Phishing Campaign Alert Using gateway-finra.org Domain
Summary
FINRA issued Regulatory Notice 21-20 warning member firms of an ongoing phishing campaign using the fraudulent domain "@gateway-finra.org." The fake emails impersonate FINRA compliance examiners and request firms click links to "complete" compliance requests, warning of penalties for late submission. FINRA has requested the domain registrar suspend services for gateway-finra.org and reminds firms to verify email legitimacy before responding.
What changed
FINRA issued a cybersecurity alert warning member firms of fraudulent phishing emails using the domain "gateway-finra.org" to impersonate FINRA compliance examiners. The emails request firms click links to "complete" compliance requests and threaten penalties for late submission. FINRA has requested suspension of the malicious domain.
Firms should treat any email from gateway-finra.org as fraudulent, delete such messages immediately, and notify internal security teams if any links were clicked. Compliance departments should remind staff to verify suspicious communications through official FINRA channels before responding or providing information.
What to do next
- Delete all emails from gateway-finra.org domain
- Notify appropriate firm personnel if any link or image was clicked
- Verify legitimacy of any suspicious email before responding
Archived snapshot
Apr 16, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Regulatory Notice 21-20
FINRA Alerts Firms to Phishing June 7, 2021Email Using "gateway-finra.org" Domain Name Notice Type
Special Alert 0
Suggested RoutingSummary
Legal 0FINRA warns member firms of an ongoing phishing campaign that involves Legal and Compliance 0fraudulent emails (see sample in Appendix) purporting to be from FINRA and Risk Managementusing the domain name "@gateway-finra.org." The email asks the recipient 0 Senior Managementto click a link to "view request" and provide information to "complete" that 0request, noting that "late submission may attract penalties." Key Topics FINRA recommends that anyone who clicked on any link or image in the email Cybersecurityimmediately notify the appropriate individuals in their firm of the incident. 0 Fake FINRA domain name 0The domain of "gateway-finra.org" is not connected to FINRA and firms Fraud 0should delete all emails originating from this domain name. FINRA reminds firms to verify the legitimacy of any suspicious email prior to responding to it, opening any attachments or clicking on any embedded links. FINRA has requested that the Internet domain registrar suspend services for "gateway-finra.org." For more information, firms should review the resources provided on FINRA's Cybersecurity Topic Page, including the Phishing section of our Report on Cybersecurity Practices - 2018. Questions regarding this Notice should be directed to: Dave Kelley, Director, Member Supervision Specialist Programs, 0at (816) 802-4729 or by email; or Greg Markovich, Senior Principal Risk Specialist, Member Supervision 0Specialist Programs, at (312) 899-4604 or by email.
21-20 June 7, 2021
Appendix
From: Name Date: Monday, June 7, 2021 at 1:25 PM To: Name Subject: New Request for Firm Name
FINRA: NEW REQUEST FOR LIBERTY PARTNERS View
RequestFINANCIAL SERVICES, LLC
Case Request ID Date Requested FINRA Requester
202106980000 3989971 06/07/2021 Ta'She Spencer-Clifton
Dear Richard, A Firm Compliance Request has been issued by FINRA for your firm CORINTHIAN PARTNERS, L.L.C.. Follow the information in the letter above to complete the request. Late submission may attract penalties. Please respond to this email for additional information. Sincerely, Ta'she Spencer Clifton Principal Compliance Examiner Financial Industry Regulatory Authority (FINRA) 1735 K Street, NW Washington, DC 20006
If any documents responsive to this request include BSA Confidential Information, please include the terms "BSA Confidential Material" in the title of the document. BSA Confidential Information includes Suspicious Activity Reports (SARs) and information revealing the existence of 1) a specific SAR or 2) a member firm's affirmative decision not to file a SAR.
©2021. FINRA. All rights reserved. Regulatory Notices attempt to present information to readers in a format that is easily understandable. However, please be aware that, in case of any misunderstanding, the rule language prevails.
2 Regulatory Notice
Named provisions
Related changes
Get daily alerts for MS Securities Regulator
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from FINRA.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when MS Securities Regulator publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.