Guidance
We offer guidance to firms in the form of podcasts, webinars, FAQs, reports, and more. Use the toggle below to find guidance by topic, type or date.
A
B
C
D
E
F
G
I
M
N
O
P
R
S
T
Summary
FINRA has adopted amendments to its Codes of Arbitration Procedure (Codes) to modify the process relating to requests to expunge customer dispute information in the FINRA Dispute Resolution Services (DRS) arbitration forum.
Impact: All Firms
Update (June 22, 2023): The link to the Advisory issued by CISA on June 7, 2023 has been updated to reflect CISA’s current guidance.
Firms should review this information with any vendors who provide information technology services to the firm.
Impact: All Firms
Firms without dedicated information security professionals may wish to review this information with any vendors who provide those services to the firm.
FINRA is a not-for-profit, self-regulatory organization (SRO) dedicated to promoting investor protection and market integrity in a manner that facilitates vibrant capital markets. One of FINRA’s tools for achieving this objective is fair and effective enforcement of member firms’ compliance with securities laws and regulations.
A clearing member may use negative response letters to assign orphan accounts to an introducing broker-dealer on the clearing member’s platform.
Dear Ms. Dyer:
I am responding to your letter dated March 10, 2023, as supplemented by conversations with the staff, in which you seek interpretive guidance regarding the use of negative response letters by National Financial Services LLC (“NFS”) to assign certain orphan brokerage accounts to an introducing broker-dealer that clears through NFS (the “Receiving Broker-Dealer”).
Overview
This publication outlines emerging insider threat risks and helps member firms identify, prevent, detect, and respond to these threats, including:
Impact: All Firms
This notification is to warn member firms of an ongoing phishing campaign that involves fraudulent emails purporting to be from FINRA and using the domain names “@finrarps.org” or “@finrarps.net”. The domains of “finrarps.org” and “finrarps.net” are not connected to FINRA, and firms should delete all emails originating from these domains. Member firms should be aware that they may receive similar phishing emails from other domain names in addition to those identified in this Alert.
The email from “finrarps.org” states: