Regulatory actions announced on September 30, 2022, imposed $200 million in fines on Morgan Stanley, with the Securities and Exchange Commission and the Commodity Futures Trading Commission jointly penalizing the bank for failing to maintain proper records of employee communications. The violations centered on off-channel messages sent through personal devices and applications, representing a fundamental compliance breakdown at the institution. The penalties carry particular weight given Morgan Stanley’s origins.
The firm was created in 1935 following the forced breakup of J.P. Morgan & Co. under the Glass-Steagall Act of 1933, which mandated the separation of commercial and investment banking.
Founders Henry Sturgis Morgan and Harold Stanley built an organization designed specifically to operate within strict regulatory boundaries. In its first year, the new investment bank handled $1.1 billion in public offerings and private placements, capturing a 24% market share. Compliance was the foundational purpose of the enterprise.
Decades of deregulation, mergers, and global expansion have fundamentally altered that original mandate. Morgan Stanley now employs more than 80,000 people across 42 countries.
The 1997 merger with Dean Witter Discover & Co. introduced a consumer retail division and brought Philip J. Purcell, the Dean Witter chief, to the helm as chairman and CEO. The firm transformed into a financial supermarket, a far cry from the original partnership model.
That scale contributed directly to the compliance failures. With tens of thousands of employees across dozens of countries, monitoring communications became a significant challenge.
Workers used WhatsApp, Signal, and personal email accounts, causing records to disappear into private servers beyond regulatory oversight. The $200 million fine addresses not merely lost text messages but the broader principle that financial institutions must maintain accessible records, regardless of technological changes. While similar compliance issues have affected every major bank, the penalties land differently on Morgan Stanley, which has cultivated a reputation as the responsible actor on Wall Street—the firm that navigated the 2008 financial crisis without a near-collapse and that advises governments and blue-chip corporations.
The $200 million represents a minor financial impact for a company handling trillions, but the reputational damage is more substantial. Industry responses are already taking shape.
Banks are implementing surveillance software that captures all messages, flags potentially problematic language, and maintains archives for years. Regulators have signaled that off-channel deal discussions are no longer acceptable within the U.S. financial system. The CFTC and SEC possess statutory authority, legal precedent, and political support for continued enforcement. For Morgan Stanley, the internal challenge remains significant.
A firm built on personal relationships and discreet communications must now police its own employees. The Dean Witter merger introduced a retail broker culture accustomed to informal client conversations, and that cultural tension remains unresolved.
The $200 million penalty represents the cost of that ongoing conflict. The Glass-Steagall era is long past, but the requirement that financial firms maintain honest records endures. Morgan Stanley, created to operate within a regulatory framework, has now been penalized for ignoring one of that framework’s most basic rules.
