SEC Rule l7f-l states that any reporting institution is obliged to report the discovery of any counterfeit security to the appropriate instrumentality and the appropriate law enforcement agency within one business day of such a discovery.