If you run marketing or compliance at a US financial services firm, you already work inside the most fragmented financial advertising regime in the developed world. Where a UK firm answers to one FCA-led financial promotions rulebook, you answer to FINRA Rule 2210, the SEC Marketing Rule, the FTC Act and an active state-level layer led by regulators like the New York Department of Financial Services, the California Department of Financial Protection and Innovation, and several state Attorneys General. Each is independently enforceable, and none are coordinated.
The landscape shifted in 2025 and 2026, but not in the way some firms hoped. The Consumer Financial Protection Bureau, which spent the previous decade as one of the most aggressive enforcers in this space, has been pulled back hard. That didn't simplify the picture. It redistributed enforcement to the states, the FTC and the Department of Justice, which is a harder map to read, not an easier one.
What "financial advertising" actually means in the US
In the United Kingdom, "financial promotions" is a defined regulatory category under section 21 of the Financial Services and Markets Act 2000. One regime, one rulebook, one accountable signatory inside every authorised firm.
In the United States there is no equivalent unifying definition. A financial promotion, or financial advertisement, is any external communication that meets at least one of several descriptions. It can be a sales communication from a FINRA-registered broker-dealer under FINRA Rule 2210, an advertisement by an SEC-registered investment adviser under the SEC Marketing Rule, a representation about a consumer financial product that falls under the CFPB's unfair, deceptive or abusive acts or practices authority, a representation about any product or service under section 5 of the FTC Act, or a communication regulated by a state securities, banking or insurance regulator.
A single asset is frequently subject to three or four of these at once. The UK question is "is this compliant with the financial promotions rules?" The US question is "is this compliant with every regime that claims jurisdiction over it, at the same time, and can we prove it from a single source of truth?"
The federal regulators that are actively enforcing
FINRA Rule 2210 governs broker-dealer communications and sorts them into institutional, retail and correspondence, each with its own supervisory standard. Retail communications generally require principal approval before first use, with content standards covering performance claims, predictions, risk disclosure prominence and substantiation of factual claims. The scope follows the firm, not the channel. One change worth tracking: in February 2026 FINRA re-proposed amendments to 2210 that would permit performance projections and targeted returns under conditions, moving it closer to the SEC's framework. It isn't finalised, so check the current position before relying on it.
The SEC Marketing Rule (Rule 206(4)-1) governs adviser advertising, covering testimonials, endorsements, performance and digital channels under a facts-and-circumstances test. It prohibits seven categories of conduct and imposes specific conditions on hypothetical performance, predecessor performance and third-party endorsements. Firms cannot rely on channel-based exclusions to avoid coverage.
The FTC Act, section 5 is the primary federal advertising standard for fintechs, crypto firms, payment processors and BNPL providers operating outside a bank or broker-dealer charter. The FTC has detailed guidance on endorsements, comparative claims and negative-option marketing, and with the CFPB stepping back, it has become a more central player for consumer-facing financial brands rather than a secondary one.
The CFPB in 2026 is a different picture
This is the part of the map that has changed most, and it's worth being precise about. The CFPB's UDAAP authority gave it the power to act on consumer harm without citing a specific rule, and for years it used that power aggressively against banks, fintechs and banking-as-a-service arrangements, including for fine-print disclosures that were technically present but practically invisible.
That posture has collapsed. Across 2025 the Bureau cut staff, contracts, supervision and enforcement sharply. Its funding was reduced by roughly half through budget reconciliation, leadership has repeatedly tried to wind the agency down, and its enforcement work is being moved into a new Enforcement and Affirmative Litigation Branch inside the DOJ Civil Division. A December 2025 court order forced the administration to keep the Bureau funded, and the underlying litigation is still live, so the position is contested rather than settled. Consumer advocates describe the agency as being on life support.
The practical takeaway is not "UDAAP no longer matters." The standard still exists, the litigation could shift the picture again, and most states have their own mini-UDAP statutes that mirror it. What's changed is who enforces it. A consumer-harm theory that the CFPB would once have run is now more likely to come from a state Attorney General, a state regulator like NYDFS or the DFPI, or the FTC. So keep the UDAAP discipline in your standards. Just expect the knock on the door to come from a different building.
State regulators now carry more of the weight
With the federal consumer-protection centre of gravity weakened, state regulators have moved into the space, and they bring enforcement that would once have been thought of as federal. They have acted against firms with limited in-state operational presence whose digital campaigns reached state residents. Geo-fencing by state is not a reliable strategy at the velocity modern digital marketing runs at. A firm running a national campaign is functionally subject to the most restrictive interpretation among the federal regulators and any state regulator whose residents see the asset. In 2026 that state layer is doing more of the work than it was a year ago.
Where the regimes overlap
Across the US market, a handful of overlap points account for most multi-regime exposure. Broker-dealer products with credit features, like margin accounts and securities-based lending, sit under FINRA 2210 and consumer-protection scrutiny at once. Adviser ads reaching mass-market consumers can touch the SEC Marketing Rule, the FTC and state regimes together. Influencer endorsements pull in the FTC, FINRA where a broker-dealer is involved, and the SEC where an adviser is. Crypto promotions targeting US residents face the SEC, state securities and money-transmission regulators, and the FTC. Affiliate and lead-generation marketing draws FTC and state consumer-protection attention. And a material change to a product or claim after launch re-exposes the asset to every applicable regime at once, which is the most common source of accidental multi-regime exposure.
The fix is one map, not five processes
The structural answer is a single mapping that satisfies every applicable regime from one source of truth, built in five stages. Inventory every promotion category by product, audience, channel and vendor. Classify each category against the applicable federal and state regimes. Standardise to the most-restrictive applicable standard for each compliance dimension. Codify those standards into the marketing brief, the workflow and the supervisory record. Then verify quarterly against regulatory change and stress-test how complete your records actually are.
This is possible in principle with spreadsheets and email, and it fails in practice for four reasons. Approval by email isn't a supervisory record. Multi-regime reviews fragment across tools. Post-publication monitoring breaks the loop the moment a campaign launches. And vendor records live somewhere else when a regulator asks for them.
How Adclear fits
Adclear is a financial promotions compliance platform built for the multi-regime problem. It runs on more than two years of UK financial promotions operating data, which is one of the most demanding consolidated regimes in the world, so the baseline standards tend to over-satisfy individual US regimes. FINRA 2210, the SEC Marketing Rule, FTC section 5, UDAAP-style consumer-harm standards and the major state regimes are first-class parts of the classification routine, the standards library and the supervisory record, rather than bolt-ons. And the records export in each regulator's evidentiary conventions, so you build once and satisfy many. PensionBee, which operates across the UK and US, runs more than 2,800 of its ads through the platform and brought approval times down to under a day.
FAQ
What is "FinProm" in the US?It's a UK term that doesn't formally exist in the US. In practice, US financial advertising compliance means the combined obligations across FINRA Rule 2210, the SEC Marketing Rule, the FTC Act, UDAAP-style consumer-harm standards and state regulators.
Is the CFPB still a threat in 2026?Less directly than it was. The Bureau has been heavily cut back, its funding reduced and its enforcement work moved toward the DOJ, with the situation still in litigation. UDAAP-style risk hasn't disappeared, but in 2026 it's more likely to be enforced by state Attorneys General, state regulators or the FTC than by the CFPB itself.
Does the US have one financial advertising rule?No. A single piece of marketing content can be subject to three or four federal regulators at once, plus state oversight.
Can AI replace human review?Not for final approval. FINRA Rule 2210 and other regimes require named human principal accountability. AI is useful for triage, disclosure verification and consistency checks, not for replacing the principal of record.
Once you're booked in, we'll send you a free playbook on Financial promotions compliance for FinTechs.
