In September 2022, the SEC and CFTC fined some of the largest financial services firms in the world approximately $1.8 billion for texting. Specifically, for failing to maintain or preserve “off-channel communications” on platforms such as WhatsApp. The DOJ’s new policies regarding corporate violations disapprove of unpreserved texts and ephemeral messaging on personal devices, and suggest the DOJ will impose similar penalties for off-channel texting.

A number of large financial institutions paid $125 million each to the SEC and $75 million each to the CFTC, for a total of $200 million per firm for record-keeping violations. In fact, even the procedural violations were somewhat ethereal, as the SEC orders described them with language such as “[the firm] likely deprived the Commission of these off-channel communications in various investigations” (emphasis added).

Not that technical violations were absent. The financial services firms apparently did not comply with Section 17(a) of the Exchange Act and Rule 17a-4(b)(4), which require broker-dealers to preserve originals of all communications received and copies of all communications sent relating to their business for at least three years. Still, the fines are far beyond any previously meted out for record-keeping violations, and appear especially severe, given that the regulators allege no specific harm to customers.

The significance of the SEC and CFTC orders extends beyond the regulatory realm into criminal law, as the DOJ has already announced its intent to explore similar territory. And there’s virtually no daylight between the expectations of the DOJ and those of the SEC and CFTC. In a memo setting out the DOJ’s new policies, Deputy Attorney General Monaco states, “The ubiquity of personal smartphones, tablets, laptops, and other devices poses significant corporate compliance risks, particularly as to the ability of companies to monitor the use of such devices for misconduct and to recover relevant data from them during a subsequent investigation. The rise in use of third-party messaging platforms, including the use of ephemeral and encrypted messaging applications, poses a similar challenge.” Then, Monaco’s memo pointedly suggests that off-channel text messages will be deemed noncompliant and uncooperative: “How companies address the use of personal devices and third-party messaging platforms can impact a prosecutor’s evaluation of the effectiveness of a corporation’s compliance program, as well as the assessment of a corporation’s cooperation during a criminal investigation.”

In response, companies will need to shepherd any straying employees back onto the record. Both regulators and law enforcement agencies expect policies and procedures governing the use of personal devices and the retention of messages, and disappointing those expectations could be costly. But merely commanding that wayward employees sin no more will be insufficient in many cases. Smartphones and their apps are designed to be tempting, and many people, including customers, prefer text messaging to other forms of communication. Accordingly, the threat of disciplinary actions or terminations for off-channel texting may not be enough by itself to discourage employees.

Instead, companies should consider how to make compliant messaging possible. And some already have. In the securities industry, some broker-dealers have begun using apps that automatically archive text messages sent and received. Such apps can even be used on employee-owned devices with separate business phone numbers, thus allaying privacy concerns regarding nonbusiness related communications. Compliance is more likely to be effective when it’s convenient.

©2026 Carlton Fields, P.A. Carlton Fields practices law in California through Carlton Fields, LLP. Carlton Fields publications should not be construed as legal advice on any specific facts or circumstances. The contents are intended for general information and educational purposes only, and should not be relied on as if it were advice about a particular fact situation. The distribution of this publication is not intended to create, and receipt of it does not constitute, an attorney-client relationship with Carlton Fields. This publication may not be quoted or referred to in any other publication or proceeding without the prior written consent of the firm, to be given or withheld at our discretion. To request reprint permission for any of our publications, please use our Contact Us form via the link below. The views set forth herein are the personal views of the author and do not necessarily reflect those of the firm. This site may contain hypertext links to information created and maintained by other entities. Carlton Fields does not control or guarantee the accuracy or completeness of this outside information, nor is the inclusion of a link to be intended as an endorsement of those outside sites.

Related People

Jump to Page

Carlton Fields, P.A. Cookie Preference Center

Your Privacy

When you visit our website, we use cookies on your browser to collect information. The information collected might relate to you, your preferences, or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. For more information about how we use Cookies, please see our Privacy Policy.

Strictly Necessary Cookies

Always Active

Necessary cookies enable core functionality such as security, network management, and accessibility. These cookies may only be disabled by changing your browser settings, but this may affect how the website functions.

Functional Cookies

Always Active

Some functions of the site require remembering user choices, for example your cookie preference, or keyword search highlighting. These do not store any personal information.

Form Submissions

Always Active

When submitting your data, for example on a contact form or event registration, a cookie might be used to monitor the state of your submission across pages.

Performance Cookies

Performance cookies help us improve our website by collecting and reporting information on its usage. We access and process information from these cookies at an aggregate level.

Powered by Firmseek