What Are the Compliance Risks for RIAs on Social Media?


RIAs face three distinct compliance risks when posting on social media: performance data that implies returns or projections, testimonials and endorsements without required disclosures, and third-party ratings displayed without meeting the conditions the SEC Marketing Rule sets. These are not new categories of risk invented by social media – they are the same tripwires that have always existed in newsletters, seminars, and advertising. What social media changes is the visibility: content is public, permanent, searchable, and visible to regulators. That raises the stakes on mistakes that might have stayed contained in a printed piece.

YT Era works exclusively in YouTube for financial services, with 1,200+ videos produced in the niche – which means the team has worked through exactly these questions across dozens of advisor practices. YT Era has documented 50+ financial advisors using YouTube as a client acquisition channel – what worked, what didn't, and why. Every channel we build starts from that evidence.

What Makes Performance Data So Risky on Social Media in 2026?

Performance data is the highest-risk category because the SEC Marketing Rule – Rule 206(4)-1, adopted in December 2020, effective May 4, 2021, with a compliance date of November 4, 2022 – sets explicit conditions on how performance may be presented, and social media formats make those conditions hard to satisfy.

The rule is principles-based, not a checklist. It prohibits untrue statements of material fact, prohibits misleading omissions, and restricts hypothetical and back-tested performance. What that means in practice: a short-form post that shows a return figure without the required context – time period, benchmark, whether it reflects fees, what the underlying methodology was – creates a misleading omission by design. The format does the damage even when the number itself is accurate.

The rule itself prohibits any material statement of fact the adviser does not have a reasonable basis for believing it can substantiate upon demand by the Commission, and it sets separate conditions for performance advertising, including extracted and hypothetical performance. That standard applies to a LinkedIn post the same way it applies to a formal advertisement.

The practical guardrail: if a performance figure cannot carry its full required context in the format where it appears, it should not appear there. This is not a YouTube-specific rule or a social-media-specific rule – it is the same standard that governs every other channel. Social media amplifies the exposure; it does not change the requirement.

How Do Testimonials and Endorsements Create Compliance Exposure?

Testimonials and endorsements are the second major tripwire, and the SEC Marketing Rule's conditions are specific. The rule requires advertisements to clearly and prominently disclose that a testimonial was given by a current client or investor (or that an endorsement was given by someone who is not), and that cash or non-cash compensation was provided, if applicable. FINRA's public-communications rules apply to social media and state that communications may not predict or project performance, with limited exceptions.

The compliance exposure is not just in soliciting testimonials. It also lives in:

  • Sharing a client's unsolicited comment without the required disclosures – a client who tags you in a positive post and you reshare it without disclosure has created a testimonial under the rule.

  • Endorsements from non-clients – a center-of-influence who speaks well of you in a video or post is an endorser, and the same disclosure conditions apply.

  • Compensation disclosures – any arrangement where a person receives something of value for a testimonial or endorsement must be disclosed, even when the compensation is indirect.

FINRA Rule 2210 requires that retail communications including a testimonial about investment advice or investment performance disclose that the testimonial may not be representative of other customers' experiences and is no guarantee of future performance or success.

The documentation requirement matters here. The SEC Marketing Rule requires written supervisory procedures and recordkeeping. An RIA that posts testimonial-adjacent content without a documented review process – even if the content itself is fine – has a procedural gap that an examination can surface.

For more on how this plays out specifically on video, the article on advisor testimonial video compliance covers the SEC Marketing Rule's conditions in detail.

What Are the Compliance Risks of Third-Party Ratings and Rankings?

Third-party ratings – "Best of" lists, award mentions, industry rankings – are a category many advisors treat as safe because they did not create the rating. That assumption is wrong. The SEC Marketing Rule sets conditions for using third-party ratings in advertisements, and displaying one without meeting those conditions creates the same exposure as a non-compliant testimonial.

The conditions include clear and prominent disclosure of the date the rating was given, the period of time it was based on, and the identity of the third party that created and tabulated it. If compensation was provided directly or indirectly by the adviser in connection with the rating, that must be disclosed as well. A post that shows a badge or award without any of this context fails the rule even though the rating itself came from a third party.

In 2026 I delivered a keynote on stage for Raymond James, following their CEO, Paul Shoukry. When they introduced me, they asked the room how many advisors had a YouTube channel. There were about 100 advisors in that room. Two hands went up. A third made it about halfway. A week later, I sat on a panel for the CMO Collective, hosted by Intention.ly at Future Proof, and found almost no sessions about YouTube on the agenda. The one exception was a slide in Michael Kitces's keynote. After speaking at both events, I'm convinced YouTube is the biggest opportunity for financial professionals that exists today. Much of the industry is still sleeping on it – so an advisor who walks into a budget meeting with a real business case for YouTube is walking onto land few advisors have claimed. That same low adoption is part of why the compliance risks on social media are worth understanding clearly: the advisors who move early are the ones who need the guardrails built in from the start, not discovered during an examination.

FINRA's targeted review of member firms' social media influencer programs across 15 firms found that 70% of the more than 1,000 communications reviewed were non-compliant in some substantive fashion – 55% failed to disclose that the communication was a paid advertisement, and 38% failed to disclose program or product risks (FINRA, 2024). The review covered paid influencer programs rather than advisor-run channels, but it shows precisely what regulators look for when reviewing financial content on social platforms: missing disclosures, risk omissions, and performance-flavored claims. The same three tripwires.

The practical question to take to your compliance officer: does our firm's written supervisory procedure address third-party ratings specifically, and what disclosures does it require before a rating appears in any public communication?

How Does Registration Type Affect What an RIA Must Do?

Registration type determines which rulebook governs a channel, and the frameworks are not interchangeable. An SEC-registered RIA operates under the Investment Advisers Act and the SEC Marketing Rule. A broker-dealer or dual registrant operates under FINRA Rule 2210, which has different pre-approval and supervision requirements. A state-registered adviser operates under state securities law, which varies by jurisdiction.

This distinction matters for production workflow. The SEC Marketing Rule does not mandate pre-publication approval of every piece of content – it requires written supervisory procedures and recordkeeping, and what those procedures demand is a firm-level decision. Many firms require pre-approval anyway. Some require it for certain content categories and not others. The regulatory floor and the firm's policy are frequently different, and firm policy is what governs in practice.

An RIA whose broker-dealer requires pre-publication review of all social media content faces a different workflow than an SEC-only RIA whose compliance officer has approved a post-publication review process. Neither is automatically more burdensome – but confusing the two, or assuming one firm's process applies at another, is how gaps open up.

For advisors working through what YouTube compliance for financial advisors looks like end-to-end, the registration-type question is the first one to resolve before building any content workflow.

What Does a Defensible Documentation Practice Actually Look Like?

The documentation requirement is where many compliance gaps live, because the content itself may be fine while the paper trail is missing. A defensible practice has three components:

Pre-publication review records. Whatever the firm's review process requires – pre-approval, post-publication review, or a self-certification against a checklist – that process needs a record. An email thread, a compliance portal entry, a dated sign-off: the form matters less than the existence of a consistent, retrievable record.

Substantiation files. Every material statement of fact in a public communication needs a substantiation file: the source, the methodology, the date, and the basis for the claim. This applies to performance data, to any claim about services or outcomes, and to any characterization of the firm's approach that a prospect might rely on.

Testimonial and endorsement documentation. For each testimonial or endorsement used, the file should include the disclosure language used, confirmation of whether the person is a client, the compensation arrangement if any, and the date the content was published.

YT Era adapts each engagement to what the advisor wants, so the time commitment varies by client – some engagements run on roughly five hours a month, structured as one on-camera session and one strategy call, while others run on roughly two hours a week. What stays constant: YT Era handles strategy, production, publishing, and optimization, and prepares everything for your compliance review. Compliance review remains the advisor's firm's responsibility; YT Era's role is to make sure the content arrives at that review in a form the compliance officer can actually work with, rather than a raw file that creates more work than it resolves.

Can You Build a Channel That Compliance Can Live With?

The compliance risks for RIAs on social media – performance data, testimonials, third-party ratings – are manageable when the guardrails are built into the production process rather than applied after the fact. The content that creates the most exposure is almost always content that was produced without a compliance lens in the room: a post that shows a return figure without context, a reshared client comment without disclosure, an award badge without the required attribution.

The advisors who market confidently on YouTube for Financial Advisors are not the ones who found a way around the rules – they are the ones who built a workflow where the rules are addressed before publication, not discovered during an examination.

If you want to understand what that workflow looks like in practice, the Work With Us application is the place to start. Reach out directly at hello@ytera.com with questions before you apply.

Written by Andrew Murdoch, Chief YouTube Officer

Financial advisor in his 50s reviewing a compliance checklist at a desk beside a laptop showing a paused YouTube video.