The Securities and Exchange Commission bought access to a worldwide airline ticketing database holding more than one billion records, according to SEC documents obtained by 404 Media through a Freedom of Information Act request.
The data came from Airlines Reporting Corporation, a clearinghouse co-owned by American, Delta, and United that sits between carriers and travel agencies, and resold bookings made through sites like Expedia and Kayak.
The records held passengers' names, the credit cards used to buy tickets, departure and arrival cities, and flight numbers. More than that, the SEC's subscription included an alert system that checked new bookings against a list of people it was monitoring, flagging travel from the prior 24 hours, with the agency requesting between one and 25 of these alerts a day.
No court order was needed; the government simply bought the data, likely without a warrant.
The SEC is a financial regulator, not a spy agency. Its job is to protect American consumers from insider trading, fraud, and market manipulation. But the same travel and payment trail it purchased is exactly the one crypto holders leave behind: a credit card tied to an exchange account, a flight to a conference, a border crossing. When the state can watch both the chain and the boarding pass, the line between market cop and surveillance arm gets thin.
A year into the second Donald Trump presidency, the SEC has pulled back from major crypto enforcement while the data-broker workaround lets agencies skip the warrant they'd need if they demanded the records directly.
The IRS has been expanding its own surveillance of crypto investors through the same playbook. The SECs Coinbase probe of a year ago showed the same appetite for user data. The question is less whether the SEC wants the information than how it gets it.
Theloophole,again
Critics call it the data broker loophole: buy what you can't subpoena. ARC's Travel Intelligence Program sold the same post-9/11 surveillance infrastructure to the FBI, IRS, and Homeland Security before pressure from lawmakers forced its shutdown in 2025.
The newly released documents show its reach was wider than known—foreign-to-foreign journeys sat in the system alongside domestic ones.
ARC defended the program. The company told 404 Media that TIP “was established after the September 11, 2001, terrorist attacks” and “has likely contributed to the prevention and apprehension of criminals involved in... money laundering” and terrorism. Money laundering is the charge crypto draws most often.