Comment by leereeves

You're right, it's civil rather than criminal, but in the case of some investment companies, like those that sold mortgage-backed securities, it can be enforced by the SEC.

https://www.law.cornell.edu/uscode/text/15/80a-35

That's just one example. I expect that, had they wanted to, the government could have found many applicable laws to go after those responsible for the financial crisis.