Off-Channel Communications: How Financial Services Organizations Can Address Regulators’ Latest Target

Mar 27, 2025

3 min


Off-channel communications (OCC) occur when employees use unapproved and inadequately protected devices – such as personal cellphones – or applications to communicate with co-workers, counterparties and / or clients. Many financial services firms are required to maintain copies of all communications regarding their business, supervise the same, and produce them in response to regulatory requests. Firms cannot meet those compliance obligations when employees resort to unauthorized OCC for business-related matters.


In charging 15 broker-dealers and one affiliated investment advisor in September 2022 with record-keeping violations, the SEC noted that its investigation uncovered employees at all levels of these firms who routinely used text messaging apps on their personal devices to discuss business matters between January 2018 and September 2021 [1]. The firms settled the charges and agreed to pay penalties totaling more than $1.1 billion. Just as important, the firms also agreed to engage independent compliance consultants to ensure the use of OCC meets regulatory standards as part of the settlements.


In a related move [2],  the Commodity Futures Trading Commission (CFTC) ordered 11 financial institutions to pay more than $710 million for recordkeeping and supervision failures for widespread use of unapproved communication methods such as personal texts, WhatsApp, and Signal. Additionally, the Financial Industry Regulatory Authority (FINRA) has also taken action when it comes to OCC.



Antonio Rega, digital forensics, data governance, privacy, security, emerging technology, and discovery expert with J.S. Held, observes, “While the current administration has loosened certain regulatory enforcement near-term, we continue to observe requests from clients in supporting management of “off-channel” communications, with a particular focus on 3rd party chat messaging platforms on mobile devices, such as Whatsapp. These inquiries include supporting corporate stakeholders with internal auditing of their organizational platforms, policies and procedures.”


By implementing effective processes and utilizing software and outside experts to monitor and detect OCC, broker-dealers, investment advisers, and other financial institutions can reduce the risk of regulatory enforcement and penalties and ensure that they remain in compliance with regulations.



Steve Strombelline, regulatory and enterprise risk management expert with J.S. Held adds, “Although concerns typically impact broker-dealers, firms outside of financial sectors are looking closely at their messaging processes as well, which is advisable."







In addition to guaranteeing that these communications are properly documented and retained, the regulations are set up to prevent the use of OCC to manipulate securities transactions or commit fraud and to ensure that it is not used to violate any other securities laws. Firms’ supervisory procedures must be reasonably designed to detect for OCC when they monitor for such activity.


The following article discusses the risks that OCC pose for financial services firms, especially as the SEC, FINRA, and the CFTC have made it clear that they are now targeting firms throughout the industry about their OCC to see if they are recording and preserving business information according to regulations.


The piece also explains how firms, including broker-dealers of all sizes, should manage their OCC to ensure that they and their employees comply with federal securities laws and regulations.


Finally, the authors address the complexity related to the collection of OCC in response to regulatory enforcement investigative requests. As the fines and settlements between those firms and the SEC exemplify, financial services firms of all sizes need to take this regulatory focus seriously and take the proactive step of engaging an independent third-party with expertise and experience in both digital forensics and compliance issues.


To read the full article and learn more about the risk of off-channel communications and how companies should manage their OCC to remain compliant, click on the button below:



To connect with Antonio Rega simply click on his icon now.


To arrange a conversation with Steve Strombelline or any other media inquiries - contact :


Kristi L. Stathis, J.S. Held

+1 786 833 4864

Kristi.Stathis@JSHeld.com


References

[1] https://www.sec.gov/news/press-release/2022-174

[2] https://www.cftc.gov/PressRoom/PressReleases/8599-22

You might also like...

Check out some other posts from J.S. Held LLC

2 min

Strategies for Interacting with Federal and State Governments in Turbulent Times

From foreign investment scrutiny to trade fraud enforcement, shifting federal and state priorities are reshaping corporate compliance. At the Federation of Defense & Corporate Counsel (FDCC) 2025 Corporate Counsel Symposium (CCS) in Chicago, J.S. Held compliance, risk, and investigations expert Greg Esslinger joined a panel to discuss 'Strategies for Interacting with Federal and State Governments in Turbulent Times,' focusing on the current climate for mergers, acquisitions, and corporate compliance. Below, he shares key takeaways from the session designed to help businesses refine their M&A techniques, navigate high-stakes transactions and investigations, and realize value amid global government shifts. REGULATORY EXPECTATIONS ARE SHIFTING QUICKLY Government agencies are adjusting their enforcement priorities, with increased scrutiny on foreign investments, beneficial ownership, and emerging areas like healthcare fraud, sanctions and tariffs, and foreign terrorist organizations (FTOs). M&A REQUIRES STRATEGIC RISK MANAGEMENT  In today’s volatile regulatory climate, mergers, acquisitions, and joint ventures demand enhanced due diligence. Tariffs, supply chain disruptions, and national security concerns are reshaping how companies value and structure deals. MULTI-JURISDICTIONAL OVERSIGHT IS INCREASING State and international enforcement and regulatory agencies are ramping up efforts, bringing heightened attention to data privacy, private litigation, whistleblower actions, and cross-border investigations, which carry potential reputational and financial risk. INVESTIGATIONS DEMAND AGILITY AND FORESIGHT As enforcement priorities shift across areas like customs, healthcare, and workplace equity initiatives, companies face growing exposure to government inquiries. Preparation and adaptability are key to mitigating risk. For more information about J.S. Held's investigations and compliance consulting expertise: To explore the topic further, simply connect with Greg through his icon below.

2 min

Detecting Fraud Using Emerging Technology: Innovating Beyond Traditional Controls

Fraud and financial crime are evolving at a pace that challenges even the most established detection systems. From cyber-enabled schemes and complex financial misappropriations to subtle internal manipulations, traditional audit and compliance methods are often too slow or too narrow to keep up. In a world where billions of data points can hide a single irregularity, the investigative advantage now lies in speed, intelligence, and technological adaptability. J.S. Held’s Ken Feinstein recently authored an article exploring how artificial intelligence, machine learning, and advanced data analytics tools are transforming how organizations uncover and prevent fraud. In his piece, “Detecting Fraud Using Emerging Technology: Don’t Be Afraid to Innovate,” Feinstein illustrates how the integration of digital investigation techniques — from automation to predictive analytics — is reshaping the fraud-detection landscape, helping companies not just react to wrongdoing but anticipate and deter it. Ken Feinstein specializes in investigative data analytics and has over 25 years of experience. He provides data analytics solutions spanning multiple sectors, including retail and consumer products, life sciences, technology, financial services, and industrial products. His clients include law firms and Fortune 500 legal and compliance teams for whom he delivers large-scale, complex investigations, regulatory response matters, proactive anti‐fraud efforts, and compliance programs. View his profile here Why This Matters As fraudsters exploit digital tools and globalized networks, detection efforts must evolve in kind. Regulators expect faster, data-driven investigations, and boards demand real-time risk visibility. Those who innovate with AI-enabled detection and forensic analytics are better positioned to protect assets, reputation, and shareholder trust. Looking to know more? Connect with Ken Feinstein today by clicking on his icon below.

2 min

Forensic Meteorology in Insurance: Bridging Weather Science, Claims, and Liability

When severe weather strikes, the insurance industry is not only contending with damage and loss, but also with the question: Did this storm event actually occur, and did it trigger the risk covered under policy terms? J.S. Held's forensic meteorologist Daniel Schreiber authored an article explaining how Certified Consulting Meteorologists substantiate (or refute) storm-event claims by reconstructing what the weather actually did at a loss location. In his article “Forensic Meteorology in Insurance: How Do Certified Consulting Meteorologists Help with Storm Damage Claims & Disputes?” Schreiber illustrates how the overlap of a valid insurance policy, a damaging event, and a verified storm forms the core of many disputed claims. Dan Schreiber is a Certified Consulting Meteorologist with over ten years of experience in military, aviation, and severe weather operations. Mr. Schreiber has provided consulting and expert services for both plaintiff and defense law firms and insurance adjusters, appraisers, umpires, and policyholders throughout North America. He has been consulted and/or retained as an expert in over 850 matters and has testified in both depositions and during trials in state and federal courts. View his profile here Why This Matters In an era of escalating extreme weather events and heightened exposure for insurers, the science of forensic meteorology — the application of certified weather expertise to claims investigation and litigation — is becoming indispensable. Professional meteorology, as it relates to insurance claims handling and the litigation process, is becoming increasingly recognized, and the employment of meteorologists within the insurance industry is growing. Schedule an interview with Daniel Schreiber to learn more about how forensic meteorologists can help with insurance claims and disputes by clicking on his icon below.

View all posts