--- title: How the SEC Keeps Raising the Stakes on Mobile Messaging description: A closer look at the investigation timeline, and why it continues to escalate. image: https://www.mirrorweb.com/hubfs/Imported_Blog_Media/65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1)-1.jpg --- [Skip to content](https://www.mirrorweb.com/blog/how-the-sec-keeps-raising-the-stakes-on-mobile-messaging#main-content) [![Master Logo - ColourWhite Landscape](https://www.mirrorweb.com/hs-fs/hubfs/Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png?width=178&height=40&name=Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png "Master Logo - ColourWhite Landscape")](https://www.mirrorweb.com/) - [Unified Platform](https://www.mirrorweb.com/platform/) Show submenu for Unified Platform - [Mira - Supervision Agent](https://www.mirrorweb.com/mira) - [Website Archiving](https://www.mirrorweb.com/platform/website-archiving/) - [Email & Communication Archiving](https://www.mirrorweb.com/platform/email-archiving/) - [Social Media Archiving](https://www.mirrorweb.com/platform/social-media-archiving/) - [Mobile Archiving](https://www.mirrorweb.com/platform/mobile-archiving/) - Solutions Show submenu for Solutions - [By Industry](https://www.mirrorweb.com/industries/) Show submenu for By Industry - [Financial Services](https://www.mirrorweb.com/industries/financial-services/) - [Government](https://www.mirrorweb.com/industries/government/) - [Healthcare](https://www.mirrorweb.com/industries/healthcare-pharma/) - [Insurance](https://www.mirrorweb.com/industries/insurance/) - [Legal](https://www.mirrorweb.com/industries/legal/) - [Technology](https://www.mirrorweb.com/industries/technology/) - [By Use Case](https://www.mirrorweb.com/use-cases/) Show submenu for By Use Case - [Agentic Communications Supervision](https://www.mirrorweb.com/mira) - [Communication Capture](https://www.mirrorweb.com/use-cases/communication-capture/) - [Prevent Compliance Violations](https://www.mirrorweb.com/use-cases/prevent-compliance-violations) - [Audit-Ready Recordkeeping](https://www.mirrorweb.com/use-cases/audit-ready-automated-record-keeping/) - [Reduce Costs & Improve Efficiency](https://www.mirrorweb.com/use-cases/compliance-cost-efficiency/) - [Website Archiving](https://www.mirrorweb.com/use-cases/website-archiving/) - [By Channel](https://www.mirrorweb.com/channels/) Show submenu for By Channel - [Website](https://www.mirrorweb.com/use-cases/website-archiving/) - [Email](https://www.mirrorweb.com/channels/email/) - [Social Media](https://www.mirrorweb.com/channels/social-media/) - [Instant Messaging](https://www.mirrorweb.com/channels/instant-messaging/) - [Mobile](https://www.mirrorweb.com/channels/mobile/) - Why MirrorWeb Show submenu for Why MirrorWeb - [Customer Success](https://www.mirrorweb.com/case-studies) - [About Us](https://www.mirrorweb.com/why-mirrorweb/about) - [Careers](https://www.mirrorweb.com/careers/) - [Partnerships](https://www.mirrorweb.com/partnerships/) - Resources Show submenu for Resources - [Blog](https://www.mirrorweb.com/blog) - [Events](https://www.mirrorweb.com/events) - [Help Center](https://help.mirrorweb.com/en/) - [Legal Resources](https://www.mirrorweb.com/help-centre/legal/) [Request a demo](https://www.mirrorweb.com/demo) [Login](https://my.mirrorweb.com/login) # How the SEC Keeps Raising the Stakes on Mobile Messaging [![](https://www.mirrorweb.com/hubfs/Blog_Author.png) Harriet Christie](https://www.mirrorweb.com/blog/author/harriet) [Financial Services](https://www.mirrorweb.com/blog/tag/financial-services) Published: 30 Oct 2023 ![](https://www.mirrorweb.com/hubfs/Imported_Blog_Media/65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1)-1.jpg) #### Table of Contents [Contact Us](https://www.mirrorweb.com/contact/) Share When JP Morgan Chase was fined $200 million for recordkeeping failures in 2021, it felt monumental. While ‘ephemeral messaging’ penalties were admittedly a new proposition, the size of the levy should have drawn a line in the sand and led to a tectonic shift in compliance procedures for financial services organizations. What has unfolded since has been cautionary, captivating, and indeed costly for many firms caught off guard by the regulator’s strict enforcement. This article provides a timeline of the SEC’s investigation so far including the measures taken, who is affected, how the stakes continue to escalate, and how firms can keep themselves out of the firing line. But before that, it’s important to establish why the probe is happening in the first place, and how such a fundamental oversight caught the entire sector cold. ‍ #### **Why is text messaging in the firing line?** The [SEC mandates](https://www.sec.gov/files/rules/final/2019/34-87005.pdf) that financial firms maintain records of all communication between clients and brokers, and routinely conducts investigations to ensure compliance.   Exchanges like those occurring through WhatsApp and other ‘off channel’ mobile platforms are far more difficult to monitor and capture than email, for example, and so have not traditionally featured in organizations’ record-keeping strategies. Interacting with clients on these platforms is non-compliant in such cases, leading to most firms deeming it best practice to ban their use entirely. This was jeopardized by the disruption of the COVID-19 pandemic, which led to far greater reliance on messaging apps, and more workers using personal phones or tablets for business**.** Since the shift to hybrid working, organizations have struggled to impose restrictions on staff that rely on the prevalence and convenience of these platforms. Resultantly, the scope for regulatory infraction has grown. ‍ #### **Establishing a culture of compliance** Since July 26th 2021, Gurbir Grewal has been acting as the SEC’s enforcement director. He recently revealed that his ambition in the role was to enhance public trust in institutions, and that he wished to ‘impose penalties that would have a lasting impact across the industry’. Grewal inherited a role in which the issue of keeping tabs on staff communications ‘[had dogged Wall Street compliance departments for years](https://www.reuters.com/technology/sec-collects-wall-streets-private-messages-whatsapp-probe-escalates-sources-2023-09-25/#:~:text='SHOOTING%20FISH',to%20record%20all%20business%20communications.)’.   The SEC began to take action in December 2021, when JPMorgan Chase failed to provide documents from 2018 pertaining to an unrelated probe. This eventually led to the bank admitting the charges over record-keeping lapses and [accepting a settlement](https://www.cnbc.com/2021/12/17/jpmorgan-agrees-to-125-million-fine-for-letting-employees-use-whatsapp-to-evade-regulators.html) with the SEC for $125 million – an unprecedented punishment for a crime that had thus far evaded regulator’s attention. ‍ #### **Continued Escalation** While some firms did take heed of JP Morgan’s public sanction and revise their compliance policies and procedures, it wasn’t enough to convince regulators that things had moved sufficiently in the right direction. By September 2022, [the SEC had fined another 16 leading financial firms](https://www.cnbc.com/2022/09/27/us-fines-16-wall-street-firms-1point1-billion-over-record-keeping-failures.html) (including Barclays, Goldman Sachs and Morgan Stanley) a combined $1.1 billion, as the situation escalated dramatically in ‘a landscape case for the agency’. "Since the 1930s, such recordkeeping has been vital to preserve market integrity. As technology changes, it's even more important that registrants appropriately conduct their communications about business matters within only approved channels, and they must maintain and preserve those communications," said SEC Chairman Gary Gensler. The SEC subsequently expanded its probe, with [investment funds/advisors](https://www.reuters.com/business/sec-scrutiny-into-wall-street-communications-widens-investment-funds-sources-2022-10-11/) finding themselves in the spotlight that October, while [major hedge funds](https://www.bloomberg.com/news/articles/2023-02-02/whatsapp-probe-hits-big-hedge-funds-as-sec-asks-for-phone-review?leadSource=uverify%20wall) (including Point72 and Citadel) were requested to review employee handsets in February 2023. A few months passed before [another round of large penalties landed](https://www.reuters.com/business/finance/us-regulators-cite-wells-fargo-bnp-paribas-over-recordkeeping-2023-08-08/) in August, as the probe continued to haunt financial services firms. Nine Wall Street broker-dealers, including Wells Fargo and BNP Paribas, agreed to pay penalties totaling $549 million to the SEC and CTFC. As SEC deputy enforcement director, Sanjay Wadha, explained in the aftermath, ‘“We know that other SEC-regulated entities have committed similar violations, and so our work to enforce industry-wide compliance continues." This statement, and the consistency it justifies, are not surprising. The aforementioned Gurbir Grewal occupies the role senior to Mr Wadha, and views books and records obligations as [vital to market integrity](https://www.arnoldporter.com/en/perspectives/blogs/enforcement-edge/2023/03/sec-priorities-discussed-at-sifma). It's clear that this mindset is ingrained throughout the division. #### ‍**Raising the bar** The escalation of this probe doesn't just constitute additional companies being examined; the investigation process has also become more severe, with numerous sources reporting that the agency has now [confiscated thousands of phones](https://www.reuters.com/technology/sec-collects-wall-streets-private-messages-whatsapp-probe-escalates-sources-2023-09-25/). Previously, businesses were asked to review employee handsets themselves. The new approach leaves them more open, with nowhere to hide and no control over how their findings are reported back. The [next round of fines](https://www.thinkadvisor.com/2023/09/29/sec-drops-new-wave-of-whatsapp-fines-on-bds-advisory-firms/) landed in September as broker-dealers and investment advisers, including Interactive Brokers and William Blair & Co, received multi-million dollar levies for similar record-keeping violations.   The SEC’s Gurbir Grewal shared an interesting revelation in the aftermath, spelling out the perks of co-operation to firms that may feel vulnerable. “One of the orders included in today’s announced actions is not like the others. There are real benefits to self-reporting, remediating and cooperating.” This refers to Perella Weinberg Partners, who self-reported their failures, and whose penalty of $2.5 million was the smallest by quite a distance. The next smallest was Fifth Third Securities Inc with an $8 million penalty. ‍ #### **What’s next?** Almost two years have passed since the SEC fired its first shot in the ‘WhatsApp fines’ probe, making an example of JP Morgan just in time for Christmas. After a subsequent pause, the investigation exploded back into life in September 2022, and has since shown no sign of slowing down. There have been several significant moments in the investigation where the agency may have relented, but they continue to double down, exacting their standards across the board. It's natural to wonder what the endgame might look like in this saga. The SEC posted [record enforcement penalty figures](https://www.sec.gov/news/press-release/2022-206) last year, and so their approach has clearly been lucrative. As Gurbir Grewal has repeatedly asserted; for the sake of integrity, these laws must be applied across the entire industry, regardless of a company’s size or the potential scale of wrongdoing.   Firms can’t escape this scenario by retrospectively gathering messages that have already been overlooked. By prolonging their investigation and regularly drip-feeding details of new firms (of all shapes and sizes) that are being held to account, the SEC has made it abundantly clear that mobile communications capture is now an inescapable requirement. With the incentivization of self-reporting and remediation, they have also shown that proactivity will be rewarded, and that no good will come from firm’s sitting on their hands or, even worse, pleading ignorance.   #### **How MirrorWeb can help** Our communications surveillance platform, MirrorWeb Insight, was developed to definitively tackle compliance in the modern workplace. It was built while this mobicomms investigation gathered steam in the background, and so mobile surveillance was a key consideration throughout development. We capture all leading mobile messaging applications including WhatsApp, WeChat and iMessage. Insight’s feature set was built around modern habits. Book a demo above to stay ahead of the curve and prove your commitment to SEC compliance. ## Read On [![](https://www.mirrorweb.com/hs-fs/hubfs/Imported_Blog_Media/65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1).jpg?width=352&name=65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1).jpg)](https://www.mirrorweb.com/blog/update-how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) #### [UPDATE - How the SEC Keeps Raising the Stakes on Mobile Messaging](https://www.mirrorweb.com/blog/update-how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) When JP Morgan Chase was fined $200 million for recordkeeping failures in 2021, it felt monumental.... [Read story](https://www.mirrorweb.com/blog/update-how-the-sec-keeps-raising-the-stakes-on-mobile-messaging) [![](https://www.mirrorweb.com/hs-fs/hubfs/Imported_Blog_Media/659eb4dae210bf863e3d7f0b_redd-f-5U_28ojjgms-unsplash.jpg?width=352&name=659eb4dae210bf863e3d7f0b_redd-f-5U_28ojjgms-unsplash.jpg)](https://www.mirrorweb.com/blog/gurbir-grewal-and-a-culture-of-proactive-compliance) #### [Gurbir Grewal and 'A Culture of Proactive Compliance'](https://www.mirrorweb.com/blog/gurbir-grewal-and-a-culture-of-proactive-compliance) When a new year begins, it’s natural to reflect on our direction and make improvements where we... [Read story](https://www.mirrorweb.com/blog/gurbir-grewal-and-a-culture-of-proactive-compliance) [![](https://www.mirrorweb.com/hs-fs/hubfs/Imported_Blog_Media/6666ef23ff486a6ba361f791_conny-schneider-3hkKv6WzjcE-unsplash.jpg?width=352&name=6666ef23ff486a6ba361f791_conny-schneider-3hkKv6WzjcE-unsplash.jpg)](https://www.mirrorweb.com/blog/2024-so-far-recordkeeping-revamps-and-regulatory-rigor) #### [2024 So Far: Recordkeeping Revamps and Regulatory Rigor](https://www.mirrorweb.com/blog/2024-so-far-recordkeeping-revamps-and-regulatory-rigor) The typical narrative is that as time passes, digital regulation becomes more stringent.... [Read story](https://www.mirrorweb.com/blog/2024-so-far-recordkeeping-revamps-and-regulatory-rigor) [![Master Logo - ColourWhite Landscape](https://www.mirrorweb.com/hs-fs/hubfs/Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png?width=178&height=40&name=Master%20Logo%20-%20Colour%EF%80%A2White%20Landscape.png "Master Logo - ColourWhite Landscape")](https://www.mirrorweb.com/) Stay Connected. Stay Compliant. #### Quick Links - [Communication Capture](https://www.mirrorweb.com/use-cases/communication-capture/) - [Prevent Compliance Violations](https://www.mirrorweb.com/use-cases/prevent-compliance-violations) - [Audit-Ready Recordkeeping](https://www.mirrorweb.com/use-cases/audit-ready-automated-record-keeping/) - [Supervising Digital Communications](https://www.mirrorweb.com/use-cases/supervised-digital-communication/) - [Reduce Costs & Improve Efficiency](https://www.mirrorweb.com/use-cases/compliance-cost-efficiency/) #### Find Us **North America** 701 Brazos St Suite 970 Austin, Texas 78701-3232 **United Kingdom** Manchester House 18-22 Bridge Street Manchester M3 3BZ #### Speak to us If you have any questions, please don’t hesitate to get in touch! [Contact Us](https://www.mirrorweb.com/contact/) © MirrorWeb 2026 • [Terms](https://www.mirrorweb.com/help-centre/legal/terms/) | [Privacy Policy](https://www.mirrorweb.com/help-centre/legal/privacy-policy/) ![673cba813eccf634bab46632_Motherboard 300 x 300 signatory badge](https://www.mirrorweb.com/hs-fs/hubfs/673cba813eccf634bab46632_Motherboard%20300%20x%20300%20signatory%20badge.jpg?width=200&height=200&name=673cba813eccf634bab46632_Motherboard%20300%20x%20300%20signatory%20badge.jpg) ![65eeeb5ba22a2ed7014d4f4d_21972-312_SOC_NonCPA](https://www.mirrorweb.com/hs-fs/hubfs/65eeeb5ba22a2ed7014d4f4d_21972-312_SOC_NonCPA.png?width=200&height=200&name=65eeeb5ba22a2ed7014d4f4d_21972-312_SOC_NonCPA.png) ![64b658f3e0cbdcbe04e83981_27001 RGB Purple-p-500](https://www.mirrorweb.com/hs-fs/hubfs/64b658f3e0cbdcbe04e83981_27001%20RGB%20Purple-p-500.png?width=200&height=200&name=64b658f3e0cbdcbe04e83981_27001%20RGB%20Purple-p-500.png) ![64b6590db2301cbb306c2e34_9001 RGB Purple-p-500](https://www.mirrorweb.com/hs-fs/hubfs/64b6590db2301cbb306c2e34_9001%20RGB%20Purple-p-500.png?width=200&height=200&name=64b6590db2301cbb306c2e34_9001%20RGB%20Purple-p-500.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Harriet Christie", "url" : "https://www.mirrorweb.com/blog/author/harriet" }, "dateModified" : "2025-04-24T08:31:25.119Z", "datePublished" : "2023-10-30T05:00:00.000Z", "headline" : "How the SEC Keeps Raising the Stakes on Mobile Messaging", "image" : [ "https://www.mirrorweb.com/hubfs/Imported_Blog_Media/65410a4d0aecec5cc446f41d_adem-ay-ik_AuIWeBBM-unsplash%20(1)-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.mirrorweb.com/blog/how-the-sec-keeps-raising-the-stakes-on-mobile-messaging", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.mirrorweb.com/hubfs/Offical%20Logos%20-%20Flat%20Colours%202024_Black%20Logo-1.png" }, "name" : "MirrorWeb, Inc." } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.mirrorweb.com/#organization", "@type" : "Organization", "areaServed" : [ { "@type" : "Country", "identifier" : "US", "name" : "United States" }, { "@type" : "Country", "identifier" : "GB", "name" : "United Kingdom" } ], "contactPoint" : { "@type" : "ContactPoint", "areaServed" : [ "US", "GB" ], "contactType" : "sales", "url" : "https://www.mirrorweb.com/demo" }, "description" : "MirrorWeb is the communications supervision platform for SEC- and FINRA-regulated financial services firms, unifying communications capture, archiving, and AI-native supervision.", "foundingDate" : "2012", "foundingLocation" : { "@type" : "Place", "name" : "Manchester, United Kingdom" }, "knowsAbout" : [ "communications supervision", "AI communications supervision", "electronic communications archiving", "email archiving", "SEC Rule 17a-4 compliance", "WORM storage", "FINRA Rule 3110 compliance", "Written Supervisory Procedures", "off-channel communications compliance", "BYOD archiving", "WhatsApp compliance", "mobile communications archiving", "social media archiving", "website archiving", "web content archiving", "FINRA Rule 2210 compliance", "SEC marketing rule compliance", "web changes tracking", "eDiscovery", "digital communications governance and archiving", "communications compliance software", "RegTech" ], "knowsLanguage" : [ "en" ], "legalName" : "MirrorWeb Inc.", "logo" : { "@id" : "https://www.mirrorweb.com/#logo", "@type" : "ImageObject", "url" : "https://www.mirrorweb.com/hubfs/master-logo.png" }, "name" : "MirrorWeb", "sameAs" : [ "https://www.linkedin.com/company/mirrorweb", "https://www.youtube.com/@mirrorweb", "https://www.g2.com/products/mirrorweb", "https://www.capterra.com/p/171780/Website-Social-Media-Archiving/", "https://www.crunchbase.com/organization/mirrorweb" ], "slogan" : "The communications supervision platform.", "url" : "https://www.mirrorweb.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.mirrorweb.com/#website", "@type" : "WebSite", "name" : "MirrorWeb", "publisher" : { "@id" : "https://www.mirrorweb.com/#organization" }, "url" : "https://www.mirrorweb.com/" } ```