Business

The texting crackdown Wall Street executives should fear most

By Hillary Remy TheStreet

Updated April 17, 2026 8:29 AM

If you work in finance, you probably know the feeling of the phone buzz you are not supposed to answer.

The client who will only text on WhatsApp.

The colleague who sends you a Signal link instead of an email.

On paper, the rules are clear. On desks and in group chats, the reality is messier and much more expensive.

Regulators have already pinned roughly $3.2 billion in fines and settlements on big banks and brokers for "off‑channel" communications on WhatsApp, iMessage, Signal, SMS, and personal email that were never captured or archived as required.

More than $2.5 billion in texting and WhatsApp penalties had piled up by mid‑2023. These penalties followed actions against firms including Wells Fargo and BNP Paribas over messages on personal devices that escaped recordkeeping systems, Bloomberg reported.

The SEC and CFTC together have levied nearly $2 billion in recordkeeping penalties in just the latest wave of cases, Investopedia reported, with more coming as the investigation widens.

I wanted to understand why, after all those headlines and training sessions, people are still breaking rules they sign their names to. So I talked with Avi Pardo, CBO of LeapXpert, a company that spends its days inside this mess.

His answer was simple and uncomfortable: Policy and reality have split apart.

"The policy existed. The behavior didn't change."

When I asked how big the gap is between written policies and real‑world behavior, Pardo did not sugarcoat it. "The gap between policy and practice across the industry is structural, not incidental," he said.

He told me most firms maintain careful lists of approved and banned channels. The problem is not that the lists do not exist. It is that they are written for a world that no longer matches how people communicate.

"Many of the firms that paid the largest fines already had policies on the books that explicitly prohibited channels such as WhatsApp, iMessage, Telegram, Signal, and others," he said. "The policy existed. The behavior didn't change."

That line stuck with me. I have sat through those annual compliance videos. I have clicked "I acknowledge" on policies that say no business on personal devices. Then I have watched people around me answer client texts anyway because the relationship felt more real there than in a corporate app no one checks.

Pardo said he has seen that same movie play in hundreds of deployments in dozens of countries. "What we've seen is that banning these channels doesn't work," he said. "It drives the behavior underground."

The SEC's texting probe is evidence of a "multi‑year pattern" where off‑channel messaging was simply how many desks did business, even as policies forbade it, International Banker reported in 2024.

Hearing this description and Pardo's experience side by side, it is hard to pretend this is about a few bad actors. It is a system that trained people to live in two realities at once.

Enforcement of electronic business communication policies raises risks

The enforcement story has evolved, which is part of why this no longer feels like a harmless shortcut.

It started with J.P. Morgan Securities paying $125 million to the SEC over recordkeeping failures tied to personal devices and unapproved apps, with the CFTC adding a $75 million penalty the same day.

Then came the 16‑firm sweep where the SEC said it found "widespread and longstanding failures" to preserve electronic business communications and imposed more than $1.1 billion in fines.

Regulators had discovered employees "routinely communicated about business matters" on messaging apps in ways that sidestepped mandatory recordkeeping, The New York Times wrote.

Another $549 million in penalties hit 11 firms after they admitted they failed to maintain tens of thousands of messages on WhatsApp, iMessage, and other apps, Business Insider reported.

Those firms acknowledged that "a majority" of off‑channel communications were never captured, CNN noted.

By early 2024, the SEC was still adding new names, hitting another batch of broker‑dealers and advisers with more than $81 million in penalties for similar failures.

When I asked Pardo what has changed inside firms, he did not talk about fear of another big number. He talked about fear at the top.

"Regulators are no longer just fining the firm," he said. "They're looking at individuals: the managing directors, the desk heads, the compliance leaders who were responsible for supervision and either failed to act or used unapproved channels themselves."

"That changes the calculus entirely," he added. "This is now a personal, career‑level risk for senior people."

The SEC has already collected thousands of staff messages from major investment firms as it escalates its probe and has asked companies to run internal sweeps on WhatsApp and Signal use, Reuters reported.

If you are a junior banker, that may sound abstract. If you are the person who signs the annual attestation about supervision, it should feel very concrete.

"We don't take away WhatsApp"

The part of this conversation that felt most human to me was where front‑office fear lives.

Pardo said the biggest resistance he sees does not come from IT or even legal. "It depends on where the firm is in its compliance journey, but the most common source of friction is between compliance and the front office," he said.

More Wall Street

Sales and wealth teams see messaging as oxygen. "Front‑office teams, particularly in sales and trading and wealth management, see messaging as their competitive edge," he said. "They've built client relationships on WhatsApp and iMessage."

I have watched those threads at work: birthday messages, quick check‑ins, anxious texts when markets are rough. They do not feel like violations. They feel like the job.

So when compliance says "we need to govern this," Pardo said the first reaction is fear. "There's an immediate fear that governance means restriction, that their ability to communicate effectively is about to be taken away," he said.

LeapXpert's mission is designed to flip that script.

"That's exactly the wrong framing," he said. "We don't take away WhatsApp. We don't force employees into a corporate app that no client wants to use. We enable the same channels, the same experience, with governance running underneath."

In his words, "The employee sends a WhatsApp message the same way they always have. The difference is that the message is now captured, archived, and supervised."

For someone who has watched colleagues juggle two phones and three identities to keep clients happy and compliance quiet, that sounds less like a tech feature and more like a pressure valve.

Regulators now expect 3 things when capturing business communications

One thing that stood out in my conversation was how high the bar has moved. The old answer of "We tell people not to do it" is not just weak; it also creates evidence against you.

Pardo said regulators now expect three basics.

First, capture: "Every business communication on every channel your employees use, including WhatsApp, iMessage, SMS, Signal, and others, must be recorded and retained the same way you retain email," he said. That includes metadata such as emojis, reactions, and voice notes.
Second, supervise: "You can't just store the messages," Pardo said. "You have to actively monitor and review them with the same rigor you apply to email and voice."
Third, maintain accountability: "There has to be a clear chain of responsibility," he added. "Supervisors need to know what their teams are doing on these channels and be able to demonstrate genuine oversight."

The SEC's intensified scrutiny of off‑channel communications now focuses on whether firms have "integrated electronic messaging into their broader supervision and surveillance programs" and can show a real audit trail, Faegre Drinker wrote.

Pardo said many firms that have already paid fines still fall short on that third piece.

"Many firms responded to enforcement actions by deploying capture technology, but didn't go far enough on supervision and accountability," he said. "They're archiving messages, which is a necessary first step, but they haven't built the workflows to review those messages systematically, flag risks, and create an auditable trail."

He also sees firms underestimating how broad their coverage needs to be.

"Some firms addressed WhatsApp but didn't account for iMessage, SMS, or Signal," he said. "Regulators are not going to accept partial solutions."

I heard that as a reminder that your compliance perimeter is not drawn by your device policy; it is drawn by whatever app your most important client prefers to use next week.

What a business communication compliance story looks like

The final part of our conversation was the one I kept turning over afterward. If you are a firm that has already been in the crosshairs of regulatory scrutiny of electronic business communications, how do you convince regulators you'll remain compliant?

"A defensible ‘we fixed it' story comes down to evidence," Pardo said. "Not a policy update. Operational evidence."

He walked through what his best‑prepared clients now show exam teams.

"You need to demonstrate that you've deployed technology that captures all business communications across all channels," he said. "You need to show that capture is integrated into your supervision program. You need to prove that supervisors have genuine oversight and are exercising it. And you need an audit trail that documents all of this."

LeapXpert's latest platform leans into what he calls Communication Data Intelligence, branded as LeapXpert Signals.

He said it lets firms analyze patterns in the data they are now forced to collect: "topics, sentiment, trends, and potential risk indicators" that can move firms "from reactive compliance to proactive governance."

In other words, you cannot just prove that you have the messages. You have to prove that you learned something from them.

Wall Street communication compliance matters for investors

It would be easy to file this under "problems for bankers and lawyers." But if you are the person whose retirement money or savings is being managed, this is about your trust, too.

When the SEC says it cannot see work chats it was supposed to see, it is really saying it cannot fully police insider trading, front‑running, or abusive sales tactics that might be happening in those channels.

When firms pay billions in fines and then spend more on remediation, those costs eventually show up in what clients pay, even if no one spells it out on a statement.

And there's another, quieter angle. If your adviser insists that important conversations stay on firm email or recorded lines, that might feel stiff compared with a WhatsApp thread.

After talking with Pardo, I see that stiffness a little differently. Sometimes the formality is a form of protection, for both sides.

Wall Street's $3.2 billion texting problem is not going away because phones are not going away. The question is whether the industry can finally stop pretending that "don't do it" is a real plan and build systems that match how people actually live and work.

The Arena Media Brands, LLC THESTREET is a registered trademark of TheStreet, Inc.

This story was originally published April 17, 2026 at 8:17 AM.