Try 10 focused Series 23 questions on Customer Activity Supervision, with explanations, then continue with the full Securities Prep practice test.
Series 23 Customer Activity Supervision questions help you isolate one part of the FINRA outline before returning to a mixed practice test. The questions below are original Securities Prep practice items aligned to this topic and are not copied from any exam sponsor.
| Item | Detail |
|---|---|
| Exam | FINRA Series 23 |
| Official topic | Function 3 — Supervision of Retail and Institutional Customer-Related Activities |
| Blueprint weighting | 12% |
| Questions on this page | 10 |
A general securities principal is asked to approve a retail webinar deck for first use that afternoon. The firm’s approved webinar platform will record and archive the invitation, final deck, and live session automatically, and the webinar has already been classified as a retail communication. One slide states: “Our tactical income strategy is built to deliver 7%-9% annually. Clients who follow our allocation discipline should avoid meaningful losses even in volatile markets.” What is the primary red flag the principal should identify before approving the presentation?
tactical may confuse some retail investors.Best answer: C
Explanation: The slide is misleading because it suggests expected annual returns and loss avoidance, which makes the communication promissory and unbalanced.
The primary issue is the content of the slide, not the workflow. Saying a strategy is “built to deliver” a return range and that clients “should avoid meaningful losses” implies predictable performance and downside protection, making the presentation promissory and misleading.
Customer communications must be fair, balanced, and not misleading. Here, the principal’s biggest red flag is language that suggests a retail investor can expect a specific annual return and avoid meaningful losses by following the strategy. That kind of phrasing overstates certainty, minimizes risk, and can be viewed as promissory or exaggerated.
A principal should require the presenter to:
Late submission and supporting backup may matter operationally, but the decisive supervisory issue is that the message itself is misleading.
A registered representative plans a live 30-minute webinar for 40 retail prospects. She will use prepared slides describing the firm’s managed account program and then answer unscripted audience questions. Attendance is by invitation, and the same slide deck will be emailed to attendees after the event. Which supervisory action best aligns with communications-classification and retention standards?
Best answer: A
Explanation: Written slides sent to 40 retail prospects are retail communication, while the live webinar discussion is a public appearance that must be supervised and retained under firm procedures.
Prepared written material distributed to 40 retail prospects is retail communication, and the live webinar remarks are a public appearance. A principal should classify each format correctly up front and apply the firm’s supervision and retention controls to both.
The key issue is that communication classification depends on the format and audience, not just how the event was invited. The prepared slide deck is written material that will be distributed to more than 25 retail investors within 30 days, so it is retail communication. The representative’s live webinar remarks and unscripted answers are a public appearance.
A principal should therefore:
The invitation being sent individually does not make the webinar correspondence, and the fact that attendees are prospects does not make them institutional investors.
Which statement is most accurate about when a principal should escalate an account for deeper review for possible excessive trading or churning?
Best answer: A
Explanation: Churning review turns on excessive activity and effective control, not just formal discretion, so those facts warrant principal escalation.
A principal should escalate when account activity, costs, and trading patterns appear inconsistent with the customer’s profile or objectives. Formal discretionary authority is not required if the representative effectively controls the recommendations or trading decisions.
The core supervisory issue is whether trading appears excessive in light of the customer’s investment objectives, financial situation, and account profile, and whether the representative is driving the activity. A deeper review is warranted when frequent trading, high commissions or costs, or day-trading patterns suggest the account may be handled for the representative’s benefit rather than the customer’s. Written discretion is not required for churning concerns; effective control over a non-discretionary account can be enough. Profitability also does not end the analysis, because an account can still be excessively traded even if some gains are realized. Principals are expected to detect and escalate these patterns through surveillance, not wait for a complaint.
A principal learns that a branch emailed an unencrypted spreadsheet containing customer names, Social Security numbers, and account values to an unaffiliated seminar vendor so the vendor could invite customers to retirement events. The firm’s privacy notice covered servicing-related sharing only and did not offer an opt-out for this marketing use. What is the most likely consequence?
Best answer: C
Explanation: The firm disclosed nonpublic personal information to a nonaffiliated marketer without proper privacy treatment and also failed to safeguard the data.
The most immediate consequence is a privacy and safeguarding problem. Sharing nonpublic personal information with a nonaffiliated marketing vendor without the proper notice and opt-out, and sending it unencrypted, points to a Regulation S-P deficiency rather than an automatic trading or AML action.
This scenario combines two core privacy supervision duties: permitted information sharing and safeguarding customer data. A firm may share nonpublic personal information with certain service providers under limited exceptions, but using an unaffiliated vendor for marketing generally raises notice and opt-out issues unless a specific exception applies. Here, the firm’s privacy notice did not cover this marketing sharing, and customers were not given an opt-out for that use.
The unencrypted transmission of Social Security numbers and account values also suggests a failure to maintain reasonable administrative, technical, and physical safeguards for customer records. The most likely consequence is a regulatory finding under Regulation S-P and a need for remediation, not an automatic hold on trading or a SAR based solely on the transmission itself.
The key takeaway is that privacy notice obligations and safeguarding controls both matter, and a gap in either can create immediate supervisory exposure.
A retail customer who has never sent wires requests an immediate $48,000 wire to a newly added bank account. Earlier that day, the online profile had a password reset, and both the email address and mobile number were changed.
Exhibit: Firm identity-theft scorecard
Password reset same day ................ 1 point
Email and mobile both changed same day . 2 points
Wire to newly added bank account ....... 2 points
4 points or more: place a temporary hold and verify
using previously established contact information
before releasing funds.
3 points or less: obtain standard rep callback
confirmation.
Which supervisory action is required?
Best answer: A
Explanation: The events total 5 points, so the firm must escalate with a temporary hold and out-of-band verification using preexisting contact information.
The red flags add up to 5 points: 1 for the password reset, 2 for same-day email and mobile changes, and 2 for the wire to a newly added bank account. Because that exceeds the firm’s 4-point threshold, the principal should impose a temporary hold and verify through previously established contact information.
This item tests how a principal applies an identity-theft red flag program to a suspected account-takeover pattern. The customer shows multiple same-day changes tied to a funds disbursement request, so the firm’s scoring matrix must be used before the wire is released.
A 5-point total is above the firm’s 4-point escalation threshold, so the required mitigation is a temporary hold plus verification through previously established contact information. The key supervisory point is that new contact data created during the suspicious activity should not be relied on for verification.
Which account maintenance request is generally treated as an account-type change that requires new supporting documentation and principal approval, rather than a routine record update?
Best answer: B
Explanation: Changing from cash to margin alters the account’s legal and supervisory framework, so firms generally require margin documentation and principal approval.
A cash-to-margin conversion is not just a clerical update; it changes the account type and the risks, disclosures, and supervision that apply. That is why firms generally require new documentation, such as a margin agreement, plus principal approval before the change is effective.
The key concept is the difference between a routine account-record change and a change that materially alters how the account may operate. Moving an existing account from cash to margin changes the account’s permissions, credit features, and supervisory requirements, so it typically requires additional account documentation and review by an appropriately designated principal.
By contrast, items such as an address update, beneficiary change, or trusted contact update are usually maintenance changes to existing records. Those updates still require proper customer instruction and firm documentation under the firm’s WSPs, but they do not normally convert the account into a different operating type. The best answer is the choice that changes the account’s legal and supervisory status, not merely the customer information on file.
A principal is reviewing a new online individual cash account. The file includes the customer’s signed application, name, date of birth, residential address, funding source, and a clear OFAC screen. The firm’s WSP states that before principal approval the file must include all required CIP identifying information, including the customer’s taxpayer identification number; email address, trusted contact information, and e-delivery elections may be completed later. Which statement is INCORRECT?
Best answer: D
Explanation: The taxpayer identification number is part of required CIP information under the stated WSP, so its absence blocks principal approval even if OFAC screening is clear.
Material missing documentation is the kind the firm’s procedures require before approval, especially CIP identifying information. Here, the taxpayer identification number is expressly required before principal approval, while the other missing items are optional and may be added later.
This item turns on whether the missing information is a required account-opening and CIP element or only a convenience/servicing item. Under the stated WSP, principal approval cannot occur until all required CIP identifying information is in the file, and the taxpayer identification number is specifically listed as required. A completed OFAC screen does not replace missing CIP data; it is a separate control. By contrast, items such as an email address, trusted contact information, and an e-delivery election may be completed after opening because the firm has said they do not block approval.
The key takeaway is that a principal should block approval when a missing item affects required identification and verification, not when it concerns optional account features.
A broker-dealer’s account maintenance procedure requires a supervisor to independently verify any address or bank-instruction change on a long-dormant retail account before accepting a same-week liquidation and wire request. This control is primarily designed to detect and prevent which risk?
Best answer: B
Explanation: Dormant-account changes followed by rapid liquidation and transfer are classic red flags for possible account takeover and fraudulent withdrawal.
The control matches customer-protection and fraud prevention, not sales-practice or trading surveillance. Sudden maintenance changes on a dormant account, especially right before liquidation and a wire, are red flags for possible identity theft or unauthorized account access.
This type of procedure is an account-maintenance and customer-protection control. A dormant account that suddenly shows changes to contact or payment instructions, followed immediately by liquidation and a disbursement request, presents a classic risk of account takeover, impersonation, or other fraud. The supervisory purpose of independent verification is to confirm that the real customer authorized the changes before assets leave the account.
A principal should recognize this pattern as a heightened-verification event, not as a suitability, communications, or trade-reporting issue. The key takeaway is that unusual maintenance activity in a dormant account can signal identity-theft or unauthorized-disbursement risk and should trigger escalation and confirmation procedures.
A registered representative wants to use the firm’s approved LinkedIn account to (1) replace her profile banner and “About” section with marketing language about retirement-income services and (2) respond the same day to prospects who comment on her posts. The firm’s archive captures all business social-media activity, but only one principal review can occur before launch. As the supervising principal, what is the single best action?
Best answer: B
Explanation: The profile changes are static content requiring prior approval, while real-time replies are interactive content supervised after use, and both must be retained.
The best supervisory response is to separate static content from interactive content. The LinkedIn banner and About section are static business communications that require prior principal approval, while replies to comments are interactive communications that can be supervised after use, with firm retention of both.
This item turns on the distinction between static and interactive social-media content. Content that sits on a profile page, such as a banner or About section, is static because the firm can review it before the public sees it; that makes prior principal approval the appropriate control. By contrast, real-time replies to commenters are interactive content, so requiring pre-approval of each response is generally not the best fit when the rep must respond promptly.
The supervisory approach that satisfies all stated constraints is:
The closest trap is the choice that correctly pre-approves the profile content but fails to keep retention under firm control.
During supervisory control testing, a general securities principal learns that one branch uses a third-party portal for address changes and re-delivery of electronic statements and confirmations. The firm’s archive keeps the final approved account-change form, but not the customer’s request, identity-verification record, or copies of the reissued statements and confirmations. No fraud has been confirmed. What is the best next step?
Best answer: D
Explanation: The principal should first preserve and test retrieval of all required records to determine scope and control failure before broader remediation.
The first supervisory step is to determine whether the firm is retaining and can retrieve all required account-maintenance records, statements, and confirmations. That means documenting the gap, preserving records from the branch and vendor, and defining the affected population before moving to broader remediation.
This scenario is a books-and-records and account-maintenance control issue. When a new workflow or vendor portal appears to omit customer requests, authentication evidence, or reissued statements and confirmations, the principal should first secure the records and perform a documented gap review. That establishes whether the firm can actually retain and retrieve the required records, how many accounts are affected, and whether customer notifications or further escalation may be needed.
A sound sequence is:
Immediate shutdown or reversals may be premature without first defining the problem, while waiting for more complaints is too late. Updating procedures before confirming the retention failure also reverses the proper supervisory order.
Use the Series 23 Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, explanations, and web/mobile app access.
Use the Series 23 Cheat Sheet on SecuritiesMastery.com when you want a compact review before returning to the FINRA Series 23 Practice Test page.