Financial Services Advertising Compliance by State
Tedd Barr Chief Executive Officer 22 min read A qualified-review guide for mapping financial-services advertising to current federal and state sources, approvals, records, and correction controls.
Financial-services advertising compliance by state starts with scope, not a generic checklist
Financial-services advertising compliance by state requires a qualified reviewer to identify the advertiser, product, audience, channel, offer, and jurisdictions before selecting the rules that apply. A 50-state list can help teams find official starting points, but it cannot determine applicability or replace legal and compliance judgment.
This guide is a review tool, not legal, regulatory, or compliance advice. It does not say that the agency listed for a state governs every bank, lender, mortgage company, adviser, broker-dealer, insurer, fintech, lead generator, or advertising activity in that state. Authority can be divided by charter, license, product, activity, and regulator. A qualified reviewer must confirm every source and conclusion before campaign use.
Use this guide with the CTV compliance governance playbook and CTV creative compliance workflow. Those pages establish approval and asset controls. This page adds a jurisdiction register and a repeatable way to turn an approved legal conclusion into an executable media rule.
Define the product and regulatory perimeter before reviewing creative
The first decision is what the advertiser is actually offering and which entity is making the communication. Brand names and campaign labels are not enough. Review the legal entity, charter or license, product, customer journey, compensated relationships, lead flow, servicing role, and destination experience.
A reviewer may need different sources for each product family:
| Product or activity | Federal starting point | State-level question to resolve |
|---|---|---|
| Deposits and bank services | FDIC advertising rules and guidance | Which entity and charter are advertised, and which state authority supervises the activity? |
| Consumer credit | CFPB regulations and official interpretations | Does the offer, trigger term, licensing status, or solicitation create state-specific requirements? |
| Mortgage lending or servicing | CFPB mortgage resources | Which origination, brokering, servicing, lead-generation, and licensing rules apply in each market? |
| Securities and advisory services | SEC investment adviser marketing guide and FINRA Rule 2210 | Is the communication governed by federal, self-regulatory, state securities, or overlapping authority? |
| Insurance | NAIC state insurance department directory | Which producer, carrier, product, appointment, filing, and advertising rules apply in the target state? |
This table is a routing aid, not an applicability opinion. A campaign can touch more than one row. For example, an insurance or investment message may also involve credit, lead generation, endorsements, privacy, or state unfair-practices requirements.
Build a campaign jurisdiction brief
A jurisdiction brief gives reviewers enough facts to make a decision without reconstructing the campaign from scattered messages. Create it before copy or targeting is approved.
Record at least:
- advertiser legal entity and any disclosed trade name;
- charter, registration, and license identifiers relevant to the offer;
- product, rates, fees, eligibility, availability, and material limitations;
- audience, age restrictions, customer status, language, and exclusions;
- every state where the ad can be delivered or the offer can be accepted;
- channel, format, duration, placement, and publisher or platform;
- claims, endorsements, comparisons, rankings, testimonials, and evidence;
- disclosure wording, placement, proximity, duration, audio, and destination treatment;
- landing page, form, phone flow, lead buyer, CRM route, and follow-up sequence;
- data sources, audience attributes, suppression logic, measurement joins, and retention;
- owners for business, legal/compliance, creative, media, data, operations, and incidents.
Do not use billing address, headquarters, or a media platform’s availability setting as a substitute for jurisdiction analysis. The relevant states can depend on where the audience is located, where the licensed activity occurs, where leads are accepted, and how the product is fulfilled. The qualified reviewer must define the rule for the specific campaign.
Use the 50-state register as a verification queue
The links below are official state or district starting points checked editorially on August 13, 2026. They are deliberately described as starting points because authority may sit with another division, securities administrator, insurance department, attorney general, licensing body, or federal regulator.
Before relying on a row, a qualified reviewer should confirm the agency’s current jurisdiction, locate the controlling statute, regulation, bulletin, order, interpretation, or filing instruction, and record the exact source. A homepage link alone is not substantiation for a campaign decision.
The register is intentionally not a summary of each state’s law. Summaries age quickly and can hide exceptions. The working record should link to the precise official material used for a decision and preserve the version or access date.
Convert each source into an executable review rule
An official source becomes useful to the campaign only when the reviewer records what it changes. For each jurisdiction, create one source-register entry with these fields:
- Jurisdiction and authority: state, agency, division, and any coordinating authority.
- Entity and product scope: the advertiser, license, charter, role, product, and customer covered.
- Official source: direct URL, source title, section, effective date, and access date.
- Reviewer conclusion: the requirement, prohibition, permission, or open question in plain language.
- Creative effect: exact claim, disclosure, identifier, wording, placement, language, or evidence change.
- Media effect: geography, audience, channel, publisher, frequency, flight, or suppression control.
- Destination effect: landing page, form, phone script, consent, routing, fulfillment, or follow-up change.
- Evidence and approval: substantiation, reviewer, decision date, expiration, and linked asset IDs.
- Re-review trigger: a date, rule change, product change, creative edit, new state, new audience, or complaint.
Avoid entries such as “state compliant” or “legal approved.” They do not show what was reviewed. A useful entry is narrow enough that creative and media teams can test it and a later reviewer can reconstruct the decision.
Apply state decisions to creative, media, and the response path
State review must control the delivered experience, not just the copy document. Map each approved conclusion to the production and trafficking records.
For creative, connect the source entry to claim IDs, disclosure sets, required identifiers, visual and audio treatment, language versions, testimonials, and expiration dates. For media, connect it to allowed and excluded states, audience logic, inventory, platform settings, and pause controls. For the response path, connect it to the destination, form, phone number, lead recipient, consent language, fulfillment, and follow-up.
Use stable asset IDs and a deployment manifest. If one state requires a different version, name that relationship explicitly. Do not rely on a filename such as final-state-version-2. The manifest should show which approved master and derivative may run in each market.
Test geographic controls before launch and after material platform changes. Preserve screenshots or platform exports showing the settings that implemented the approved state matrix. A platform’s policy review or ad acceptance is not a substitute for the advertiser’s qualified review.
Make disclosures work in the actual channel
A disclosure decision should cover words, prominence, proximity, timing, audio, language, and destination continuity. The FTC advertising guidance explains that advertising must be truthful and non-deceptive, that objective claims need support, and that necessary qualifications should be clear and conspicuous.
Channel conditions matter. Television disclosures must be readable at normal viewing distance and for sufficient time. Paid-social units may truncate copy. Search ads have character limits and separate asset combinations. Audio lacks a visual fallback. Landing pages can change after the ad receives approval.
Review the net impression of the rendered ad and response path. Do not assume that a disclosure repairs a misleading headline or that a correct landing page cures an incomplete ad. Qualified reviewers decide what must appear in each component and whether the components work together.
Preserve evidence and version history
A defensible process retains the inputs and decisions that produced the live campaign. Keep the jurisdiction brief, source register, official-source captures where permitted, reviewer notes, substantiation, approvals, scripts, storyboards, rendered assets, derivatives, disclosure specifications, landing-page captures, trafficking manifest, platform settings, live checks, change log, complaints, incidents, and final disposition.
Do not silently replace old sources or approvals. Close the old entry, record why it changed, and link the replacement. The retention period and access controls may vary by entity, product, and rule; the qualified reviewer should define them.
The minimum audit trail should answer four questions: what ran, where it ran, who approved it, and which evidence supported the decision at that time.
Frequently asked questions
Is this a legal guide to every state’s advertising rules?
No. It is an operational review framework and source-finding register. It does not determine which laws apply or summarize every state requirement. A qualified reviewer must reach and document those conclusions.
Does the listed state agency regulate every financial advertiser?
No. The links are starting points. Authority may depend on the entity, charter, license, product, activity, audience, and jurisdiction, and it may be divided among multiple state and federal authorities.
Can one national creative run in every state?
Only after qualified review confirms that its claims, disclosures, identifiers, offer, targeting, and response path are approved for every intended state. If requirements differ, use controlled state variants and market restrictions.
Is platform approval enough for a regulated financial ad?
No. Platform policies and reviews are separate from the advertiser’s legal and compliance obligations. Keep platform approval in the record, but do not treat it as the substantive decision.
How often should the state source register be checked?
Check it at least quarterly and after any material legal, regulatory, product, campaign, platform, market, or complaint trigger. The qualified maintenance owner should set the final schedule.
What happens when an official link changes?
Treat the broken or redirected link as a review trigger. Confirm the successor agency and precise source, document the change, and re-check every operational rule that depended on the old material.
How should this page be used?
Use it to organize source-finding and review operations. It does not determine which requirements apply to a specific advertiser or campaign, and it does not replace qualified review.
Conclusion
Financial-services advertising compliance by state is a governed decision process, not a static 50-state checklist. Define the entity and product, route each jurisdiction to current official sources, record the reviewer’s conclusion, connect it to the exact creative and media controls, and preserve the evidence. When a source or campaign changes, re-review the affected decision before the work runs again.
This guide gives teams a structure for review. It does not authorize a campaign or replace the approvals required for campaign use.
