$121 Million Owed, $17 Million Left: Anatomy of a Real Estate Fund Collapse

By LegalVault Pro Team · 2026-09-01

On September 1, 2026, the Securities and Exchange Commission charged Mark D. Hanf, former chief executive of Pacific Private Money Group LLC of Novato, California, and Hoai-Nam Chu Phan, former chief operating officer of a PPMG subsidiary, with running an offering fraud.

According to the SEC's complaint, the two raised more than $80 million from approximately 190 mostly retail investors — many of them retired senior citizens. From roughly December 2021 to November 2025, they allegedly told investors that capital would be used to originate or purchase loans secured by real estate, and that investors could expect preferred or fixed rates of return from that lending activity. In reality, the SEC alleges, they regularly used new investor capital to make Ponzi-like payments to earlier investors, and the returns they advertised were sourced largely from incoming money rather than from lending.

The complaint alleges Hanf misappropriated more than $7 million. Two of the funds carried almost $121 million in outstanding investments. By February 2026, recoverable assets were reported at less than $17 million.

The U.S. Attorney's Office for the Northern District of California announced parallel criminal charges.

Standard caveat. These are allegations in a civil enforcement complaint and a parallel criminal matter. Neither defendant has been convicted, and both are entitled to contest the evidence. What follows examines the described structure.

The Two Numbers That Define the Harm

Set aside the $80 million raised. The pair of figures that actually describes what happened to these investors is $121 million outstanding against less than $17 million recoverable.

That is a recovery rate somewhere around fourteen percent, before the costs of a receivership, litigation, and distribution. Most investors in this posture will recover a fraction of that fraction, years from now.

The gap between those two numbers is where the practical lesson lives, and it explains something counterintuitive about Ponzi-structured frauds: the reported "amount raised" almost never approximates the loss. Money raised gets partially paid back out as fake returns, partially spent, and partially never existed as recoverable assets in the first place. The outstanding balance keeps growing on paper — because paper returns compound — while the underlying asset pool does not.

This is also why these schemes collapse the way they do. A fund promising fixed or preferred returns must make those payments regardless of whether the underlying lending performed. When new capital slows, the payments cannot be made, and the structure fails within a single quarter.

Real Estate Lending Is the Ideal Cover

The stated business here — originating or purchasing loans secured by real estate — deserves attention, because it is genuinely well suited to concealing this structure.

A legitimate private real estate lending fund has properties that most investors will never inspect, borrowers they will never meet, valuations that are inherently estimates, and returns that are plausibly steady rather than volatile. It is opaque by nature, not by design. An investor who receives a consistent quarterly distribution and a statement describing a portfolio of secured loans has very little basis for distinguishing a performing fund from one paying them with the next investor's money.

Compare that to a fund claiming to trade public equities, where a fabricated track record is contradicted by market data anyone can pull. Illiquid, privately valued assets do not have that external check. The absence of a benchmark is the vulnerability.

The "preferred or fixed rate of return" language is the specific tell worth teaching clients. Genuine lending produces variable results. Borrowers prepay, default, and renegotiate. A fund that delivers the same number every period, through a rising rate environment and a falling one, is either extraordinarily well managed or is not deriving that number from lending at all.

Why Two Proceedings Run at Once

The parallel structure here — SEC enforcement alongside a criminal case from the Northern District of California — is standard in significant securities fraud, and it creates a specific set of problems that practitioners should understand before advising anyone caught in one.

The two proceedings differ in almost every respect that matters. The SEC must prove its case by a preponderance of the evidence; the criminal case requires proof beyond a reasonable doubt. The SEC can obtain disgorgement, civil penalties, and officer-and-director bars; the criminal case can impose imprisonment. Critically, the SEC can compel testimony in ways a prosecutor cannot, which is why the Fifth Amendment becomes the central strategic question the moment both are pending.

That produces a genuine bind. A defendant who invokes the Fifth in the civil case may face an adverse inference — permitted in civil proceedings, forbidden in criminal ones. A defendant who testifies in the civil case hands the prosecution a sworn transcript. Courts frequently stay the civil action pending resolution of the criminal case for exactly this reason, but a stay is discretionary and must be sought.

For victims and their counsel, the parallel structure matters differently: it determines where recovery actually comes from. Criminal restitution, SEC disgorgement, and a receivership over fund assets are three separate mechanisms with different priorities, timelines, and pools. Understanding which one is likely to produce a distribution — and when — is the first question a defrauded investor asks and the hardest one to answer honestly.

What to Do About It

For attorneys advising individual investors, and particularly older clients:

• Ask who holds the assets, and verify it independently. A fund whose custodian, administrator, and auditor are all affiliated with the manager has no external check at all. The single most useful question is whether a third party the manager does not control can confirm the portfolio exists.
• Read the fund documents against the marketing. Offering memoranda routinely disclose broad discretion to use capital in ways the sales conversation never mentioned. Where they conflict, the documents govern and the investor loses.
• Treat consistent returns in an illiquid strategy as a question, not a comfort. Ask specifically how the distribution was funded this period — from loan interest, from principal repayment, or from new subscriptions.
• Test redemption early and in writing. A modest withdrawal request, made without explanation, is the cheapest diligence available. Delay, fees, or a request to reconsider is information.
• Act quickly once a fund freezes. Receivership claim deadlines are real and unforgiving, and clients who wait for the criminal case to resolve frequently miss the civil process that actually distributes money.
• Preserve every statement and communication immediately. Account statements, subscription documents, emails describing returns, and the marketing materials as they existed at the time. Fund websites and portals go dark quickly once enforcement begins, and the version an investor relied on is often the only thing establishing what they were told.

That last point is where document discipline stops being administrative. Reconstructing what a client was shown, and when, from memory and forwarded emails is dramatically weaker than producing a dated, organized file. Keeping subscription documents, statements, and correspondence in one system with an intact version history is exactly the ordinary problem LegalVault Pro exists to address.

The Part That Should Bother Everyone

Roughly 190 investors, many of them retired, are described in this complaint. The alleged conduct ran approximately four years before the collapse.

Four years is long enough that most of these investors received distributions on schedule, saw statements showing their capital intact, and had every ordinary reason to believe the investment was performing. Nothing about being careful would have revealed the problem, because the thing they would have checked — the statement — was produced by the person they needed to check on.

The defense that actually works is structural rather than vigilant: independent custody, independent administration, and a redemption you have actually tested. Those are questions to ask before the money moves, and they take an afternoon.

---

*This article discusses pending civil enforcement and parallel criminal charges. Neither individual named has been convicted, and both are presumed innocent of the criminal allegations unless and until proven guilty. Nothing here is legal or investment advice.*

*Sources: SEC Press Release 2026-82, September 1, 2026; SEC Newsroom. Parallel criminal charges announced by the U.S. Attorney's Office for the Northern District of California. Figures as of September 6, 2026; recovery estimates will change.*