Compliance guide
Compliant prospecting for financial professionals
Quick answer. Compliant prospecting is outreach that follows the rules governing how financial professionals can contact prospects: keep messages accurate and substantiable, get the required pre-send review for communications that reach more than 25 retail investors in 30 days (FINRA Rule 2210), honor opt-outs and include a valid physical address on commercial email (CAN-SPAM), respect calling-hour limits and do-not-call rules on the phone (FINRA 3230, FTC Telemarketing Sales Rule), and get the prior express consent the TCPA requires before any autodialed or prerecorded calls or texts. The hard part isn't knowing the rules; it's running outreach at volume while keeping every message reviewable and every record retained. That is the gap Finterest is built to close. This is general information, not legal advice.
Why prospecting is different in financial services
Most sales-engagement tools assume you can email, call, and message anyone at will. A regulated practice can't. Advisor and broker communications are supervised: depending on your registration, they fall under FINRA, the SEC's Investment Advisers Act, state insurance departments, or some combination, and each carries content, approval, and recordkeeping duties that generic tools ignore. So financial professionals face a false choice: prospect by hand and stay compliant, or automate and hope nothing slips. The answer is neither; it is outreach infrastructure with the compliance work built in.
The rules that shape financial outreach
Every channel has its own regime. Here is the landscape, and where each is covered in depth.
Communications content and approval: FINRA Rule 2210
FINRA Rule 2210 sorts firm communications into correspondence, retail communication, and institutional communication, each with different approval requirements. The practical trigger: a message that reaches more than 25 retail investors within 30 days is generally retail communication and usually needs principal approval before it goes out. Under the 25-investor line, it is correspondence, with lighter supervision.
How many people can a financial advisor email before compliance approval? →
Advertising accuracy: SEC Marketing Rule (206(4)-1)
For registered investment advisers, the SEC Marketing Rule prohibits untrue or misleading statements and sets conditions for testimonials, endorsements, and performance claims. In outreach, the core duty is simple to state and easy to violate at scale: be accurate, and be able to substantiate what you say.
Email: CAN-SPAM
Every commercial email needs an honest “from” and subject line, a valid physical postal address, and a working opt-out that is honored promptly, regardless of how many people you reach.
LinkedIn and social: FINRA RN 17-18, adoption and entanglement
Static social content (a profile, a standing post) is generally treated as retail communication needing pre-use approval; interactive, real-time exchanges (a live DM conversation) are supervised more like correspondence, still retained, still supervised. Professionals also have to watch “adoption and entanglement,” the two ways you become responsible for someone else's content.
Phone: FINRA Rule 3230, FTC TSR, TCPA
Cold calling carries calling-hour limits (no residential calls before 8 a.m. or after 9 p.m. local time), firm do-not-call obligations, and caller-ID and training requirements under FINRA 3230 for broker-dealers; RIAs and insurance-only producers fall under the FTC's Telemarketing Sales Rule and the National Do Not Call Registry instead. The TCPA layers on strict limits for autodialed and prerecorded calls and texts, the highest-risk way to prospect.
Recordkeeping: SEC Rule 204-2 and FINRA
Business-related electronic communications, including email, LinkedIn messages, and texts, generally must be retained for five years under SEC Rule 204-2, with parallel FINRA obligations for broker-dealers. If you can't produce the record, the communication is a problem no matter how good it was.
Each of the above is general information, not legal advice. Your obligations depend on your registration and your firm's supervisory procedures.
What compliant at scale actually requires
Knowing the rules is table stakes. Running outreach that stays inside them, across channels, for a growing prospect list, requires a handful of capabilities working together:
- Pre-send review so the messages that need approval get it before they go out, not after.
- A retained, searchable record of every message across every channel.
- Opt-out and do-not-call handling that is automatic and honored promptly.
- Deliberate controls on the high-risk moves, such as automated dialing and texting, and call recording where consent laws vary by state.
- Human-in-the-loop drafting so AI accelerates the work without sending anything a person did not approve.
How Finterest supports compliant prospecting
Finterest is built compliance-first for exactly this. It sources prospects scored against your own book, runs one multi-channel cadence across email, LinkedIn, and phone, and keeps the compliance work in the workflow: pre-send review, recordkeeping support, one-click unsubscribe, and Fin, an AI co-pilot that drafts and personalizes messages you approve before anything sends. Finterest supports your firm's compliance process; it does not replace your firm's supervision or your compliance officer's judgment.
See how it works and the compliance overview. Related: for wealth managers · for insurance brokers.
Frequently asked questions
How many prospects can a financial advisor email at once?
There is no single number, but the practical line is FINRA Rule 2210's threshold: reach more than 25 retail investors within 30 days and the message is generally retail communication requiring principal approval before use. Below that, it is correspondence with lighter supervision. General information, not legal advice.
Can financial professionals use AI to write outreach?
Yes, provided a person reviews and approves before sending and the message stays accurate and substantiable. The compliance duties attach to the communication, not to whether a human or AI drafted it, so human-in-the-loop review is what keeps AI-assisted outreach compliant.
Is cold calling allowed in financial services?
Generally yes, within the rules: calling-hour limits, do-not-call scrubbing, and caller identification under FINRA 3230 (broker-dealers) or the FTC Telemarketing Sales Rule (RIAs and insurance producers), plus TCPA limits on automated dialing. Manual, list-scrubbed calling is lower risk than autodialed outreach.
Does outreach software make me compliant?
No tool makes you compliant on its own; compliance is your firm's responsibility. What good software does is support the process: build in pre-send review, retain records, and honor opt-outs so compliance is part of sending rather than an afterthought.
What records do I have to keep for prospecting?
Business-related electronic communications generally must be retained for five years under SEC Rule 204-2, with parallel FINRA rules for broker-dealers. That includes email and LinkedIn messages, not just closed-client communications. General information, not legal advice.