%20(1).avif)
.avif)
From fiscal year 2022 onward, the SEC brought 95 off-channel communication cases and issued $2.3 billion in penalties. However, current SEC leadership says enforcement should give greater weight to cases involving investor harm.
Financial firms should not treat that change as permission to relax their texting rules. SEC recordkeeping requirements still apply. FINRA also reviews how firms archive and supervise business texts.
Missing messages can create serious problems during an investigation. For example, a text could contain a client complaint, a trade instruction, an unsuitable recommendation, a conflict of interest, or evidence of fraud.
Therefore, firms need an approved mobile channel for client communication. They must automatically archive messages, grant supervisors access, manage user accounts, and retain records for the required period.
iPlum gives advisors a separate business number for client calls and texts.
It archives business messages in WORM storage and provides audit logs, administrative access, and long-term retention. Firms can also retrieve communication records during an examination or investigation.
iPlum gives financial firms a regulated alternative to personal SMS and consumer messaging apps.
That way, advisors can text clients from their smartphones, and the firm can supervise and preserve the business record.
Table of Contents
1. What did the SEC say about the $2.3 billion off-channel campaign?
2. Has the SEC's off-channel enforcement ended?
3. Which recordkeeping duties remain in effect?
4. Why firms should still archive regulated communications
6. How iPlum turns mobile archiving policy into daily controls
8. The SEC’s new priorities do not end with archiving duties
What did the SEC say about the $2.3 billion off-channel campaign?
In April 2026, the SEC published its fiscal year 2025 enforcement results.
The release says the prior Commission brought 95 actions and imposed $2.3 billion in penalties from fiscal year 2022 onward for failures to preserve off-channel communications.
Current leadership took a critical view of those cases.
The release says the actions identified no direct investor harm and did not produce investor protection or benefit. It describes the campaign as a misallocation of resources and as an example of measuring enforcement by case volume and recorded penalties.
The Commission now says it will give greater priority to:
- Fraud in its various forms
- Market manipulation and abusive trading
- Breaches of trust and fiduciary duty
- Misconduct that harms investors or market integrity
- Remediation that addresses the conduct
- Returning money to harmed investors
- Individual accountability
The release also states that self-reporting, meaningful cooperation, and remediation produced reduced civil penalties or decisions not to recommend enforcement in some fiscal year 2025 cases.
Therefore, the enforcement direction has changed. Current leadership is less interested in large numbers of stand-alone cases that identify no investor harm. However, the release does not repeal any books-and-records rule or grant permission to use unapproved communication channels.
Has the SEC's off-channel enforcement ended?
No official statement says the SEC has ended all off-channel enforcement.
A more accurate conclusion is that current leadership has changed case selection, remedy decisions, and the measurement of enforcement success.
Fewer broad sweeps or lower penalties for stand-alone recordkeeping failures are possible. Yet that outcome remains an inference from the Commission's stated priorities, not a regulatory exemption.
The distinction becomes important when missing communications relate to the conduct the current Commission says it will pursue.
An unarchived message can contain evidence of fraud, insider trading, market manipulation, misleading disclosure, conflicted advice, or misuse of customer funds.
In such a case, the recordkeeping failure does not exist apart from investor harm. It can impede an examination, hide the conduct, prevent prompt remediation, and make individual accountability more difficult.
Consequently, firms should not ask only whether the SEC will bring another mass off-channel sweep.
They should ask what happens when an archived message is needed to investigate a customer complaint or a suspected violation.
Which recordkeeping duties remain in effect?
The enforcement release changes neither statutes nor rules. Broker-dealers, registered investment advisers, and FINRA member firms still face recordkeeping obligations based on their registration and the content of their communications.
Broker-dealers
Exchange Act Rule 17a-4(b)(4) requires broker-dealers to preserve originals of communications received and copies of communications sent relating to the firm's business as such.
Required records generally remain subject to prescribed periods and production duties.
SEC off-channel orders describe a three-year period for covered broker-dealer business communications, with the first two years in an easily accessible location.
Electronic recordkeeping must also satisfy applicable format and retrieval requirements.
Registered investment advisers
Advisers Act Rule 204-2(a)(7) applies to specified written communications involving recommendations, advice, funds or securities, orders, and performance. SEC orders describe a five-year retention period for covered adviser communications.
When an adviser stores required records electronically, SEC electronic-recordkeeping requirements address protection from loss, alteration, or destruction, limited access, and the production of complete and legible copies.
FINRA member firms
FINRA requirements continue separately from SEC enforcement priorities.
The FINRA Books and Records report identifies failures to retain, archive, and review non-email electronic communication, including business text messages.
The report also identifies weak written procedures, insufficient samples, inadequate keyword searches, missing non-English reviews, and poor vendor due diligence.
It defines off-channel communication as business messaging through a tool the firm has not authorized and does not routinely archive, supervise, or retain.
Therefore, a member firm can face FINRA examination or disciplinary exposure even if SEC leadership brings fewer stand-alone cases.
Why firms should still archive regulated communications
A mobile archive serves more than one regulator.
It gives the firm evidence, supervisory access, and a complete customer history when a problem occurs.
1. The legal duties remain
Recordkeeping rules determine what firms must preserve. Enforcement discretion can affect which cases the SEC brings and which remedies it seeks. It does not rewrite the rule text.
An internal policy permitting personal texting, as reported in a press release, would conflict with the firm's existing recordkeeping analysis.
Firms should instead review their registration type, communication categories, retention periods, and production duties with legal and compliance personnel.
2. Investor-harm cases need reliable evidence
The current Commission says it will prioritize fraud, market manipulation, breaches of trust, and other conduct that harms investors. Business messages can contain the evidence required to identify those events.
For example, a client text may show that an advisor guaranteed a return, concealed a conflict, ignored an investment restriction, changed a trade instruction, or dismissed a complaint.
If the firm cannot retrieve that thread, it loses evidence needed to protect the customer and investigate the advisor.
3. FINRA still expects retention and supervision
Broker-dealers must consider FINRA rules and examination priorities alongside SEC policy.
FINRA's 2026 report expressly names business texts, non-email communication, off-channel detection, and tailored keyword searches.
Archiving should therefore connect to supervisory review. A backup that no reviewer can search, sample, or escalate does not satisfy the firm’s communication procedures.
4. Self-reporting and remediation require facts
The SEC’s fiscal year 2025 results place value on self-reporting, cooperation, and remediation. A firm cannot assess those options promptly if it lacks the underlying messages.
A complete archive allows compliance personnel to identify who communicated, what they said, when the conduct occurred, which customers were affected, and how widely the issue spread. The firm can then preserve evidence, stop further conduct, calculate customer impact, and make an informed disclosure decision.
5. Individual accountability increases the value of attribution
Current leadership says it wants greater emphasis on individual wrongdoers. Shared numbers, shared logins, and missing message histories make attribution difficult.
Individual business accounts and complete logs can show which advisor sent a statement, received a complaint, changed a setting, or continued using a prohibited channel after training. Such records protect the firm and workers who followed the policy.
6. Customer disputes and litigation continue
Regulatory enforcement is only one reason to preserve business communication.
Customer complaints, arbitration, litigation, employment disputes, legal holds, and internal investigations can all require texts and call records.
A change in SEC case priorities does not shorten those proceedings or eliminate production duties. Firms need records they can search, export, and preserve when routine deletion must stop.
What should firms do now?
The change in SEC tone gives firms a reason to review their programs rather than dismantle them. Here’s what firms should do to ensure compliance:
Approve business channels and prohibit personal messaging
List every permitted number, app, email account, social channel, and collaboration tool. Define permitted message types and prohibited features. Explain how an advisor should move a customer conversation from a personal channel to the approved system.
Assign managed business numbers
Give advisors a business identity that remains under firm administration. A managed second line can operate on an existing smartphone while separating client calls and texts from personal history.
Archive incoming and outgoing messages automatically
Avoid screenshots, manual forwarding, or periodic advisor exports. The archive should preserve both directions, participants, dates, times, attachments, and related metadata.
Protect record integrity
Select storage that meets the firm’s applicable electronic-recordkeeping format. Broker-dealers may use non-rewriteable, non-erasable WORM storage or the audit-trail alternative under Exchange Act Rule 17a-4(f).
Give compliance personnel searchable access
Authorized reviewers need search, sampling, export, escalation, and audit records. The firm should tailor searches to its business, products, languages, complaints, and prohibited activity.
Control user access and test the system
Use individual accounts, role-based permissions, password requirements, prompt deactivation, and administrative logs. Then test archiving, retrieval, export, account removal, retention, and legal holds through sample communications.
How iPlum turns mobile archiving policy into daily controls
Firms need a mobile channel that separates business communication from personal texting and produces records for supervision.
iPlum’s financial compliance line comes with a dedicated business number to an advisor’s existing smartphone that enables you to:
Create an authorized advisor line
Advisors use the iPlum number for business calls, texts, and voicemail. Clients see the business caller ID rather than a personal number.
The firm can therefore name one approved mobile channel in its policy and direct advisors to use it rather than personal SMS and chat apps.
The business account console lets administrators create subaccounts, assign numbers, apply password policies, review logs, and remove user access. If an advisor leaves, the firm retains the number and archived records.
Archive texts in WORM storage
iPlum text message archiving for financial services automatically preserves incoming and outgoing business texts. The Enterprise archive uses non-rewriteable, non-erasable WORM storage and maintains an audit trail.
Authorized compliance personnel can search and export archived communications for review, complaint, examination, litigation, and internal investigation purposes.
Six-year and ten-year retention options allow a firm to map mobile records to its documented schedules.
Record regulated calls when policy requires it
iPlum Enterprise can automatically record incoming and outgoing calls. A customizable recording announcement can notify participants. Firms should review federal and state consent laws before activation and document the approved setting.
Call and text logs also give the firm activity records tied to the business number. Therefore, compliance personnel do not need to request personal phone histories or advisor screenshots to examine business activity.
Pair security with administrative oversight
iPlum encrypts communication data at rest and during transmission. The system also combines the business number, user account, archive, and administrative console.
The iPlum Enterprise plan provides call recording, plus 10 years of recordings and text archiving.
It is worth noting that iPlum does not decide which messages a firm must retain or when self-reporting is appropriate.
Your firm still needs legal analysis, written policies, training, reviews, retention schedules, and disciplinary procedures. iPlum provides the controlled mobile channel and preserved records needed to apply those decisions.
Frequently asked questions
Has the SEC stopped enforcing off-channel communication failures?
No. Current leadership has criticized prior stand-alone cases involving no identified investor harm. However, the SEC has not repealed recordkeeping rules or announced a general enforcement exemption.
What changed in the SEC’s enforcement direction?
The Commission now gives greater priority to fraud, market manipulation, breaches of trust, investor losses, market integrity, remediation, and individual accountability over case volume and record penalties.
Do broker-dealers still need to preserve business texts?
Yes. Exchange Act recordkeeping rules and FINRA requirements still apply based on communication content. Firms must also supervise approved digital channels and detect prohibited off-channel business messaging.
Does encryption satisfy off-channel recordkeeping duties?
No. Encryption protects message content. It does not automatically provide firm authorization, archiving, retention schedules, supervisory access, record integrity, search, export, or legal holds.
Can self-reporting reduce an SEC penalty?
The SEC says self-reporting, cooperation, and remediation influenced some fiscal year 2025 resolutions. Firms should evaluate disclosure decisions with qualified legal and compliance personnel based on the facts.
The SEC’s new priorities do not end with archiving duties
SEC leaders now want enforcement to give greater weight to fraud, investor harm, market abuse, and individual misconduct. As a result, the SEC may bring fewer cases based only on missing off-channel records.
However, firms must still follow federal recordkeeping rules and FINRA supervision requirements. They also need communication records for customer disputes, regulatory examinations, and lawsuits.
Archived messages can reveal the same misconduct the SEC wants to investigate. A missing conversation could hide a client complaint, trade instruction, false statement, or evidence of fraud.
Therefore, financial firms still need an approved channel for client calls and texts.
iPlum provides advisors with a separate business number and automatically archives their texts. It also offers WORM storage, call recording, user administration, and searchable communication records.
Sign up to get started with iPlum
