How Long Must a FINRA Member Firm Keep Complaint Files?

A FINRA member firm must keep each written customer complaint, and a record of what the firm did about it, for at least four years. That floor comes from FINRA Rule 4513.¹ Related records tied to the same customer or transaction are often subject to longer retention periods under other rules, and open litigation or regulatory inquiries can extend the hold indefinitely.

What the Four-Year Rule Requires

Rule 4513 requires two things in the file: the written complaint itself, and a record of any action the firm took in response. Both must be preserved for the full four years, even if the firm investigated the allegation and concluded it had no merit, and even if the associated person named in the complaint leaves the firm during that period.¹

The rule also has a location component. Complaint records must be maintained at each Office of Supervisory Jurisdiction to which they relate. A firm can meet this either by storing the files physically at the relevant OSJ or by keeping them elsewhere and producing them promptly at the OSJ when asked.¹

What Counts as a Written Customer Complaint

Firms sometimes underfile because they misread what triggers Rule 4513. The rule defines a customer complaint as any written grievance from a customer, or someone authorized to act on the customer’s behalf, involving the firm’s activities or the conduct of an associated person. The grievance must connect to the solicitation or execution of a transaction, or to the handling of the customer’s securities or funds.¹

Format doesn’t matter. A letter, an email, a text message, or a social media post directed at the firm all qualify if the customer is expressing a securities-related grievance in writing. That means the file has to capture complaints that arrive through informal channels, not just those routed through a complaint portal or compliance mailbox. A message a broker receives on a personal device is still a written complaint the firm has to preserve.

When Four Years Isn’t Enough

Four years is a floor. Two things commonly push retention past it.

First, related records live under longer rules. SEC Rule 17a-4 requires broker-dealers to preserve core business records like blotters, ledgers, and trade confirmations for at least six years, with the first two years easily accessible. A separate category, including copies of business communications, written agreements, and powers of attorney, must be kept at least three years.² FINRA Rule 4511 adds a catch-all: any FINRA-required books and records without a specific retention period must be preserved for at least six years, and all records must be preserved in a format and media that complies with SEC Rule 17a-4.³ A firm that destroys a complaint file at year four but still faces questions about the underlying transaction will need trade confirmations, account statements, and correspondence that other rules require it to retain longer.

Second, ongoing matters override the minimum. If litigation, arbitration, or a regulatory inquiry related to a complaint is still active at year four, the firm should keep the complaint records until those matters fully close.

How the File Can Be Stored

Electronic storage is permitted, but SEC Rule 17a-4’s standards govern how it works. The rule historically required electronic records to sit in a write-once, read-many (WORM) format that prevented alteration or deletion. The SEC amended the rule to give firms a choice: keep using WORM, or use an audit-trail system.⁴

The audit-trail alternative requires the electronic recordkeeping system to preserve a complete, time-stamped audit trail for the full retention period. That trail must capture every modification or deletion, the date and time of each change, who made it, and enough information to reconstruct the original record.⁴

Either way, SEC Rule 17a-4 requires a duplicate of each electronically stored record to be maintained separately from the original. Both must be organized and indexed, and both the records and their indexes must be available for regulator examination at any time. The firm must be able to produce records promptly in a usable electronic format on request.²

Firms that store any part of their records electronically must also designate at least one third party who files an undertaking with the firm’s examining authority, agreeing to furnish regulators with access to the electronically stored records on reasonable request.²

Keeping the File Is Not Reporting the Complaint

Rule 4513 retention and Rule 4530 reporting are separate obligations. A firm that maintains a flawless four-year complaint file but fails to report a reportable complaint can still be disciplined for the reporting failure.

Rule 4530 sets different deadlines depending on the complaint. Written customer complaints alleging theft, misappropriation of funds or securities, or forgery must be reported to FINRA no later than 30 calendar days after the firm knows or should have known about them. Customer claims related to financial services that resolve by judgment, award, or settlement over $15,000 must be reported within 30 days, and the threshold rises to $25,000 when the firm itself is the defendant or respondent.⁵ All written customer complaints received during a calendar quarter must be reported in summary form by the 15th day of the month following the quarter’s end, shifting to the next business day if that date falls on a weekend or holiday.⁶

Broker CRD Timelines Are Separate

The firm’s four-year file is one thing. What appears on an individual broker’s Central Registration Depository record and Form U4 runs on its own clock. A written customer complaint alleging a sales practice violation is reportable on the broker’s Form U4 for two years from when the firm received it. If, within that 24 months, the complaint has not settled for $15,000 or more and has not become arbitration or civil litigation naming the broker, the broker can amend the Form U4 to remove the disclosure. Total settlement value controls, not the individual broker’s share, and confidentiality provisions in a settlement don’t override CRD reporting.⁷ None of that shortens the firm’s own obligation to keep the complaint file for the full four years.

1
Financial Industry Regulatory Authority. FINRA Rule 4513 – Records of Written Customer Complaints
2
eCFR. 17 CFR 240.17a-4 – Records to Be Preserved by Certain Exchange Members, Brokers and Dealers
3
Financial Industry Regulatory Authority. FINRA Rule 4511 – General Requirements
4
U.S. Securities and Exchange Commission. Amendments to Electronic Recordkeeping Requirements for Broker-Dealers
5
Financial Industry Regulatory Authority. FINRA Rule 4530 – Reporting Requirements
6
Financial Industry Regulatory Authority. Rule 4530 Reporting Requirements
7
Financial Industry Regulatory Authority. Form U4 and U5 Interpretive Questions and Answers