FINRA's proposed Rule 2166 would give broker-dealers a five-business-day fraud delay for any adult customer, while updates to Rules 4512 and 2165 would expand trusted-contact and temporary-hold tools.
Use this article as context, then take a free Series 7 practice test to find the areas that need work next.
On January 8, 2026, FINRA published Regulatory Notice 26-02, and it is one of the clearest signals yet about where investor-protection expectations are moving for broker-dealers. The notice is not a final rule, and it is not an exam-content update by itself. But for SIE candidates, future registered representatives, and early-career professionals in compliance or operations, it matters because it shows how FINRA is thinking about fraud prevention in a market where scams move fast and customer losses can happen in hours, not weeks.
The headline item is proposed FINRA Rule 2166, a new framework that would let firms place a short temporary delay on a disbursement or securities transaction when they reasonably believe a customer is being targeted by fraud. Around that proposal, FINRA also wants to strengthen the older trusted-contact and temporary-hold framework in Rules 4512 and 2165. Read together with FINRA's 2026 Annual Regulatory Oversight Report and the SEC's 2026 Examination Priorities, the message is practical: regulators want firms to detect trouble earlier, document their reasoning better, and intervene before money leaves the account.
Start with the current rule set. Under existing Rule 4512, firms must make reasonable efforts to obtain a trusted contact for non-institutional accounts. Under existing Rule 2165, firms can place temporary holds when they reasonably believe a Specified Adult is experiencing financial exploitation. FINRA defines a Specified Adult as either a person age 65 or older, or a person age 18 or older whom the firm reasonably believes has a mental or physical impairment that leaves the person unable to protect his or her own interests.
Regulatory Notice 26-02 would make three important changes.
FINRA wants to make trusted contacts easier for customers to understand and easier for firms to use. The proposal would let firms use the term emergency contact as an alternative to trusted contact person, as long as the firm's supervisory procedures and training make clear that the term carries the same obligations. It would also let a customer authorize one trusted contact to apply across existing and future accounts at the same firm, rather than forcing the customer to repeat the designation account by account.
That is not a cosmetic change. FINRA's own investor survey data, cited in the notice, showed that only 42 percent of respondents said they had authorized a trusted contact on their investment accounts. Over half had not. FINRA is plainly trying to reduce friction around a tool that firms can use when a customer is unreachable, appears confused, or may be under pressure from a fraudster.
Today, Rule 2165 generally allows an initial hold period that can extend to a maximum of 55 business days when the case involves suspected financial exploitation of a Specified Adult. FINRA says that is sometimes not long enough. In Notice 26-02, the regulator proposed extending the maximum temporary-hold period to 145 business days through three additional 30-business-day increments, subject to safeguards and notifications.
This part of the proposal is easy to misunderstand. FINRA is not saying every hold should last longer. It is saying that some investigations, particularly those involving Adult Protective Services or law enforcement, take longer than the current framework allows. So the proposal would give firms more flexibility in serious cases involving seniors or other vulnerable adults, while still requiring process and documentation.
The most novel feature is proposed Rule 2166. It would apply more broadly than Rule 2165 because it would cover any natural person age 18 or older, not just Specified Adults. FINRA describes the concept as a short speed bump: if a firm reasonably believes a third-party fraud scheme is targeting the customer and causing a requested disbursement or securities transaction, the firm could delay that activity for up to five business days.
FINRA's proposal also builds in safeguards. The firm would need a reasonable belief that fraud has occurred, is occurring, has been attempted, or will be attempted. It would have to notify authorized parties and the trusted contact within two business days, unless the firm believes that person is involved in the fraud or unavailable. And the delay would expire after five business days unless a regulator, agency, or court extends it.
That structure matters. Rule 2166 is not drafted as an open-ended freeze power. It is designed as a short intervention window so the firm can step in, contact the customer away from the fraudster's influence, gather facts, and try to prevent a bad transfer before it settles.
As of June 7, 2026, candidates should treat all of this as proposal-stage policy, not final operative law. FINRA's own February 25, 2026 Quarterly Regulatory Policy Agenda listed the initiative as Senior Investors and Fraud Protection, said FINRA had published Notice 26-02 and was reviewing comments and drafting the proposal, and estimated that it would file with the SEC in Q3 2026. That is a useful status marker because it tells you two things at once: first, the proposal is still live; second, it has not yet become a final SEC-approved FINRA rule.
That timing is exactly why early-career professionals should pay attention. A proposal can shape training, supervisory conversations, and even customer-account documentation practices before the final rule text arrives. Firms do not want to be caught flat-footed when a proposal aligns with a broader regulatory trend.
Notice 26-02 does not sit in isolation. FINRA's 2026 Annual Regulatory Oversight Report says the report itself does not create new legal or regulatory obligations, but it does summarize the findings and effective practices FINRA is seeing in the field. In the trusted-contact section, FINRA flagged firms for failing to make a reasonable attempt to obtain trusted-contact information for all non-institutional customers, failing to provide the required written disclosures, failing to document training, and failing to retain records of the internal review behind a temporary hold decision.
That is a useful reality check. Many people hear trusted contact and assume it is mostly a senior-investor formality. FINRA's findings say otherwise. Operational discipline matters: collect the contact, explain the disclosure, train the staff, and document the decision trail.
The SEC is reinforcing the same direction. Its Fiscal Year 2026 Examination Priorities report expressly says it is a staff statement, not a rule and not a source of new legal obligations. Still, it tells firms what examiners plan to focus on. For broker-dealers, that includes recommendations, account and rollover recommendations, conflict mitigation, processes for reviewing reasonably available alternatives, and how firms satisfy Reg BI's Care Obligation. The report also says examinations may focus on recommendations made to older investors and people saving for retirement or college.
Outside sales practice, the SEC also kept pressure on cybersecurity and customer-information protection. The exam priorities say staff will assess compliance with Regulations S-ID and S-P, including policies, internal controls, third-party oversight, and incident-response preparation. FINRA's cybersecurity section likewise noted that smaller entities had a June 3, 2026 Regulation S-P compliance date. Put simply, regulators are looking at fraud prevention, identity theft, customer-information controls, and supervisory response as part of one connected risk picture.
If you are entering the industry, the practical lesson is not just memorize rule numbers. Learn the workflow regulators expect.
Exam note: For SIE and Series 7 candidates, be comfortable with the purpose of trusted contacts, the definition of a Specified Adult under Rule 2165, and the idea that broker-dealers can use customer-protection tools when fraud or exploitation is suspected. For Series 63, 65, and 66 candidates, connect this topic to the broader investor-protection themes that show up repeatedly on state-law and advisory exams: safeguarding client assets, handling vulnerable investors appropriately, supervising recommendations, and escalating red flags instead of ignoring them.
Just as important, remember the legal-status distinction. A proposal is not a final rule. A FINRA oversight report is not a source of new obligations. An SEC priorities report is not a Commission rule. But all three are still testable in a practical sense because they reveal how the regulatory system thinks: customer protection first, documentation second, and speed of response increasingly critical.
FINRA's proposed Rule 2166 is a small procedural idea with large implications. It recognizes that many modern fraud events are not suitability problems in the classic sense; they are fast-moving scams aimed at getting a customer to authorize a transfer before anyone at the firm can slow things down. By pairing a short fraud delay for all adult customers with stronger trusted-contact usage and longer holds in serious senior-exploitation cases, FINRA is trying to give firms more room to intervene without pretending every case needs the same tool.
For new representatives, that is the real takeaway. The future of compliance is not just knowing products and disclosures. It is knowing when something feels wrong, understanding which rule framework applies, and creating a record that shows your firm acted reasonably to protect the customer.
Use this article as context, then take a free Series 7 practice test to find the areas that need work next.
© 2026 Lurne AI. All rights reserved.
Use this article as context, then take a free Series 7 practice test to find the areas that need work next.
