FINRA’s investigation found that between January 1, 2005 and November 30, 2008, Citigroup’s DBP borrowed fully paid hard-to-borrow securities owned by the firm’s customers, who were in large part retail customers. The borrowed securities went into a pool of securities used, among other things, to facilitate Citigroup’s clients’ short-selling strategies.

The DBP arranged for more than 4,000 loans involving more than 770 different securities borrowed from more than 2,300 customers. The average annual value of outstanding loans from customers was approximately $301m.

FINRA found that Citigroup failed to disclose, or to adequately disclose, certain material information to customers participating in the DBP, including that the securities were hard-to-borrow; that the interest rates could be reduced by the firm; that the brokers received commissions for the duration of the loan; that while the securities were on loan, dividends were paid as ‘cash-in-lieu’ of dividends and were therefore subject to higher tax rates; and, that shares on loan could be sold by the customers at any time.

FINRA also found that the DBP operated without a system or procedures specifically designed to supervise the activities of its staff and brokers, and to adequately monitor the accounts of customers who participated in the DBP.

Branch managers and supervisors were not notified that customers of brokers they supervised were participating in the DBP. FINRA found that many of the firm’s branch managers and other supervisors were not even aware that the DBP existed.

In addition, the traditional tools that were available to branch managers and other supervisors to monitor customer accounts were compromised when shares were lent through the DBP.

Because a customer’s account no longer reflected the customer’s position in the security when the shares were lent through the DBP, exception reports – such as concentration reports and account market value loss reports – no longer captured the customer’s account even if it became overly concentrated in the security or lost a significant amount of market value due to the lent security’s loss in value.

Therefore, the firm’s ability to supervise values of positions, concentration levels, and on-going appropriateness of the loan transaction for the customers was compromised.

FINRA also found that Citigroup distributed three versions of marketing materials to the public regarding the DBP that were not fair and balanced and did not provide a sound basis for evaluating the facts in regard to the DBP. The marketing materials contained misleading statements that there was very little risk associated with the DBP, that no customers suffered any losses and that the firm tried to avoid interest rate changes as much as possible.

Citigroup suspended all new borrows through the DBP on November 30, 2008 and, as of the date of the settlement, had returned all shares to customers who had lent through the DBP.

James Shorris, EVP and executive director of enforcement at FINRA, said: “Before offering a product to customers, brokerage firms must reasonably ensure that the customers are aware of all of the potential risks associated with the transaction. In this case, Citigroup failed to maintain a supervisory system that ensured that such disclosures were made to customers by the firm’s registered representatives and in the firm’s marketing materials.”

FINRA is the non-governmental regulator for all securities firms doing business in the US. FINRA is dedicated to investor protection and market integrity through effective and efficient regulation and complementary compliance and technology-based services.