A rule, not a statute, and the distinction is load-bearing. Section 10(b) of the Securities Exchange Act, 15 U.S.C. 78j(b), makes it unlawful "to use or employ, in connection with the purchase or sale of any security registered on a national securities exchange or any security not so registered, or any securities-based swap agreement any manipulative or deceptive device or contrivance in contravention of such rules and regulations as the Commission may prescribe as necessary or appropriate in the public interest or for the protection of investors." Read literally, section 10(b) prohibits nothing on its own. It authorizes the Securities and Exchange Commission to prohibit things, and Rule 10b-5 is what the Commission wrote, in 1942. Almost the entire American law of securities fraud therefore rests on a rule of three short clauses whose text has not been amended since 1951, with the rest supplied by courts construing it.
The three limbs are not interchangeable. Clause (b) is the familiar one, a misstatement or a misleading omission. Clause (a) reaches a scheme, which does not require any false statement at all — useful where the conduct is a course of action rather than a claim. Clause (c) reaches a practice or course of business that "operates or would operate as a fraud or deceit", which is drafted around effect rather than intent to speak. A single set of facts often violates more than one.
Materiality is about the reader, not the size of the lie. Clause (b) turns on a "material fact", and the same word governs the omission limb: an omission is actionable only where the missing fact was "necessary in order to make the statements made … not misleading". That construction is worth noticing, because it means silence is not generally unlawful. What is unlawful is silence that makes something you did say misleading — which is why a half-true disclosure is more dangerous than no disclosure at all.
The state of mind requirement, and where Congress put it. Rule 10b-5 does not use the word scienter, but the Private Securities Litigation Reform Act presupposes it and sets how it must be pleaded. 15 U.S.C. 78u-4(b), headed "Requirements for securities fraud actions", provides at (b)(2)(A) that in a private action "in which the plaintiff may recover money damages only on proof that the defendant acted with a particular state of mind, the complaint shall, with respect to each act or omission alleged to violate this chapter, state with particularity facts giving rise to a strong inference that the defendant acted with the required state of mind." Subsection (b)(1) separately requires the complaint to specify each misleading statement and why it was misleading. These are pleading rules, not elements, and they are the reason a great many private securities cases end before any evidence is heard.
The offer-versus-purchase asymmetry. Rule 10b-5 applies "in connection with the purchase or sale of any security". Section 17(a) applies "in the offer or sale". So a fraudulent pitch that nobody accepts is outside the words of Rule 10b-5, because no purchase or sale occurred, and inside the words of section 17(a), because an offer did. This is the cleanest checkable difference between the two provisions, and it is why an enforcement action about a failed offering may be framed under the Securities Act rather than the Exchange Act.
Who can bring a case, written from the statutes rather than from generalization. The Commission and the Department of Justice have their own routes, described under the Securities and Exchange Commission. On the private side, Congress legislated in detail for private Exchange Act actions: 15 U.S.C. 78u-4 is titled "Private securities litigation", its subsection (a)(1) applies "in each private action arising under this chapter that is brought as a plaintiff class action pursuant to the Federal Rules of Civil Procedure", and its subsection (b)(4) places on the plaintiff "the burden of proving that the act or omission of the defendant alleged to violate this chapter caused the loss for which the plaintiff seeks to recover damages." Section 17(a) of the Securities Act, by contrast, contains no remedy clause on its face; the Securities Act's express civil-liability provisions sit in separate sections, 15 U.S.C. 77k on false registration statements and 77l on prospectuses and communications. Anyone weighing an actual claim needs a securities lawyer rather than a glossary, because the differences between these routes decide what has to be pleaded and what can be recovered.
State law exists alongside all of this, in the securities statutes generally called blue sky laws, and it is not displaced by the federal provisions.