SEC Purchased Access to 1 Billion Airline Records, Raising Privacy Concerns for Crypto Traders

Headline: SEC Bought Access to a Billion Airline Records — A Privacy Red Flag for Crypto Traders Newly released Securities and Exchange Commission documents, obtained by 404 Media via a FOIA request, show the SEC purchased access to a global airline-ticketing database that contained more than one billion records. The data came from Airlines Reporting Corporation (ARC) — a clearinghouse co-owned by American, Delta, and United that sits between carriers and travel agencies and re-sells bookings made through sites such as Expedia and Kayak. What the SEC could see - Passenger names and the credit cards used to buy tickets - Departure and arrival cities and flight numbers - A subscription alert system that compared new bookings to the SEC’s watch list and flagged trips taken in the previous 24 hours According to the documents, the SEC requested between one and 25 of these alerts a day. Importantly, the records were purchased outright; no court order was required. That means the agency likely gained this data without a warrant. Why crypto investors should care The SEC is a financial regulator tasked with policing fraud, insider trading, and market manipulation — not a domestic spy agency. But the travel-and-payment trail ARC sells maps neatly onto the footprints crypto users leave: a credit card tied to a fiat ramp or exchange, flights to industry conferences, cross-border trips. When regulators can pair on-chain analysis with granular travel and payment records, the boundary between market oversight and surveillance narrows. This “data-broker” workaround lets agencies obtain sensitive information that would be harder to secure through subpoenas or warrants. Critics call it a loophole: buy what you can’t easily compel. The IRS has also used similar data-broker strategies to expand crypto surveillance, and last year’s SEC probe of Coinbase highlighted the agency’s appetite for third-party user data. A legacy program with broad reach ARC’s Travel Intelligence Program (TIP) — the product at issue — was built on post-9/11 surveillance infrastructure and had been marketed to federal agencies including the FBI, IRS, and Department of Homeland Security. Lawmakers pressured ARC to shut TIP down in 2025, but the newly released documents show the program’s reach was broader than previously known, including foreign-to-foreign itineraries as well as domestic trips. ARC defended TIP in comments to 404 Media, saying the program “was established after the September 11, 2001, terrorist attacks” and “has likely contributed to the prevention and apprehension of criminals involved in… money laundering” and terrorism. Money laundering is the allegation most commonly leveled at crypto activity. What’s next The disclosure raises questions about how far regulator surveillance will extend in practice and whether existing legal rules adequately protect travel and payment privacy — especially for crypto market participants who can be swept up by investigations that combine blockchain tracing with third‑party personal data. Policymakers, privacy advocates, and the crypto industry will likely keep a close eye on how data-broker purchases continue to shape enforcement tactics.