Study guide
Topics VII and VIII dominate the modern Series 63, together carrying 45 percent of the exam, about 27 scored questions. This chapter covers required disclosures, account agreements, advertising and social media, cybersecurity, compensation, handling of customer assets, and the long list of prohibited and unethical practices, including protections for vulnerable adults.
Required Disclosures and Unlawful Representations
Fair dealing starts with telling customers what they are buying. Agents must ensure customers receive required offering documents, such as a prospectus for a new issue or mutual fund, and must disclose material facts about products: sales charges and the availability of breakpoints (quantity discounts on mutual fund sales loads), surrender charges on variable products, early withdrawal penalties on brokered CDs, call features on bonds, and the risks that make a product unsuitable to hide. Failing to mention breakpoints so a client buys just below a discount threshold is a classic dishonest practice. Two categories of statements are flatly unlawful. First, misrepresenting registration status: it is illegal to tell a customer that a registration of an agent, firm, or security means the Administrator or SEC has approved, endorsed, or passed on the merits or accuracy of anything. Registration means only that filing requirements were satisfied. Saying I am state-approved or this fund was cleared as a good investment by the state violates the act even if said carelessly rather than maliciously. Second, performance guarantees are prohibited. An agent may never guarantee a customer against loss, promise a specific return on a non-guaranteed product, or offer to buy back a security at cost if it disappoints. The word guaranteed has exactly one legitimate use: describing a security whose principal, interest, or dividends are guaranteed by a third party, such as a parent company guaranteeing a subsidiary's bond, and even then the guarantee covers payment, never market price. Example: Tomas tells a prospect this utility stock cannot lose more than 5 percent, I will personally cover anything beyond that. That is a prohibited guarantee regardless of Tomas's sincerity.
Customer Account Agreements
The outline names three agreements: new account, margin, and options. Opening a new account requires collecting the information that makes suitability possible: identity, address, employment, financial situation, risk tolerance, and investment objectives, along with legal documentation such as corporate resolutions or trust documents for entity accounts. Firms must also make reasonable efforts to obtain the name of a trusted contact person, an individual the firm may reach if it suspects the customer is being exploited or losing capacity; the customer may decline, and the account can still be opened. Customers can refuse to supply some financial details, but the firm may then be limited in what it can recommend. A margin account lets the customer borrow from the firm to buy securities, with the securities as collateral. Before or promptly after the first margin transaction, the customer must sign the margin agreement, whose key components are the credit agreement (loan terms and interest), the hypothecation agreement (pledging the customer's securities as collateral, which the firm may rehypothecate to finance the loan), and an optional loan consent permitting the firm to lend out the customer's securities. Margin documentation cannot wait indefinitely, and margin is unsuitable for many conservative investors. Options accounts add a third layer: the customer must receive the options disclosure document at or before account approval by a qualified supervisor, and the signed options agreement must be returned within 15 days after approval. Trading may begin upon approval, but if the agreement is not received within the 15-day window, the firm may accept only closing transactions in the account. Trading before required approvals or documentation is a violation even if the trades are profitable.
Advertising, Social Media, Digital Communications, and Cybersecurity
The June 2023 outline elevated correspondence and advertising — social media, email and digital messaging, and website communications — into named topics; cybersecurity appears here as supplemental context because regulators test it through the broader supervision and privacy rules. Any communication distributed to customers or prospects, whether a seminar slide deck, a website, an email blast, or a social media post, is subject to the same core rules: it must be fair, balanced, and free of misleading claims, exaggerated performance, or promises of results, and firm procedures govern approval and retention. Administrators may require filing of sales literature, though literature for exempt and federal covered securities is generally not filed. Social media analysis on the exam usually turns on two distinctions. Static content, like a profile page or a posted article, functions as advertising and typically requires principal approval before use. Interactive content, like real-time replies and comments, is treated like correspondence, subject to supervision and review rather than pre-approval. Business communications sent through personal accounts or texting apps are still firm business: agents may not evade supervision by moving client conversations to a personal channel, and firms must capture and retain business-related digital messages just like letters. Liking or reposting a customer's claim can make it the agent's own statement. Cybersecurity and data protection obligations flow from privacy rules such as SEC Regulation S-P: firms must deliver initial and annual privacy notices, give customers the right to opt out of sharing nonpublic personal information with nonaffiliated third parties, and maintain written safeguards for customer records. Under the amended federal rules now fully in effect, firms must maintain incident response programs and notify affected individuals within 30 days of becoming aware of a breach of sensitive customer information. Agents contribute by protecting credentials, verifying wire instructions, and reporting suspected intrusions immediately.
Compensation, Customer Funds, Discretion, and Standards of Care
Compensation must be fair and disclosed. Commissions on agency trades and markups or markdowns on principal trades (where the firm trades from its own inventory) must be reasonable and not hidden; charging both a commission and a markup on the same trade, or imposing excessive fees for routine services, is a dishonest practice. Fee schedules and material compensation arrangements, including compensation the firm receives from third parties, must be disclosed so the customer can see what a recommendation earns the person making it. Handling customer assets carries its own rules. Firms must safeguard customer funds and securities, never commingle them with firm assets, and promptly deliver securities and pay balances as instructed. Custody, meaning holding customer funds or securities, triggers heightened requirements such as notice to the Administrator, bonding or net capital, segregation, and account statements. Discretion means the agent chooses any of the three As, asset, amount, or action (buy or sell), without talking to the customer first. Exercising discretion requires written authorization from the customer before the first discretionary trade, and discretionary accounts require principal approval and closer review. The one exception: an order that specifies the security, the amount, and the action, leaving only time or price to the agent's judgment, is not discretionary, though such orders are good only for that trading day. Third-party trading authorizations must likewise be written. Standards of care differ by role: broker-dealer agents must have a reasonable basis to believe each recommendation is suitable, and federal Regulation Best Interest requires recommendations to retail customers to be in the customer's best interest, while investment advisers owe a full fiduciary duty at all times. An agent taking on advisory-style compensation or control edges into the higher standard.
Prohibited Practices and Protecting Vulnerable Adults
Most exam questions in this area describe conduct and ask you to name the violation. Churning, called excessive trading in the outline, is trading a customer's account primarily to generate commissions, measured against the customer's objectives and resources, and it can occur even in a profitable account. Unauthorized trading is executing any trade without required consent. Selling away is effecting securities transactions outside the agent's employing firm without the firm's knowledge and permission, even when the customer begs for the product. Insider trading, trading or tipping on material nonpublic information, exposes both tipper and tippee to liability. Market manipulation includes wash trades (trades with no change in beneficial ownership), matched orders between colluding parties to paint a false picture of activity, spreading rumors to move prices, and front running customer orders. Borrowing from or lending to customers is prohibited unless the customer is in the lending business, such as a bank, or another narrow exception under firm policy applies. Sharing in a customer's account is forbidden for advisers and their representatives, but a broker-dealer agent may share profits and losses with a customer if both the customer and the employing broker-dealer give written authorization. FINRA's separate rule also requires the sharing to be proportionate to the agent's contribution; NASAA's rule does not. Maintaining outside securities accounts without notifying the employer, backdating documents, commingling, and deliberately delaying transactions round out the list. The exploitation of vulnerable adults, meaning seniors and adults with impairments, gets special machinery under the NASAA model act: qualified employees who reasonably suspect financial exploitation must notify the Administrator and adult protective services, may contact the trusted contact person, and the firm may delay a suspicious disbursement for up to 15 business days, extendable by 10 more at the regulator's or agency's request, with immunity for good-faith reports. Consent is never a defense: a violation remains a violation even if the customer approved it or made money.
Key terms
- Breakpoint
- — A quantity discount on mutual fund sales charges; concealing breakpoints or selling just below one to earn more commission is a dishonest practice.
- Guarantee prohibition
- — Agents may never guarantee customers against loss or promise performance; guaranteed properly describes only third-party guarantees of principal, interest, or dividends.
- Trusted contact person
- — An individual the customer names whom the firm may contact about suspected exploitation or diminished capacity; firms must make reasonable efforts to obtain one.
- Hypothecation agreement
- — The margin document pledging the customer's securities as collateral for the margin loan.
- Options disclosure document (ODD)
- — The risk booklet delivered at or before options account approval; the signed options agreement is due within 15 days after approval, after which only closing transactions may be accepted.
- Static vs. interactive content
- — Fixed social media content treated like advertising needing prior approval, versus real-time posts treated like correspondence subject to supervision and review.
- Regulation S-P
- — The federal privacy rule requiring privacy notices, opt-out rights, safeguards for customer data, and notification to affected individuals within 30 days of a breach.
- Markup / markdown
- — The price adjustment a dealer adds or subtracts when trading with customers from its own inventory; it must be fair and reasonable.
- Custody
- — Holding customer funds or securities, which triggers notice, bonding or net capital, segregation, and reporting requirements.
- Discretionary authority
- — Power to decide asset, amount, or action for a customer, requiring prior written authorization; time and price alone are not discretion.
- Churning
- — Excessive trading in a customer's account, relative to objectives and resources, done primarily to generate commissions.
- Selling away
- — Effecting securities transactions outside the employing broker-dealer without the firm's knowledge and approval.
- Disbursement hold
- — Under the NASAA model act, a firm suspecting exploitation of a vulnerable adult may delay a disbursement up to 15 business days, extendable by 10 more.
- Wash trade / matched orders
- — Manipulative trades with no real change in ownership, or coordinated buy-sell orders, designed to create a false appearance of market activity.
Exam tips
- The three As define discretion: if the customer fixes asset, amount, and action and leaves only time or price, no written authorization is needed, but the order is good only that day.
- Sharing in accounts splits by role: never permitted for IAs and IARs, but permitted for broker-dealer agents with written consent of both the customer and the firm. If a question adds “proportionate to contribution,” that condition comes from FINRA’s rule, not NASAA’s.
- Customer consent and profitable outcomes never cure a violation; a question saying the client agreed or the account made money is testing whether you will excuse prohibited conduct.
- Know the vulnerable-adult numbers cold: a hold of up to 15 business days plus a 10 business day extension, with reports to the Administrator and adult protective services and immunity for good-faith reporting.
- Distinguish the standards of care: suitability and best interest for broker-dealer agents on recommendations, ongoing fiduciary duty for advisers; a question about who owes a continuous duty of loyalty points to the adviser side.