FINRA Rule 3210: Covered Accounts, Exemptions, and Penalties

FINRA Rule 3210 requires anyone associated with a FINRA member broker-dealer to get their employing firm’s written consent before opening or maintaining a securities account at another firm or financial institution, and to notify that outside institution in writing of the industry affiliation. Both steps must happen before any securities transaction goes through the account. Violations carry fines of $2,500 to $20,000 and, in serious cases, suspensions of up to two years or a bar from the industry.¹

Who Has to Follow the Rule

The rule reaches every person associated with a FINRA member firm. Registered representatives are the obvious group, but coverage extends to anyone whose activities the firm supervises, whether or not they personally trade securities.² If your firm supervises what you do, you are in scope.

Which Outside Accounts Are Covered

The word “account” in Rule 3210 is broader than most people assume. It covers accounts at other FINRA member broker-dealers and, equally, accounts at any “other financial institution” where securities transactions can occur. FINRA defines that term to include non-member broker-dealers (domestic or foreign), investment advisers, banks, insurance companies, trust companies, credit unions, and investment companies.² If the account can execute securities transactions and you have a beneficial interest in it, the rule applies wherever the account sits.

Beneficial interest means you direct what happens with the securities or you receive the economic benefits of ownership. You do not have to be the account holder of record. Making investment decisions on someone else’s account, or taking the financial upside from it, is enough to pull the account into Rule 3210.

Spouse, Children, and Other Family Accounts

FINRA presumes you have a beneficial interest in accounts held by certain related persons. The presumption covers:

Any securities account in your spouse’s name.
Accounts of your children, or your spouse’s children, who live in your household or are financially dependent on you.
Any related person’s account over which you have trading authority or investment control.
Any non-relative’s account you control if you materially contribute to that person’s financial support.

For the spouse and child categories, the presumption can be rebutted. If you can show your employing firm, to its reasonable satisfaction, that you get no economic benefit from the account and exercise no control over it, the firm can waive the requirement.² That usually means documentation that a spouse handles their own investments independently. The rebuttal path does not exist for the other two categories. If you actually control the account or financially support the person, the account is yours for compliance purposes.

The Two Things You Must Do Before Trading

Two independent obligations attach to every covered outside account. Both must be satisfied before the account is opened or a single securities transaction runs through it.

Get prior written consent from your employer. A verbal okay from your manager does not count. Compliance needs to approve the account in writing. When you submit the request, give enough detail for the firm to evaluate conflicts of interest: the name of the outside institution, the type of account, and what you intend to trade.²

Notify the outside institution in writing. This is a separate requirement. The executing firm needs to know your status so it can meet its own obligations, including sending duplicate confirmations and statements when your employer asks for them.²

The order matters less than the timing. Neither consent nor notification can come after the fact. If you have already placed a trade, you are already in violation. The same logic applies later on: transferring the account elsewhere, adding margin or options privileges, or changing ownership all warrant fresh notice to compliance before you act.

Accounts You Already Had When You Joined

If an outside account existed before you joined your current firm, you obviously could not have obtained prior consent from an employer who had not yet hired you. Rule 3210 handles this with a specific 30-calendar-day window. Within 30 days of becoming associated with the new firm, you must obtain the firm’s written consent to keep the account open and notify the executing institution in writing of your new affiliation.²

The deadline runs from the date you become associated, and both obligations must be completed inside that window. Missing it puts you in the same position as someone who opened an unauthorized account. If the new firm refuses consent, the account has to be closed or moved to the employing firm. The same 30-day logic applies if you change employers and want to keep the outside account: the new firm has to grant consent and the outside institution needs fresh written notice.

Accounts That Are Exempt

Not every outside account triggers the consent-and-notification process. Rule 3210 carves out accounts that are limited exclusively to certain lower-risk products:

Open-end mutual funds only.
Unit investment trusts only.
Variable annuities or variable life insurance only.
529 college savings plans only.
Municipal fund securities as defined under MSRB Rule D-12.
Monthly Investment Plan accounts limited to the exempt product types above.

The operative word is “limited.” An account that holds mutual funds but also allows purchases of individual stocks does not qualify. The account must be structurally restricted to the exempt products.²

One trap catches people regularly: exchange-traded funds are not on the exempt list. ETFs hold diversified portfolios that look like mutual funds economically, but they trade on exchanges like individual stocks. The exemption language covers redeemable securities of companies registered under the Investment Company Act, which describes open-end mutual funds but not ETFs. If your outside account trades ETFs, the full consent and notification requirements apply.²

What Your Firm Has to Do After Approving

Once the employing firm grants consent, it takes on real supervisory work. The firm has to monitor the account for activity that could signal conflicts of interest with client orders, excessive trading, or misuse of confidential information.

To make that possible, the employing firm can submit a written request to the executing institution for duplicate copies of trade confirmations and account statements. When that written request is made, the executing firm is required to comply.³ It is not automatic. Absent a written request from the employer, the executing firm has no duty to send duplicates.²

The employing firm also keeps the right to impose conditions on any approval. That might mean restricting which securities you can trade, capping the frequency of transactions, or requiring pre-clearance for certain trades. Consent can be revoked entirely if the account starts to present compliance risks the firm is not willing to carry.

What Non-Compliance Costs

FINRA treats Rule 3210 violations seriously even when no underlying fraud occurred. The Sanction Guidelines for undisclosed outside accounts set a fine range of $2,500 to $20,000, with suspensions of up to two years or a bar from the industry in aggravated cases.¹ Where a case lands within that range depends on factors like whether the undisclosed accounts created real or perceived conflicts of interest, whether they involved violations of other rules such as IPO allocation restrictions, and whether the associated person gave at least oral notice even if the required written documentation was missing.

Penalties escalate when the violation is paired with dishonesty. Failing to disclose an account and then lying about it on a compliance questionnaire can trigger a separate violation of Rule 2010, which governs ethical standards of commercial honor. Repeat offenders and those who actively conceal accounts face the steepest consequences, including permanent industry bars.

Firms are not off the hook either. An employing firm that grants consent but never requests duplicate statements, never reviews trading activity, or lacks written supervisory procedures for outside accounts is exposed to its own supervisory failure charges.

1
FINRA. Sanction Guidelines
2
FINRA. FINRA Rule 3210 – Accounts At Other Broker-Dealers and Financial Institutions
3
FINRA. FAQ Concerning FINRA Rule 3210