Finra caught up in email phishing scheme

Finra caught up in email phishing scheme
A new cybersecurity alert warns member firms to be wary of fraudulent messages impersonating key members of the regulator’s leadership.
APR 05, 2024

Finra has issued a cybersecurity alert to its member firms warning of an ongoing phishing campaign that impersonates two key members of the organization's leadership.

The fraudulent scheme, which the Financial Industry Regulatory Authority Inc. says impacts all firms, involves emails falsely claiming to be from executives at the industry regulator, using the deceptive email addresses “[email protected]” and “[email protected].”

According to the alert, these email addresses, along with the domain “data-finra.org,” are not associated with Finra, and recipients are advised to immediately delete any emails received from these domains.

Utilizing a classic social engineering ploy appealing to actual authorities, the bogus emails purport to come from members of Finra’s leadership, including Steve Randich, executive vice president and chief information officer of Finra, and Robert L.D. Colby, its chief legal officer.

The phishing messages are also crafted to evoke a sense of urgency, claiming multiple attempts have been made to contact the target “to deliver a notice that requires your attention.” That’s on top of vague tags simply highlighting the notice as “confidential” with a “Due Date” of April 15, 2024.

The fraudulent communication includes a file labeled “Finra [FIRM NAME]_Disclosure290124.pdf,” with a request to “complete the request at your earliest convenience.”

In response to this phishing campaign, Finra has reminded firms to maintain good cybersecurity practices and verify the legitimacy of any suspicious email before engaging with its content, including responding, opening any attachments, or clicking on embedded links.

Finra has also reached out to the registrars behind the fake “data-finra.org” Internet domain, asking for its suspension. To help address cybersecurity threats, Finra is urging member firms to contact its cyber and analytics unit for guidance, and promptly report incidents to the FBI’s Internet Crime Complaint Center or the Cybersecurity and Infrastructure Security Agency via its 24/7 Operations Center.

Younger generations are more interested in impact investing than ever. Here's why

More goRIA

Orion touts fractional share trading for advisors who custody with Schwab
Orion touts fractional share trading for advisors who custody with Schwab

Advisors can use fractional share trading to implement client models to the dollar, rather than rounding to whole shares.

RIAs grew assets sharply in 2025 – but barely added clients. What gives?
RIAs grew assets sharply in 2025 – but barely added clients. What gives?

Median RIA assets rose 14.5% while client rosters grew barely 2%, according to a new analysis of SEC filing data.

Indie RIAs double down on hiring as competition for talent intensifies
Indie RIAs double down on hiring as competition for talent intensifies

Schwab data shows hiring remains top priority for RIAs, while employee value propositions and AI are reshaping recruiting.

Wirehouse to broker-dealer to RIA: Larry Sprung's path to a $250M practice
Wirehouse to broker-dealer to RIA: Larry Sprung's path to a $250M practice

Larry Sprung's Mitlin Financial grew from $50 million to $250 million in assets under management since 2020 — here's how a shift to independence and a partnership with Carson Group fueled the climb.

Equity culture drives $503M firm's move to Merit Financial
Equity culture drives $503M firm's move to Merit Financial

Towson Wealth Management joins Merit Financial after advisors received equity stakes as part of their transition package

SPONSORED Direct indexing webinar targets tax-loss harvesting amid market swings

Northern Trust’s Ken Lassner shows advisors how to convert volatility into after-tax portfolio gains

SPONSORED Who builds the income when the pension disappears?

Dan Biagini of American Equity says the steady decline of pensions, longer lifespans and a reset in interest rates are rewriting how advisors build retirement income