Resources
Cold calling compliance for financial advisors
Cold calling is allowed for financial advisors, there is no rule that bans it, but it runs inside a tight set of rules about when you can call, who you can call, and how you place the call. The catch most advisors miss: which rulebook governs you depends on your registration. Broker-dealers follow FINRA Rule 3230. Registered investment advisers are not FINRA members, so they instead fall under the FTC's Telemarketing Sales Rule, the National Do Not Call Registry, and the TCPA. In practice the obligations overlap heavily. Here is the map.
July 15, 2026
If you are a broker-dealer: FINRA Rule 3230
FINRA Rule 3230 governs telemarketing, which expressly includes cold calling, for FINRA member firms. Its core requirements:
- Calling hours: no calls to a residence before 8 a.m. or after 9 p.m. in the called party's local time.
- A firm do-not-call list: the firm must maintain a written do-not-call policy. If someone asks not to be called, you must record the request and add the name and number to the firm's do-not-call list at the time of the request, and honor it within a reasonable time not exceeding 30 days.
- Caller identification and training for anyone involved in telemarketing.
FINRA built Rule 3230 to be “substantially similar” to the FTC's telemarketing rule, so broker-dealers are effectively meeting both standards when they follow it.
If you are an RIA: the FTC and FCC rules apply instead
Registered investment advisers are regulated by the SEC (or states), not FINRA, so Rule 3230 does not bind them. But that does not make cold calling a free-for-all. RIAs are subject to:
- The National Do Not Call Registry (FTC Telemarketing Sales Rule): telemarketers generally may not call numbers on the registry, with limited exceptions such as an established business relationship or the person's prior express invitation. You are expected to scrub your call lists against the registry.
- The TCPA (enforced by the FCC): restricts the use of automatic telephone dialing systems and prerecorded or artificial-voice calls and texts without the required prior consent. The TCPA carries a private right of action, which is why automated dialing and texting are the highest-risk way to prospect.
- State telemarketing and do-not-call laws, which can be stricter than the federal rules.
What you say on the call is still regulated
The channel changes; the content standard does not. The SEC marketing rule (Rule 206(4)-1) prohibits untrue or misleading statements and unsubstantiated claims, and sets conditions for testimonials, endorsements, and performance figures. A results claim or a recommendation made out loud on a call is held to the same standard as one written in an email. Describe what you do and who you help; keep unverified performance and testimonials out unless you have confirmed they meet the rule's conditions.
The call itself is a record
Notes, call logs, and any recordings tied to a prospect are business records. RIAs retain business-related records generally for five years under SEC Rule 204-2, with the first two years in an easily accessible place; broker-dealers have parallel obligations. If you record calls, recording-disclosure laws also apply and vary by state, so disclosure controls should be deliberate, not default-on.
The short version
Cold calling is permitted, but: call only within allowed hours, scrub against do-not-call lists and honor opt-outs, be very careful with automated dialing and prerecorded messages under the TCPA, hold every claim to the substantiation standard, and keep the records. Which rulebook is primary depends on whether you are a broker-dealer (FINRA 3230) or an RIA (FTC/FCC), but the safe behavior is nearly the same either way.
Where a tool helps
The overhead is in the controls: honoring do-not-call requests, capturing call activity into a record, and keeping disclosure settings deliberate. A platform built for the advisory world can carry that, with call activity captured to the lead record, one place to manage opt-outs, and call-recording disclosure controls off by default pending firm legal review. That is what Finterest is built to support. See how Finterest supports compliance in outreach, or what the platform does.
Last reviewed: June 2026