Back to Blog
    ComplianceUpdated

    SEC Marketing Rule for RIAs: 2026 Guide

    A practical SEC marketing rule guide for RIAs: use testimonials, reviews, performance ads, and AI marketing with stronger oversight and records.

    BS
    Bradley Smith
    Co-Founder at Aspen

    SEC Marketing Rule for RIAs: 2026 Guide

    What does the SEC marketing rule require for RIAs in 2026?

    The SEC marketing rule requires investment adviser advertisements to be truthful, substantiated, and fair and balanced, with additional conditions for testimonials, endorsements, third-party ratings, and performance.

    For a firm managing $50M to $500M in AUM, the practical challenge is consistency. Your website, LinkedIn posts, COI referrals, and automated emails need the same controls, even when different people or vendors produce them.

    Rule 206(4)-1 applies to advisers registered or required to register with the SEC. State-registered RIAs should check their state requirements rather than assume the federal framework applies unchanged.

    The SEC’s adopting release explains the rule and related recordkeeping changes. Your operating principle is straightforward: prove your claims, explain material limitations, and preserve what prospects actually received. A disclaimer cannot rescue misleading copy.

    What counts as an RIA advertisement?

    An advertisement generally includes communications offering advisory services to prospects or new advisory services to existing clients, plus compensated testimonials and endorsements under a separate part of the definition.

    The first part generally covers direct or indirect communications to more than one person. Hypothetical performance can bring even a one-person communication within scope, subject to specific exclusions. Extemporaneous live oral communications also have an exclusion.

    The second part covers compensated testimonials and endorsements, including certain one-to-one referral communications. A personal introduction is not automatically outside the rule.

    Review the communication’s substance, audience, and distribution, not its label. Calling a prospect webinar “education” does not settle whether it is advertising.

    Marketing activity Main compliance question Useful supporting record
    Website service page Are factual claims supported and benefits balanced? Published version and substantiation
    Client quote Are status, compensation, and conflicts disclosed? Original statement and disclosure review
    Paid COI introduction Do promoter requirements apply? Agreement, payments, and oversight records
    Award badge Does it qualify as a third-party rating? Methodology and required disclosures
    Performance presentation Are calculations and presentation compliant? Source data, fees, periods, and methodology
    Automated prospect email Does the sent version match approved content? Final message and distribution record

    How can RIAs use testimonials and endorsements?

    RIAs can use testimonials and endorsements when they satisfy applicable disclosures, oversight, written-agreement requirements, and disqualification provisions.

    A testimonial comes from a current client or private fund investor. An endorsement comes from someone else, such as a non-client CPA recommending your firm. Former-client statements generally fall into the endorsement category.

    For covered statements, clearly and prominently disclose client or non-client status, whether compensation was provided, and a brief statement of material conflicts. Additional disclosures must describe material compensation terms and material conflicts arising from the relationship or arrangement.

    Place essential context where prospects encounter the statement. A homepage quote should not depend on a visitor finding an unrelated legal page.

    Written agreements generally apply, with exceptions including no compensation or compensation of $1,000 or less during the preceding 12 months, and certain affiliated promoters. The agreement describes the activities and compliance obligations.

    Do not confuse an agreement exception with a blanket exemption. Oversight still matters, and disqualification provisions have their own exceptions. Compensation includes cash and noncash benefits, potentially including fee reductions, gifts, or reciprocal arrangements.

    Before launching, document:

    1. The speaker’s identity and current client status.
    2. The original statement and permission to use it.
    3. Compensation, benefits, and material conflicts.
    4. Applicable disclosures and agreement requirements.
    5. Eligibility checks and ongoing oversight.

    Use the RIA testimonial compliance guide for a more focused implementation process.

    Can RIAs use Google reviews and social media comments?

    RIAs can use online reviews, but their obligations depend on their involvement in requesting, influencing, adopting, or distributing the statements.

    An unsolicited review on an independent platform is not automatically your advertisement. Republishing that review on your website, quoting it in an email, or promoting it through a paid campaign changes the analysis.

    Do not assume a Google Business Profile disclaimer satisfies every requirement. Evaluate whether required disclosures can accompany the review clearly and prominently. If a platform cannot support your intended compliant presentation, reconsider the campaign.

    Use a documented, neutral review-request process. Asking only clients you know are delighted can contribute to a misleading presentation. Avoid coaching reviewers to describe returns or suppressing unfavorable feedback to manufacture a false impression.

    Likes, shares, pinned comments, and replies require a facts-and-circumstances review. Train employees to escalate promotional use of third-party praise rather than improvise.

    For advisor website design, plan disclosure placement before adding review widgets. Check mobile displays, scrolling behavior, and whether a visitor can see the disclosure alongside the quote.

    What must RIAs disclose about awards and third-party ratings?

    RIAs using qualifying third-party ratings must satisfy due-diligence and disclosure requirements in addition to the rule’s general prohibitions.

    A rating badge is not self-explanatory evidence of investment skill. Confirm who produced it, what it measures, and whether it meets the rule’s definition of a third-party rating.

    You need a reasonable basis for believing any questionnaire or survey makes favorable and unfavorable responses equally easy and is not designed to produce a predetermined result.

    Clearly and prominently disclose the rating date, the period it covers, the third party’s identity, and applicable compensation for obtaining or using the rating.

    Preserve methodology and payment records. If you buy permission to display a badge, evaluate that payment rather than describing the award as simply “unpaid.” Never imply SEC registration or an award guarantees competence or future results.

    Build one documented review path for every campaign before you expand distribution.

    What are the SEC rules for performance advertising?

    Performance advertisements must satisfy specific presentation requirements as well as the general obligation not to mislead investors.

    Gross performance generally requires net performance with at least equal prominence, using the same periods and a methodology designed to facilitate comparison. A small net-return footnote beneath a prominent gross-return chart is not enough.

    For applicable portfolio performance, show one-, five-, and ten-year periods ending no less recently than the most recent calendar year-end. If the portfolio did not exist for a required period, use its life for that period. Private fund performance has an exception to these prescribed periods.

    Do not substitute the age of your firm for the life of the portfolio.

    Fee calculations need specialist review. A model fee is not a universal shortcut, particularly when an advertised strategy’s intended audience may pay more than historical investors paid. Review the SEC staff’s marketing rule FAQs for staff positions on fees, extracted performance, and related presentation questions. Staff FAQs are not the rule itself.

    Apply additional controls to:

    • Related portfolios: Avoid selectively excluding accounts to improve advertised results.
    • Extracted performance: Address net presentation and provide, or offer promptly to provide, total-portfolio performance as required. Evaluate any applicable staff FAQ position carefully.
    • Hypothetical performance: Implement policies addressing relevance to the intended audience and provide required information about criteria, assumptions, risks, and limitations.
    • Predecessor performance: Confirm personnel, account similarity, disclosures, and other applicable conditions.

    Backtests and model results can remain hypothetical even when they use real securities prices or custodian data. A TAMP report does not automatically become actual client performance.

    Likewise, anonymized client stories are not a safe harbor. Describing tax savings or investment outcomes still requires substantiation and balanced context.

    Do IBD-affiliated advisors also need FINRA approval?

    IBD-affiliated advisors must evaluate applicable broker-dealer communication rules and home-office policies in addition to any SEC adviser requirements.

    FINRA Rule 2210 contains communication standards, approval requirements, and testimonial provisions. Where applicable, testimonial disclosures address representativeness, future performance, and paid status when compensation exceeds $100 in value.

    That threshold serves a different purpose from the SEC’s $1,000 de minimis provisions. Do not interchange them.

    Route campaigns through your IBD’s required approval process. Dual registration does not mean the more permissive rule controls, and home-office policies may be stricter than the regulatory minimum.

    How can RIAs automate marketing compliance without losing control?

    RIAs can automate routing, version control, disclosure checks, and record capture while keeping accountable human oversight over claims and distribution.

    Start with a campaign record connecting the final advertisement to its evidence. Your archive should capture rendered webpages, emails, social posts, videos, disclosures, and relevant distribution information, not just editable drafts.

    Under the adviser books-and-records framework, required advertising records generally follow a five-year retention period measured from the end of the fiscal year of the last entry, with the first two years in an appropriate office. Have compliance map the requirements to each record category and any broker-dealer obligations.

    Use Redtail or Wealthbox to track campaign ownership, referral sources, approvals, and follow-up tasks. A CRM alone is not necessarily a compliant archive.

    A workable process is:

    1. Classify: Identify advertising, testimonial, rating, and performance issues.
    2. Substantiate: Attach evidence for material factual claims, including AUM figures.
    3. Review: Apply your firm’s approval policy and required supervisory reviews.
    4. Release: Publish only the approved version with intact disclosures.
    5. Monitor: Capture changes, review promoter activity, and correct stale material.

    The rule does not universally require CCO preapproval of every advertisement. Your policies should define risk-based review, with stronger gates for higher-risk material.

    Aspen Agent is a proactive AI marketing agent that runs website, follow-up, content, review, and referral work. Put that execution inside your firm’s documented approval boundaries, not in place of them.

    For implementation details, use these ways to automate marketing rule compliance. AI-generated claims need the same evidence as human-written claims.

    How can compliant RIA marketing still grow AUM?

    Compliant marketing can support AUM growth by making your expertise understandable, your claims verifiable, and your prospect follow-up consistent.

    Build campaigns around a defined audience, such as executives approaching retirement or families evaluating inherited assets. Explain your planning process, service scope, fees, and limitations without promising outcomes.

    Use service-focused client statements where appropriate. Then connect the page to structured prospect follow-up sequences that preserve approved language and route substantive questions to an advisor.

    Measure qualified inquiries, discovery meetings, signed clients, and net new assets. Separate market appreciation from new assets when evaluating growth. Marketing activity alone is not evidence of AUM impact.

    Keep Form ADV Part 1A Item 5.L accurate, and review relevant brochure disclosures, including referral compensation under Part 2A Item 14. Reconcile those disclosures with actual promoter payments and marketing activity.

    Your objective is not maximum disclaimer volume. It is a repeatable growth process your firm can explain and document.

    This guide provides general information, not legal or compliance advice. Have qualified counsel or your compliance team assess your firm’s specific communications and arrangements.

    See how Aspen Agent runs this for your firm. Book a demo.

    Frequently Asked Questions

    Can RIAs pay clients for testimonials?

    Yes, subject to applicable disclosure, oversight, agreement, and disqualification requirements. Compensation includes cash and noncash benefits. The written-agreement exception for compensation of $1,000 or less during the preceding 12 months does not eliminate all other obligations. Have compliance review the arrangement, disclosures, eligibility, and payment records before launching it.

    Does the SEC marketing rule apply to one-to-one emails?

    Ordinary one-to-one communications generally fall outside the first part of the advertisement definition, but hypothetical performance can change that analysis, subject to specific exclusions. Compensated testimonials and endorsements fall under a separate part that can cover one-to-one communications. Other antifraud, supervision, and recordkeeping obligations can still apply even when a message is not an advertisement.

    Can an RIA copy a Google review onto its website?

    Potentially, but republishing the review generally means the firm adopts it for advertising purposes. Assess client status, compensation, conflicts, disclosure placement, and whether the presentation is misleading. Preserve the original statement and review documentation. A generic footer disclaimer or link to a legal page does not automatically satisfy clear and prominent disclosure requirements.

    Can AI approve RIA marketing for SEC compliance?

    AI can flag unsupported claims, missing disclosures, and deviations from approved language, but it cannot transfer regulatory responsibility away from your firm. Define human review requirements in your policies, restrict automated publishing where needed, and retain final communications with supporting evidence. Treat automated checks as controls that assist supervision, not as a legal determination.

    Sources

    Share on LinkedIn

    "Stop fearing the SEC Marketing Rule. Testimonials are the most powerful growth tool RIAs have gained in decades, yet most firms are too afraid to use them correctly. Don't let compliance anxiety stunt your AUM growth. Link in comments."

    Share This Post