Series 23 — General Securities Principal Sales Supervisor Module Cheat Sheet
Last revised: September 28, 2026
Cheat sheet: supervisory rules, decision tables, formulas, and exam traps for FINRA Series 23 preparation.
Use the tables for a quick pre-exam check. Expand a topic’s notes for explanations, examples, and additional distinctions.
Scope and study context
For Series 23 questions, think like a principal:
Prevent violations through written supervisory procedures, training, registration controls, and preapproval where required.
Detect problems through reviews, exception reports, surveillance, branch inspections, and complaint analysis.
Escalate and document red flags. A correct answer often includes evidence of follow-up, not just “reviewed.”
Separate sales supervision from broader principal supervision: trading, market making, investment banking, research, communications, financial responsibility, and firm-level controls may be tested.
Principal mindset: prevent customer harm, supervise registered persons, identify conflicts, document reviews, escalate red flags, and follow written supervisory procedures.
Supervisory Framework: High-Yield Map
Area
Principal focus
Exam trigger
Registration and qualification
Proper registration before activity; Form U4/U5 accuracy; statutory disqualification controls
Unregistered person solicits, supervises, trades, or is paid transaction compensation
WSPs and supervisory system
Written procedures reasonably designed for the business; designated principals; evidence of review
“No one was assigned,” stale procedures, ignored exception reports
Firm must establish and maintain a supervisory system reasonably designed to achieve compliance. WSPs must identify responsible supervisors and review steps.
“We had a manual” is not enough if no one followed it or procedures did not match the business.
FINRA Rule 3120 supervisory control testing
Firm must test and verify supervisory procedures and amend them when needed.
Annual testing cannot be a checklist exercise that ignores known failures.
FINRA Rule 3130 certification
Senior executive certification process requires review of compliance and supervisory systems.
Certification does not replace actual testing and remediation.
Branch inspections
OSJs and supervisory branches require more frequent inspection than non-supervisory locations.
A high-risk branch may require more attention than the minimum cycle.
Producing manager supervision
A manager who produces revenue must be supervised by someone with independence.
Allowing a producing manager to approve their own activity is a red flag.
Exception reports
Reports are tools; supervisors must review, investigate, escalate, and document.
“Exception generated” is not the same as “exception resolved.”
Heightened supervision
Used for higher-risk reps, products, branches, or patterns of complaints.
Heightened supervision must be tailored and documented, not merely punitive.
Books and records
Required records must be accurate, preserved, and retrievable.
Business texts, emails, chats, and social media can be firm records.
Business continuity
Firm must plan for emergency communications, data backup, customer access, and alternate operations.
BCP must be reasonably current and tested.
Notes and examples
FINRA Supervision Rules to Recognize
You do not need to recite rule numbers for every question, but recognizing the rule family helps you choose the right action.
Topic
Core Idea
FINRA Rule 3110 supervision
Firms must establish and maintain a supervisory system and written procedures reasonably designed to achieve compliance.
Branch inspections
Offices and activities must be inspected according to the firm’s supervisory system and risk profile.
Annual compliance meeting
Registered persons must receive compliance training/meeting content under the firm’s process.
FINRA Rule 3120 supervisory controls
Firms test and verify supervisory procedures and prepare reports.
FINRA Rule 3130 certification
Senior management certification relates to supervisory processes and compliance systems.
Delegation
Tasks may be delegated, but the firm and responsible principals remain accountable for reasonable supervision.
Heightened supervision
Required when risk indicators justify closer monitoring, such as prior disciplinary history or repeated exceptions.
Common Supervision Traps
“The rep is senior, so less review is needed.” Wrong. Experience may affect risk assessment, but it does not remove supervisory obligations.
“No customer complained, so there is no issue.” Wrong. Exception reports, trade patterns, and communications can reveal violations before a complaint.
“The branch manager approved it verbally.” Documentation matters.
“The procedure exists, so the firm is protected.” Procedures must be implemented, tested, and followed.
“The activity happened outside the firm, so the firm has no concern.” Outside business activities, private securities transactions, and communications away from firm systems can create major supervisory issues.
OSJ, Branch, and Office Classification
Classification issue
Key point
OSJ trigger
Common OSJ functions include final acceptance of new accounts, review/endorsement of orders, final approval of retail communications, market making/order execution, structuring offerings, or supervising other offices.
Branch office
Location where securities business is conducted, subject to registration and supervision unless an exclusion applies.
Non-branch location
Still requires supervision if firm business occurs there. “Not a branch” does not mean “not supervised.”
Remote work
Must fit WSPs, books-and-records capture, communications supervision, privacy safeguards, and customer protection controls.
Inspection priorities
Complaints, disciplinary history, outside activities, high production, complex products, penny stocks, senior clients, and remote supervision increase risk.
Registration, Forms, and Personnel Controls
Item
Use
Principal-level exam point
Form U4
Registers associated person and discloses required background information
Must be accurate and amended when reportable events occur.
Form U5
Terminates registration and reports termination details
Must be truthful; vague or misleading termination language is a risk.
Form BD
Broker-dealer registration
Material business changes may require updates and supervisory review.
Form BR
Branch office registration
Office status and activities must match actual business.
Continuing education
Regulatory and firm training obligations
Training must address firm business, products, risks, and rule changes.
Statutory disqualification
Certain criminal, regulatory, or disciplinary events can restrict association
Firm cannot ignore disqualifying facts because the person is a high producer.
Permitted activities
Associated persons may only perform activities for which they are properly registered and supervised
Transaction-based compensation to an unregistered person is a classic trap.
Pattern of corrections may indicate unauthorized trading or manipulation
Research publication
Analyst independence, conflict disclosures, information barriers
Investment banking influence over rating, target, or timing
Customer Account and Recommendation Rules
KYC, Suitability, and Reg BI
Standard
Applies when
Principal exam focus
FINRA KYC
Every account relationship
Know the customer: essential facts for servicing, authority, legal capacity, and compliance.
FINRA suitability
Recommendations not covered by Regulation Best Interest, including certain institutional contexts
Reasonable-basis, customer-specific, and quantitative suitability.
SEC Regulation Best Interest
Recommendation to a retail customer regarding securities transaction, strategy, or account type
Broker-dealer cannot place its interest ahead of retail customer’s interest.
Form CRS
Retail investor relationship summary
Delivery and consistency with actual services/conflicts.
Institutional suitability
Institutional customer can evaluate risks and independently exercise judgment
Not automatic; firm must have a reasonable basis for believing independence and capability.
Notes and examples
Regulation Best Interest Obligations
Reg BI obligation
What it means in scenarios
Disclosure
Disclose capacity, material fees/costs, services, limitations, and conflicts.
Care
Understand risks, rewards, costs, and reasonably available alternatives; avoid excessive series of transactions.
Conflict of interest
Identify, disclose, mitigate, or eliminate conflicts as required. Sales contests based on specific securities over limited periods are high-risk.
Compliance
Maintain policies, procedures, training, and surveillance reasonably designed for Reg BI compliance.
Account Type Decision Points
Scenario
Correct supervisory concern
Retirement rollover recommendation
Treat as an account recommendation; compare costs, services, investment options, conflicts, and investor needs.
Senior investor adds new trusted contact
Trusted contact helps address suspected exploitation or diminished capacity; it does not give trading authority.
Customer grants POA to third party
Verify authority, monitor for abuse, and ensure records reflect authorized agent.
Customer wants aggressive trading in IRA
Customer desire does not override suitability/Reg BI care obligations.
Customer refuses financial information
Firm may limit recommendations or decline account features that require the information.
Customer gives verbal discretion
Not sufficient for discretionary account authority. Obtain required written authorization and approval.
Pattern day trading or active margin use
Confirm disclosures, margin suitability, equity requirements, and risk controls.
Suitability, KYC, and Regulation Best Interest
For Series 23, recommendations are central. The exam often asks whether the principal should approve, reject, escalate, or investigate a sales practice.
FINRA Suitability Concepts
Under FINRA suitability principles, a recommendation must be suitable based on the customer’s investment profile.
Suitability Type
Meaning
Reasonable-basis suitability
The firm/rep must understand the product or strategy and have a reasonable basis to recommend it to at least some investors.
Customer-specific suitability
The recommendation must fit the specific customer’s profile.
Quantitative suitability
Even individually suitable trades can be excessive when viewed in the account context.
Regulation Best Interest Review Points
For retail recommendations, Regulation Best Interest adds a best-interest framework. In exam terms, focus on:
Obligation
Practical Review Question
Disclosure
Were material facts about the relationship, fees, capacity, and conflicts disclosed?
Care
Did the recommendation consider costs, risks, rewards, and reasonably available alternatives?
Conflict of interest
Were conflicts identified and addressed, not merely ignored?
Compliance
Does the firm have policies designed to achieve compliance?
Recommendation Traps
Unsolicited order vs. recommendation: An unsolicited order should be marked correctly, but if the rep influenced the customer, it may still be a recommendation.
High commission product: Not automatically prohibited, but the principal must evaluate costs, alternatives, suitability, and conflicts.
Switching products: Switching mutual funds, annuities, or complex products requires analysis of costs, benefits, surrender charges, tax consequences, and investment purpose.
Concentration: A product may be suitable in small size but unsuitable if it creates excessive concentration.
Institutional accounts: Institutional suitability analysis considers the customer’s capability to evaluate risk independently, but the firm still must supervise recommendations.
AML, Privacy, and Red Flags
Area
Principal must ensure
Exam red flags
AML program
Written program, designated AML officer, training, independent testing, suspicious activity escalation
Whether the customer understands leverage and potential losses.
Whether margin calls, extensions, liquidations, and restrictions are handled properly.
Whether recommendations create unsuitable leverage or concentration.
Whether day trading or active trading patterns create additional risk.
Trade Reporting, Confirmations, and Records
Record/report
Principal focus
Order ticket/order record
Time, terms, account, capacity, solicited/unsolicited, long/short where relevant.
CAT reporting
Lifecycle order events must be captured accurately.
TRACE
Corporate and agency debt transaction reporting.
Equity trade reports
OTC/exchange reporting facility use must match trade type.
Customer confirmation
Capacity, price, remuneration, settlement, yield/other disclosures where required.
Account statement
Positions, balances, activity; review for errors and red flags.
Corrections/cancels
Must be supported, approved, and not used to hide errors or favor accounts.
Books and records retention
Preserve required records in accessible form; prevent alteration or unauthorized destruction.
Financial Responsibility and Operations
Rule area
What a Series 23 candidate should know
Net capital rule
Broker-dealers must maintain liquid net capital; business expansion, underwriting, proprietary trading, and market making can affect capital.
Haircuts
Securities positions are reduced in value for net capital purposes based on risk.
Aggregate indebtedness/alternative standard
Net capital computations may use different methods depending on firm model. Know concept, not just math.
Customer protection rule
Fully paid and excess margin securities must be protected; customer reserve requirements segregate customer funds.
Possession or control
Firm must safeguard customer securities and resolve deficits.
SIPC
Protects customers if broker-dealer fails, within limits; does not protect against market losses.
Segregation
Customer and firm assets must not be misused or commingled improperly.
FOCUS and financial reporting
Financial condition reporting must be accurate and timely.
Introducing vs clearing firm
Allocation of operational duties must be clear, but introducing firm still supervises its own customer-facing activity.
Carrying agreement
Defines responsibilities between introducing and clearing firms; does not eliminate supervisory duties.
Calculation and Formula Sheet
Use formulas to support supervisory judgment. The exam may test whether a principal recognizes an account problem, unfair charge, margin deficiency, or yield misrepresentation.
Margin Basics
\[
\text{Long account equity} = \text{long market value} - \text{debit balance}
\]\[
\text{Short account equity} = \text{credit balance} - \text{short market value}
\]\[
\text{Reg T initial requirement for a long stock purchase} = 50\% \times \text{purchase price}
\]
Margin concept
Plain-English use
Debit balance
Amount customer borrowed in a long margin account.
Credit balance
Proceeds and required deposit in a short margin account.
LMV
Long market value of securities.
SMV
Short market value of securities sold short.
SMA
Special memorandum account; can create buying power but is not cash.
Restricted account
Equity below initial requirement but above maintenance.
Maintenance call
Equity has fallen below maintenance requirement.
House requirement
Firm may impose stricter requirements than minimum rules.
A guideline, not a safe harbor. Facts and circumstances control.
Prevailing market price
Reference point for markup/markdown analysis.
Riskless principal
Compensation disclosure and fair pricing still matter.
Current yield
Ignores maturity, call features, and reinvestment risk.
Yield to maturity
Incorporates price, coupon, and maturity.
Yield to call
Important when bond is callable and trading at a premium.
Common Series 23 Scenario Traps
Trap
Better exam answer
“The customer signed a risk disclosure, so the recommendation is fine.”
Disclosure helps but does not replace Reg BI, suitability, or supervision.
“Institutional account means no suitability duty.”
Institutional capability and independent judgment must be assessed.
“The branch is profitable, so inspect less.”
Profitability can increase risk; complaints and activity drive supervisory attention.
“A principal approved the ad after it was used.”
Retail communications generally require approval before use unless an exception applies.
“Rep only sold the private deal to friends.”
If securities-related, analyze private securities transaction and selling away rules.
“Customer allowed discretion verbally.”
Written authorization and firm acceptance are required for discretionary accounts.
“The firm’s quote was only an indication.”
Published firm quotes can create execution obligations.
“Best execution means lowest commission.”
It includes price, speed, likelihood, size, market quality, and overall execution quality.
“Reg BI requires recommending the cheapest product.”
Cost is important, but recommendation must consider full facts and alternatives.
“SIPC makes customer whole.”
SIPC does not insure against investment decline.
“Research can be delayed until banking approves.”
Banking influence over research content/timing is a conflict issue.
“Stabilization is always manipulation.”
Stabilization can be permitted if conducted under applicable conditions and disclosures.
“AML concern is only cash.”
Wires, journals, securities movements, third parties, and account behavior can trigger AML review.
“No customer complaint because it came by email.”
Written electronic grievances can be complaints and records.
“House rules are optional if FINRA minimum is met.”
Firm procedures and house requirements are enforceable supervisory standards.
Final Cram Checklist
Before exam day, be able to answer these quickly:
Who must approve or review the activity?
Is approval required before use, before trade, or through post-use surveillance?
Is the communication retail, correspondence, or institutional?
Is the interaction a recommendation under Reg BI or FINRA suitability?
What customer facts are missing?
Is the customer retail, institutional, accredited, senior, or entity-based?
Is the rep properly registered for the activity?
Is the office correctly classified and inspected?
Does the firm have WSPs that match the activity?
Did an exception report require follow-up?
Is there a conflict of interest, compensation conflict, or sales contest issue?
Is there MNPI or an information-barrier concern?
Does the trade raise best execution, limit order, Manning, or short sale concerns?
Is a trade report, confirmation, or order record inaccurate?
Does the offering involve restricted persons, spinning, Reg M, or underwriting compensation?
Is a private placement being sold with adequate due diligence?
Is a product complex, illiquid, leveraged, callable, or fee-heavy?
Are customer assets protected and properly segregated?
Does AML or sanctions review need escalation?
Was the supervisor’s decision documented?
The Series 23 Supervisory Mindset
Series 23 questions often test what a principal or sales supervisor should do before, during, or after a customer-facing activity. The best answer usually combines three ideas:
Reasonable supervision — not perfection, but a system reasonably designed to detect and prevent violations.
Documented process — if the review, approval, exception, or escalation is not documented, it is hard to prove.
Customer protection — when in doubt, choose the answer that protects the customer, preserves records, and escalates appropriately.
Fast Decision Questions
Ask these on nearly every scenario:
Question
Why It Matters
Is there a recommendation?
Triggers suitability and, for retail customers, Regulation Best Interest considerations.
Is principal approval required before use or promptly after?
Communications, discretionary accounts, new products, and certain transactions have approval/review rules.
Is the activity inside or outside the firm?
Outside business activities and private securities transactions are frequent traps.
Is the customer retail, institutional, senior, fiduciary, or vulnerable?
Different obligations and escalation duties may apply.
Is there a conflict of interest?
Disclosure alone may not be enough; mitigation or elimination may be required.
Is the record complete?
Account records, order tickets, communications, complaints, approvals, and exception reviews are testable.
Principal Review Workflow
flowchart TD
A[Customer, rep, communication, or trade activity] --> B{Is it customer-facing?}
B -- Yes --> C{Recommendation or sales communication?}
B -- No --> D{Internal control, record, or personnel issue?}
C -- Recommendation --> E[Apply KYC, suitability, Reg BI, conflicts, product risk]
C -- Communication --> F[Classify communication and apply approval/review rules]
E --> G{Red flag or exception?}
F --> G
D --> G
G -- No --> H[Document normal review under WSPs]
G -- Yes --> I[Escalate, restrict activity if needed, investigate, document]
I --> J{Customer harm, complaint, AML, fraud, or reporting issue?}
J -- Yes --> K[Follow firm escalation and regulatory reporting process]
J -- No --> L[Correct, supervise, train, and monitor]
Account Opening and Customer Information
Account questions usually test whether the firm obtained enough information, whether the correct person has authority, and whether the principal reviewed the account appropriately.
Account Issue
What to Check
Customer identification
CIP/AML information, identity verification, beneficial owners when applicable.
New accounts and changes must be reviewed under firm procedures.
Updates
Material customer changes should trigger record updates and possibly a suitability review.
Notes and examples
Account Type Traps
Account Type
Exam Trap
Joint account
Know whether ownership is tenants in common or joint tenants with right of survivorship. Do not assume one joint owner may remove the other’s rights.
Trust account
The trustee’s authority comes from the trust document. Suitability considers the trust’s purpose and beneficiaries.
Corporate account
Look for corporate resolutions and authorized traders.
Custodial account
The minor is the beneficial owner; the custodian controls the account until the applicable termination event.
Discretionary account
Requires written customer authorization and firm acceptance. Time-and-price discretion is much narrower than full discretion.
Fiduciary account
The fiduciary’s duty and authority must be respected; personal benefit to the fiduciary is a red flag.
Margin account
Requires margin agreement/approval and ongoing monitoring for risk, calls, extensions, and concentration.
Product and Sales Practice Review
The Series 23 exam may describe a product and ask what a principal should question. Do not focus only on whether the product is “allowed.” Focus on customer fit, risk disclosure, conflicts, documentation, and approval process.
Product / Activity
Principal Review Focus
Common Trap
Mutual funds
Breakpoints, rights of accumulation, letters of intent, share class, switching, costs.
Recommending B or C shares without considering holding period and costs.
Treating complex strategy approval as routine equity trading approval.
529 plans / education savings
State tax benefits, fees, age-based allocation, beneficiary needs.
Ignoring home-state benefits or time horizon.
Research, Investment Banking, and Information Barriers
Series 23 candidates should recognize conflicts between research, investment banking, trading, and sales.
Issue
Supervisory Concern
Research independence
Research content and ratings must not be improperly influenced by investment banking or issuer pressure.
Analyst conflicts
Compensation, holdings, issuer relationships, and investment banking connections may require disclosure or restriction.
Information barriers
Material nonpublic information must be controlled.
Watch/restricted lists
Trading and solicitation may be limited based on firm knowledge or involvement.
Sales use of research
Reps must not overstate conclusions or omit risks when discussing research.
Investment banking deals
Allocation, due diligence, communications, and conflicts need review.
MNPI and Insider Trading Traps
Possession of MNPI creates a duty to restrict trading and sharing.
Rumors should not be spread to generate trades.
Tender offers, mergers, earnings, and offerings are common MNPI contexts.
Information barriers are not just paperwork; they must actually control access and trading.
Customer Complaints and Escalation
A customer complaint is not a routine service issue once it alleges misconduct, loss, unauthorized activity, misrepresentation, theft, or sales-practice abuse.
Complaint Review Checklist
Step
Principal Action
Identify
Determine whether the communication is a complaint under firm procedures and applicable rules.
Preserve
Keep the written/electronic complaint and related records.
Escalate
Notify compliance, legal, management, or designated complaint personnel as required.
Investigate
Review account activity, communications, order tickets, approvals, and rep history.
Respond
Use firm-approved response procedures; do not improvise admissions or settlements.
Report
Determine whether regulatory filings, U4/U5 updates, or other reports are required.
Remediate
Correct supervisory gaps, customer harm, or representative misconduct.
Notes and examples
Complaint Traps
A rep cannot personally settle a complaint away from the firm.
Do not alter account records or correspondence after receiving a complaint.
Oral complaints may still require escalation under firm policy, even when written complaints have specific recordkeeping significance.
“The customer is confused” is not a sufficient investigation.
Repeated small complaints may show a larger supervisory pattern.
AML, Fraud, Privacy, and Financial Exploitation
AML and fraud questions usually test escalation, monitoring, and documentation.
Area
Key Point
Customer Identification Program
Verify customer identity according to firm procedures.
Beneficial ownership
Know who owns or controls legal entity accounts when required.
Suspicious activity
Escalate red flags to AML/compliance personnel; do not warn the customer improperly.
OFAC/sanctions screening
Potential matches require firm escalation and resolution procedures.
Privacy
Protect nonpublic personal information and follow privacy notice/safeguarding rules.
Cybersecurity
Unauthorized account access, phishing, and compromised email require prompt escalation.
Senior investors
Trusted contacts and temporary holds may be relevant when exploitation is suspected.
Notes and examples
Senior Investor Traps
Trap
Correct Concept
Trusted contact is treated as authorized trader.
A trusted contact is for contact/escalation, not trading authority.
Rep follows suspicious withdrawal instructions without review.
Escalate possible exploitation or diminished capacity concerns.
Customer’s family member pressures the rep.
Verify authority and protect customer confidentiality.
Firm ignores sudden liquidation inconsistent with profile.
Review, document, and escalate red flags.
Outside Activities and Conflicts
FINRA frequently tests whether a principal distinguishes ordinary outside work from securities activity.
Activity
Principal Review
Outside business activity
Associated person gives prior written notice; firm evaluates conflict and supervision needs.
Private securities transaction
Securities transaction outside regular firm business; compensation and firm approval/supervision issues are critical.
Selling away
Unapproved securities activity away from the firm; major violation and supervisory concern.
Borrowing from or lending to customers
Permitted only under strict firm policy and rule conditions.
Gifts and entertainment
Must comply with firm policy, FINRA limits, and non-cash compensation rules.
Political contributions
Can trigger pay-to-play restrictions and supervisory review.
Personal trading
Subject to monitoring for conflicts, front-running, insider trading, and outside accounts.
Notes and examples
OBA vs. Private Securities Transaction
If the activity is…
Think…
Non-securities outside work, paid consulting, board service, side business
Outside business activity review.
Selling promissory notes, private funds, crypto-related securities, limited partnership interests, or other securities away from the firm