SEC Buys Billion Airline Records for Traveler Tracking, Warrant Unlikely

SEC Purchased Access to Vast Airline Passenger Database

The U.S. Securities and Exchange Commission (SEC) acquired access to a global airline ticketing database containing over one billion records, according to SEC documents obtained by 404 Media through a Freedom of Information Act request.

The data originated from the Airlines Reporting Corporation (ARC), a central clearinghouse co-owned by American, Delta, and United airlines. ARC acts as an intermediary between carriers and travel agencies, and also resells booking information from platforms such as Expedia and Kayak.

The records included passenger names, credit card details used for ticket purchases, departure and arrival cities, and flight numbers. Furthermore, the SEC’s subscription encompassed an alert system designed to cross-reference new bookings against a list of individuals under monitoring. This system flagged travel within the preceding 24 hours, with the agency requesting between one and 25 such alerts daily.

Crucially, no court order was required for this data acquisition. The government reportedly purchased the information directly, bypassing the need for a warrant.

Data Acquisition Raises Surveillance Concerns

The SEC, primarily a financial regulator tasked with protecting American consumers from insider trading, fraud, and market manipulation, has drawn scrutiny for its procurement of this sensitive travel and payment data. Critics argue that the same digital trail left by airline passengers is strikingly similar to that left by cryptocurrency users, who often link credit cards to exchange accounts and travel for conferences or cross borders. This practice, they contend, blurs the lines between law enforcement and surveillance.

The move comes as the SEC has reportedly scaled back major cryptocurrency enforcement actions during the second year of the Donald Trump presidency. The data broker workaround allows agencies to circumvent the warrant process they would typically need to obtain such records directly.

The Internal Revenue Service (IRS) has also been expanding its surveillance of cryptocurrency investors using similar methods. A year-old SEC probe into Coinbase highlighted the agency’s significant interest in user data. The central question, according to observers, is not whether the SEC desires this information, but rather the means by which it is obtained.

“Data Broker Loophole” Under Fire

Critics have labeled this practice the “data broker loophole,” enabling agencies to acquire information they cannot legally subpoena. ARC’s Travel Intelligence Program (TIP) had previously supplied similar post-9/11 surveillance infrastructure to the FBI, IRS, and Homeland Security. However, pressure from lawmakers led to its shutdown in 2025.

The newly released documents reveal that the program’s reach was more extensive than previously understood, encompassing foreign-to-foreign journeys alongside domestic travel.

ARC defended its program, stating to 404 Media that TIP was established in the aftermath of the September 11, 2001, terrorist attacks. The company asserted that the program “has likely contributed to the prevention and apprehension of criminals involved in… money laundering” and terrorism, noting that money laundering is a frequent charge associated with cryptocurrency activities.