Communications surveillance

Spec sheet // Glossary // COMMUNICATIONS SURVEILLANCE
Glossary / C / Communications surveillance
Glossary · GRC and resilience

Communications surveillance

Also called eComms surveillance, voice and eComms monitoring, communications monitoring

Definition

Communications surveillance is the recording and review of employees' phone calls, emails, chats and other messages to detect market abuse, misconduct and rule breaches. Investment firms must record communications linked to client orders and trading. Surveillance systems scan those records for risk signals and send alerts to compliance analysts.

01 VOICE02 EMAIL03 CHAT04 FLAGGED ALERT
Fig. 1 · Communications surveillance
MiFID II Article 16(7) · MAR Article 16 · FCA COBS 11.8
Key rulesMiFID II Article 16(7) · MAR Article 16 · FCA COBS 11.8 · SEC Rule 17a-4
Applies toEU investment firms and credit institutions providing investment services
RegionsUK · EU · US
01

How it works

Firms capture voice and electronic communications from approved channels, store them in tamper-proof archives and run analytics over them. Lexicons, language models and voice transcription flag phrases or patterns linked to insider dealing, collusion or mis-selling. Analysts review alerts, often alongside trade data, and escalate concerns. Staff must use only approved channels for business communications.

Regulators use recordings as evidence in market abuse cases, so gaps in capture are a breach in themselves. The SEC and CFTC have brought many cases since 2021 against firms whose staff used unapproved messaging apps for business. Under MAR, firms must detect and report suspicious orders and transactions, and communications review is a core input to that duty.

Step 1Capture channelsRecord all approved voice, email and chat channels
Step 2Retain recordsStore communications securely for the required retention period
Step 3Scan for riskApply lexicons and models to flag suspicious language
Step 4Review alertsAnalysts assess alerts alongside trade and order data
Step 5Escalate findingsEscalate misconduct and file STORs where required
02

The rules

EU · 3 January 2018MiFID II Article 16(7)Directive 2014/65/EU on markets in financial instruments, Article 16(7)

Requires recording of telephone conversations and electronic communications relating to client orders and dealing on own account.

EU investment firms and credit institutions providing investment services
EU · 3 July 2016MAR Article 16Regulation (EU) No 596/2014 on market abuse, Article 16

Requires systems to detect and report suspicious orders and transactions without delay through STORs.

Persons professionally arranging or executing transactions, and market operators
UK · 3 January 2018FCA COBS 11.8FCA Conduct of Business sourcebook 11.8: Recording telephone conversations and electronic communications

Requires firms to record relevant communications, keep them for five years and take steps to stop staff using unrecorded devices.

UK investment firms carrying on relevant activities
US · 22 December 1948SEC Rule 17a-4Securities Exchange Act Rule 17a-4: Records to be preserved by certain exchange members, brokers and dealers

Requires broker-dealers to preserve business communications, including electronic messages, for at least three years.

US broker-dealers
03

Common questions

What is the difference between communications and trade surveillance?

Trade surveillance analyses orders and transactions for suspicious patterns such as spoofing or insider dealing. Communications surveillance reviews what staff say and write. Many firms link the two so that an unusual trade can be checked against related calls and messages.

What are off-channel communications?

Off-channel communications are business messages sent through apps or devices the firm does not capture, such as personal messaging apps. US regulators have brought numerous cases since 2021 against firms whose staff used them, because the records could not be preserved or reviewed.

How long must recorded communications be kept?

Under MiFID II and FCA rules, relevant records must be kept for five years, and up to seven years if a regulator requests it. US broker-dealers keep business communications for at least three years under SEC Rule 17a-4, the first two in an easily accessible place.

Can AI be used for communications surveillance?

Yes. Firms increasingly use natural language processing and language models to reduce false alerts from keyword lexicons and to cover more languages. They remain responsible for the outcomes, so models are validated and analysts review alerts.