Series 23 Account Maintenance, Transfers, Privacy, and Identity Theft (3.1) Guide

This Series 23 lesson covers account maintenance, transfers, privacy, and identity theft (3.1) within Supervision of Retail and Institutional Customer-Related Activities. Read it as a principal-upgrade supervision lesson: the exam usually asks what a principal must approve, restrict, review, document, or escalate after the basic sales-supervision issue has already been recognized.

Learning Objectives

• Evaluate required approvals and documentation for address changes, authorizations, beneficiary updates, or account-type changes.
• Determine when ACATS or non-ACATS transfer problems require principal escalation or customer-protection follow-up.
• Distinguish privacy notices, safeguarding obligations, and permitted information sharing in account supervision.
• Assess identity-theft red flags and required mitigation steps under the firm’s customer-protection program.
• Identify when dormant-account activity or unusual maintenance requests signal a customer-protection or fraud risk.
• Evaluate supervisory controls over account statements, confirmations, and account-maintenance records retained by the firm.

Key Concepts

• Customer supervision begins before the recommendation and continues after account activity changes.
• Onboarding, communications, disclosures, recommendations, transfers, privacy, and account review are one control path.
• A principal answer should verify the customer facts and the communication record before accepting the transaction result.

Exam Focus

This section is most likely to test new accounts, CIP, AML, sanctions screening, account maintenance, transfers, privacy, identity theft, communications classification, approval, social media, retention, telemarketing, market-influencing publications, recommendations, disclosures, and account activity review. Strong answers identify the business-line control issue before choosing the principal response. Weak answers often sound like sales-supervisor answers: they solve the immediate representative or customer issue but skip the broader review, record, restriction, or escalation a Series 23 principal must own.

Series 23 questions often hide the tested function inside a busy fact pattern. Before choosing an answer, decide whether the stem is really about registration and personnel, general firm controls, customer activity, trading and market making, or investment banking and research.

How to Apply This Section

Start with the customer file and the communication. Decide whether the customer was properly onboarded, whether the message was classified and approved correctly, whether disclosures and recommendation support exist, and whether account activity created a review or escalation trigger.

Use this sequence when the answer choices look plausible:

Decision Table

Common Pitfalls

• Solving the transaction without checking account-opening or disclosure evidence.
• Treating social media, telemarketing, or specialized publications as informal communications.
• Ignoring later activity patterns that should change the supervision response.

Review Checklist

Before leaving this section, make sure you can address these points:

• Evaluate required approvals and documentation for address changes, authorizations, beneficiary updates, or account-type changes.
• Determine when ACATS or non-ACATS transfer problems require principal escalation or customer-protection follow-up.
• Distinguish privacy notices, safeguarding obligations, and permitted information sharing in account supervision.
• Assess identity-theft red flags and required mitigation steps under the firm’s customer-protection program.
• Identify when dormant-account activity or unusual maintenance requests signal a customer-protection or fraud risk.
• Evaluate supervisory controls over account statements, confirmations, and account-maintenance records retained by the firm.
• Explain what makes the issue principal-level rather than only sales-supervisor-level.
• State what evidence a Series 23 principal should expect to review or preserve.

Key Takeaways

• Series 23 rewards business-line classification before rule recall.
• The best answer usually adds principal-level review, restriction, documentation, or escalation.
• Trading, banking, research, customer activity, and general firm controls often overlap in the same stem.
• When facts are incomplete or risk is recurring, conservative supervision and documented remediation usually beat informal fixes.