Quick Answer
A customer complaint is a grievance tied to the member's or an associated person's covered activities. A potential red flag is a pattern, practice, or activity suggesting possible identity theft, recognized before confirmation. Each issue routes through its own escalation procedure, and a firm's response to a red flag must fit the risk.
The whole unit on one sheet: how to recognize a complaint or a red flag, and how each one gets escalated.
Which One-Liners Win Points?
- A customer complaint is a grievance from a customer or an authorized representative tied to the activities of the member or an associated person, connected to soliciting or executing a transaction or disposing of that customer's securities or funds.
- Written form alone does not make a written customer complaint. The grievance, source, and covered-activity conditions must still be met; a written customer complaint is simply that grievance made in writing.
- A potential red flag is a pattern, practice, or specific activity indicating the possible existence of identity theft. The word "potential" matters: the firm can act before identity theft is confirmed.
- Identity verification is a core control area. Reasonable procedures verify a new account holder's identity to the extent reasonable and practicable, retain the identifying information used, and check lists of suspected terrorists designated by Treasury.
- A complaint and a red flag are different classifications that can arise separately or together.
How Does a Firm Decide What to Do?
- An associated person who learns of a listed event promptly reports its existence to the member.
- The firm handles a detected red flag under its written Identity Theft Prevention Program, with a response commensurate with the risk; it may determine that no response is warranted.
- When one matter includes both a complaint and a detected red flag, personnel apply the procedure relevant to each issue separately.
Which Gotchas Trip Students Up?
- A qualifying complaint does not become a potential red flag merely because the firm escalates it. Keep the two classifications separate.
- A red flag does not prove identity theft. The firm applies its procedures before the underlying problem is confirmed.
- A customer notice can itself be a red flag. A customer's own concern about possible identity theft can be a warning indicator.
- A detected red flag has no single fixed response. The firm matches the response to the risk, and may reasonably decide no response is warranted.
One-Breath Recap
Start with the definition: a customer complaint is a grievance from a customer or an authorized representative tied to the member's or an associated person's covered activities, and putting it in writing does not change that test. A potential red flag is a pattern, practice, or activity suggesting possible identity theft, recognized before anything is confirmed, often surfacing through identity-verification work like checking a new account against government watch lists. Keep the two classifications separate, since escalating one never converts it into the other. Then match the response to the issue: report a listed event promptly, and answer a detected red flag with a reaction sized to the actual risk, which sometimes means no reaction at all.
Need more than the recap? Read the full Escalating Complaints and Red Flags unit.