SEC Fines Ex-Bancorp CFO $30K: The 10-K Timing Lesson

A $30,000 Penalty for Filing a 10-K Two Days Too Early

The SEC issued a cease-and-desist order on September 3, 2026 against Paul Frenkiel, the former chief financial officer of The Bancorp, Inc., who agreed to pay a $30,000 civil penalty to settle allegations that he directed the filing of an annual report carrying audit opinions the auditors had never finalized. Frenkiel neither admitted nor denied the findings. The order is Exchange Act Release No. 34-106274, Administrative Proceeding File No. 3-22701.

This was not a case of fraud, self-dealing, or a cooked ledger. It was a case of timing. On March 3, 2025, Frenkiel directed The Bancorp to file its Form 10-K for the fiscal year ended December 31, 2024 with purported audit opinions and consents from both its current auditor and its prior auditor, without their final approval.

That distinction matters to every executive who signs or supervises a public filing. The SEC did not need to prove the numbers were wrong to hold the CFO personally accountable. It only needed to show that the certification of third-party approval was false when the filing hit EDGAR. Here is what happened, why it matters, and what your leadership team should take from it.

What Actually Went Wrong at The Bancorp

The mechanics are worth understanding because they are ordinary right up until the moment they are not.

The Bancorp changed auditors in 2024. Grant Thornton LLP, which audited fiscal years 2022 and 2023, was dismissed and replaced by Crowe LLP effective March 4, 2024. That meant the FY2024 10-K required a fresh opinion from Crowe and continued consents from Grant Thornton for the prior years still presented in the financials.

Neither firm had signed off when the filing went out. The company recognized the problem almost immediately. On March 4, 2025, one day after the improper filing, The Bancorp's Audit Committee concluded that its financial statements for fiscal years 2022 through 2024 should no longer be relied upon.

The corrected picture was not cosmetic. When the company filed its amended Form 10-K/A on April 7, 2025, it revised the provision for credit losses on consumer fintech loans from $19.6 million to $30.7 million and changed its internal controls assessment from effective to not effective. The premature filing, in other words, presented as final a set of statements that materially understated credit losses and overstated the reliability of the company's controls.

Reading the Enforcement Signal

The most useful takeaway is not the size of the penalty. It is what the SEC chose to charge, and against whom.

The individual, not just the issuer

The Commission proceeded against the CFO by name under Section 21C of the Securities Exchange Act. This is a familiar pattern in accounting cases: the SEC will reach the officer who controlled the filing decision, even where the settlement figure is modest. A $30,000 penalty is small in dollar terms and large in signaling terms. It tells finance leadership that directing a filing is a personal act with personal exposure.

The company's history did not help

The Bancorp is not new to SEC scrutiny. The company paid a $1.4 million penalty in September 2019 for reporting, recordkeeping, and internal controls failures tied to its commercial loan portfolio, and a $1.75 million penalty in August 2022 for misleading disclosures related to commercial real estate securitization valuations. A repeat pattern of controls and disclosure failures shapes how the SEC weighs the next one.

The lesson is about process, not intent

There is no allegation that Frenkiel set out to deceive the market. The order describes a control failure at the exact point where a private judgment call becomes a public representation. That is the fact pattern most finance teams underestimate, because it does not look like misconduct until an auditor confirms it was.

What Your Finance and Audit Leadership Should Do

The Bancorp order is a checklist item, not a headline to forget. If you run or oversee financial reporting at a public company or a company preparing to go public, translate this into concrete controls.

First, treat auditor sign-off as a hard gate, not a formality. No 10-K, 10-Q, or registration statement should be released to EDGAR until final, written consent and opinion language is in hand from every auditor whose work is referenced. Verbal comfort is not consent.

Second, map the sign-off dependencies before filing week. An auditor transition, like the Grant Thornton to Crowe change here, multiplies the number of required consents because prior-year statements remain in the document. Build that map early.

• Identify every auditor whose opinion or consent appears in the filing.
• Confirm written approval from each, dated on or before the filing date.
• Assign a single owner to verify the gate is cleared before submission.

Third, separate the deadline pressure from the approval decision. Filing deadlines are real, but a late filing on a Form 12b-25 extension is a recoverable event. A premature filing with unapproved audit opinions is an enforcement event. Those are not the same magnitude of risk.

If your reporting calendar or controls need a fresh review, experienced SEC compliance counsel can pressure-test the sign-off process against exactly this fact pattern before an examiner does.

Key Takeaways

• Timing alone can be a securities violation. The SEC did not allege fraud; it alleged that a Form 10-K carried audit opinions and consents the auditors had not finalized when it was filed on March 3, 2025.
• The CFO paid personally. Frenkiel agreed to a $30,000 civil penalty under a Section 21C cease-and-desist order, confirming that directing a filing carries individual exposure, not just corporate exposure.
• The underlying numbers were material. The amended 10-K/A revised consumer fintech loan credit-loss provisions from $19.6 million to $30.7 million and reclassified internal controls from effective to not effective.
• Auditor transitions multiply sign-off risk. Replacing Grant Thornton with Crowe meant the FY2024 filing needed consents from two firms; missing either one was enough.
• Prior enforcement history raises the stakes. The Bancorp had already paid $1.4 million in 2019 and $1.75 million in 2022 in prior SEC actions, shaping how the agency views a repeat controls failure.