FINRA Rule 2165: a practical guide
What the rule does
FINRA Rule 2165 permits — but does not require — a member firm to place a temporary hold on a disbursement of funds or securities from a Specified Adult's account when there is a reasonable belief that financial exploitation has occurred, is occurring, has been attempted, or will be attempted.
Under the 2022 amendments, the rule also permits temporary holds on securities transactions, not just disbursements. This significantly expands the tool's utility against schemes where the exploitation involves a sale or purchase rather than a withdrawal.
The rule is permissive: firms are not required to place holds. But once the rule is invoked, specific procedural requirements apply.
Who is a 'Specified Adult'
A Specified Adult under Rule 2165 is:
(1) a natural person age 65 or older, OR
(2) a natural person age 18 or older who the member reasonably believes has a mental or physical impairment that renders the individual unable to protect his or her own interests.
The second prong is critical and often underutilized. A 50-year-old client with early-onset dementia, a stroke patient, or a client experiencing a serious mental health crisis can qualify — not just clients over 65. The reasonable belief standard is the bar.
What triggers a hold
A 'reasonable belief' of financial exploitation must exist. Financial exploitation includes:
the wrongful or unauthorized taking, withholding, appropriation, or use of a Specified Adult's funds or securities, OR
any act or omission taken by a person, including through the use of a power of attorney, guardianship, or any other authority regarding a Specified Adult, to: (a) obtain control over the Specified Adult's money, assets, or property through deception, intimidation, or undue influence; or (b) convert the Specified Adult's money, assets, or property.
Common scenarios that meet the standard:
— Client suddenly wires large sums to an offshore account or recent online acquaintance.
— Client has new 'helper,' 'caregiver,' or 'romantic partner' directing financial decisions.
— Pattern of unusual withdrawals to fund 'investment opportunities' the advisor hasn't been told about.
— Client appears confused about transactions they previously approved.
Duration of the hold
The default hold under Rule 2165 lasts 15 business days. It can be extended for an additional 10 business days if the firm's internal review supports the belief of exploitation. Under the 2022 amendments, the total hold period can extend up to 55 business days if a state regulator, law enforcement, or court order is involved.
The 15-day clock starts when the disbursement or transaction was first attempted (the date the hold was placed). Track this carefully — missing the clock creates compliance issues.
Required notifications
Within two business days of placing a hold, the firm must notify:
(1) all parties authorized to transact business on the account, AND
(2) the Trusted Contact Person, IF one was designated and the firm has not reasonably believed that the TCP is involved in the suspected exploitation.
If no TCP was designated, the firm should still consider notifying family members or others who can help protect the client — though there's no specific requirement.
Notification must specify that a hold has been placed and the reason. The firm does NOT need to disclose all details of the underlying suspicion.
Internal review
Once a hold is placed, the firm must begin an internal review of the facts and circumstances supporting the hold. The review must be completed within the hold period.
Required elements of the review:
— Documentation of the specific facts that led to the reasonable belief.
— Assessment of whether the suspected exploitation is supported by evidence.
— Determination of whether to extend, release, or escalate to authorities.
— Sign-off by the designated senior protection lead or compliance officer.
Documentation matters enormously here. If the hold is challenged later (by the client, family, or regulator), the firm's contemporaneous notes are the primary defense.
Compliance program elements
FINRA's guidance (RN 22-25 and related) suggests that a workable Rule 2165 program includes:
— Written supervisory procedures that explicitly address Rule 2165.
— Designated supervisor authorized to place holds.
— Training for registered representatives on identifying red flags.
— Process for collecting and updating Trusted Contact Person designations.
— Escalation procedures with timing requirements.
— Documentation templates for hold rationale, notifications, and review.
— Coordination with reporting under the Senior Safe Act and state law.
Common implementation issues
Underuse. Many firms have written procedures but rarely use them. Advisors often don't escalate red flags fast enough. Building a culture where 'when in doubt, escalate' is expected — not penalized — is key.
Missing TCP. Firms that didn't collect TCPs at onboarding can't notify them when needed. Most firms now collect TCPs as part of the new account opening flow.
Documentation gaps. The reasonable belief documentation is often thin. Train advisors to specifically document the facts — not just the conclusion.
Coordination failures. Compliance, the advisor, and the operations team often aren't aligned. Pre-set communication paths matter.
Built for advisors. Trusted by advisors.
Double Check is the client protection tool advisors deploy when prevention matters. Catch scams before the wire goes out. Family alerts built in. Per-advisor pricing scales with your book.