The Financial Industry Regulatory Authority (FINRA) published its 2026 FINRA Regulatory Oversight Report, which includes insights from FINRA’s regulatory operations programs.
The report can be used by member firms to identify the findings and effective practices that are applicable to their business. They can also incorporate the reports’ topics in their risk assessment processes, perform a gap analysis of their compliance programs, and use it for training, among other uses.
“Our 2026 FINRA Regulatory Oversight Report captures important findings and translates them into practical guidance our member firms can act on immediately. We are not just identifying risks, we are equipping our member firms with the intelligence and resources needed to mitigate risks effectively. By sharing these insights, FINRA is engaging with members to help strengthen their defenses. Ultimately, this report is essential because member firm compliance protects investors and safeguards the integrity of our markets,” Greg Ruppert, executive vice president and chief regulatory operations officer at FINRA.
Generative artificial intelligence (GenAI), cybersecurity and cyber-enabled fraud; manipulative trading in small-cap, exchange-listed equities; and third-party risk landscape are some of the key topics discussed in the report.
For each topic area, the report identifies the relevant rule(s); summarizes noteworthy findings from recent oversight activities involving firms; outlines firms’ effective practices that FINRA observed through its oversight activities; and provides additional resources that may be helpful to firms in fulfilling their compliance obligations.
“Whether it’s about the evolving threat of cyberattacks including those powered by bad actors exploiting artificial intelligence, the increase in manipulation tactics that exploit market participants, or the need to protect senior investors from potential fraud and other threats, this report delivers useful, real-world insights from our regulatory oversight work. Our goal is simple: help firms build stronger compliance programs and more resilient operations so that investors can participate in markets with greater confidence,” Ruppert said.