A former financial adviser has been sentenced to six years and eight months in federal prison for defrauding a 75-year-old client of more than $2 million.

The case involved deliberate criminal conduct, but it also raises broader compliance questions. Are client borrowing policies clear? Are firms relying too heavily on annual attestations? Do employees know how to report possible senior exploitation?

No single control can prevent every instance of misconduct. Firms can, however, create more opportunities to identify and escalate inappropriate financial relationships.

What Happened?

According to the U.S. Attorney’s Office for the Middle District of Florida, the former adviser:

  • Solicited more than 600 transactions totaling over $2 million
  • Used fraudulent emails appearing to come from attorneys and banks
  • Spent most of the client’s money on foreign gambling websites

The former adviser pleaded guilty to wire fraud and money laundering, received a six-year-and-eight-month prison sentence, and was ordered to pay $2,037,103 in restitution.

What Does FINRA Rule 3240 Require?

Under FINRA Rule 3240:

  • Client loan arrangements must be permitted under the firm’s procedures
  • Required notification and written preapproval must be completed

The conduct in this case went far beyond an undisclosed loan. It involved fraud, fabricated communications, and the exploitation of a senior client.

What Should Compliance Teams Have in Place?

Firms should review whether their policies and procedures address more than the initial disclosure of a customer loan.

  • Clear policies: Written procedures should explain when customer financial arrangements are prohibited, when an exception may apply, and what requires notification and written approval.
  • Targeted disclosures: Annual questionnaires should address loans, personal requests for customer funds, repayment obligations, outside relationships, and changes to approved arrangements. Event-driven disclosures can capture activity between annual reviews.
  • Documented review and escalation: Compliance teams should review the parties, relationship, terms, and potential customer vulnerability. Procedures should define how incomplete, denied, or potentially misleading disclosures are investigated and escalated.
  • Senior investor training: Employees should know how to report unusual personal involvement, requests for money, secrecy, pressure, unverifiable documents, or complaints involving unpaid funds.

Because personal payments and communications may occur outside firm systems, no single control will identify every concern. Layered policies, targeted attestations, communications reviews, training, and documented escalation give compliance teams more opportunities to identify inappropriate financial relationships and act before additional harm occurs.