On October 24, 2012, Susan Axelrod (FINRA’s executive vice president, member regulation sales practice) spoke at PLI’s seminar for broker-dealer regulation and enforcement. Broker-dealers and registered representatives should take note because FINRA’s enforcement agenda was made clear. Issues of concern for FINRA include:
Cyber Security
FINRA has seen an uptick in instances where a customer’s email account has been hacked and the perpetrator sends a phony email to a brokerage firm requesting an outbound wire transfer. Given that NASD Rule 3012 requires diligent supervision concerning the outbound transmittal of funds, FINRA requested that “broker-dealers reassess their policies and procedures for accepting instructions to withdraw or transfer funds via electronic means to ensure that they are adequately designed to protect customer accounts from the risk that customers’ email accounts may be compromised and used to send fraudulent transmittal or withdrawal instructions.” (FINRA Regulatory Notice 12-05). In that Notice, FINRA recommended that firms verify that the email was sent by the customer and adopt policies to identify “red flags” such as transfer requests that are out of the ordinary or to an unfamiliar third-party account.