Fintech Ads on X 2026: The SEC Marketing Rule After the $125M Fines

Why Fintech Posts on X Sit Under Two SEC Regimes

When a registered investment adviser or broker-dealer promotes itself on X, the post does not sit in a regulatory gap — it sits at the intersection of two SEC enforcement regimes that fintech marketers frequently treat as someone else's problem. The first regime governs what the post says: the amended Marketing Rule and, for broker-dealers, FINRA Rule 2210, which impose substantiation, fair-and-balanced presentation, and disclosure obligations on every promotional communication. The second governs whether the post is preserved: the recordkeeping rules whose enforcement produced more than $2 billion in penalties across over 100 firms since December 2021, including a single $125 million penalty paid by Wells Fargo entities in August 2023.

The two regimes are easy to underestimate because X feels informal. A character-limited post drafted in seconds does not feel like a regulated advertisement requiring substantiation, and a quick reply does not feel like a business communication requiring retention. But the SEC's definitions are broad, its enforcement is active, and the format of X — fast, ephemeral, conducive to confident claims and undisclosed endorsements — maps precisely onto the conduct the agency has been fining.

"The Marketing Rule's provisions regarding truthfulness, substantiation, and disclosure are critical to protecting investors. The advertisements at issue in each of these actions violated the Marketing Rule and posed a serious risk of misleading investors.
— Corey Schuster, Co-Chief, SEC Division of Enforcement's Asset Management Unit, September 9, 2024"

This guide covers the Marketing Rule and its seven prohibitions, testimonials and the finfluencer problem, FINRA Rule 2210, the off-channel recordkeeping sweep behind the $125 million penalty, X's financial-services ad policy and crypto certification, the common compliance gaps, and a checklist. For the sector framework see the Financial Services Ad Compliance guide and to track developments see the Policy Change Tracker.

Why the Format Amplifies the Risk

X amplifies securities-marketing risk because its design rewards exactly what the rules restrict. The character limit pushes firms to state a benefit without the balancing risk disclosure. The speed encourages confident performance claims posted before substantiation is gathered. The influencer culture normalizes paid endorsements that omit compensation disclosure. And the editability and deletability of posts create the impression that communications are transient when the recordkeeping rules treat them as records to be preserved. The platform's strengths as a marketing channel are its hazards as a regulated medium.

The SEC Marketing Rule and Its Seven Prohibitions

The amended Investment Advisers Act Rule 206(4)-1 — the Marketing Rule — was adopted December 22, 2020 with a compliance date of November 4, 2022, and it governs any adviser advertisement, including posts on X. The rule is principles-based and built around seven general prohibitions.

The Seven General Prohibitions

An advertisement may not:

• Untrue statements: Include an untrue statement of material fact, or omit a material fact necessary to make the statement not misleading.
• Unsubstantiated claims: Include a material statement the adviser cannot substantiate on demand by the Commission.
• Misleading implications: Include information reasonably likely to cause an untrue or misleading implication about a material fact.
• Unbalanced benefits: Discuss potential benefits without fair and balanced treatment of associated material risks or limitations.
• Unbalanced specific advice: Reference specific investment advice in a manner that is not fair and balanced.
• Unbalanced performance: Include, exclude, or time-frame performance results in a manner that is not fair and balanced.
• Otherwise misleading: Be otherwise materially misleading.

The substantiation requirement is especially consequential on X: a confident claim posted in a moment of marketing enthusiasm must be backed by evidence the firm can produce on the SEC's demand. The September 9, 2024 action against nine advisers ($1.24 million combined) cited untrue or unsubstantiated statements, undisclosed endorsements, and stale third-party ratings across websites, social media, and physical objects. To scan promotional language against the prohibitions use the AI Compliance Audit.

Testimonials, Endorsements, and the Finfluencer Problem

The Marketing Rule treats a compensated promotion by a finfluencer or paid athlete as an endorsement, and the adviser — not the promoter — bears the disclosure obligation. This is the single most misunderstood point in fintech social marketing.

The Conditions for a Compliant Endorsement

• Clear and prominent disclosure: Whether the promoter is a client or investor, whether the promoter is compensated, the material terms of compensation, and any material conflicts of interest — perceptible in connection with the endorsement, not buried in a hashtag.
• Oversight and written agreement: A reasonable basis to believe the endorsement complies, plus a written agreement describing scope and compensation — with a de minimis exception for compensation of $1,000 or less over twelve months and conditions for affiliates.
• No disqualification: The promoter must not be an ineligible person subject to disqualifying events.

The Enforcement Precedent

The November 1, 2024 Wahed Invest order ($250,000) found that for roughly eighteen months the firm ran endorsements from compensated professional athletes — including one with an ownership interest in its parent — across website, social media, and email without the required disclosures, and separately disseminated unapproved hypothetical performance to mass audiences. To verify whether an endorsement's disclosure is adequate use the Disclosure Checker. The recurring error is treating an influencer post as the influencer's speech; under the rule it is the adviser's advertisement.

FINRA Rule 2210 and the Public Post Standard

For broker-dealers, FINRA Rule 2210 governs communications with the public, and a public post on X is a retail communication subject to content standards, principal approval, and recordkeeping. Dually registered firms must satisfy both Rule 2210 and the Marketing Rule.

The Rule 2210 Framework for X

The pre-use principal approval requirement is a structural constraint the adviser side does not impose in the same way: a broker-dealer cannot post promotional content to X without principal review. The recordkeeping requirement is the bridge to the off-channel enforcement discussed next. For the sector framework see the Financial Services Ad Compliance guide.

The Off-Channel Recordkeeping Sweep and the $125M Penalty

The SEC's off-channel recordkeeping sweep is the source of the largest penalties in the digital-communications space, and it applies directly to communications on X. The legal basis is the recordkeeping framework under Exchange Act Section 17(a) and Advisers Act Section 204 and the books-and-records rules.

The Sweep by the Numbers

Since December 2021 the initiative has reached more than 100 firms and over $2 billion in penalties. The connection to X is direct: the same obligation that requires preserving text messages requires preserving business communications on social platforms, including promotional posts and business-related direct messages. A post that can be edited or deleted is a record the firm must capture and retain.

"Compliance with the books and records requirements of the federal securities laws is essential to investor protection and well-functioning markets... self-report, cooperate and remediate. If you adopt that playbook, you'll have a better outcome than if you wait for us to come calling.
— Gurbir S. Grewal, Director, SEC Division of Enforcement, August 8, 2023"

For multi-jurisdiction review use the Legal Compliance Scan. The lesson is blunt: what a firm fails to keep can cost more than what it actually said.

X's Financial Services Ad Policy and Crypto Certification

X permits financial promotion only with restrictions, and the gating requirement is prior authorization through certification. This is a separate layer on top of the securities-law obligations — neither substitutes for the other.

The X Requirements

• Certification required: Advertisers must obtain prior authorization by getting certified; certification is category-specific, and NFT approval does not extend to cryptocurrency.
• Geographic gating: An allow-list of target countries with additional restrictions in several jurisdictions; the advertiser must confirm its market is permitted.
• Crypto lines: ICOs, IEOs, and crypto mining are prohibited; educational and blockchain content and smart contracts are permitted without a license; other crypto and DeFi products are permitted once country-specific licensing is met.
• Paid partnerships: X has indicated regional restrictions on sponsored financial content; verify the current paid-partnership rules for the target jurisdictions before launch.

The crucial point is that X certification gates access but does not satisfy the SEC Marketing Rule or FINRA Rule 2210, and securities-law compliance does not exempt the advertiser from certification. A firm must clear both. For the platform framework see the X Ads Policy guide.

The Compliance Gaps Fintech Brands Hit on X

Four gaps recur, each tied to an enforcement theme.

The Four Recurring Gaps

• Undisclosed paid promotion: Finfluencer and athlete posts treated as the promoter's speech, omitting compensation and conflict disclosure (Wahed, Howard Bailey).
• Unsubstantiated performance: Performance and projected-return claims posted without substantiation, or hypothetical performance without the conditions the rule requires.
• Imbalanced risk disclosure: Benefit claims posted without proportionate risk context, violating the Marketing Rule's fourth prohibition and FINRA 2210(d)(1)(D).
• Unpreserved communications: Posts and business DMs not captured and retained, recreating the off-channel recordkeeping exposure.

The structural error across all four is treating X as a casual channel rather than a regulated advertising and communications medium. The defensible program documents promoter agreements and disclosures, substantiates and balances every claim, obtains principal approval for broker-dealer content, and captures and retains all communications. To stress-test the program use the Legal Compliance Scan and to verify disclosures use the Disclosure Checker.

Fintech X Advertising Compliance Checklist

• [ ] Every promotional post treated as a regulated advertisement subject to the Marketing Rule's seven prohibitions.
• [ ] All material claims substantiated and documented before posting; substantiation producible on SEC demand.
• [ ] Benefit claims paired with fair and balanced risk disclosure within the post.
• [ ] Performance presented fairly with required time periods; hypothetical performance restricted to permitted audiences and conditions.
• [ ] Every finfluencer / athlete endorsement papered with a written agreement and clear, prominent compensation and conflict disclosure.
• [ ] Promoters confirmed not to be disqualified persons.
• [ ] Broker-dealer content approved by a registered principal before use (FINRA 2210).
• [ ] All X posts and business communications captured and retained under the recordkeeping framework.
• [ ] X financial-services certification obtained for each category and target jurisdiction before launch.
• [ ] No ICO, IEO, or mining promotion; crypto and DeFi promotions only where country-specific licensing is met.