NFA Compliance Rule 2-30: Disclosures, Approval, and Recordkeeping

NFA Compliance Rule 2-30 requires every Futures Commission Merchant, Introducing Broker, and Commodity Trading Advisor to collect specific financial and personal information from individual customers and to deliver written risk disclosures before those customers begin trading futures, cleared swaps, or retail foreign exchange. The rule protects people who lack the financial cushion or market experience to absorb the kind of losses leveraged derivatives can produce, and firms that skip its steps face fines of up to $500,000 per violation, suspension, or permanent expulsion from NFA membership.¹

Which Firms and Customers Are Covered

Rule 2-30 applies to NFA Members and their Associates who solicit or accept orders from the public. That takes in FCMs (the firms holding customer funds and executing trades), IBs (the firms referring customers to an FCM), the salespeople and account managers working for both, and CTAs directing trading in a customer’s account.¹

On the customer side, the information-gathering and disclosure duties apply to all natural persons and to any entity that does not qualify as an eligible contract participant under the Commodity Exchange Act. The ECP definition uses asset and net worth thresholds that vary by entity type (for example, more than $10 million in discretionary investments for an individual, or total assets above $10 million for a corporation), and anyone below those thresholds gets the full protection of the rule.² When both sides of a transaction are sophisticated institutional players, Rule 2-30 does not apply.

Information Firms Must Collect Before the First Trade

Section (c) of the rule sets the floor. Before a customer places a trade, the firm or its Associate must use due diligence to gather:

The customer’s true legal name, current address, and principal occupation or business.
Estimated current annual income and estimated net worth (net worth or net assets plus current or prior-year income for entities).
Approximate age or date of birth for individuals.
Prior investment history and any experience specifically with futures, options, or swaps.
Anything else the firm considers useful for evaluating the customer’s ability to bear trading risk.

The income and net worth figures are what let a firm judge whether a customer can realistically handle margin calls and sharp drawdowns. A customer earning $40,000 a year with minimal savings faces a fundamentally different risk profile than someone with a seven-figure portfolio, and the disclosure obligations shift accordingly.¹

When a Customer Refuses to Provide Information

Customers sometimes balk at handing over personal financial details. The rule allows the firm to open the account anyway, but it must note the refusal in the customer’s file. That documented gap in the risk assessment creates real exposure for the firm if the customer later sues over losses. One narrow carve-out: firms do not need to document a refusal from a non-U.S. customer unless that customer trades security futures products.¹

Required Risk Disclosures

Section (d) requires firms to deliver written risk disclosures at or before the time the customer opens the account. Which document depends on the trading product:

Futures accounts: the risk disclosure statement required by CFTC Regulation 1.55.
Options on futures: the disclosure required by CFTC Regulation 33.7.
Managed accounts: the CTA disclosure document required by CFTC Regulation 4.31.
Cleared swaps: disclosures required by CFTC Regulation 22.16.

Many firms cover multiple obligations at once with the FIA Combined Risk Disclosure Statement, which the NFA recognizes as satisfying the requirements under Regulations 1.55, 33.7, and Rule 2-30 together.³

The CFTC Regulation 1.55 disclosure is blunt. It tells the customer that losses can exceed the entire amount deposited, that the broker can demand additional margin on short notice and liquidate positions at a loss if funds are not delivered in time, and that funds held by an FCM are not FDIC-insured, not SIPC-protected, and are commingled with other customers’ money rather than held individually. That last point catches many retail customers off guard, and the disclosure exists so no one can later claim they were not told.⁴

The Extra Layer for Retail Forex

Retail foreign exchange customers get an additional disclosure under CFTC Regulation 5.5. Beyond the general risk warnings, the firm must provide a quarterly breakdown showing what percentage of its non-discretionary retail forex accounts were profitable and what percentage lost money, along with a notice that past performance does not guarantee future results. The customer must sign and date an acknowledgment confirming receipt and understanding of the retail forex disclosure before the account can be opened. A verbal confirmation is not sufficient.⁵

Supervisory Approval Before Trading Begins

Rule 2-30 does not leave the account decision to the salesperson who brought the customer in. Section (g) requires a partner, officer, director, branch office manager, or supervisory employee to approve the account before the customer can trade futures or cleared swaps. That gatekeeper is responsible for reviewing the financial profile the customer provided and confirming that the required disclosures went out. The firm must also maintain written procedures for reviewing every Rule 2-30 record and for supervising Associates’ compliance with the information-gathering and disclosure duties.¹

Annual Verification and Material Changes

The obligations continue after the account opens. For every active individual customer, the carrying FCM must reach out at least once a year to verify that the customer’s information remains materially accurate and to invite corrections or updates. The NFA permits contact by mail, email, or any other method reasonably designed to reach the customer.³

When a customer reports a material change, the carrying FCM must evaluate whether the new information triggers additional risk disclosure. If someone’s income drops or their net worth falls below what they reported at account opening, the firm may need to re-deliver warnings tailored to the customer’s reduced capacity to absorb losses. If the account was introduced by another FCM or IB, or if a CTA directs trading in it, the carrying FCM must notify that other Member so the person who actually communicates with the customer can handle the follow-up.¹

Recordkeeping

Every piece of customer information collected under Rule 2-30, every signed disclosure acknowledgment, and every documented refusal must be retained for at least five years. During the first two of those years, the records must be readily accessible, so a firm cannot bury them in slow-retrieval offsite archives.⁶

Electronic storage must satisfy CFTC Regulation 1.31, which requires systems that preserve authenticity and reliability, backup capabilities, and a current inventory of every system used to maintain or access the records. When CFTC staff request records, the firm must produce them promptly in whatever format the regulator specifies.⁷ This is where compliance failures tend to surface during NFA audits: a firm collected the right information and delivered the right disclosures, but three years later it cannot produce the paperwork, and the NFA treats that the same as never having done the work.

Penalties for Violations

The NFA’s Business Conduct Committee can impose sanctions under Compliance Rule 3-14, including:

Monetary fines up to $500,000 per violation.
Expulsion from NFA membership, which requires a two-thirds vote of the Hearing Panel or Appeals Committee members present and effectively ends a firm’s ability to operate in the U.S. futures industry.
Suspension of membership privileges for a fixed period.
A permanent or temporary bar preventing an individual from working with any NFA Member.
Censure, reprimand, or a cease and desist order.

The $500,000 cap runs per violation, not per case. A firm that failed to collect customer information on dozens of accounts, or skipped disclosures across its entire book, faces cumulative exposure orders of magnitude higher. NFA disciplinary actions also become part of the firm’s permanent public record on the BASIC system, which prospective customers and counterparties routinely check.⁸

How This Differs From FINRA Suitability

Firms registered with both the NFA and FINRA often ask how Rule 2-30 interacts with FINRA Rule 2111. The two rules serve similar goals but operate differently. FINRA Rule 2111 imposes a suitability obligation on broker-dealers recommending securities: before making a recommendation, the firm must have a reasonable basis to believe the transaction fits the customer’s investment profile.⁹

NFA Rule 2-30 is narrower in one respect. It requires firms to collect information and deliver disclosures, but it does not impose the trade-by-trade suitability determination FINRA requires. The NFA’s approach centers on informed consent: give the customer honest, complete risk warnings calibrated to their financial situation, and let them decide. For firms handling both securities and futures, FINRA’s suitability duties layer on top of the NFA’s information and disclosure requirements rather than replacing them.

1
National Futures Association. NFA Compliance Rule 2-30 – Customer Information and Risk Disclosure
2
Office of the Law Revision Counsel. 7 USC 1a – Definitions
3
National Futures Association. NFA Interpretive Notice 9004 – Compliance Rule 2-30 Customer Information and Risk Disclosure
4
eCFR. 17 CFR 1.55 – Public Disclosures by Futures Commission Merchants
5
eCFR. 17 CFR 5.5 – Distribution of Risk Disclosure Statement by Retail Foreign Exchange Dealers, Futures Commission Merchants, and Introducing Brokers
6
National Futures Association. Books and Records
7
eCFR. 17 CFR 1.31 – Regulatory Records; Retention and Production
8
National Futures Association. NFA Compliance Rule 3-14
9
FINRA. Rule 2111 – Suitability