Summary

Member firms are increasingly using third-party vendors to perform a wide range of core business and regulatory oversight functions. FINRA is publishing this Notice to remind member firms of their obligation to establish and maintain a supervisory system, including written supervisory procedures (WSPs), for any activities or functions performed by third-party vendors, including any sub-vendors (collectively, Vendors) that are reasonably designed to achieve compliance with applicable securities laws and regulations and with applicable FINRA rules.

Summary

FINRA warns member firms of an ongoing phishing campaign that involves fraudulent emails (see sample in Appendix) purporting to be from FINRA and using one of at least three imposter FINRA domain names:

• “@finrar-reporting.org”
• “@Finpro-finrar.org”
• “@gateway2-finra.org”

The email asks the recipient to click a link to “view request” and provide information to “complete” that request, noting that “late submission may attract penalties.”