What To Do If You Suspect Fraud on Your Brokerage Account

If you suspect fraud on your brokerage account, the first goal is to stop active account risk if money is moving, then preserve the record before the story changes. The issue may be a hacked account, an unauthorized trade, a misrepresentation by a broker, excessive trading, improper use of discretion, unsuitable recommendations, or a transfer you did not approve. Each situation calls for a different response, but the early steps are similar: secure the account, preserve evidence, create a dated timeline, communicate in writing, and understand whether a regulatory complaint, FINRA arbitration claim, or another recovery path fits the facts.

This page is a practical checklist for investors who are asking what to do if you suspect fraud on brokerage account activity. It is not a substitute for legal advice on a specific claim. The right next step depends on who controlled the account activity, whether the money is still at risk, what the account documents say, and how quickly the disputed conduct must be addressed.

What Should You Do First If You Suspect Brokerage Account Fraud?

Start with the risk that is still active. Do not rely only on the account app, a verbal explanation from the broker, or a running balance on the screen. If account access appears compromised, a transfer is pending, or a trade is in progress, contact the brokerage firm’s fraud or security department immediately through a verified channel and ask the firm to secure the account, block unauthorized access, attempt any available transfer recall or trade review, and preserve relevant logs. Download statements and confirmations, take screenshots of pending activity, and write down when you first noticed the problem as soon as you can do so without delaying urgent account protection.

1. Secure access. Change passwords from a clean device, enable multifactor authentication if available, and notify the firm immediately through a verified channel if someone else may be accessing the account.
2. Preserve records. Download monthly statements, trade confirmations, account activity, tax lots, messages, emails, text messages, notices, and any login or transfer alerts.
3. Create a dated timeline. List each disputed trade, transfer, recommendation, call, meeting, message, or account change in chronological order.
4. Ask the firm for a written explanation. If the issue involves a broker or branch office, request escalation to the branch manager or compliance department and keep a copy of every communication.
5. Do not sign a release you do not understand. A partial credit, account adjustment, or settlement document may affect later rights.
6. Evaluate the recovery route. For a brokerage-firm dispute, FINRA arbitration may be available, but the forum and claims depend on the account documents and facts.

For a deeper evidence checklist, see the securities fraud evidence collection guide. For a broader misconduct overview, see the broker misconduct page.

Is It Account Takeover, Unauthorized Trading, or Broker Misconduct?

The phrase “brokerage account fraud” can describe several different problems. A useful first review separates who caused the problem and what conduct created the loss. That distinction controls the evidence, the likely defenses, and the recovery path.

For example, an investor who never authorized a trade should focus first on who entered the order, when it was entered, and what approval records exist. For instance, an investor who approved a purchase after being told only the upside story may need to preserve sales materials, risk disclosures, notes, emails, and evidence of what was omitted.

What Records Should You Save as Early as Possible?

The strongest early file is organized by source and date, but record preservation should not delay urgent account protection. If there is active unauthorized access, a pending transfer, or a trade in progress, contact the brokerage firm’s fraud or security department immediately while preserving records in parallel. Preserve originals before adding notes or highlights. If you need to explain a document, put the explanation in a separate chronology so the underlying record remains clean.

• Monthly statements, trade confirmations, account activity reports, tax-lot reports, profit-and-loss reports, margin records, transfer records, and cash ledger entries.
• New account forms, customer profile information, investment objectives, risk tolerance, liquidity needs, time horizon, margin agreement, options agreement, trusted contact records, and later account-profile changes.
• Emails, text messages, app messages, voicemail notes, meeting notes, recorded-call references, sales decks, prospectuses, offering documents, trade recommendations, and written risk disclosures.
• Brokerage-firm notices, login alerts, password-reset notices, wire-transfer alerts, address changes, beneficiary changes, and any security alerts that may show account takeover or unauthorized access.
• Written objections to the broker, branch manager, compliance department, or customer-service team, including the date you first raised the concern.
• BrokerCheck reports for the broker and firm, especially if the history shows prior customer disputes, disciplinary events, or employment changes that may matter to the review.

FINRA’s BrokerCheck page describes BrokerCheck as a free tool for researching the backgrounds of investment professionals, brokerage firms, and investment adviser firms. BrokerCheck is useful background, but it does not replace the account-level proof of what happened to your specific account.

Should You Contact the Brokerage Firm Right Away?

Yes, when there is active unauthorized access, a pending transfer, a trade you did not authorize, or a recent loss that may still be contained. Use verified contact information from an official statement, the firm’s verified website or app, or another trusted source, not a suspicious message. Ask for the fraud department, compliance department, or branch manager depending on the facts. Request written confirmation of what the firm will do, including whether the account will be restricted, whether unauthorized access has been blocked, and whether electronic logs, order tickets, calls, and internal notes will be preserved.

FINRA’s investor complaint guidance says investors should immediately question transactions they do not understand or did not authorize with their broker. If the broker’s response is not satisfactory, FINRA directs investors to contact the branch manager or compliance department, and if money was lost or an unauthorized trade was made, to complain in writing and retain copies of the correspondence.

When Should You File a FINRA or SEC Complaint?

A regulatory complaint can be appropriate when the conduct may violate securities rules, but it should not be confused with a customer recovery claim. FINRA states that, through its complaint program, it investigates complaints against brokerage firms and their employees and may take disciplinary action. The SEC maintains a portal to report possible securities-law violations. Those processes can help regulators evaluate misconduct, but they do not automatically make the investor whole.

FINRA also warns that if a complaint is outside FINRA’s jurisdiction, FINRA may pass it to another regulator, and that forwarding can delay the investigation process. That is why the first filing should identify the right target: a FINRA-regulated brokerage firm or broker, an SEC-registered adviser, a commodity/futures issue, a criminal theft issue, or a mixed matter involving more than one regulator.

For a detailed comparison, see SEC vs FINRA recovery options. If the likely recovery path is a customer dispute with a brokerage firm or broker, the FINRA arbitration vs lawsuit guide explains the forum difference.

Do not assume SIPC applies. SIPC describes its protection as focused on missing cash or securities when a SIPC-member brokerage firm fails financially. That is different from a general recovery claim for market losses, bad advice, or unsuitable recommendations; limited SIPC issues involving unauthorized trading can depend on specific introducing-firm, clearing-firm, and customer-account facts. SIPC may matter in a failed-firm custody scenario, but it is not a general insurance policy for every brokerage-account fraud concern.

Which Rules May Matter in a Brokerage Account Fraud Review?

The applicable rules depend on the conduct. A single account may involve several theories, but the analysis should keep them separate: deception, unauthorized trading, recommendation quality, supervision, customer-profile records, and arbitration procedure are not the same thing.

Regulation Best Interest’s Care Obligation applies to broker-dealer recommendations to retail customers and requires the broker-dealer to act in the retail customer’s best interest at the time of the recommendation. FINRA Rule 2111 remains relevant where the SEC retail recommendation standard does not apply, and FINRA Rule 2111’s supplementary material states that FINRA Rule 2111 does not apply to recommendations subject to the SEC standard.

How Do You Build a Timeline for a Possible FINRA Arbitration Claim?

A useful timeline connects disputed conduct to account impact. Start with the earliest relevant account event, then list each communication, recommendation, trade, transfer, account-change notice, objection, and firm response. For every disputed event, identify the date, account, security, dollar amount, person involved, document source, and why the event is disputed.

FINRA Rule 12200 generally requires arbitration under the Code when arbitration is required by written agreement or requested by the customer, the dispute is between a customer and a FINRA member or associated person, and the dispute arises in connection with the business activities of the member or associated person, subject to the rule’s insurance-business exception. FINRA Rule 12206 is a six-year eligibility rule measured from the occurrence or event giving rise to the claim and states that it does not extend applicable statutes of limitations.

FINRA Rule 12506 addresses Document Production Lists in customer arbitrations and describes documents presumed discoverable in customer disputes between a customer and a member or associated person. That is one reason to preserve the file early. A clean chronology helps counsel evaluate whether the matter belongs in FINRA arbitration, whether a regulator complaint should also be made, and whether another forum may apply.

What Should You Avoid While Investigating the Account?

Some investor mistakes make a valid complaint harder to prove. The point is not to stay silent when money is at risk. The point is to act in a way that preserves rights and evidence.

• Do not delete messages, close accounts, or trade out of positions before saving the account history unless immediate loss prevention requires action.
• Do not rely only on phone calls. Confirm important points in writing and keep copies.
• Do not describe every loss as “fraud” without separating unauthorized activity, misrepresentation, unsuitable recommendations, churning, account takeover, and market movement.
• Do not assume a FINRA or SEC complaint will recover the loss. It may help regulators investigate, but compensation usually requires a separate recovery process.
• Do not delay because the broker says the issue is being reviewed. Preserve records and track deadlines while the firm investigates.

How Varnavides Law Reviews Suspected Brokerage Account Fraud

Varnavides Law, PC reviews suspected brokerage account fraud by separating the file into intake facts, account-control facts, rule issues, damages, forum issues, and evidence gaps. That order matters. It helps distinguish a hacked-account problem from a broker-misconduct problem, a regulatory complaint from a recovery claim, and an investment loss from a legally supported damages theory.

Gary Varnavides’ prior work at Sichenzia Ross Ference LLP defending broker-dealers in FINRA arbitrations and securities matters helps the firm evaluate how brokerage firms may respond to customer allegations, including arguments based on customer authorization, written disclosures, account statements, sophistication, market movement, causation, and damages. When the issue involves false statements or omitted risks, the firm’s securities fraud practice may also be relevant. When the issue is trading without permission, the unauthorized trading page provides additional background.