A $4.2 Million Wake-Up Call for Retail Brokerage Compliance

The Financial Industry Regulatory Authority (FINRA) has imposed a $4.2 million civil money penalty on Webull Financial LLC, citing significant deficiencies across the broker's anti-money laundering (AML) controls, identity theft prevention measures, and best execution programme. The enforcement action highlights the risks that traders and investors face when a brokerage's compliance infrastructure fails to match its rapid growth in customer accounts.

Bill St. Louis, FINRA's Executive Vice President and Head of Enforcement, summarized the regulator's concern: "Webull's business grew rapidly, but its compliance program did not keep pace." That gap between expansion and oversight is precisely the kind of scenario that can leave retail clients exposed to fraud, misappropriation, and poor trade execution.

Identity Verification and AML Failures at Scale

The core of the penalty centres on a staggering volume of improperly vetted accounts. Between January 2020 and September 2023, Webull approved more than 120,000 customer accounts without adequately verifying the applicants' identities. In some cases, the documentation submitted was a photograph of a scenic landscape rather than a government-issued identification card. In others, the accounts were linked to individuals who were already flagged as deceased within Webull's own internal systems.

The AML shortcomings extended well beyond onboarding. FINRA determined that the broker failed to investigate 473 unauthorized Automated Clearing House (ACH) transfers totalling more than $1.5 million. These transfers moved funds from customers at other financial institutions directly into Webull accounts — a pattern consistent with potential fund misappropriation.

Additional surveillance gaps identified by the regulator included:

  • Inadequate monitoring of suspicious out-of-the-money options trading activity.
  • Failure to flag customers sharing the same physical address or device.
  • Inability to detect and address fraudulent account takeovers.
  • Dozens of accounts opened for foreign nationals who all used the same IP address or device.
  • A complete absence of checks for unrelated accounts sharing the same Social Security number, a control that was not introduced until August 2021.

One particularly alarming finding involved a single account that triggered nearly 13,000 alerts for potentially manipulative trading across more than 100 different stock symbols over a period of roughly 18 months. Webull did not act on those alerts.

Best Execution Reviews Fell Far Short of Standards

Separate from the AML and identity verification issues, FINRA found that Webull failed to conduct adequate reviews of customer execution quality between February 2020 and May 2025. During that stretch, the broker sometimes neglected to assess how its orders were filled at competing market centres, a requirement designed to ensure clients receive the best possible price.

The regulator also noted that Webull failed, at certain points, to review non-marketable orders — a category that accounted for 60% to 70% of its total order flow during some periods. Furthermore, the reviews that were conducted lacked the mandated granular analysis broken down by order type and individual security, making it impossible to confirm that execution quality met regulatory benchmarks.

For traders, this means that their limit orders, marketable and non-marketable submissions, and options trades may not have been routed and filled under the most favourable conditions during those years.

Remediation Steps and a Pattern of Regulatory Scrutiny

Webull resolved the latest matter without formally admitting or denying FINRA's findings. As part of the settlement, the firm agreed to certify that it has remediated its AML and identity theft prevention deficiencies and to appoint an independent consultant to conduct a review of its best execution programme.

This is not the broker's first run-in with the regulator. Earlier in 2025, FINRA levied a separate $1.6 million fine related to Webull's supervision and record-keeping of influencer promotions. The regulator concluded that certain promotional statements made to customers were neither fair nor balanced and contained exaggerated or promissory claims.

Finance Magnates reached out to Webull for comment on the latest penalty, but the firm had not responded by the time of publication.

For retail investors and active traders, the cumulative picture underscores a key risk: rapid account growth at a brokerage does not automatically translate into commensurate protections. Traders should remain attentive to regulatory actions against their broker, as enforcement findings can signal areas where client funds, data, and execution quality may have been at risk.