Compliance for Financial Services Firms: What You Can and Cannot Say

Meta ads create a recurring tension inside financial services firms. Marketing wants to move quickly. Creative wants a strong hook. The agency wants enough specificity to make the ad useful. Compliance wants to know exactly what is being claimed, what supports it, who is saying it, and where it will appear.

When the same ad returns with a different set of comments each time, it is easy to conclude that compliance is being obstructive. Usually the problem is the workflow.

A financial services ad is not a headline and an image. A reviewer may need to consider the spoken script, on-screen text, captions, landing page, disclosures, imagery, testimonials, supporting evidence, audience and the firm's applicable regulatory framework. A small change to one element can change the context of another.

Which makes compliance less like proofreading and more like a production system. This article explains how to structure that system. It does not determine what your firm may publish. Your compliance process, policies, applicable regulations and legal counsel determine that, based on the facts and circumstances of each communication.

What Can Financial Services Firms Say in Meta Ads?

Your compliance process decides what your firm can publish, and the review becomes far more predictable once marketing understands which categories of claim require closer examination.

The useful question is not which words are allowed. There is rarely a universal list that answers that for every firm. The better question is what kind of claim are we making, and what would a reviewer need in order to evaluate it.

That shift changes how creative gets developed. A team might start with a concept such as helping investors prepare for retirement, helping business owners think through a liquidity event, or helping executives manage concentrated equity compensation. Those subjects are not the same as a promise about an outcome.

Even a simple message can raise questions about what the firm is representing, what evidence supports it, whether important context is missing, and whether the message creates an implication beyond its literal words.

For SEC-registered investment advisers, the Marketing Rule under Rule 206(4)-1 establishes requirements that can apply to adviser advertisements, including provisions addressing misleading statements, testimonials and endorsements, third-party ratings, performance information and hypothetical performance. Related books and records requirements also apply. Application depends on the facts and circumstances of the particular communication and the adviser's situation.

The general prohibitions address the substance and presentation of an advertisement rather than a list of individual words, which is one reason review feels unpredictable to a marketer looking only at copy. So do not build a creative process around guessing which phrases survive review. Build it around documenting the claim, its context, and the evidence or policy basis behind it before production starts.

Which Types of Claims Usually Attract More Scrutiny?

Claims involving performance, superiority, certainty, social proof, credentials or implied outcomes typically need more context for a reviewer to evaluate, though treatment depends on the firm and the specific communication.

Performance claims. Statements or visuals involving investment results, historical returns or portfolio outcomes can require detailed review. For advisers, performance advertising is subject to specific provisions of the Marketing Rule, with application depending on facts and circumstances.

Comparative or superiority claims. Suggesting one firm, service or approach is better, safer, faster or more experienced than another prompts questions about the comparison, its substantiation and its context.

Guarantees and certainty. Language appearing to promise an outcome or express certainty about a future result requires careful review, because the reviewer has to determine what the statement represents and what qualifications apply.

Testimonials and endorsements. A client, employee, influencer or referral statement raises separate questions about compensation, disclosures, oversight, eligibility, context and presentation.

Third-party ratings. Awards, rankings, badges and lists require review of the source, methodology, timing, disclosures and how the recognition is characterized.

Credentials. Designations, certifications, experience claims and affiliations require verification, and a credential can become misleading when surrounding copy implies it establishes something broader.

Implied outcomes. The literal words are not the whole message. A headline, image, chart, client story and call to action together can create an implication a reviewer will evaluate even when nothing states it directly.

Which is why swapping one word after a rejection often fails. If the reviewer is concerned about the implication of an entire concept, changing maximize to improve does not address it. The better response is understanding what the reviewer believes the communication represents, and what documentation or restructuring would resolve that.

Can You Use Testimonials in a Financial Services Ad?

Your compliance process determines whether and how, and the review may cover the speaker, compensation, disclosures, oversight and the exact context in which the statement appears.

Testimonials are the easiest thing for marketers to underestimate. A client saying a firm helped them feels more natural and persuasive than the firm saying it about itself. From a compliance perspective, the identity and relationship of the speaker introduce considerations the firm's own statement would not.

For SEC-registered investment advisers, the Marketing Rule addresses testimonials and endorsements through provisions concerning disclosure, oversight, written agreements in applicable circumstances and disqualifying events. Application depends on facts and circumstances.

This is an area the regulator has been explicit about recently. On 16 December 2025 the SEC's Division of Examinations published a Risk Alert titled Additional Observations Regarding Advisers' Compliance with the Advisers Act Marketing Rule, focused specifically on the testimonials and endorsements provisions and the third-party ratings provisions. Firms using either should treat current regulatory materials as the reference point rather than an older internal checklist.

The workflow lesson is simple. Do not wait until the ad is finished to tell compliance a testimonial is in it. Identify the proposed speaker at the concept stage. Document the relationship. Document whether compensation or another benefit is involved. Preserve the original statement. Identify where it will appear. Then let the firm's reviewers determine what documentation, disclosure, oversight or changes are required.

The same applies to screenshots of reviews, ratings, awards, comments and social posts. Treat social proof as a compliance-sensitive asset rather than decorative creative.

For advisory firms specifically, the deeper treatment is in Meta Ads Compliance for RIAs, which complements this broader discussion rather than replacing the firm's own review.

Why Does Video Create More Compliance Work?

Because the communication exists simultaneously in speech, text, visuals, captions, editing and surrounding context, so a video has more review surfaces than a static ad.

A static image with a short headline is contained. A ninety-second video is not.

The spoken script contains claims. Delivery adds emphasis. On-screen text introduces a second claim. Captions repeat or sometimes alter the wording. A chart in the background communicates independently. A screenshot introduces a third-party statement. The call to action creates another implication.

Sequencing matters too, because a statement that appears qualified in one part of a video looks different when the qualification sits several seconds away from it.

So review should not be limited to a transcript. A useful package includes the final script, the final video, captions, on-screen text, thumbnail, landing page destination, supporting documentation and any disclosures the compliance team identifies.

The background deserves specific attention. If a video shows a portfolio chart, an account screen, an award logo, a client message or a performance number behind the speaker, that material is part of what viewers see. Do not assume a reviewer treats it as irrelevant because nobody mentions it aloud.

Music and production choices affect the overall communication as well. A dramatic visual paired with language about financial security creates an impression different from the words alone, which is why the finished communication should be reviewed as the audience will experience it rather than as a set of separately approved components.

How Do You Build an Approved Messaging Framework?

Build it before production, documenting positioning, target audience, recurring claims, evidence, required context and review requirements.

Repeated friction usually starts before the first ad is written. If every campaign begins with a blank document, marketing and compliance renegotiate the same questions each time.

A framework creates a shared starting point. It can document approved descriptions of the firm's services, the audiences and financial circumstances being targeted, the problems the firm wants to discuss, preferred terminology, claims requiring supporting documentation, claims requiring additional review, approved descriptions of credentials and affiliations, how the firm describes fees and conflicts and risks, the process for testimonials and endorsements, requirements for performance information, required disclosures, examples of previously approved creative with the context in which it was approved, and the person responsible for final approval.

That last item matters most. An old approved ad is not permanent approval for every future use. A different audience, offer, claim, landing page, speaker, disclosure or regulatory circumstance can change the analysis, so the framework is a starting point rather than a substitute for review.

The best systems separate three things marketers tend to combine: the creative idea, the factual claim, and the evidence supporting the claim. Retirement income planning is a topic. Our process helps clients coordinate multiple retirement income sources is a substantive representation. A document explaining the actual process is evidence. Three different objects, managed separately, which makes revision far faster because the creative treatment can change without losing track of the underlying claim.

Who Approves Meta Ads at a Financial Services Firm?

The firm's designated compliance process decides, and the operational task is defining that ownership before creative enters production.

There is no universal structure. One firm has an internal compliance officer. Another uses a committee. Another involves legal counsel. A larger organization may have separate marketing, compliance, legal, supervisory and business-unit reviewers.

What matters is that everyone knows who holds final authority. A common source of delay is a campaign approved by one stakeholder and then sent to another who was never part of the review. That creates two problems: marketing receives conflicting instructions, and the team starts treating an earlier approval as clearance even though the approver lacked final authority.

So define the workflow before the campaign starts. Identify the marketing owner, the compliance reviewer, whether legal review is required, who provides final sign-off, what documentation the reviewer needs, and where approval gets recorded. Then make that process visible to the agency or creative team.

The objective is not reducing compliance's role. It is preventing compliance from becoming an invisible dependency discovered at the end of production.

How Do You Speed Up Compliance Review?

By reducing ambiguity, batching related assets, assigning clear ownership, and giving reviewers the context they need to evaluate the communication.

The fastest review is rarely the one with the shortest email. It is the one where the reviewer does not have to reconstruct what the campaign is trying to do.

Rather than sending a video with can you approve this, send a package identifying the campaign objective, target audience, offer, speaker, claims being made, evidence supporting them, destination page, related creative and any previous approval being relied on.

Batching helps. If five variations use the same core message, reviewing them together gives a clearer picture than five unrelated requests. Batching should not mean hiding meaningful differences, because a new claim, testimonial, offer, audience or materially different presentation may require separate attention under the firm's process.

Set internal expectations for turnaround without presenting any particular number of days as an industry standard. Review time depends on the organization, the reviewer, the communication, the framework and the issues raised.

Distinguish a revision from a re-review trigger. If a headline changes and the firm treats that as material, it needs another review. If a video gains a new testimonial, changes speaker, introduces a performance statement or changes destination, the team should already know whether that triggers approval. Those rules come from the firm's compliance process, not from the agency and not from this article.

What Should You Keep for the Compliance Record?

The firm determines what its recordkeeping obligations require, and marketing should treat the approved asset and its review history as records rather than temporary campaign files.

The most common operational mistake is assuming Meta is the archive. It is not a substitute for the firm's own recordkeeping system.

For SEC-registered investment advisers, Rule 204-2 includes books and records requirements associated with adviser advertising, covering advertisements and certain supporting materials, including records associated with performance, testimonials, endorsements and third-party ratings, subject to the applicable provisions and the facts and circumstances.

So the operational question is not whether the ad is still live. It is whether the firm can reconstruct what was disseminated, when, what was approved, and what documentation supported it.

A firm's process may call for retaining the final creative file, the final copy and script, versions submitted for review, compliance comments and responses, final approval documentation, supporting evidence for material factual claims, testimonial or endorsement documentation, required disclosures, the landing page associated with the ad, and records identifying when and where it ran. Exact requirements come from the firm's applicable rules and internal policies.

Recordkeeping should happen during production. Reconstructing an old campaign afterward is considerably harder than preserving the materials as they move through approval.

Who Owns Comments and Engagement on a Live Ad?

The firm should decide in advance, because the public conversation around an advertisement is another communication surface requiring oversight.

Launching is not the end of the workflow. People comment on ads. They ask questions. They make claims about the firm. They describe their experiences. They ask for specific investment advice. They post statements marketing never wrote and did not expect.

Which creates an operational question: who is watching? The answer should not be whoever happens to see the notification.

Before launch, define who owns the comment surface and what that person does when a comment raises a concern. The process may need to cover escalation, response authority, moderation policy, recordkeeping, and the situations where a comment should not receive a substantive response from marketing at all.

Do not assume an agency managing the account automatically owns every compliance responsibility attached to the resulting engagement. Platform access is an operational permission. It does not transfer the firm's regulatory obligations, supervisory responsibilities or approval authority.

Why Do Different Firms Have Different Compliance Rules?

Because financial services firms operate under different regulatory frameworks, so the same marketing concept can require different analysis depending on the business, registration, jurisdiction and applicable rules.

Which is why generic financial services compliance checklists have limits. A registered investment adviser does not face the same framework as every broker-dealer, insurance organization, bank, mortgage company or private fund manager. The applicable rules also depend on registration status, products, services, audience, jurisdiction and communication method.

This article deliberately does not attempt to summarize those separate frameworks.

For SEC-registered investment advisers, the Marketing Rule under Rule 206(4)-1 is a central part of the analysis, covering adviser advertisements and addressing misleading statements, testimonials and endorsements, third-party ratings, performance information and hypothetical performance, alongside related recordkeeping requirements.

SEC staff FAQs offer insight into how staff views particular questions. The SEC states plainly that those FAQs represent staff views, are not rules or statements of the Commission, and have no legal force or effect. Treat them as staff guidance rather than a replacement for the governing rule, the adopting release, firm policies or legal advice.

So the lesson is not to ask an agency for a universal financial services rulebook. Give the agency the firm's applicable framework, internal policies, approved messaging parameters and escalation process, then have the firm's designated reviewers make the determinations.

What Can a Meta Ads Agency Take On?

An agency can own most of the production and workflow, and it should not replace the firm's compliance function or make final regulatory determinations on the firm's behalf.

A capable agency takes real work off the internal team. It can organize concepts, draft scripts, build landing pages, maintain version control, prepare review packages, track revisions, incorporate comments, maintain an asset library, coordinate resubmissions, document which version was approved, and make sure a rejected concept does not quietly reappear in a later campaign.

It can also learn the firm's preferences, which reduces friction. If compliance consistently asks for substantiation when a category of claim appears, the agency can build a checkpoint so the support is collected before the draft reaches review.

The boundary matters. The agency should not tell the firm a statement is compliant because it appeared in another campaign. It should not promise Meta will approve an ad. It should not represent that platform approval resolves a regulatory obligation. And it should not substitute its judgment for the firm's compliance or legal review.

The agency's role is making the process easier to operate. The firm's role is determining what it is willing and permitted to publish. When evaluating an agency, look for evidence it understands that distinction, and the buyer's guide to choosing a Meta ads agency covers what to examine before engaging one. The wider campaign process sits in the guide to Meta ads for financial services firms.

What Does a Better Compliance Workflow Look Like?

It moves compliance upstream, separates claims from creative execution, and gives reviewers a consistent package before production is finalized.

The goal is not eliminating review. It is not discovering requirements after the creative has been built.

Start with the business objective and who the campaign should reach. Define the message and the financial problem it addresses. List the substantive claims, including those implied by the combination of words and visuals. Collect the support for each material factual representation where the firm's process requires it. Flag the sensitive categories: performance, comparisons, testimonials, endorsements, ratings, credentials, guarantees and certainty. Draft the creative inside the approved messaging framework. Assemble a complete review package rather than isolated sentences. Record the decision and preserve what the process requires. Control revisions, defining which changes need another review. Then monitor the live communication, with named ownership for comments and post-launch activity.

Notice what is absent. There is no universal list of safe words. No promise a headline will be approved. No claim that adding a disclaimer resolves a concern. No assumption that an ad approved last quarter is approved for a different campaign.

What exists instead is a repeatable path from idea to reviewed communication, which is what makes compliance scalable.

Marketing teams often treat compliance as a gate at the end of production, which makes every rejection expensive because creative, editing, media planning and launch prep are already done. A better system treats it as part of campaign architecture. The result is not fewer rules. It is fewer surprises.

The objective is not finding a secret list of phrases that always pass. It is building a process where marketing knows what it is claiming, compliance knows what it is being asked to review, the supporting documentation exists, and the final decision stays with the people responsible for the firm's compliance program.