FINRA, the Financial Industry Regulatory Authority, is the US self-regulatory organization that writes and enforces AML rules for broker-dealers under SEC oversight. For a securities firm, FINRA is the body that authors the specific AML rules you live by and then examines you against them.
What is FINRA, in plain English?
FINRA is a self-regulatory organization, not a government agency, but do not let that fool you into thinking it is soft. It sets and enforces the rules its member broker-dealers must follow, and it does so under the supervision of the Securities and Exchange Commission. In practice, its rules carry real teeth because SEC oversight stands behind them.
On the AML side, FINRA requires each member firm to maintain a written AML program with a designated compliance officer, ongoing monitoring, customer due diligence, suspicious-activity reporting, and independent testing. It then examines firms against those requirements and brings enforcement actions when they fall short.
Where FINRA is distinctive is its focus on securities-specific abuse. Suspicious trading, microcap and penny-stock fraud, and manipulation are its home turf, so its AML expectations lean toward detecting money laundering that moves through markets rather than through plain cash deposits.
How FINRA oversight works
FINRA operates a familiar rulemaking-to-enforcement cycle, all under the SEC:
- Rule — Sets member rules. FINRA writes AML and conduct rules, including the written-program and independent-testing requirements.
- Examine — Tests compliance. Routine and for-cause exams check whether a firm's AML program works in practice.
- Enforce — Acts on failures. Fines, suspensions, and bars follow serious breaches, and the actions are published.
- Signal — Publishes priorities. Annual exam priorities and notices tell firms where FINRA will look next.
Who is involved?
Who | Their role |
FINRA | Writes and enforces AML rules for broker-dealers and examines member firms. |
The SEC | Oversees FINRA and can act directly on securities and AML violations. |
Member firms | Broker-dealers that must maintain a written AML program and submit to exams. |
The AML compliance officer | The designated person accountable for the firm's program and its independent testing. |
What it looks like in practice
In practice
A small broker-dealer onboards a customer who deposits a large block of thinly traded shares, sells them into a sudden spike in volume, and immediately wires the proceeds overseas. The classic microcap pattern trips the firm's surveillance, and the AML officer files a SAR describing the deposit, the coordinated selling, and the fast exit of funds.
At the firm's next FINRA exam, the examiners test exactly this: can the firm detect suspicious trading, not just suspicious cash movement, and does its independent testing actually probe the surveillance logic? Because the firm caught the pattern and documented it, the exam focuses on tuning rather than remediation, and the officer can show the program does what FINRA's rules require.
Why FINRA matters to operators
If you work at a broker-dealer, FINRA writes the specific AML rules you are judged on, and its exams are where your program is tested. The requirements to keep a written program and to have it independently tested are not paperwork; a weak or stale program is a common finding, and independent testing is how FINRA checks the program is more than a document.
FINRA's enforcement actions are also a free curriculum in securities-sector AML. They spotlight recurring problems such as microcap fraud, suspicious trading, and failure to file SARs, showing exactly where money laundering and securities fraud overlap. Reading them tells you which parts of your surveillance need to be sharpest.
What to watch
- Annual exam priorities. FINRA publishes where it will focus each year; align your testing to the current list.
- Microcap red flags. Deposits of low-priced shares followed by coordinated selling and fast wire-outs are a core FINRA concern.
- Independent testing quality. Testing that never challenges the surveillance logic is a finding waiting to happen.
- SAR filing gaps. Failing to file on obvious securities-fraud patterns is a frequent enforcement theme.
- Program staleness. A written program that has not kept pace with new products or customer types draws examiner attention.
Quick questions
Is FINRA a government agency?
No. It is a self-regulatory organization authorized and overseen by the SEC. Its rules still carry real consequences because SEC oversight and member obligations stand behind them.
Which firms does FINRA cover?
Broker-dealers registered to do business with the US public. Banks and money-service businesses are supervised by other regulators, though a firm can face more than one supervisor depending on its activities.
What does FINRA require in an AML program?
A written program with a designated compliance officer, ongoing monitoring and customer due diligence, suspicious-activity reporting, and periodic independent testing. The independent-testing element is a defining feature.
Why does FINRA focus on microcap fraud?
Because thinly traded, low-priced stocks are an efficient vehicle for laundering and manipulation. Depositing shares, pumping the price, selling, and moving the cash out is a pattern that maps directly onto money laundering.
How does FINRA relate to the SEC?
The SEC oversees FINRA and can act directly against firms and individuals. FINRA handles front-line rulemaking and examination of broker-dealers, so many firms deal with FINRA day to day and the SEC on larger matters.
How should I use FINRA enforcement actions?
Treat them as case studies. Each names the failure and the pattern that caused it, so mapping them against your own surveillance shows where your detection needs to improve before an exam.