60 Series 63 Exam Concepts You Need to Know Before Test Day

An investment adviser is any person who, for compensation, advises others about securities. The two elements are securities advice and compensation, and compensation can be noncash, like free services or reduced fees. The law then carves out professionals whose advice is genuinely incidental to their trade: lawyers, accountants, engineers, and teachers, provided the advice is incidental and they receive no special compensation for it. Publishers of general circulation publications with regular readership and no tailored advice are excluded, as are banks and federal covered advisers. The exam turns on whether the person holds out as giving securities advice and whether compensation flows for that advice.

Memory hook:Incidental advice stays free of charge; charge for it and you are an adviser.

Federal covered advisers register with the SEC, not with states, and the preemption is broad. The covered categories include advisers registered with the SEC, advisers to registered investment companies, and certain advisers relying on federal exemptions such as private fund advisers. States cannot require registration, licensure, or qualification from a covered adviser, and cannot impose surety bonds or minimum net capital beyond federal rules. What states retain is real but narrow: the adviser must make a notice filing and pay a fee, and the Administrator keeps full antifraud and enforcement authority, including examination of records. So the state can investigate and sanction a covered adviser for fraud but cannot make it register.

Memory hook:Covered advisers file notice, not registration; states still police fraud.

Two exclusions let small or specialized advisers avoid state registration. The de minimis exclusion applies when the adviser has no place of business in the state and during the preceding twelve months has had no more than five clients who are residents of that state. Count clients, not transactions, and count them over a rolling twelve-month window. The sixth resident client breaks the exclusion and triggers a registration duty. Separately, an adviser whose clients are exclusively institutions, such as banks, insurance companies, investment companies, or pension plans, is excluded regardless of client count, as long as it holds no place of business in the state. Retail contact destroys both exclusions.

Memory hook:Five resident clients max; institutions only means no retail.

An investment adviser representative is a natural person who performs any of the core advisory functions: making recommendations or rendering advice regarding securities, managing client accounts, determining which recommendations should be given, soliciting or negotiating advisory services, or supervising employees who do these things. Note that supervising counts, so a manager who never talks to clients can still be an IAR. The exclusion covers clerical or administrative positions, meaning people who keep records, process paperwork, answer phones, or handle ministerial tasks without giving advice or soliciting. The line is functional, not titular: a person with an impressive title who only files paperwork is excluded, while a junior employee who solicits one client must register.

Memory hook:Advise, manage, solicit, or supervise means register; pure paperwork does not.

Because the adviser itself is federally covered, its representatives generally escape state registration too, but with one important exception. An IAR of a federal covered adviser must register with the state if the representative maintains a place of business in that state. A place of business means a location where the representative regularly conducts business, including a home office used for meeting clients, not merely a mailing address or occasional hotel visit. So a representative of an SEC-registered adviser who works from a home office in a state and meets clients there must register in that state, while a colleague who merely services a few resident clients remotely does not. The physical presence, not the client location, controls.

Memory hook:Covered adviser, uncovered office: a place of business forces IAR registration.

An IAR registers with each state that has jurisdiction, normally through a Form U4 filing made through the adviser’s firm. The standard qualification route is the Series 65; the common alternative is a valid Series 7 paired with the Series 66. The Series 66 by itself is not enough because it assumes the product knowledge tested by the Series 7. A state may waive the exam for holders of recognized professional designations, but an exam waiver is not a registration waiver. The useful distinction is qualification versus authority: passing an exam or holding a designation can satisfy the competency requirement, yet the person still cannot conduct advisory business until the required state registration becomes effective.

Memory hook:Qualification opens the application; effective state registration opens the door to advisory business.

A broker-dealer is any person, meaning any individual or firm, engaged in the business of effecting or attempting to effect transactions in securities for the account of others, or buying and selling for its own account. The phrase attempting to effect is what makes the definition broad: a firm does not have to complete a single trade to be a broker-dealer. Soliciting orders, holding out as willing to execute trades, or running a website that matches buyers and sellers can all constitute attempting to effect. The business element matters too, so a one-time private trade between neighbors does not create broker-dealer status. Regularity and holding out are the markers the Administrator looks for.

Memory hook:No trade needed; the attempt itself puts you in the business.

Several players are excluded from broker-dealer registration. Banks are excluded for traditional trust and fiduciary activities, though a bank that engages in customer-directed brokerage through an affiliated broker-dealer is not excluded for that activity. Issuers effecting transactions in their own securities are excluded because they are selling their own product, not acting as intermediaries. A person with no place of business in the state who effects transactions exclusively with issuers, financial institutions, institutional buyers, or existing broker-dealer customers is also excluded. The unifying logic is that the exclusions protect entities dealing in their own capacity or with sophisticated counterparties, not firms soliciting the general public.

Memory hook:Banks, issuers, and institutions stay out; public solicitation pulls firms in.

An out-of-state broker-dealer can fall outside the state-law definition only if it has no place of business in the state and stays within one of two lanes. One lane permits transactions exclusively with issuers, broker-dealers, and specified financial institutions or institutional buyers. The other permits a broker-dealer licensed where it maintains its office to continue serving an existing customer who is temporarily in the state but is not a resident there. The current NASAA-amended 1956 Act does not create a general three-transaction allowance for retail business. A new resident retail customer, or an in-state office, breaks the exclusion and points back to registration.

Memory hook:No office, institutions—or an existing nonresident customer. New resident retail business requires registration.

Broker-dealer registration runs through Form BD, the uniform application that discloses the firm’s business, control persons, and disciplinary history. State law can require financial responsibility, including minimum capital and a surety bond, subject to federal limits for SEC-registered firms. The application is accompanied by an irrevocable consent to service of process appointing the Administrator to receive legal papers on the applicant’s behalf. That consent is not an endorsement and does not surrender defenses on the merits; it solves the jurisdictional problem of serving an out-of-state registrant. Separate the three ideas: Form BD supplies facts, financial requirements protect customers, and the consent establishes a reliable channel for legal service.

Memory hook:Form BD tells the story; capital protects customers; consent makes legal service reach the firm.

Registration is the beginning of obligations, not the end. Registered broker-dealers must maintain books and records, file reports with the Administrator, keep required filings current through amendments, and comply with financial responsibility rules. The Administrator has broad authority to examine registered firms, and the firm's consent to service of process plus its registration status means it must cooperate with examinations of its records and operations. The Administrator may also examine broker-dealers for cause when violations are suspected. Firms cannot hide behind being headquartered elsewhere; once registered in a state, their records relating to in-state business are open to inspection. Failure to keep filings current can lead to revocation or other administrative action.

Memory hook:Register in a state and open your books to its Administrator.

Broker-dealers bear responsibility for the conduct of their agents. A firm must reasonably supervise its agents, which means adopting and enforcing written supervisory procedures, monitoring communications, reviewing transactions, and designating supervisors with real authority. If an agent violates securities law while acting on the firm's behalf, the firm can be liable for failure to supervise even if the firm itself did not direct the violation. The Administrator can bring action against the firm, and the firm may face liability to customers. The defense that we did not know what our agent was doing does not work; the whole point of supervision is to know. Reasonableness of the system, not perfection, is the standard.

Memory hook:The firm answers for what its agents do under its supervision.

Acting as a broker-dealer without required registration can trigger administrative, criminal, and private consequences, but keep the routes separate. The Administrator may order the conduct stopped and pursue the registration remedies authorized by state law. A purchaser can also have a statutory civil claim when a security was sold in violation of the broker-dealer registration provision: rescission if the security can be tendered, or statutory damages after disposition, subject to the Act’s defenses and limitation periods. The seller should not expect to keep transaction compensation while unwinding an unlawful sale. Do not turn this into a blanket rule that every contract is automatically void; the tested mechanism is the buyer’s statutory remedy.

Memory hook:Unregistered sale: regulator can stop it; buyer may rescind it or seek statutory damages.

An agent is a natural person, an individual human being, who represents a broker-dealer or issuer in effecting or attempting to effect transactions in securities. Two features drive every exam question. First, only natural persons can be agents; a corporation or partnership cannot be an agent, it would be a broker-dealer itself if it meets that definition. Second, the attempting to effect language mirrors the broker-dealer definition, so soliciting orders for a broker-dealer makes someone an agent even if no trade ever executes. A person who works for a broker-dealer but never touches securities transactions, such as a pure back-office accountant, is not an agent. Function, not payroll status, decides the question.

Memory hook:Agents are people, not entities; soliciting alone makes you one.

Purely clerical or ministerial employees are not agents because they do not effect or attempt to effect securities transactions. An individual representing an issuer gets a narrower exclusion. Under the NASAA-amended Act, the exclusion covers transactions in specified exempt securities, exempt transactions, certain covered securities, and transactions with the issuer’s existing employees, partners, or directors when no solicitation compensation is paid. It is not a blanket exemption for anyone selling an employer’s own or guaranteed securities. The exam move is to ask what security or transaction is involved and whether the compensation condition applies. If the individual solicits a public, nonexempt offering, agent registration is the default.

Memory hook:Issuer employment alone never settles it; the security, transaction, and solicitation compensation do.

Agent registration requires a sponsoring broker-dealer, a qualifying exam, and the uniform application. An individual cannot register as an agent on their own; the employing broker-dealer files Form U4 on the person's behalf, which is the application that starts the registration and creates the CRD record. The exam requirement is typically the Series 63, the state law exam, paired with a product-knowledge exam such as the Series 7 for general securities or the Series 6 for investment company products, depending on what the agent will sell. The Administrator may waive the exam for certain experienced or professionally designated individuals. Registration is state-specific, so an agent must be registered in each state where business is done.

Memory hook:No sponsor, no U4; the firm files, the state licenses.

Form U4 is a continuing disclosure record, not a one-time application. The registered person and firm must keep it accurate and amend reportable information promptly under the applicable form instructions and regulatory rules—often within thirty days, with shorter treatment possible for some statutory-disqualification events. Address, employment, outside-activity, criminal, regulatory, customer-dispute, and financial disclosures each have their own questions and thresholds. Not every informal customer complaint is automatically reportable, so the facts must be matched to the form. A late or incomplete amendment can become a separate compliance problem even when the underlying event would not itself end the person’s registration.

Memory hook:U4 stays alive: test reportability first, then update accurately and on time.

When an agent leaves a firm, the terminating broker-dealer files Form U5 within thirty days, which formally ends the registration and reports the reason for termination. The U5 is the termination notice, and the reason given matters: a voluntary resignation reads very differently from a discharge, and false statements on a U5 create liability. Once terminated, the agent's registration lapses and cannot be transferred; re-registration with a new firm requires a new Form U4 filed by the new sponsoring broker-dealer. The old U5 stays in the CRD record permanently and follows the agent. An agent who re-registers must be qualified again if exams have lapsed, depending on state rules.

Memory hook:U4 starts, U5 ends; the U5 follows you forever.

An agent ordinarily represents one broker-dealer, but dual affiliation is possible if the Administrator permits it, meaning an agent may represent more than one broker-dealer only where state rules allow and both firms consent. The distinction between broker-dealer and agent is structural: a broker-dealer is an entity, a firm engaged in the securities business, while an agent is a natural person acting on the firm's behalf. A person cannot be an agent of an agent, and if an individual meets the broker-dealer definition, that person is a broker-dealer, not an agent. Exam questions test this by describing a sole proprietor who effects trades for others; that person must register as a broker-dealer, not as an agent.

Memory hook:Firms are dealers, people are agents; dual affiliation needs the Administrator's blessing.

Issuer employees occupy a special position under the Uniform Securities Act. No registration is required when the employee effects transactions in exempt securities, or in securities issued by or guaranteed by the issuer, or in transactions that are otherwise exempt. So a corporate treasurer selling company stock under an exempt transaction, or a bank employee selling the bank's own instruments, is not an agent. Registration is required when the employee sells the issuer's nonexempt securities to the public in nonexempt transactions, or sells any securities of a different issuer. The exam also likes employee stock purchase plans: transactions under such plans are typically excluded. The pattern to apply is what is being sold, by whom, and under which exemption.

Memory hook:Own employer's exempt securities: no license; public sales of anything else: license.

An agent who effects securities transactions without effective registration has created a serious liability problem, and the purchaser holds the remedies. The buyer may rescind the transaction and recover the purchase price plus interest, reduced by any income received, such as dividends or interest payments. If the security has already been sold, the buyer can sue for damages instead. The employing broker-dealer is liable for the agent's violation committed within the scope of employment, so the firm cannot dodge responsibility by pointing at the individual. One limit matters: a purchaser who knew about the violation at the time of purchase cannot recover.

Memory hook:Unregistered agent sells: buyer unwinds the deal, firm pays, income offsets.

A security under the Uniform Securities Act is defined broadly, and the investment contract category is where the exam lives. Under the Howey test, an investment contract exists when four elements are present: an investment of money, a common enterprise, an expectation of profit, and profits derived primarily from the efforts of others. Miss one element and there is no security. The definition reaches unconventional assets: farmland sold with a service contract, condominium units with a rental program, cattle breeding programs, and even fruit orchards have qualified. Typical insurance policies and most fixed annuities do not fit, but variable products often do because their value depends on a separate investment account.

Memory hook:Howey: money, common enterprise, profit from others' efforts — all four or no security.

The default issuer is the person that issues or proposes to issue a security, but the Uniform Securities Act assigns the role differently for unusual instruments. For certificates of deposit, voting-trust or collateral-trust certificates, and interests in certain unmanaged or fixed trusts, the issuer is the person performing the depositor or manager’s duties under the governing instrument. By contrast, the Act treats certificates of interest or participation in oil, gas, or mining titles, leases, or production payments as having no issuer. Do not confuse an exempt security with a nonexistent issuer: government and bank securities may be exempt from registration, but that does not erase the entity that issued them.

Memory hook:Exempt security does not mean no issuer; only the Act’s special interests get that treatment.

These are the two state registration routes, and the choice depends entirely on federal status. Registration by coordination is available when the security is also registered with the SEC: the state registration becomes effective at the same time as the federal registration, so the issuer files the federal registration statement and required state documents with the Administrator. Registration by qualification is the standalone state process, used when there is no concurrent federal registration. The Administrator reviews the state filing, may require additional documents, and sets the effective date after the review period. Coordination piggybacks; qualification stands alone.

Memory hook:Coordination coordinates with the SEC; qualification qualifies all by itself.

Exempt securities never need state registration no matter how they are sold: U.S. government and municipal debt, bank securities, commercial paper with a maturity of 270 days or less, and insurance policies are the classic examples. NSMIA added the category of covered securities, which includes securities listed on national exchanges and registered investment company shares. States cannot require registration for covered securities, but they keep real authority: antifraud enforcement, notice filings, and the ability to collect fees. The exam hinges on the difference between exempt from registration and exempt from oversight.

Memory hook:NSMIA blocks registration, not enforcement: notice filings and antifraud survive.

Transaction exemptions are narrower than they look because they attach to a specific sale, not the security itself. Unsolicited customer orders, isolated nonissuer transactions, sales to institutional investors, and fiduciary transactions can all be exempt from registration, yet the same security sold in a different transaction may require registration. The overlay that never lifts is antifraud. Every exempt security and every exempt transaction remains fully subject to the antifraud provisions, so untrue statements and material omissions are actionable regardless of the exemption. When a question pairs an exemption with a misleading statement, the exemption does not save the seller.

Memory hook:Exempt the deal, never the deceit: fraud applies to every sale.

The Administrator is not a passive regulator. Under the Uniform Securities Act, the Administrator may adopt rules and policies to interpret and implement the statute, investigate possible violations on the Administrator's own initiative, and compel cooperation through subpoenas. Subpoena power covers both documents and witness testimony, and the Administrator can take sworn testimony and require production of books and records. Investigations can begin without a formal complaint from the public, and the Administrator may apply to a court to enforce a subpoena that a respondent ignores. The exam expects you to know this authority is broad but administrative, not judicial.

Memory hook:Administrator investigates on its own motion; subpoenas reach papers and people; courts enforce refusals.

When the Administrator finds that a violation has occurred or is about to occur, a cease-and-desist order can be issued to stop the conduct without a prior hearing. Summary suspension is the harsher tool, reserved for situations where a security or a registration is already violating the Act and delay would harm the public interest. The suspension takes effect immediately, and the registration or security stops in its tracks pending proceedings. Due process survives in compressed form: the respondent can demand a hearing, which must be scheduled promptly, within fifteen days of the request under the model act.

Memory hook:Cease-and-desist stops behavior; summary suspension stops the security or license cold.

The Administrator can deny, suspend, revoke, or condition any registration, and the statutory grounds are broad. They include criminal convictions, especially felonies and securities-related misdemeanors; court injunctions involving securities activity; prior disciplinary actions by regulators; false or misleading statements in registration applications; failure to reasonably supervise agents; and financial insolvency. The list applies to applicants and current registrants alike. Conditioning is the flexible middle path: instead of denying outright, the Administrator can impose restrictions, such as limiting activities or requiring supervision, that the registrant must satisfy to keep operating.

Memory hook:Felony, injunction, false application, no supervision, insolvency: grounds to deny, suspend, revoke, or condition.

Administrative penalties are the Administrator's enforcement toolkit: censure, fines, limits on activities, and suspension or revocation of registration. What the Administrator cannot do is award damages to customers. Administrative fines are paid to the state, not to injured investors, and a customer who wants money must file a separate civil suit in court. This is the no-damages rule, and it draws a clean line between the administrative process, which enforces the statute, and the civil courts, which compensate victims. Any question asking what an injured customer should request from the Administrator has the same answer: file suit, not a claim for damages.

Memory hook:Administrator enforces, courts compensate: fines go to the state, never to customers.

Civil liability gives the purchaser a direct claim. The buyer may sue for rescission, recovering the purchase price plus interest less any income received, or for damages if the security has been resold. The buyer must be able to tender the security back to the seller. Two clocks limit the suit: it must be brought within two years after discovering the violation or within three years after the sale, whichever comes first. Recovery is barred if the purchaser knew of the violation when buying or if the seller made a proper rescission offer that the purchaser refused.

Memory hook:Two years from discovery, three from the sale, whichever hits first; tender the shares.

Criminal liability under the Uniform Securities Act attaches to willful violations. “Willful” means the person intentionally committed the act; prosecutors generally need not prove the person knew the statute itself. The model act authorizes a fine, imprisonment, or both, and sends prosecution to the attorney general or appropriate prosecutor—not the Administrator. One nuance matters for violations of a rule or order: a defendant who proves lack of knowledge of that rule or order cannot be imprisoned for that violation. Negligent conduct can still carry civil or administrative consequences, but the exam should not convert it into a criminal case or invent a first-offense/repeat-offense ladder that the model act does not contain.

Memory hook:Willful act triggers criminal exposure; rule-or-order ignorance can block imprisonment, not every consequence.

Injunctive relief comes from the courts, not the Administrator. When the Administrator believes a violation is occurring or about to occur, the Administrator can apply to a court for an injunction to stop it, and violating that injunction is contempt of court. The same compounding logic applies to administrative orders: ignoring a cease-and-desist order is a separate violation that can trigger criminal prosecution, additional penalties, and revocation of registration. The exam tests the layering: an underlying violation, an order or injunction, and then a second, more serious violation for defying it. Orders are not suggestions, and consequences escalate when they are ignored.

Memory hook:Courts issue injunctions; defying any order stacks a fresh violation on the old one.

The Act forbids any statement or implication that registration equals approval. An agent cannot say the Administrator approved the security, the firm, or the agent, because registration only means minimum filing requirements were met, not that the investment is safe or suitable. It is also unlawful to represent that an unregistered person is registered or to fail to disclose a suspended or revoked status when required. The rule protects the credibility of the registration system itself: if the state's stamp implied endorsement, investors would be misled into a false sense of security. On the exam, any language suggesting state approval is a violation.

Memory hook:Registered means filed, not approved: never let the state's stamp imply a blessing.

An agent may not promise that a customer will avoid loss, earn a stated profit, or be made whole if an investment declines. The problem is the promise itself: it misstates risk and can induce a purchase on a false premise, even when the agent means well or the investment later succeeds. Keep this prohibition distinct from the separate rule governing permissible sharing in a customer account. Ordinary commissions are compensation for brokerage services; they are not an exception that allows an agent to insure the customer’s result. When a fact pattern includes “I’ll cover any loss” or “you cannot lose,” the guarantee—not the eventual outcome—is the violation.

Memory hook:Commissions pay for service; they never buy permission to promise an investment outcome.

The antifraud provisions reach every oral and written communication made in connection with an offer, sale, or purchase of a security, and they apply to everyone in the chain, including agents, broker-dealers, and issuers. The rules prohibit untrue statements of material fact, omissions of material fact that make what is said misleading, and any practice that operates as fraud. Two coverage points drive exam answers: exempt securities and exempt transactions are still subject to antifraud rules, and oral statements count exactly as much as written ones. There is no communication channel, no exemption, and no asset type that escapes these standards.

Memory hook:Every word, spoken or written, exempt or not, answers to the antifraud rules.

Customer communications at the point of sale often involve several documents with different jobs. A trade confirmation identifies the transaction and required capacity, price, remuneration, and other details under the applicable confirmation rule. A prospectus for a registered new issue supplies offering disclosure and must be delivered within the federal delivery framework. Product-specific documents—such as the options disclosure document—explain risks before approval or use. Do not invent a universal statement that every confirmation must announce that a security is unregistered in a state. The better method is to identify the product and transaction first, then match the disclosure document and timing to the rule that governs it.

Memory hook:Trade facts go in confirmations; offering facts in prospectuses; product risks in the designated disclosure.

A brokerage agreement may contain a predispute arbitration clause, but FINRA requires prominent, prescribed disclosures near the customer’s signature or acknowledgment. Those disclosures explain that the parties are giving up the right to sue in court, that arbitration awards are generally final and binding, that discovery and appeal rights are limited, and that arbitration panels may include industry participants. The firm must give the customer a copy of the agreement and, on request, information about the arbitration forum. The rule does not require firms to tell every customer that signing the arbitration agreement is optional. The exam distinction is disclosure and enforceability—not an invented universal right to open the account without agreeing.

Memory hook:Arbitration may be required; the waiver and forum consequences must be displayed plainly.

A margin account uses separate agreements that candidates often blur together. The credit agreement states the loan terms. The hypothecation agreement lets the firm pledge customer securities as collateral for the money borrowed to finance the account. A loan-consent provision, typically optional, authorizes the firm to lend securities carried in the margin account to another party, often to facilitate a short sale. Fully paid securities lending is a separate arrangement with its own disclosures and is not what the ordinary margin loan-consent concept means. The firm’s ability to rehypothecate collateral is also limited. Match the document to the authority it grants instead of treating the margin package as one undifferentiated form.

Memory hook:Credit borrows, hypothecation pledges, loan consent lends the carried securities onward.

Options-account timing has three checkpoints. The firm must furnish the options disclosure document at or before the account is approved for options trading. A registered options principal must approve the account before the first options trade. The customer’s options agreement, however, may be obtained after approval and must be returned within fifteen days; failure to return it limits further activity under the rule. Discretionary trading adds separate written authorization and principal acceptance. The common trap is putting the signed agreement before the first trade as an absolute condition. Disclosure and principal approval precede trading; the signed agreement has its own post-approval deadline.

Memory hook:Disclose and approve before trading; collect the signed agreement within fifteen days.

FINRA classifies a written or electronic message by audience, not by whether it arrived as mail, email, or a social post. Correspondence is distributed or made available to twenty-five or fewer retail investors within any thirty-calendar-day period. A retail communication reaches more than twenty-five retail investors in that period. Retail communications generally require principal approval before first use, subject to rule-based exceptions; correspondence is supervised under the firm’s written procedures and risk-based review system. Both must be retained. The classification threshold is “more than 25,” so a message to exactly 25 retail investors is correspondence, not a retail communication.

Memory hook:At 25, correspondence; investor 26 crosses into retail communication.

Social-media content is analyzed by function. Static content such as a profile, background page, or planned post is treated as a retail communication when its audience meets that definition and ordinarily follows the corresponding approval rules. Real-time interactive communications are exempt from the retail-communication pre-use approval requirement, but they remain subject to supervision, content standards, and recordkeeping; firms may use risk-based review rather than approve every exchange in advance. The website or app does not decide the category. Ask whether the content is static or interactive, who can receive it, and whether the firm or associated person adopted or became entangled with third-party content.

Memory hook:Static is planned and pre-reviewed; interactive is supervised and retained, not ignored.

Email, text messages, and other digital communications are correspondence, not a separate category, so the same supervision and retention rules apply. Firms typically handle them through pre-approved templates, surveillance tools, and principal review, and they must capture business communications even when agents use personal devices for firm business. The mechanism that matters: the channel does not change the obligation. A text recommending a security is a supervised communication; an unapproved messaging app used for business is a supervision failure. If a question describes an agent conducting firm business on an unmonitored personal channel, the answer is that the firm is responsible and the practice is improper.

Memory hook:Email and text are correspondence with a keyboard; supervision follows the message, not the medium.

A firm's website is advertising, so every page needs the same accuracy and principal approval as printed material. Hyperlinks raise the ownership question: if the firm links to third-party content it prepared, endorses, or shares, it adopts that content and is responsible for it, while a link to a neutral reference the firm does not stand behind may be treated differently. Disclaimers are the classic trap. A disclaimer cannot rescue an otherwise misleading statement; the communication is judged on the overall impression it leaves, not the fine print. The decision rule: ask what the message conveys as a whole, then ask whether the firm adopted the linked material through preparation or endorsement.

Memory hook:Adopt the link, own the message; disclaimers decorate, they do not defend.

Performance claims are the most heavily tested advertising issue. The core prohibitions: you cannot guarantee or promise future results, you cannot imply past performance predicts the future, and you cannot present performance without the conditions that produced it. Hypothetical or model results must be clearly labeled as such and accompanied by appropriate explanation. Performance shown must be actual and representative, not cherry-picked. The mechanism is the same as general antifraud doctrine: the advertisement is judged by the overall impression on a reasonable reader. A claim that is literally true but misleading in context still violates the rules, so the exam tests the impression left, not literal accuracy.

Memory hook:Judge the impression, not the sentence; guarantees and unlabeled hypotheticals fail.

An agent or adviser must disclose every source of compensation connected to a recommendation, not just the visible commission on the trade. That includes referral fees, trailing commissions, 12b-1 fees, revenue arrangements with a recommended fund family, compensation from a third party for pushing a product, and any setup where the agent earns more for one choice over another. The mechanism is conflict transparency: the customer cannot evaluate the recommendation's objectivity without knowing who pays you and how much. Undisclosed compensation converts an ordinary recommendation into a dishonest one, and disclosure must happen before or at the time of the recommendation, not after the customer has acted on it.

Memory hook:If anyone pays you for the recommendation, the customer hears about it first.

A broker-dealer acting as principal trades from or into its own account and earns a markup or markdown rather than an agency commission. The confirmation must disclose the firm’s principal capacity. Do not memorize the old shortcut that a markup is never shown separately: current confirmation rules require transaction-cost disclosure for certain same-day principal trades in corporate and agency debt securities, including the dollar and percentage markup or markdown. Whether a specific amount appears therefore depends on the security and transaction. The stable exam move is to identify capacity first, then ask what price, remuneration, and confirmation disclosures the applicable rule requires.

Memory hook:Capacity tells you commission versus dealer spread; the security tells you whether the spread is disclosed.

A person registered both as a broker-dealer agent and an investment adviser representative may earn transaction-based compensation in brokerage capacity and advisory fees in advisory capacity, but disclosure alone is not a magic cure. The client must understand which capacity applies, what services and standard of conduct attach, what compensation is earned, and what conflicts the arrangement creates. The recommendation must still satisfy the applicable broker-dealer or adviser conduct standard, and fees cannot be duplicative or unreasonable. In a fact pattern, identify the hat being worn at the time of the recommendation and execution; then test compensation, consent, conflicts, and the relevant duty instead of declaring every fee-plus-commission arrangement automatically lawful or unlawful.

Memory hook:Name the hat, name the pay, expose the conflict, then apply that capacity’s duty.

Custody means possession of customer funds or securities, control over them, or the authority to withdraw them. For broker-dealer agents, the operating rule is simple: customer money and securities go to the firm or its qualified custodian, never to the agent personally. Accepting a customer's check made out to you, keeping securities in your desk drawer, or holding withdrawal authority puts you in custody and creates misappropriation exposure. Advisers with custody face heightened obligations, including notice to the state and possible surety bond or minimum net worth requirements. The exam tests whether a described act creates custody—look for possession, control, or withdrawal authority, and any one of the three is enough.

Memory hook:Possess, control, or withdraw: any one equals custody.

Discretion means the agent chooses trade terms or whether to trade at all without the customer's specific approval for each order. The written-authorization rule has one important carve-out for broker-dealer agents: discretion limited to price and timing may be exercised on an oral basis, because those choices implement a decision the customer already made to trade. Discretion over whether to trade or which securities to buy—the substance of the decision—requires written authorization from the customer, and the firm must accept the account as discretionary in writing. For advisers, discretionary authority over a client's account likewise requires the client's written authorization. The exam hinges on which kind of discretion the facts describe.

Memory hook:Price and time can be spoken; what and whether must be written.

A limited power of attorney authorizes the agent to trade the account but nothing more; a full power of attorney adds the power to withdraw cash and securities. The exam mechanism is the withdrawal test: any question about an agent moving money out of a customer's account turns on whether the authorization was full or limited. Under a limited power of attorney, an agent who withdraws assets has exceeded the authorization. Also remember that a power of attorney terminates on the customer's death, and an agent who did not know of the death or legal disability is protected for acts in good faith before learning of it. Written authorization is required either way.

Memory hook:Limited trades, full withdraws; death ends both.

Every recommendation carries a duty of care: the agent must have a reasonable basis to believe the recommendation is suitable for that particular customer. That requires two layers—understanding the product, including its costs, risks, and behavior, and understanding the customer, including financial situation, objectives, risk tolerance, liquidity needs, and existing holdings. The mechanism is the profile: suitability is judged against what the agent knew or should have known through reasonable inquiry. Recommending a speculative private placement to a retiree who needs income fails even if the product itself is legitimate and fully disclosed. The exam hands you a customer profile and asks whether the recommendation was defensible; match the product's risk and cost to the profile.

Memory hook:Know the product, know the person, then match risk to both.

Churning is excessive trading in a customer account to generate commissions, and the exam tests it as a three-element formula: the agent exercised control over the account, the trading was excessive relative to the customer's objectives, and the agent acted with intent to defraud or reckless disregard for the customer's interests. Miss any element and the charge fails—an account can be traded heavily without churning if the customer controlled it or the activity matched a stated aggressive objective. Excessiveness is often measured with turnover ratio, calculated as total purchases divided by average account equity, and cost-to-equity, which expresses commissions as a percentage of average equity. Look for control plus in-and-out trades that serve the agent's pocket.

Memory hook:Control plus excess plus intent equals churning; drop one and it collapses.

FINRA’s customer-loan rule covers borrowing from and lending to customers. A loan is permissible only if the firm’s written procedures allow it, the arrangement fits a specified category—such as immediate family, a customer regularly engaged in lending, certain shared-business or personal relationships, or both parties being registered persons at the same firm—and any required notice and approval are obtained in writing before the transaction. Firms may prohibit the activity entirely. The exam default is therefore “no” unless the facts establish both an allowed relationship and compliance with the firm’s procedures. Never assume that friendship alone or a commercially reasonable interest rate makes the loan acceptable.

Memory hook:Allowed relationship plus firm procedure; without both, do not borrow or lend.

An associated person may share directly or indirectly in a customer account’s profits or losses only with prior written authorization from both the customer and the member firm. For an ordinary customer, sharing must be in direct proportion to the associated person’s financial contribution to the account. The proportionality condition does not apply when the customer is an immediate family member, but the written-authorization framework still matters. This is different from charging a commission and different from guaranteeing the customer against loss. The exam usually hides one missing element: no firm approval, no customer writing, or an arrangement where the representative takes a disproportionate share of the upside.

Memory hook:Two written approvals, then proportionate sharing—unless immediate family changes only the proportion rule.

Insider trading liability comes in two theories. Classical theory covers someone with a duty to shareholders—an officer, director, or insider—who trades on material nonpublic information. Misappropriation theory extends liability to anyone who takes confidential information from a source they owe a duty to and trades on it: an agent who learns of a merger from a customer and trades the target stock violates the rule even though he owes the target company nothing, because he breached his duty to the customer, the source of the information. Tipper-tippee liability follows the same logic—the tippee inherits the tipper's breach and trades with the same intent. The exam hinge: identify who owed a duty to whom, and whether the information was material and nonpublic.

Memory hook:Classical breaches shareholders; misappropriation breaches the source who trusted you.

Selling away means an agent offers securities to customers outside the scope of the firm's business—typically private placements, promissory notes, or outside investment programs the firm does not sponsor. The agent must notify the employer in writing before participating. If the agent receives compensation, the employer must provide written consent, and the activity may require the agent to be registered for it. The customer harm is obvious: the customer believes the firm stands behind the recommendation when the firm does not even know about it. The exam pattern: an agent quietly selling an outside deal to firm customers is selling away, and the missing facts are written notice to the employer and written consent where compensation is involved.

Memory hook:Outside deal, inside customers: tell the firm in writing first.

Market manipulation is any intentional conduct that creates a false or misleading appearance of market activity or price. The classic devices: wash sales, where the same party is effectively both buyer and seller to generate fake volume; matched orders, where confederates trade between themselves at agreed prices; painting the tape, a series of trades designed to make a stock look active; spreading false rumors to move price; and pegging outside permitted stabilizing methods. The unifying mechanism is intent—the trades serve no legitimate economic purpose and exist to deceive other investors about supply, demand, or interest in the security. The exam gives you a trading pattern and asks what it is; look for who is on both sides and why.

Memory hook:No real buyer, no real seller, no real demand—just a painted tape.

Before opening or establishing a securities account at another broker-dealer or financial institution, an associated person must obtain the employing member’s prior written consent. The person must also notify the executing institution in writing of the association with the employer. After receiving written notice from the employer, the executing institution must transmit duplicate confirmations and statements or other requested account information. Those records let the employer supervise personal trading, including potential front-running, but front-running remains a separate misconduct analysis based on using customer-order information to trade ahead. “Tell the employer later” and “duplicates are always automatic” are both traps; sequence and written requests matter.

Memory hook:Consent before opening; notice to the carrying firm; duplicates when the employer requests them.

NASAA's model rule on vulnerable-adult exploitation addresses a specific operational problem: what a firm may do when it suspects a senior or dependent adult is being financially exploited. The mechanism has three parts. First, the firm may report suspected exploitation to the state agency, law enforcement, and a trusted contact person the customer designated. Second, the firm may place a temporary delay on a suspicious disbursement while it investigates—the model rule permits a delay of up to fifteen business days, with possible extension. Third, the firm and its personnel receive immunity from administrative or civil liability for good-faith reporting or delaying. The exam tests whether the firm acted within these safe harbors rather than ignoring the red flags.

Memory hook:Suspect, report, delay, and stay immune—good faith protects the firm and the senior.