FCA financial promotions rules for social selling in UK financial services

What to take away

How FCA financial promotions rules reach LinkedIn posts and direct messages

The FCA's financial promotion regime starts with section 21 of the Financial Services and Markets Act 2000. That section restricts the communication of an invitation or inducement to engage in investment activity unless the communicator is authorised or the content is approved by an authorised person.

A LinkedIn post that asks a reader to book a call about a pension transfer, or a DM that offers a specific investment product, is caught. A post explaining how a sector works is not.

The test is not the platform. It is whether the communication is an invitation or inducement. The FCA's own guidance on social media confirms that the rules apply to digital channels in the same way they apply to print or broadcast. Length is irrelevant.

A single sentence in a comment thread can be a financial promotion if it invites a reader to act.

The audience matters. A post aimed at retail clients carries the full consumer protection expectations, including risk warnings. A post aimed at professional clients or eligible counterparties carries fewer formal requirements, but the fair, clear and not misleading standard still applies. Firms that sell to both should not assume a professional audience makes the content exempt.

Direct messages are the highest risk area. A DM is private, targeted and often written quickly. It is still a communication for the purposes of the regime. Compliance teams should treat a DM script the same way they treat a landing page, with an owner, a review and a record.

Paid promotion adds another layer. If a firm pays for reach, the content is advertising under the CAP Code as well as a financial promotion under FCA rules. Teams should start by checking B2B social selling content against advertising rules before release rather than after.

Fair, clear and not misleading: the named standard applied to social selling copy

The fair, clear and not misleading standard is the FCA's core requirement for all financial promotions. It appears in the FCA's financial promotion rules and in its social media guidance. Every claim, image and call to action in a LinkedIn post must meet it.

Fair means the promotion does not exploit a reader's inexperience or take advantage of a vulnerable audience. Clear means the reader can understand the offer without specialist knowledge. Not misleading means the overall impression, including what is left out, does not give a false picture.

Social copy fails this standard in predictable ways. A post that says a fund has doubled in value without saying over what period is misleading. A carousel that shows only upside scenarios is not fair. A DM that says a product is low risk without defining low risk is not clear.

The standard applies to the whole communication, not just the headline. A compliant risk warning at the bottom does not cure a misleading claim at the top. Compliance reviewers should read the post as a reader would, in the feed, with the image and the first two lines visible.

Firms that sell across the UK should also note the wider advertising codes, including rules on misleading claims, which sit alongside the FCA regime. The CAP Code standards apply to social media promotions and B2B ads, and the two regimes are read together in practice.

The practical test for a social seller is simple: if a reasonable reader could be left with an inaccurate impression of the product, the risk or the cost, the post fails. Rewrite until the impression matches the facts.

Sign-off procedures and the senior manager responsible for promotions

Every financial promotion needs an approved owner. Under the Senior Managers and Certification Regime, a senior manager must be allocated responsibility for the firm's financial promotions. That person is accountable to the FCA for the systems and controls that govern what the firm publishes.

The allocated senior manager does not personally read every LinkedIn post. They own the framework: who may post, what may be said, how content is approved and how breaches are handled. Day to day approval can sit with a compliance officer or a marketing sign-off lead, provided the framework is clear and followed.

Sign-off should happen before publication, not after. A practical process has three stages: the author drafts, a reviewer checks against the fair, clear and not misleading standard, and an approver with delegated authority signs off. The approver's name and the date should be recorded.

Firms should also control who can post from corporate accounts and which employees may present themselves as advisers on personal profiles. A personal profile used for business outreach is still the firm's communication if the firm asks the person to sell.

Approval should cover templates as well as one-off posts. A pre-approved template with fixed wording, fixed risk warnings and a limited set of variables is faster and safer than reviewing every post from scratch. Variables such as fund names or rates should be on a controlled list.

The senior manager should receive management information: how many posts were approved, how many were rejected, how many complaints or takedowns occurred. That evidence shows the framework is working. Where a firm needs a wider operating model, a disclosure policy for B2B social selling can set out how the first interaction is labelled and who owns it.

Risk warnings, balanced claims and performance figures in social posts

Risk warnings must be prominent and legible. On LinkedIn, that means not hidden behind a "see more" link, not in a low-contrast image, and not buried under a wall of hashtags. The warning should be in the post text or in an image that is readable on a phone.

Balanced claims are the other half of the requirement. If a post mentions a return, it should also mention the risk of loss. If it mentions a tax treatment, it should say that tax rules can change. If it mentions past performance, it should say that past performance is not a reliable indicator of future results.

Performance figures need context. A figure should state the period, the basis and whether charges are included. A social post rarely has room for a full performance table, so the safer route is to avoid specific figures and link to a compliant page instead. The link itself becomes part of the promotion, so the destination must also comply.

Client testimonials and case studies are high risk. A testimonial that implies a fixed outcome is misleading even if the client said it. Firms should have a policy on whether testimonials are used at all in regulated promotions, and if they are, how they are balanced.

Images carry the same weight as words. A chart that shows only an upward trend, or a photo of a couple on a beach, can imply a return that the product does not offer. Reviewers should assess the image and the text as one communication.

Where a post is paid or incentivised, disclosure requirements apply. The ASA's guidance on recognising ads in social media and influencer marketing explains how paid content must be labelled so the audience knows it is an ad. A missing label is a breach even if the financial content is otherwise sound.

Financial promotions versus ordinary B2B social selling content

The distinction is the call to action. Content that informs, explains or comments without inviting a reader to buy or take up a product is ordinary B2B content. Content that invites a reader to act on a regulated product is a financial promotion.

Examples of ordinary content include a post about a change in pension rules, a comment on a Bank of England rate decision, or a summary of a consultation paper. These can still be misleading if they are wrong, so accuracy matters, but they do not trigger the full financial promotion regime.

The line is crossed by language such as "book a call to discuss your options", "download our guide to investing", or "message me to find out how much you could save". A guide can itself be a financial promotion if it invites the reader to invest or contains an application form.

A grey area is the soft call to action, such as "happy to chat". Compliance teams should treat repeated soft calls from a sales profile as promotional in substance. The pattern matters as much as the wording.

Firms should map their content into three buckets: purely informational, promotional without a specific product, and promotional with a specific product. Each bucket gets a different approval route. The mapping should be written down so social sellers do not have to guess.

Where content sits in the middle, teams can use a quality checklist for B2B social selling work to test audience fit and clarity before release. That keeps the compliance conversation focused on the posts that actually carry regulatory risk.

Record-keeping and evidence for FCA-regulated social selling outreach

Records are the proof that the framework works. Firms should keep a copy of every financial promotion, the approval, the approver's name and the date. For social media, that means capturing the post as published, including the image and any comments made by the firm.

Direct messages need the same treatment. A firm should be able to produce the DM script, the list of people who used it, and the approval that covers it. Screenshots with timestamps are acceptable evidence if the firm has no archiving tool.

Retention periods should be set and followed. The FCA expects firms to be able to respond to information requests promptly, so records should be searchable by date, author, product and channel. A shared drive with no naming convention is not a record-keeping system.

Deletion is a risk. A deleted post can still be captured by a third party, and the firm may be asked to explain why it was removed. Firms should have a takedown procedure that records who removed the content, when and why.

Complaints and breach logs should feed back into training. If the same claim keeps failing review, the fix is a template change, not another reminder email. Escalations to the senior manager should be logged with the outcome.

Records also support the wider data protection picture. Personal data collected through social outreach must be handled under UK GDPR and PECR, and the rules on consent and lawful basis apply alongside the financial promotion regime. Firms that treat compliance as a single joined-up system, covering the CAP Code, UK GDPR and PECR, avoid gaps between teams.

Working with the ASA and CAP Code alongside FCA rules

The FCA regulates financial promotions. The Advertising Standards Authority regulates advertising content under the CAP Code. The two remits overlap on social media, and a post can breach both.

The ASA's remit explains how the CAP Code applies alongside FCA rules. In practice, the ASA handles complaints about misleading advertising content, while the FCA handles the regulatory permission to promote. A firm can be compliant with one and in breach of the other.

Paid social content must be identifiable as advertising. The CAP Code's non-broadcast standards cover social media promotions and B2B ads, and a financial firm cannot rely on the audience knowing the poster is an adviser.

Precedent matters. The ASA publishes rulings on social media advertising breaches, and compliance teams should read the recent ones in their sector. A ruling against a peer is a free warning about wording that does not work.

Firms should also consider the CMA's guidance on misleading commercial practices, which applies to consumer-facing claims, and the ICO's guidance where personal data is used for targeting. A single piece of social content can sit under four regulators at once.

For a worked example, take a post that says: "Our multi-asset fund returned 12% last year. DM me to invest." The FCA issues are the invitation to invest, the missing risk warning and the unqualified performance figure.

The ASA issue is the misleading impression created by the figure. The fix is to remove the figure, add a risk warning, and route the reader to a compliant page.

A sign-off checklist for financial services social selling

Use this checklist before any regulated post or DM goes live. It is designed for a marketing author, a compliance reviewer and a senior manager approver.

Worked example: a wealth manager wants to promote a retirement service on LinkedIn. The draft says: "Worried about retirement? We can get you a 7% annual return. Book a call." The reviewer flags three failures: the return figure reads as a promise, the risk warning is missing, and the call to action makes it a financial promotion.

The rewrite says: "Planning for retirement raises questions about income, tax and risk. Our advisers can talk you through the options. Capital at risk. Book a call." The revised post passes review, is signed off by the delegated approver, and is logged with the date and the approver's name.

Where a firm wants to test its controls, it can run through B2B social selling risks to stress-test, from invented facts to platform breaches, and record the outcome. That turns a checklist into a control that the senior manager can evidence.

Common questions