Guidance
We offer guidance to firms in the form of podcasts, webinars, FAQs, reports, and more. Use the toggle below to find guidance by topic, type or date.
A
B
C
D
E
F
G
I
M
N
O
P
R
S
T
This notification is to warn member firms of an ongoing phishing campaign that involves fraudulent emails purporting to be from FINRA and using either the domain name “@finra.eu” and “@finrarec.com”. Samples of both emails are provided in Appendices 1 and 2.
The domains of “finra.eu” and “finrarec.com” are not connected to FINRA, and member firms or their customers may receive similar phishing emails from other domain names in addition to those identified in this Alert.
November 2022
Background
In August 2021, FINRA launched a targeted exam (sweep) to review firms’ practices and controls related to the opening of options accounts and related areas, including account supervision, communications and diligence. FINRA’s review focuses on a cross-section of retail and diversified firms that offer options trading to their customers.
This email is to warn member firms of an ongoing phishing campaign that involves fraudulent emails purporting to be from FINRA and using the domain name “@filling-regfinra.com”. The domain of “filling-regfinra.com” is not connected to FINRA, and firms should delete all emails originating from this domain. Member firms should be aware that they may receive similar phishing emails from other domain names in addition to those identified in this Alert.
The email states:
Dear Name,
I hope all is well!
FINRA is a not-for-profit, self-regulatory organization (SRO) dedicated to promoting investor protection and market integrity in a manner that facilitates vibrant capital markets. One of FINRA’s tools for achieving this objective is fair and effective enforcement of member firms’ compliance with securities laws and regulations.
FINRA Rule 4111(b) requires the Department of Member Supervision (Department) to calculate annually a member firm’s "Preliminary Identification Metrics" to determine whether the firm meets the "Preliminary Criteria for Identification."1 A key driver of that is whether a member firm’s Preliminary Identification Metrics meet quantitative, risk-based "Preliminary Identification Metrics Thresholds."2 The date, each calendar year, as of which the Departmen
FINRA’s National Cause and Financial Crimes Detection (NCFC) Cyber and Analytics Unit (CAU) has noted a recent alert issued by Microsoft on May 30, 2022.
See link to FINRA Regulatory Notices 21-31, which includes the schedule and instructions:
https://www.finra.org/sites/default/files/2021-09/Regulatory-Notice-21-31.pdf
SECTION 1. REVERSE REPURCHASE AND REPURCHASE AGREEMENTS
Question 1.1: The instructions under Section 1 state in part that members should report the gross contract value of all reverse repurchase and repurchase agreements by collateral type. The instructions provide that:
The Cyber and Analytics Unit (CAU) within FINRA’s National Cause and Financial Crimes Detection (NCFC) program is highlighting a statement released today by President Biden regarding possible threats to our nation’s cyber security, urging private sector companies to remain vigilant and harden their cyber defenses "immediately" based on "evolving intelligence that the Russian Government is exploring options for potential cyberattacks." The President