Travel + Leisure SEC Settlement: The $77M Loan-Portfolio Disclosure Failure

TL;DR

• The SEC filed a settled action against Travel + Leisure Co. on September 30, alleging that two undisclosed projects removed more than 2,900 delinquent or defaulted timeshare loans with approximately $77 million in balances from reported portfolio measures.
• The settlement calls for a $975,000 civil penalty—not $77 million—plus a permanent injunction, subject to court approval. Travel + Leisure consented without admitting the allegations.
• The SEC says the projects improved the loan loss provision and loan loss provision percentage, in several quarters by more than 5%, while public explanations credited underwriting, customer care, and other operating initiatives.
• The practical fix is not another metric review. It is a controlled bridge from account-level population changes to Finance, Legal, and the disclosure committee.

The Travel + Leisure SEC settlement is a warning about denominator management. If a company can improve a public portfolio metric by quietly removing the worst-performing accounts, reviewing the formula will not catch the problem. Someone has to govern what entered—and exited—the population.

On September 30, 2026, the Securities and Exchange Commission filed a settled action against Travel + Leisure Co., formerly Wyndham Destinations. The SEC litigation release says the company used two projects to rescind thousands of timeshare contracts tied to delinquent or defaulted loans. Those loans were then reversed in the accounting system as though the sales had never occurred.

The result, according to the SEC: a materially improved picture of the timeshare loan portfolio without disclosure of the projects producing that improvement.

Do not confuse the numbers. Approximately $77 million was the balance of the affected loans. The proposed civil penalty is $975,000.

What the SEC alleges in the Travel + Leisure settlement

The SEC’s 17-page complaint describes two initiatives:

• Special Handling Project (SHP): Began in May 2019 and targeted severely past-due loans, including contracts connected to rescission requests the company had previously denied or declined to consider.
• Past-Due Project (PDP): Began in August 2019 and used spreadsheets of delinquent and defaulted loans connected to customer complaints. The complaint says those loans were approved for rescission in bulk, without individual review by the Sales Reversal Committee.

Travel + Leisure generally financed more than half of its annual timeshare sales, according to paragraph 16 of the complaint. That made the loan portfolio—and expected collectability—central to the business story investors were hearing.

The SEC says the company treated loans as delinquent after more than 30 days past due and defaulted after more than 120 days. The two projects allegedly removed approximately 2,900 delinquent loans totaling about $77 million, including roughly $34 million of defaulted loans. About 44% of the contracts were at least a year old when rescinded, and about 11% were more than two years old.

These were not ordinary cancellations inside the typical state-law rescission window. The complaint says every affected rescission occurred after the usual five-to-seven-day period had expired. Once coded as rescinded, the company reversed the original revenue, the related loan loss provision, and—where applicable—the defaulted balance.

That accounting treatment changed the reported portfolio without changing the underlying historical fact: the customer had received financing and then stopped performing.

The enforcement numbers, correctly labeled

The complaint also identifies $13.5 million in common stock issued in a 2019 acquisition and $96.8 million issued through an employee stock purchase plan during the relevant period. Those figures matter because the SEC’s Section 17(a)(2) theory connects the allegedly misleading filings to securities offerings.

How a servicing decision became a disclosure problem

Late rescission can be a legitimate customer-remediation tool. A lender may decide that releasing a customer is better than prolonged collection, litigation, or reputational damage. The enforcement risk here is not that rescissions occurred.

It is the alleged link between rescission selection and the public metric.

Paragraph 28 of the complaint says Travel + Leisure set targets for the number of delinquent and defaulted loans that needed to be rescinded to meet loan-loss guidance and internal goals. Senior management allegedly agreed on those targets at least quarterly. Paragraph 35 says the projects improved reported loan-loss measures by more than 5% in several quarters.

Meanwhile, the company’s public explanations pointed elsewhere. The SEC quotes or describes earnings communications that attributed better results to customer-care initiatives, stricter underwriting, reservation-system improvements, and operating execution. The complaint says those explanations omitted the effect of removing nonperforming loans.

The company’s contemporaneous filings show why the metric mattered. Its third-quarter 2019 Form 10-Q and October 30, 2019 Form 8-K earnings release reported portfolio and loan-loss performance to investors. The SEC complaint alleges those filings lacked the information needed to understand what was moving the numbers.

The claimed violations include Securities Act Sections 17(a)(2) and 17(a)(3), Exchange Act Section 13(a), and Rules 12b-20, 13a-1, 13a-11, and 13a-13. Travel + Leisure consented to a proposed final judgment without admitting the allegations.

The control gap: nobody owned the metric’s perimeter

A standard financial-reporting control often looks like this: Finance recalculates the metric, checks it against the ledger, reviews the variance, and obtains sign-off. All four steps can work while the disclosure is still incomplete.

Why? Because the calculation may accurately reflect a population that operations has strategically altered.

The uncomfortable practitioner point: this can live outside Sarbanes-Oxley scope until someone deliberately connects it. The accounting entry may be authorized. The rescission may benefit the customer. The total may reconcile. Yet the external explanation can still be misleading if it omits why the reported trend changed.

This is the same connective-tissue problem seen in other SEC matters. The Adani disclosure-controls case involved public statements that allegedly did not match underlying conduct. The R.R. Donnelley cyber case showed how operational facts can fail to reach the people responsible for securities disclosures. Different subject matter; same broken handoff.

Five tests to run before the next earnings call

1. Build a population-change bridge

For each externally reported credit, loss, churn, approval, complaint, or performance metric, reconcile opening population to closing population. Use account-level reason codes—not a net total.

At minimum, isolate:

• new originations or additions;
• payments and ordinary cures;
• write-offs and charge-offs;
• restructurings or modifications;
• sales and transfers;
• rescissions, refunds, or reversals;
• manual reclassifications; and
• accounts removed through special projects.

The artifact should let a reviewer answer: “Did performance improve because customers behaved better, or because the population changed?”

2. Search for targets derived from guidance

Ask Internal Audit or Compliance Testing to search project decks, forecast files, committee minutes, and approval tickets for language tying transaction volume to a public target. Examples include “number needed to hit guidance,” “gap to target,” or “required removals.”

Those phrases do not prove misconduct. They do require immediate Legal and disclosure-committee review because they show the public metric influenced operational selection.

3. Reconcile narrative attribution to quantitative drivers

Create a one-page “claim-to-evidence” schedule for every earnings-call explanation. If management says tighter underwriting improved losses, show the vintage analysis. If collections improved, show roll rates. If a special customer program contributed, quantify it and document the materiality decision.

A metric can have several drivers. The control failure is allowing a polished explanation to crowd out a driver that changes how investors would interpret the trend.

4. Put bulk transactions behind a separate gate

A committee that reviews exceptions individually should not allow a spreadsheet upload to become a substitute for judgment. Bulk rescissions, waivers, reversals, cures, closures, or reclassifications need:

• written eligibility logic;
• named approver independent of the target owner;
• preserved pre-change and post-change populations;
• a quantified financial and KPI impact;
• sample-based quality assurance; and
• a disclosure-impact determination.

Use a bright-line internal trigger: any program explicitly designed to move an externally reported metric gets 100% disclosure review, regardless of whether the resulting journal entry is below financial-statement materiality.

5. Test the handoff, not just the calculation

Select recent special projects and trace them from Operations through Finance, Legal, Investor Relations, and the disclosure committee. The evidence should include the project charter, population logic, approvals, impact analysis, disclosure conclusion, and meeting record.

For testing mechanics, the site’s control-testing guide explains how repeat findings and failed retests expose remediation that works on paper but not in operation.

A 30/60/90-day response plan

First 30 days — find the perimeter

• Controller: Inventory every externally reported portfolio metric and identify its system-of-record population.
• Credit Risk / Operations: List all projects in the last eight quarters that removed, reversed, cured, sold, restructured, or reclassified accounts.
• Legal: Flag projects whose design documents mention guidance, targets, analyst expectations, or investor communications.
• Internal Audit: Preserve pre-change datasets for high-risk projects before systems overwrite history.

By day 60 — install the handoffs

• Disclosure Committee: Add a standing “special projects affecting reported metrics” agenda item.
• FP&A: Produce forecast-to-actual impact schedules for each flagged project.
• Controller: Add population-change bridges to quarterly close evidence.
• Compliance Testing: Sample bulk transactions and verify eligibility, approval, accounting, and disclosure escalation.

By day 90 — prove the controls operate

• Internal Audit: Reperform one full metric from account population through filing and earnings-call script.
• General Counsel: Challenge management’s driver attribution against the quantitative bridge.
• Audit Committee: Review unresolved metric-governance issues, owners, target dates, and independent validation plans.
• Issue Management: Keep findings open until both the calculation control and the disclosure handoff pass retesting.

The takeaway for financial-services practitioners

Travel + Leisure is a timeshare company, but the control pattern travels directly to banks, fintech lenders, servicers, insurers, and any issuer reporting a portfolio KPI.

Watch for the moment an operational program starts with the sentence: “How many accounts do we need to move to hit the number?” That is where an ordinary business initiative can become a disclosure-controls issue.

The first Monday-morning task is simple: pick one metric management discusses publicly and build the full population-change bridge. If Finance can explain the formula but cannot explain every category of exit from the population, the control is incomplete.

If that review surfaces gaps, the Issues Management Tracker & Template can assign the Finance, Legal, Operations, and Internal Audit actions, retain closure evidence, and keep the issue open through independent retesting.

Primary sources:

• SEC Litigation Release No. 26657 — Travel + Leisure Co. (September 30, 2026)
• SEC v. Travel + Leisure Co., Complaint, No. 26-cv-62760 (S.D. Fla., filed September 30, 2026)
• Wyndham Destinations third-quarter 2019 Form 10-Q (filed October 30, 2019)
• Wyndham Destinations third-quarter 2019 Form 8-K earnings release (filed October 30, 2019)