Table of Contents
SERIES 7 | SERIES 24 | SERIES 65 | FINANCIAL REGULATION COURSES
FINRA Rule 3150 governs the circumstances under which a FINRA member firm may hold a customer's mail rather than deliver it to the customer's usual address.
The rule permits mail holds but conditions them on a specific set of written instructions and protective measures designed to ensure that the accommodation serves the customer's genuine interests rather than concealing account activity from the customer or enabling misuse of account information by firm personnel.
Rule 3150 sits within the 3100 supervisory responsibilities subsection of the 3000 series and was adopted by SR-FINRA-2013-025, taking effect December 1, 2014.
It replaced and liberalized the prior standard set by NASD Rule 3110(i), which imposed strict time limits on mail holds that FINRA determined were unnecessarily rigid given the evolution of electronic communications and the range of legitimate reasons customers may have for requesting that their physical account mail be retained at the firm.
The rule is deceptively compact. Its full text occupies three short paragraphs. But its compliance implications extend considerably beyond those paragraphs because Rule 3150 operates at the intersection of several important supervisory concerns: the obligation under FINRA Rule 3110 to maintain written supervisory procedures that address the mail hold process, the investor protection framework for senior and vulnerable adults under FINRA Rule 2165, the customer account information obligations of FINRA Rule 4512, the account statement delivery requirements of FINRA Rule 2231, and the broader anti-fraud and customer protection obligations that run throughout the FINRA rulebook. A mail hold request is one of the recognized red flags for financial exploitation of older investors, and FINRA's current regulatory guidance treats Rule 3150 compliance as embedded within the firm's elder investor protection framework rather than as a standalone administrative matter.
The predecessor to Rule 3150 was NASD Rule 3110(i), which imposed fixed maximum time periods on how long a firm could hold a customer's mail. The NASD approach reflected the pre-digital era assumption that customers who requested mail holds were primarily travelers — executives on extended business trips, investors spending months at a vacation property — and that firm-held mail posed a limited supervisory risk so long as the period was capped. As electronic communication matured and as FINRA observed both the growing diversity of reasons customers might request mail holds and the corresponding growth of fraudulent mail hold schemes, the strict time-limit approach began to appear both over-inclusive and under-protective.
FINRA consolidated and replaced NASD Rule 3110(i) as part of the 2014 supervisory rules consolidation that also produced FINRA Rule 3110, FINRA Rule 3120, and FINRA Rule 3170. As Regulatory Notice 14-10 explained, the new Rule 3150 eliminated the strict time limits in favor of a more flexible framework built around written customer instructions, disclosure of electronic alternatives, and ongoing verification — while adding substantive investor protection requirements focused on ensuring that a mail hold genuinely reflects the customer's wishes and does not become a vehicle for concealing account activity.
The practical liberalization involved primarily the removal of a hard cap on the length of a mail hold for customers with acceptable reasons. Under the prior rule, holds beyond certain defined periods were categorically impermissible. Under Rule 3150, a hold may extend beyond three consecutive months if the customer provides an acceptable reason — such as safety or security concerns. Convenience alone is explicitly defined as insufficient to justify a hold of more than three months. This distinction reflects FINRA's judgment that a customer who merely finds it more convenient not to receive paper mail is adequately served by electronic alternatives, while a customer with genuine safety concerns — such as a domestic violence survivor who does not wish account statements arriving at a shared address — has a legitimate need for an extended hold.
Rule 3150(a) establishes the three conditions that must all be satisfied before a member may hold customer mail. Each condition reflects a distinct investor protection concern.
The first condition is written instructions from the customer specifying the time period of the requested hold. This is not a casual or informal accommodation — a verbal request is insufficient, and a standing practice of holding a customer's mail without documented instructions would constitute a violation. The instructions must state the duration of the hold. If that duration exceeds three consecutive months — counting any aggregation of prior requests so that a series of sequential short-term holds cannot be used to circumvent the three-month threshold — the customer's instructions must include an acceptable reason. The rule provides safety and security concerns as the paradigm example of an acceptable reason; convenience alone does not suffice. This construction creates a meaningful distinction between short-term holds, which the rule accommodates without requiring justification, and long-term holds, which require the customer to articulate a reason that goes beyond mere preference.
The aggregation rule for prior requests is significant. A firm cannot allow a customer to circumvent the three-month threshold by repeatedly submitting fresh three-month requests. Each consecutive request adds to the running total, and once the aggregate exceeds three months, an acceptable reason is required. Written supervisory procedures under FINRA Rule 3110 should address how the firm tracks aggregated hold periods and when the acceptable reason requirement is triggered.
The second condition requires the member to inform the customer in writing of any alternate methods — such as email notification or access through the member's website — through which the customer may receive or monitor account activity and information, and to obtain the customer's confirmation of receipt of that information. This condition embeds the customer's digital literacy and awareness into the compliance record. A firm cannot simply hold a customer's mail without ensuring the customer understands that electronic access to account information remains available. The confirmation requirement creates documentation that the firm communicated alternatives and that the customer acknowledged receiving that communication. This matters not only for compliance recordkeeping but also as a protection against the scenario where a mail hold is exploited by a third party who wishes the customer to remain uninformed of account activity — if the customer has been told about and confirmed awareness of electronic monitoring options, any subsequent claim of ignorance about account changes becomes harder to sustain.
The third condition requires the member to verify at reasonable intervals that the customer's instructions still apply. The rule does not prescribe a specific verification frequency, leaving that determination to the member's reasonable judgment and written supervisory procedures. But the verification obligation is real and ongoing. A mail hold does not become self-perpetuating once established. Firms must affirmatively re-confirm with the customer, at intervals their WSPs define as reasonable given the circumstances, that the hold remains requested and appropriate.
Rule 3150(b) adds a requirement that operates independently of the three-part permission framework. During any period in which a member is holding a customer's mail, the member must be able to communicate with the customer in a timely manner to provide important account information as necessary. The rule identifies two examples of communications that must be deliverable: privacy notices and the SIPC information disclosures required by FINRA Rule 2266. These examples are illustrative rather than exhaustive. Any communication that is legally required, or that pertains to material changes in the customer's account, rights, or relationship with the firm, must be reachable to the customer notwithstanding the mail hold.
This provision prevents Rule 3150 from being used as a mechanism to functionally sever the firm's communication channel with the customer. A customer who requests a mail hold is not requesting ignorance of their account — they are requesting physical mail retention. The firm's ability to reach the customer quickly when important information must be conveyed is a separate obligation from the mail hold accommodation itself. The practical implication for compliance programs is that firms must maintain a current and operative alternative contact mechanism — typically an email address or telephone number — for every customer whose physical mail is being held. A mail hold for which the firm has no other way to contact the customer fails the Rule 3150(b) standard.
Rule 3150(c) imposes a substantive investor protection requirement that distinguishes Rule 3150 from a purely administrative accommodation rule. A member holding customer mail under this rule must take actions reasonably designed to ensure that the customer's mail is not tampered with, held without the customer's consent, or used by an associated person of the member in any manner that would violate FINRA rules or the federal securities laws.
Each of the three prohibited outcomes addresses a distinct risk. Tampered mail — mail that has been opened, altered, or selectively withheld — presents an obvious fraud risk. Mail held without the customer's consent is the scenario Rule 3150(a)'s written instructions requirement is designed to prevent, but Rule 3150(c) imposes an affirmative obligation to take reasonable actions to ensure this does not occur in practice, not merely on paper. The third prohibited outcome — use by an associated person in a manner violating FINRA rules or federal securities laws — is the most significant from an enforcement standpoint. An associated person who uses access to a customer's held mail to monitor the customer's positions, time trades around statement periods the customer cannot see, or impersonate the customer by intercepting correspondence is committing violations of FINRA Rule 2010, FINRA Rule 2020, and potentially multiple provisions of the federal securities laws. Rule 3150(c) places the compliance burden on the firm to design systems and procedures that make such misuse reasonably difficult to accomplish and reasonably likely to be detected.
The practical compliance architecture required by Rule 3150(c) includes physical or digital access controls on held mail, audit trails documenting who accessed held mail and when, supervisory review procedures for held mail accounts, and training for associated persons on the prohibition against using held mail for personal advantage. Firms should address all of these elements in their written supervisory procedures under FINRA Rule 3110.
Rule 3150 has acquired particular significance in the context of elder investor protection — a sustained regulatory priority for FINRA across the 2020s. Mail holds have been identified as one of the recognized indicators of potential financial exploitation of older investors. A pattern in which a third party — a family member, caregiver, or fraudster — requests a mail hold on an older customer's account to prevent the customer from seeing statements, trade confirmations, or withdrawal records while improperly controlling the account is a textbook exploitation scenario. FINRA's regulatory guidance has increasingly integrated Rule 3150 compliance into the broader framework of elder investor protection that includes FINRA Rule 2165 (Financial Exploitation of Specified Adults), FINRA Rule 4512's trusted contact person requirement, and the proposed Rule 2166 (Temporary Delays for Suspected Fraud) included in Regulatory Notice 26-02, published January 2026.
FINRA Rule 2165 allows firms to place a temporary hold on a disbursement of funds or securities from an account of a specified adult — a customer aged sixty-five or older, or a customer aged eighteen or older with a mental or physical impairment that renders the person unable to protect their own financial interests — when the firm reasonably believes that financial exploitation may be occurring or has been attempted. Rule 3150's verification and consent requirements work in tandem with Rule 2165: a firm reviewing a mail hold request for an elderly customer that was initiated by a third party rather than the customer directly has an obligation under Rule 3150 to verify that the customer's instructions genuinely apply and an obligation under Rule 2165's investor protection framework to consider whether the request is itself a red flag for financial exploitation. Regulatory Notice 25-02, issued January 2026 in response to natural disasters affecting multiple states, reminded firms of their Rule 3150 obligations while also acknowledging that emergency circumstances may make it difficult to obtain required customer instructions, directing firms in those circumstances to contact their FINRA Risk Monitoring Analyst.
The 2026 FINRA Annual Regulatory Oversight Report — published December 2025 — identified financial exploitation of customers, particularly older and vulnerable investors, as an ongoing examination priority. Americans over age sixty lost more than four point eight billion dollars to fraud in 2024 according to FBI data, and FINRA's regulatory response has been to strengthen both the rules directly addressing exploitation — Rules 2165, 4512, and the proposed 2166 — and the broader operational rules, including Rule 3150, that can serve either as investor protections when properly observed or as exploitation vectors when improperly applied.
The connection between Rule 3150 and the written supervisory procedures obligation of FINRA Rule 3110 is direct and important. A member that holds customer mail must have WSPs specifically addressing the mail hold process. Those WSPs should address at minimum: the requirement for written customer instructions specifying a time period before any hold is established; the threshold at which an acceptable reason is required and how the firm tracks aggregation of prior hold periods; the procedures for informing customers of electronic alternatives and obtaining their confirmation; the intervals at which verification of continuing instructions will occur; the physical or digital controls governing who may access held mail; the audit trail that documents access to held mail; the supervisory review procedures for accounts with active mail holds; the procedures for maintaining alternative contact information sufficient to satisfy the Rule 3150(b) communication obligation; the training requirements for associated persons regarding the prohibition on misuse of held mail; and the integration of the mail hold review process with the firm's elder investor protection program under Rule 2165.
FINRA Rule 3120's supervisory control testing obligation applies to the mail hold process as it does to all other supervisory functions. A firm's annual supervisory control testing should include periodic sampling of mail hold requests to verify that written instructions were received, that electronic alternatives were disclosed and confirmed, that ongoing verification occurred at reasonable intervals, and that no red flags suggesting improper use or exploitation are present in the accounts sampled.
Rule 3150 connects to FINRA Rule 2231 — Customer Account Statements — through Supplementary Material .04 of Rule 2231, which was added effective January 1, 2024 following the adoption of amendments under Regulatory Notice 23-02. Supplementary Material .04 explicitly reminds member firms that they are permitted to hold customer mail, including customer account statements, subject to the requirements of Rule 3150. This cross-reference confirms that account statements — the most important periodic communication that a firm sends to a customer — are among the types of mail that may be held under Rule 3150's framework, and that the Rule 2231 obligation to deliver account statements does not preclude mail holds that comply with all Rule 3150 conditions.
The interaction with electronic delivery is practically significant. A firm holding a customer's physical mail is not relieved of its obligation to make account information available to the customer through other means. The Rule 3150(a)(2) requirement to inform the customer of electronic alternatives and obtain confirmation of receipt is the mechanism through which the firm ensures the customer retains access to account information notwithstanding the physical mail hold. A firm that holds a customer's mail, has no confirmed electronic contact method for the customer, and fails to verify the customer's instructions at reasonable intervals has created a situation in which the customer may be effectively blind to account activity for an extended period — an outcome that Rule 3150 was specifically designed to prevent.
Mail hold violations in the FINRA enforcement record have most commonly appeared as components of broader fraud or elder exploitation cases rather than as standalone Rule 3150 violations. The rule's investor protection significance is greatest when viewed in the context of associated person misconduct: a registered representative who arranges a mail hold for a customer without the customer's knowledge or consent, or who uses access to held mail to monitor or manipulate the customer's account, is engaged in conduct that violates Rule 3150(c) as well as FINRA Rule 2010's standards of commercial honor, FINRA Rule 2020's prohibition on manipulative and deceptive conduct, and potentially FINRA Rule 2165's elder exploitation framework if the customer is a specified adult.
Firms that have failed to maintain written supervisory procedures addressing mail holds, or that have approved mail holds without obtaining the required written instructions, or that have not verified ongoing instructions at reasonable intervals, have faced supervisory deficiency findings in the context of broader Rule 3110 examinations. FINRA's examination focus on elder investor protection means that mail hold compliance for accounts of older customers receives heightened scrutiny, and firms should expect that examination staff reviewing elder investor protection programs will also review mail hold records for evidence of proper customer consent and ongoing verification.
FINRA Rule 3150 is tested on the Series 24 General Securities Principal examination in the context of supervisory obligations, customer protection requirements, and elder investor protection. The rule appears on the Series 7 General Securities Representative examination in the context of customer account administration, the obligations firms owe to customers, and the recognition of financial exploitation red flags. Series 65 candidates encounter Rule 3150 in the broader investor protection framework. The rule is a secondary testing area — not among the highest-frequency topics on any examination — but its content overlaps significantly with higher-frequency topics including Rule 3110 supervision, Rule 2165 elder exploitation, and Rule 4512 customer account information, making a working knowledge of Rule 3150's conditions and protections valuable for any candidate studying FINRA's customer protection framework.
The key points to retain are these: FINRA Rule 3150 permits member firms to hold a customer's physical mail but conditions the accommodation on written customer instructions specifying the requested time period, written disclosure of electronic alternatives with confirmed customer acknowledgment, and ongoing verification at reasonable intervals that the instructions still apply; holds extending beyond three consecutive months — counting all aggregated prior requests — require an acceptable reason such as safety or security concerns, while convenience alone is expressly insufficient to justify a hold beyond three months; during any mail hold the firm must maintain the ability to communicate with the customer in a timely manner to deliver important account information including privacy notices and the SIPC disclosures required by Rule 2266; firms holding customer mail must take actions reasonably designed to ensure the mail is not tampered with, not held without the customer's consent, and not used by any associated person in a manner that would violate FINRA rules or the federal securities laws; Rule 3150 operates within the broader elder investor protection framework alongside Rule 2165, Rule 4512, and the trusted contact person requirement, because unauthorized mail holds are a recognized red flag for financial exploitation of older customers; written supervisory procedures under Rule 3110 must specifically address the mail hold process including access controls, audit trails, verification intervals, and integration with the firm's elder exploitation detection program; and Supplementary Material .04 of Rule 2231, effective January 1, 2024, explicitly confirms that account statements may be held subject to Rule 3150's conditions, connecting the mail hold framework to the customer account statement delivery obligations.
