Who protects the account?

Welcome to Smarti Exam Prep. In Lesson twenty six for the Securities Industry Essentials Exam, we connect the records, assets and systems behind a brokerage account. The firm map tells you who introduces, carries and services the account. The information map separates customer records, trade confirmations and account statements. The protection map covers custody, privacy and business continuity. These controls work together, but they solve different problems. A trade confirmation cannot replace a privacy notice, and a carrying agreement cannot remove every duty from an introducing firm. We will preserve those distinctions through practical examples, then finish with a complete account-protection decision map. Practice questions remain in the separate Trading and Accounts review.

Introducing and carrying firms share a relationship

An introducing firm often manages the customer relationship, receives orders and transmits business to a carrying firm. A carrying firm maintains customer accounts and performs the safeguarding and operational functions assigned by law and the agreement. In a typical fully disclosed arrangement, the introducing firm does not itself carry the customer's funds or securities. That is an operational model, not a claim that every firm uses exactly the same services. Order execution, clearing, settlement and custody are related but distinct activities. A firm may perform several roles, or use other firms for selected functions. Carrying customer assets brings financial-responsibility and customer-protection obligations; the label does not give unlimited permission to conduct every securities activity.

The agreement allocates specific responsibilities

A fully disclosed carrying agreement must allocate important responsibilities. Account opening and approval identify who performs the customer intake functions. Orders include acceptance, transmission and execution. Records include confirmations, books and account monitoring. Safeguarding customer funds and securities and preparing and transmitting customer statements are expressly allocated to the carrying firm, with the rule's limited approved arrangement for another firm to send statements on its behalf. Other allocations include credit and receipt or delivery of assets. Customers receive written notice of the arrangement and its responsibilities. The introducing firm still has duties assigned to it and must obtain the information it needs to supervise them. Outsourcing custody is not outsourcing all compliance.

Fully disclosed and omnibus describe the records

Fully disclosed carrying identifies the individual customer accounts to the carrying firm. The firm can maintain those customer-level records and send the required statements according to the agreement. An omnibus arrangement carries a combined account for another intermediary, which maintains the underlying customer detail within the applicable structure. Do not confuse an omnibus account with authority to hide customers from required identification or regulatory review. The information flows and each party's duties depend on the actual arrangement and governing requirements. These labels describe account administration, not whether an investment is safe or recommended. When a customer sees two firm names on paperwork, the carrying disclosure helps explain which firm is responsible for which service.

Prime brokerage centralizes institutional services

An institutional customer may place trades with several executing brokers. Executing brokers handle those separate transactions under their agreements. The prime broker can coordinate clearance and settlement and consolidate positions and reporting, while providing financing or securities-lending services when authorized. The institutional customer gains a central operational relationship while retaining access to multiple execution relationships. This is a specialized arrangement with conditions, not a service every ordinary brokerage account automatically receives. Separate the roles even when one organization performs more than one of them. A consolidated statement makes administration easier; it does not erase the need to know where trades were executed, who carries assets, or what obligations each agreement assigns.

The account record identifies people and roles

Before choosing an ownership form, establish who the firm is serving. Customer details include the customer name and residence and whether the customer is of legal age. Responsible personnel are the associated people assigned to the account, with their responsibilities recorded when applicable. Entity actors are the people authorized to transact for a corporation, partnership or other legal entity. FINRA Rule forty five twelve also addresses account acceptance and trusted-contact information. A job title alone does not establish authority to trade another person's assets. Think of the record as a map of the relationship, not simply a mailing list. Other rules add identification, financial-profile and recordkeeping requirements, so this list does not replace the complete account-opening process.

Identity information has its own rule

The customer identification program, called C I P, has a different purpose: forming a reasonable belief that the firm knows the customer's true identity. Name identifies the individual. Date of birth distinguishes people who may share a name. Address ordinarily means a residential or business street address. An identification number completes the minimum individual information. For a United States person, that normally means a taxpayer identification number. Non United States persons have specified alternatives, such as passport information. The rule also provides particular alternatives for a person without a street address and a process for an applicant awaiting a tax number. Those are defined exceptions, not permission to omit identification whenever a customer prefers privacy.

Collection and verification use different clocks

Do not give every account-opening requirement the same deadline. Minimum identifying information is generally collected before opening, subject to the specific C I P exceptions. Identity verification can occur within a reasonable time before or after opening under the firm's risk-based procedures. Separately, Rule forty five twelve calls for reasonable efforts to obtain applicable tax, occupation, employer and other-member association information before settlement of the initial transaction, with specified account exceptions. A documented refusal may explain a missing reasonable-effort item. It does not waive a mandatory requirement imposed by another rule. If identity remains unresolved, the written program specifies whether to open, restrict use, close the account or consider a suspicious activity report. Follow the requirement that actually applies.

Acceptance is different from customer authority

An account needs acceptance under the firm's procedures. Firm acceptance is recorded by the required partner, officer or manager signature under the FINRA account-record rule; SEC records also address approval or acceptance by a principal. Customer authority is a separate matter governed by the agreement, account registration and any special product or discretionary requirements. Rule forty five twelve does not itself demand a customer signature on every ordinary cash-account form. That does not mean a firm must open an unsigned account or that signatures are unnecessary for other agreements. Do not assume that a principal's signature proves every identification check is already finished. Acceptance, identity review and investment authority serve different functions.

Keep applicable customer records current

Account information does not stop mattering after opening. Initial furnishing of the SEC customer account record generally occurs within thirty days for covered accounts, with the rule's next-statement option. Periodic furnishing then occurs at intervals no greater than thirty six months while the provision applies. Specific changes have their own requirements: a name or address change generally requires notice to the old address within thirty days; an investment-objective change requires an updated record under the rule's timing and statement provisions. This is not a universal thirty-day notice for every imaginable fact. The provision has defined natural-person and suitability-related applicability. Keep current information for applicable recommendation and compliance duties, and do not mistake an account-record notice for identity verification.

A number does not hide the real owner

Some clients want a number or symbol on an account. A numbered designation is permitted when the firm retains a signed customer statement attesting to ownership. The real customer remains identified in the firm's records. Identity duties continue even when the visible designation is a code. FINRA Rule thirty two fifty does not allow an account to be carried in the name of a different person merely because the customer calls it an alias. For example, choosing account number seven hundred does not make seven hundred the legal owner. The firm still needs to connect the record to the person or entity it serves. Privacy of a display label and anonymity from the firm or regulators are entirely different concepts.

Three documents answer different questions

Customer account records identify the people, authority and relevant profile behind the account. A trade confirmation describes a particular transaction and the disclosures that go with it. An account statement summarizes the holdings, balances and activity for a reporting period. These documents can repeat information without being interchangeable. If a customer disputes the price or quantity on a specific purchase, start with the confirmation and the order records. If the concern is an unexplained position or cash balance, compare the statement with confirmations and other account activity. If someone's authority or address is wrong, correct the underlying account record. Retain a documented trail so the firm can investigate inconsistencies rather than treating each document as an isolated piece of mail.

A confirmation explains the transaction

For covered securities transactions, the SEC confirmation rule generally requires written notification at or before completion of the transaction. Transaction facts include the date, security, quantity and price, with time information disclosed or available on request as the rule permits. Firm capacity distinguishes acting as agent from acting as principal. Compensation disclosures depend on that capacity and the product, including commissions or specified remuneration information where required. Additional disclosures apply in particular cases, so do not assume a generic stock example is the whole rule. Confirmations may be delivered electronically through a compliant process. A later periodic statement does not automatically satisfy the separate confirmation requirement; the rule contains its own specific exceptions.

Quarterly is the general statement baseline

A general FINRA statement rule calls for delivery at least quarterly when the customer account has a security position, money balance or account activity, subject to the rule's exceptions. Many firms send monthly statements, and particular products or rules may require more frequent reporting. That practice does not make monthly statements a universal rule for every brokerage account. The statement identifies positions, balances and relevant activity so the customer can reconcile what the firm is carrying. Prompt discrepancy reporting helps identify mistakes or unauthorized transactions. Customers should review documents even when they recognize the firm and even when the market value has risen. A profitable account can still contain an unauthorized trade or an incorrect cash entry.

The retention period follows the record

Three-year categories under SEC broker-dealer recordkeeping rules include many business communications and confirmation records, with the first two years in an easily accessible place where specified. Six-year categories include specified ledgers and other core records; FINRA also uses a six-year default when its required record has no otherwise specified retention period. Some account records use a period tied to replacement, update or account closure. There is no single number for every document a firm possesses. Electronic preservation must meet the applicable requirements, including the permitted audit-trail or non-rewriteable storage approach and required access arrangements. Deleting a message from a phone does not eliminate the business-record obligation. Match the document, applicable rule and trigger date before calculating retention.

Protect customer assets from firm use

Customer property must be safeguarded under the applicable broker-dealer rules and accurately identified on the firm's books. Firm property is the firm's own inventory or capital; it is not interchangeable with customer holdings. Street-name registration can put the registered name in a broker or nominee while the customer remains the beneficial owner. Proper records preserve that distinction. Customer protection does not require every security to exist as a paper certificate in a separate envelope. It uses possession or control, reserve computations, bookkeeping and restrictions on use. A representative cannot treat the customer's authorization as permission to ignore those requirements. Nor can a firm use customer assets for its own expenses simply because its managers expect to replace them later.

Fully paid and excess margin securities need control

Fully paid securities have been paid for in full by the customer. Excess margin securities are the portion of margin securities exceeding one hundred forty percent of the customer's debit balance under the rule's definitions. Possession or control is required for fully paid and excess margin securities carried for customers, using qualifying control locations and the rule's procedures. Firms make required daily determinations and address deficits within the applicable requirements. Control can include an appropriate depository or other permitted location; it does not always mean physical possession at the branch. Specific borrowing arrangements have additional conditions, agreements and collateral requirements. Fully paid does not mean the firm can freely borrow the position whenever it needs liquidity.

Separate margin collateral from excess margin

Assume a customer has a ten thousand dollar margin debit and twenty thousand dollars of margin securities, using a simplified account with no other relevant adjustments. The debit balance is ten thousand dollars. One hundred forty percent of the debit is fourteen thousand dollars. The excess margin portion is six thousand dollars, because twenty thousand minus fourteen thousand equals six thousand. That excess portion falls within the possession-or-control framework. This calculation does not authorize the firm to borrow fourteen thousand dollars or dispose of the customer's securities at will. Collateral use, loan amounts and customer consent are governed by additional rules. Keep the excess-margin classification separate from the maximum amount a lender may be owed.

Collateral use has specific limits

Hypothecation is the customer's pledge of securities as collateral for a debt. Rehypothecation is the broker's further pledge of eligible collateral to support borrowing, within applicable limits. Customer securities may not be mixed with the firm's proprietary securities under the same prohibited lien. Pooling eligible securities of different customers requires the written consent and other conditions specified by the hypothecation rule. Aggregate indebtedness secured by customer securities is also limited by the governing rule. These are distinct controls: eligible collateral, consent, segregation and loan limits. Street-name holding by itself satisfies none of them. An authorized margin relationship can permit defined collateral use, but it does not make every customer asset a source of financing for the firm.

Customer cash uses a reserve formula

The customer reserve requirement uses a regulatory formula to compare specified customer-related credits and debits and determine the required reserve deposit. It is not a simple instruction to place every dollar of every customer's cash into a separately named bank account. The required special reserve bank account separates the calculated reserve from ordinary firm operating money and is subject to the rule's restrictions. Recordkeeping, required computations and permitted withdrawals matter as much as the account label. Different business models can have defined exemptions or different requirements. For this lesson, understand the mechanism: protect customer funds through the applicable reserve calculation and segregation framework, while preserving accurate liabilities and customer records. Do not infer that customer cash becomes unrestricted firm capital.

Asset protection is different from market insurance

SIPC protection concerns missing eligible customer cash and securities when a SIPC-member brokerage fails, within the law's limits and conditions. The commonly stated limit is five hundred thousand dollars, including a two hundred fifty thousand dollar limit for cash. Market losses are different: SIPC does not insure a security against falling prices or reimburse an unsuitable investment merely because it lost value. Customer segregation and accurate records help protect and return assets, but they are not a promise that every insolvency is painless or every claim is covered. Review the account capacity and protection rules rather than assuming every account number creates another limit. Safeguarding duties apply before a failure; SIPC is not a substitute for them.

Classify the audience over any 30 days

Start with the actual audience and distribution. Correspondence reaches twenty five or fewer retail investors in any thirty calendar day period. Retail communication reaches more than twenty five retail investors in any thirty calendar day period. A retail investor here is anyone outside the rule's institutional-investor definition, whether an existing customer or a prospect. Written and electronic messages both count. This is a rolling period, not a counter that resets when a new month begins. A financial website generally available to the public is not private correspondence merely because the firm cannot name every visitor. Classify what was distributed or made available, then apply the approval, supervision and recordkeeping rules that fit it.

A month boundary does not reset the count

Consider one written product message distributed to separate retail recipients. On January twenty fifth, it reaches twenty four retail investors. On February second, it reaches two additional retail investors. The combined audience is twenty six within a single thirty calendar day period, so the message meets the retail-communication definition. Crossing from January into February does not restart the clock. The example assumes separate recipients and the same communication; counting actual distributions requires accurate records. Use the threshold as a classification rule, not as permission to send misleading material to a smaller audience. Correspondence is still supervised, retained and subject to applicable content standards. Smaller reach changes the process, not the duty to communicate honestly.

Approval and supervision are different controls

Retail communication generally needs an appropriately qualified registered principal's approval before the earlier of use or filing with FINRA. Defined exceptions include qualifying material already filed by another member with a consistent-standards letter and no material alteration, online interactive forum posts, and certain material making no financial or investment recommendation and promoting no firm product or service. Exceptions still carry conditions and supervision. Correspondence follows the firm's supervisory review procedures. A firm can impose stricter internal review than the minimum rule. Preserve the communication and required approval or review records. A principal is a supervisor; the word principle describes an idea. Keep that distinction clear when reading or writing the approval record.

Internal approval is separate from FINRA filing

Internal approval asks whether the firm has completed its required review. FINRA filing asks whether this type of communication must be submitted to the regulator, and when. During a new member's first year, the general advance-filing rule concerns retail communications used in public media and generally calls for filing at least ten business days before first use, subject to applicable exclusions. It does not say every private retail message is automatically filed. Other rules set pre-use or post-use filing for specified investment-company, options or other material. Identify the product, medium, member status and exception before choosing a deadline. A filing is not FINRA endorsement, a guarantee of accuracy, or permission to omit the firm's own supervision.

Institutional status is a defined category

Institutional communications are distributed or made available only to institutional investors as the rule defines them. Specified organizations include banks, insurance companies, registered investment companies and registered investment advisers. Other defined recipients include government entities and qualifying employee plans, along with persons having total assets of at least fifty million dollars. Check the exact rule for the relevant plan or entity. Expected retail forwarding matters: a firm cannot treat a communication as institutional if it has reason to believe it will be passed to retail investors. Institutional material uses written procedures for appropriately qualified principal review, rather than universal pre-use approval. Mixed audiences require classification by the actual retail distribution. Sophistication changes some procedures; it never permits false claims.

Benefits and risks belong together

Fair balance means presenting material benefits and material risks in a way the intended audience can understand. Misleading presentation includes exaggerated claims, material omissions and burying qualifications where a reader is unlikely to notice them. A prominent income figure needs the relevant explanation of uncertainty and risk; a small footnote cannot repair an otherwise misleading overall message. Do not assume that a personal message, an institutional audience or a principal's signature makes an unsupported promise acceptable. Applicable rules also restrict predictions, projections and performance claims, with specific exceptions rather than a general license to promise outcomes. The teaching rule is to evaluate the whole communication, its audience and its context before focusing on a filing checkbox.

Privacy notices explain information handling

A privacy notice describes the institution's information practices, including relevant collection, disclosure and safeguarding policies. An opt-out right applies to certain sharing of nonpublic personal information with nonaffiliated third parties; it is not a right to stop every operational or legally required disclosure. Regulation S P includes exceptions for specified transaction processing, servicing and other permitted purposes. An initial customer notice generally accompanies establishment of the relationship, subject to delivery exceptions. Annual notices also have a conditional exception when the institution meets the rule's sharing and unchanged-policy requirements. Do not confuse an opt-out from covered information sharing with a decision to close the account or stop required regulatory reporting. Follow the actual disclosure category and notice requirements.

Assess, contain and evaluate notice

Suppose a covered institution discovers unauthorized access to a customer-information system. Assessment identifies what happened, which systems and information were affected, and the relevant people and risks. Containment limits further unauthorized access or use while preserving the evidence needed to respond. Notification follows the Regulation S P process for affected individuals when required. The written program also addresses service-provider oversight and proper disposal of customer information. A vague promise that the firm takes privacy seriously cannot replace those procedures. Likewise, deleting the affected records or issuing a press statement is not an incident-response program. Treat the event as an operational and information-protection problem, with a documented investigation and the applicable customer notice decision.

Customer notice has a defined clock

Under the amended safeguards rule, required customer notice is provided as soon as practicable, generally no later than thirty days after awareness that unauthorized access to or use of customer information has occurred or is reasonably likely to have occurred. The rule defines the affected-information and affected-individual scope and permits a documented reasonable-investigation determination that notice is not required where the specified harm-risk conditions are met. A specific government-requested delay can apply under the rule; ordinary inconvenience does not create a free extension. Do not reuse the thirty-day account-record furnishing rule merely because its number looks familiar. These clocks have different triggers and purposes. Escalate immediately so investigation, containment and notification decisions can meet the actual requirements.

Plan for a significant business disruption

Business continuity planning addresses how the firm responds to a significant disruption. Data recovery protects access to needed books and information. Critical operations include mission-critical systems and financial and operational assessments. Communications cover customers, employees, counterparties and regulators. Customer access addresses how customers can obtain funds and securities if the firm cannot continue its business. FINRA requires a written plan tailored to the firm's size and activities. A backup copy alone does not answer who will communicate, which systems will restart first or how a customer will reach the carrying firm. Think in terms of responsibilities, dependencies and practical recovery steps rather than assuming a server restart solves every interruption.

A continuity plan must stay usable

Senior management approves the continuity plan under the rule's requirements. Annual review checks whether the plan still fits the firm, and material changes require updates when they occur. Customer disclosure explains how the plan addresses possible future disruptions, without promising that every service will operate continuously. The firm also maintains the required emergency contacts and updates them under FINRA's requirements. Consider a branch outage that disables customer phones while the carrying firm remains operational. The plan should identify alternate communications and customer access steps, not merely say that an outage is someone else's responsibility. Carrying arrangements and vendor services become inputs to the continuity plan; they do not eliminate the introducing firm's own planning and disclosure duties.

Match the problem to the protection

Bring the account-protection map together. Firm roles allocate service, execution, records and custody without removing every responsibility from the introducing firm. Account documents distinguish identity and authority from a trade confirmation and a periodic statement. Asset controls preserve possession or control, required reserves and lawful collateral use, with SIPC covering a different failure problem from investment losses. Information and continuity controls address privacy, incidents and significant disruptions. Across all four areas, use the actual rule, the actual trigger and the actual responsible party. A signed form does not prove every check is finished. A customer's permission does not waive asset-protection law. A plan becomes useful when the firm can carry it out and retain evidence of what it did.

Continue learning

Continue with Lesson twenty seven on recommendations and best interest, or review the Trading and Accounts practice. Study smart with Smarti Exam Prep.