FINRA Rule 2090 Know Your Customer

Know-your-customer problems often surface when an investor learns that a broker recommended investments without understanding the investor’s finances, account purpose, instructions, or who had authority over the account. FINRA Rule 2090, the know-your-customer rule, requires member firms to use reasonable diligence, in opening and maintaining every account, to know and retain the essential facts concerning every customer and concerning the authority of each person acting on behalf of that customer.

In plain terms, a firm has to know who you are, who is allowed to give instructions on the account, and what it needs to know to service the account properly. Separate rules then require a broker to understand your investment profile, such as goals, risk tolerance, time horizon, and liquidity needs, before recommending investments. When a recommendation goes wrong, Rule 2090 records often supply the evidence for an unsuitability or best-interest claim.

For investors, the practical question is not whether an account form exists. The practical question is whether the broker and firm had enough accurate customer information to service the account, follow instructions, understand who had authority, comply with applicable rules, and evaluate recommendations. When the record shows stale, false, incomplete, or ignored customer information, Rule 2090 can become important evidence in a broker misconduct, negligence, unsuitable recommendation, or failure-to-supervise claim.

What Does FINRA Rule 2090 Require?

FINRA Rule 2090 is short, but it carries real evidentiary weight in investor disputes. It requires a member firm to use reasonable diligence, both when an account is opened and while the account is maintained, to know and retain the essential facts concerning the customer and concerning the authority of each person acting on the customer’s behalf. FINRA Rule 0140 states that persons associated with a member have the same duties and obligations as the member under FINRA rules.

That framework makes Rule 2090 more than a paperwork rule. Account documents, risk profiles, trusted-contact forms, authority records, instructions, and updates can show what the firm knew, what it should have known, and whether the broker’s later conduct fit the customer’s actual situation. If a broker recommended high-risk products to an investor whose stated objective was preservation of capital, or treated an unauthorized family member as if that person controlled the account, the Rule 2090 record becomes part of the proof.

Rule 2090 does not make every investment loss actionable. A claim still needs misconduct, causation, damages, a viable forum, and timely filing. But when the customer profile was wrong, stale, incomplete, or contradicted by the broker’s own communications, the rule can help explain why the recommendation, account activity, or supervision was unreasonable.

What Counts as Essential Customer Facts?

Rule 2090 Supplementary Material .01 defines essential facts by function: the facts required to (a) effectively service the customer’s account, (b) act in accordance with any special handling instructions, (c) understand the authority of each person acting on behalf of the customer, and (d) comply with applicable laws, regulations, and rules. The analysis is fact-specific because different accounts require different information. The table below also includes the investment-profile factors that FINRA Rule 2111 and Reg BI (17 C.F.R. § 240.15l-1) require a broker to consider before recommending investments. In practice, the same account records prove both.

Which Account Information Records Matter Under FINRA Rule 4512?

FINRA Rule 4512 separately addresses customer account information that member firms must maintain. It includes information such as the customer’s name and residence, whether the customer is of legal age, the associated person responsible for the account, firm acceptance of the account, authorized persons for entity accounts, trusted-contact information where applicable, and reasonable efforts to obtain certain additional information for non-institutional accounts.

Rule 4512 and Rule 2090 work together in many investor disputes. Rule 4512 helps identify records that should exist. Rule 2090 helps explain why those records matter. A firm may have a new-account form, but if the form contains inaccurate objectives, an inflated risk tolerance, missing authority information, or no meaningful update after a major life event, the records may support the investor’s argument rather than the firm’s defense.

How Do Suitability and Best-Interest Rules Use the Customer Profile?

Customer-profile evidence often becomes the foundation for recommendation-based claims, and which standard applies depends on the customer. For recommendations to retail customers, the governing standard is the SEC’s Reg BI, 17 C.F.R. § 240.15l-1, a binding rule summarized in the SEC’s Reg BI compliance guide. It requires a broker to act in the retail customer’s best interest at the time of the recommendation and imposes a Disclosure Obligation, Care Obligation, Conflict of Interest Obligation, and Compliance Obligation.

For recommendations Reg BI does not cover, such as many recommendations to entity and institutional accounts, FINRA Rule 2111 governs suitability; Rule 2111 Supplementary Material .08 states that the rule does not apply to recommendations subject to Reg BI (17 C.F.R. § 240.15l-1). Rule 2111 includes three obligations: reasonable-basis suitability (the product or strategy is suitable for at least some investors), customer-specific suitability (it fits this customer’s investment profile), and quantitative suitability (a series of recommended transactions is not excessive when taken together). For institutional accounts, Rule 2111(b) lets a firm satisfy the customer-specific obligation if it reasonably believes the customer can evaluate investment risks independently and the customer affirms that it is exercising independent judgment. For retail accounts, excessive-trading claims now generally proceed under the Reg BI Care Obligation, which contains a parallel requirement. Both standards depend on accurate customer information, which is where Rule 2090 records come in.

That is a conduct-standard and evidence point, not a stand-alone recovery guarantee. In its Reg BI adopting release (Release No. 34-86031), the SEC stated that the rule does not create a new private right of action or right of rescission. For investors, the safer framing is whether the same customer-profile facts support available claims, arbitration allegations, supervision issues, or damages proof.

Rule 2090 is different because it is not limited to one recommendation. It focuses on knowing and retaining essential customer facts for the account. That is why it can matter before, during, and after a disputed recommendation. If the broker did not ask enough questions, recorded answers that the investor disputes, ignored corrected information, or recommended products inconsistent with the profile, the customer-profile failure can support a broader unsuitable investment claim or a Reg BI Care Obligation analysis.

The sequence matters. A broker cannot reasonably evaluate whether a recommendation fits a customer without first understanding the customer. That does not mean every Rule 2090 problem proves a securities claim. It means the account record should be tested against the product, the recommendation, the firm’s supervision, and the loss calculation.

Common Rule 2090 Failures in Investor Claims

Rule 2090 issues tend to appear in patterns. Some involve weak account opening. Others involve stale information, ignored updates, or a broker treating paperwork as a defense even though the real communications show a different customer profile.

For example: a recently retired investor tells the broker that she needs income and access to cash, but the account form is marked aggressive growth and the broker recommends an illiquid alternative investment. The profile mismatch does not prove the whole claim by itself, but it can help show why the recommendation and supervisory approval need closer review.

For example: an adult child begins calling in trade instructions for a parent’s account without written authority, while the firm has trust and power-of-attorney records showing who may act. If the firm accepts instructions from the wrong person or ignores special handling instructions, Rule 2090 and account-authority records can become central evidence.

These problems often overlap with financial advisor negligence, unauthorized trading, overconcentration, excessive trading, or failure to supervise. FINRA Rule 3110 requires a supervisory system reasonably designed to achieve compliance with applicable securities laws, regulations, and FINRA requirements. The strongest claims are usually document-driven. A lawyer will compare what the account paperwork says, what the customer says happened, what the broker wrote, what products were recommended, and what the firm approved or failed to stop.

How Rule 2090 Issues Appear in FINRA Arbitration

Many investor disputes with brokerage firms proceed in FINRA arbitration. Under FINRA Rule 12200, customer arbitration is required when arbitration is required by a written agreement or requested by the customer, the dispute is between a customer and a member or associated person, and the dispute arises in connection with the member’s or associated person’s business activities, subject to the rule’s insurance-business exception.

In an arbitration claim, Rule 2090 usually appears as part of the liability story rather than as the only issue. The statement of claim may allege that the broker failed to gather or update essential facts, recommended products inconsistent with the customer’s profile, ignored special instructions, mishandled account authority, or failed to supervise a representative who was operating from bad information.

The arbitration panel will still evaluate proof. The investor needs documents, testimony, damages, and a causal link between the deficient customer-information process and the loss. A profile error that had nothing to do with the investment loss may have little practical value. A profile error that explains why a concentrated, illiquid, leveraged, or complex recommendation was approved can be much more important.

What Evidence Should Investors Preserve?

A Rule 2090 issue is easiest to evaluate when the investor has preserved the account record before memories fade and online portals change. Start with the documents that show what the broker and firm knew or should have known at the relevant time.

• Account-opening and profile records: new-account forms, risk questionnaires, objective selections, account agreements, margin agreements, options agreements, and profile update forms.
• Recommendation records: emails, texts, letters, notes, proposals, product brochures, offering memoranda, prospectuses, term sheets, comparison charts, and handwritten meeting notes.
• Authority records: powers of attorney, trust documents, corporate resolutions, estate documents, discretionary account agreements, account-transfer forms, and documents naming authorized persons.
• Account activity: monthly statements, confirmations, transaction histories, distribution requests, margin records, fee reports, performance summaries, and commission information.
• Complaint and escalation records: letters to the broker, firm complaint responses, call notes, case numbers, emails with branch managers, and any FINRA or SEC complaint submission.
• Background research: FINRA BrokerCheck reports for the broker and firm, including disclosures, registration history, employment history, and customer dispute information.

Investors should also create a dated timeline in their own words. The timeline should identify when the account was opened, what the broker asked, what the investor said about goals and risk, when disputed investments were recommended, when the investor first noticed a problem, and what the firm did after receiving notice. A timeline can help counsel assess causation, damages, and timing alongside the account records.

Account-Authority Issues for Older Investors

Rule 2090 can be especially important when the investor is older, depends on the account for income, has diminished capacity concerns, or relies on another person to help with financial decisions. In those cases, the firm may need to understand authority, trusted-contact information, withdrawal instructions, unusual disbursement requests, and whether account activity matches the customer’s known circumstances.

Rule 4512 addresses trusted-contact information. FINRA Rule 2165 permits, but does not require, a firm to place a temporary hold on a disbursement or a securities transaction in a specified adult’s account when it reasonably believes financial exploitation has occurred, is occurring, has been attempted, or will be attempted; Supplementary Material .01 describes the rule as a safe harbor. Not placing a hold is not, by itself, a violation of Rule 2165. Where a firm ignored obvious authority problems, unusual withdrawals, or sudden account changes, the investor-side question is usually supervision under FINRA Rule 3110, negligence, or suitability. This page addresses those securities claims; it does not address elder-law, guardianship, or elder-abuse statutory claims.

For older investors, customer-profile evidence often overlaps with suitability and supervision. An account profile showing conservative objectives can conflict sharply with high-risk private placements, concentrated alternative products, frequent trading, margin use, or complex notes. A trusted-contact record can also show whether the firm had tools available to investigate suspicious activity before losses increased.

How Varnavides Law Reviews Rule 2090 Issues

Varnavides Law reviews Rule 2090 issues by starting with the account record, not just the broker’s label for the investment. The review typically examines the account-opening documents, customer profile, updates, communications, authority documents, product files, statements, trade confirmations, and firm responses to any complaint. The goal is to determine whether the firm knew and retained the essential facts it needed, whether those facts were accurate, and whether the investment activity was consistent with them.

That review also considers related legal theories. A Rule 2090 problem may support claims involving unsuitable recommendations, negligence, misrepresentation or omission, unauthorized trading, failure to supervise, or broader broker misconduct evidence. The rule is most useful when the facts show how missing or wrong customer information contributed to a recommendation, transaction, supervisory approval, or failure to stop ongoing harm.

Forum and timing are reviewed at the same time. FINRA arbitration may be available nationally depending on the parties, agreements, FINRA Rule 12200 arbitration scope, and FINRA Rule 12206 eligibility timing. Court claims can involve different forum, jurisdiction, admission, local counsel, and limitations issues. For a deeper overview of the arbitration forum, see Varnavides Law’s FINRA arbitration resource.

When Should Investors Discuss Rule 2090 With a Securities Lawyer?

A Rule 2090 review usually comes down to three comparisons: what the account records say about the customer and who had authority, what the investor actually told the broker, and what the broker recommended or allowed. When those line up, Rule 2090 is less likely to be the center of the case, although a recommendation can still be unsuitable for any investor, misrepresented, or excessive. When the profile is wrong or outdated, a risky product conflicts with stated goals, an unauthorized person gave instructions, or the firm refused to correct records, the customer-profile failure may connect to misconduct, supervision problems, and recoverable losses.

Frequently Asked Questions