Commitment kind: unknown. Promised action: not established. Promised outcome: not established. Deadline: unknown; not assumed expired.
Occurrences
Similarly, the senators also demanded that FINRA require brokerages to protect customer accounts from hackers with phishing-resistant multi-factor authentication technology, such as passkeys.
Warren and Wyden demanded that FINRA require brokerages to use phishing-resistant multi-factor authentication to protect customer accounts.
unverified · Source version 62287 · locator unknown
Ong says FINRA has probably not put a formal rule in place yet due to the evolving nature of technology and the challenge of creating a rule that is “future-proof” and “technology-agnostic.”
Unverified model/legacy excerpt; not proof. AI summary (separate from source): Within the lookback window, reporting indicated no formal FINRA rule had yet been adopted to require the requested brokerage protections.
unverified · Source version 62288 · locator unknown
FINRA must also require brokers to secure customer accounts with phishing-resistant multi-factor authentication (MFA), specifically a technology called passkeys.
Unverified model/legacy excerpt; not proof. AI summary (separate from source): Warren and Wyden explicitly requested the policy in a letter to FINRA, documenting concrete effort but not delivery.
unverified · Source version 62288 · locator unknown
Please provide a response to this letter no later than September 17, 2026, detailing the steps that FINRA intends to take to protect investors.
Unverified model/legacy excerpt; not proof. AI summary (separate from source): The senators set a response deadline rather than citing an enacted rule or completed agency action, leaving the commitment unresolved as of the refresh date absent documented implementation.
unverified · Source version 62289 · locator unknown
The senators also demanded that FINRA require brokerages to protect customer accounts from hackers with phishing-resistant multi-factor authentication technology, such as passkeys.
Unverified model/legacy excerpt; not proof. AI summary (separate from source): The official Senate Finance release corroborates Warren’s effort to press FINRA for a passkey/phishing-resistant MFA requirement.
This Notice does not create new legal or regulatory requirements or new interpretations of existing requirements, nor does it relieve firms of any existing obligations under federal securities laws and regulations.
Fetched verbatim passage. AI summary (separate from source): FINRA’s existing ACATS fraud guidance was nonbinding and did not itself deliver a brokerage passkey or phishing-resistant MFA mandate.
Fetched verbatim passage. AI summary (separate from source): A related FINRA fraud-prevention rulemaking was still in notice-and-comment status during the lookback window, not yet an adopted requirement.