Home › Blog › When Does a Cold Email Become a Financial Promotion? FSMA s21 for Outbound Teams
FSMA s21 for cold email: when an email invites investment, why email is non-real time, and the art 19 and art 49 exemptions. Quoted from the law.
By Moe Alhosni · Published 29 October 2026 · 9 min read
Short answer: A cold email becomes a financial promotion under FSMA section 21 when it is sent in the course of business and invites or induces the reader to engage in investment activity. A fintech selling software to a bank is not doing that. A fund manager emailing allocators about a fund is. Email counts as a "non-real time" communication, so the cold-calling rules do not apply to the email itself, and institutional campaigns usually rely on the investment-professional exemption in article 19 of the Financial Promotion Order.
This is general information, not legal advice; check with your compliance team or counsel.
I'm Moe Alhosni, founder of ROI Maximizer. We run B2B cold email and get paid per qualified meeting that took place. At Moody's in London I worked in sales for four years and seven months, latterly as Assistant Director, Sales, covering financial institutions, asset managers, PE and VC. What I sold was a product to those firms. It was never an invitation to invest. That distinction is the whole of this article.
We have not run a finance campaign yet, and we do not run retail investment promotions. This page is about the rules, quoted from legislation.gov.uk and the FCA Handbook. For the email rules that apply to every sender (PECR, UK GDPR, CAN-SPAM, CASL), start with is cold email legal for financial services. For how we work with finance firms, see the financial services hub.
FSMA section 21(1) says a person "must not, in the course of business, communicate an invitation or inducement to" engage in investment activity. Section 21(2) lifts the restriction if the sender "is an authorised person", or if "the content of the communication is approved for the purposes of this section by an authorised person."
Section 21(8) defines engaging in investment activity, starting with "entering or offering to enter into an agreement the making or performance of which by either party constitutes" a controlled activity. In plain English: an agreement to deal in investments, or to use an investment service, of a kind the Financial Promotion Order lists as controlled.
Breaking section 21 is a crime. Section 25 says a person who contravenes it "is guilty of an offence", with up to two years' imprisonment on indictment. There is a defence for someone who "took all reasonable precautions and exercised all due diligence". That defence is why a written sign-off process for templates is worth having.
An unauthorised firm can still communicate a promotion if an authorised firm approves it. That got harder. The Financial Services and Markets Act 2023 inserted section 21(2A): an authorised person may approve content "only if" the approval "is permitted under section 55NA (which enables approval to be given with FCA permission)" or falls within an exemption in regulations. The legislation.gov.uk page shows this provision fully in force from 7 February 2024.
So "our lawyer's firm is FCA-authorised, they can sign it off" is no longer enough on its own. The approver needs the permission, or an exemption.
Here is how I would sort the common finance outbound campaigns. This is my reading of the text, not a ruling. Your counsel decides for your firm.
| Who sends | What the email offers | Section 21 engaged? |
|---|---|---|
| Fintech or SaaS vendor | Software, data or services to a bank's operations team | No. It sells a product, not an investment |
| Compliance or outsourcing firm | KYC, reporting or fund admin services to asset managers | No, for the same reason |
| Asset manager | A fund or mandate to pension schemes and allocators | Yes. It is an inducement to invest |
| Wealth manager or IFA | Investment management or advice to new clients | Yes, in most cases |
| PE or VC firm, fundraising | A fund to LPs | Yes |
| PE firm, deal sourcing | An offer to talk about buying the owner's company | It can be, because selling shares is investment activity. The Order has specific exemptions; take advice before you send |
The first two rows are ordinary B2B marketing. PECR and UK GDPR apply, section 21 does not. The middle rows are where the rest of this article matters. The deal-sourcing row is covered in private equity deal sourcing outreach.
One warning for vendors. An email can drift into an inducement by accident. "Clients earn 3% more on idle cash" written by a treasury fintech to a corporate CFO starts to read like an investment pitch. Keep vendor emails about the product, the workflow and the cost, not returns.
The Financial Promotion Order 2005 splits promotions into real time and non-real time. Article 7 defines a real time communication as one "made in the course of a personal visit, telephone conversation or other interactive dialogue." Everything else is non-real time, and article 7(3) is explicit: "non-real time communications include communications made by letter or e-mail".
Article 7(5) lists the signs of a non-real time communication. It is "made to or directed at more than one recipient in identical terms", it creates a record the recipient can look at later, and it does not require the recipient "to respond immediately". A templated cold email ticks all three.
Why that matters:
Most institutional campaigns rely on article 19 of the Order. The financial promotion restriction does not apply to a communication made only to recipients the sender believes on reasonable grounds to be investment professionals.
"Investment professionals" includes "an authorised person", an exempt person where the communication relates to a controlled activity, and "a government, local authority (whether in the United Kingdom or elsewhere) or an international organisation", among others listed in article 19(5).
The conditions in article 19(4) are what your template and your list process must show:
For a cold email campaign, point 3 is the hard one. It means your list is built from firms that clearly qualify, every address is checked, a forwarded email to a private individual does not lead to an investment, and you can show how.
Article 49 is the other route for corporate audiences. It covers communications made only to bodies corporate with "a called-up share capital or net assets of not less than" £5 million (or £500,000 if the body corporate has more than 20 members), and to unincorporated associations or partnerships with "net assets of not less than £5 million".
Conditions again: the communication must include "an indication of the description of persons to whom it is directed", and "an indication that persons of any other description should not act upon it". Your list has to be filtered on the financial thresholds, which means a data source you can defend.
Article 12 disapplies the restriction for a communication made "to a person who receives the communication outside the United Kingdom" or directed "only at persons outside the United Kingdom". It is narrower for unsolicited real time communications, which must be made from outside the UK for a business carried on outside the UK.
Two cautions. First, this only answers the UK question. The country you send into has its own rules on investment marketing and on email. Second, US recipients bring FINRA and the SEC into play if you are a broker-dealer or adviser; see FINRA 2210 and the SEC Marketing Rule for prospecting emails.
If you are FCA-authorised and your email is a promotion, COBS 4.2.1R says: "A firm must ensure that a communication or a financial promotion is fair, clear and not misleading." The rule asks you to "take into account the nature of the client", and guidance at COBS 4.2.2G says it applies in a way that is "appropriate and proportionate".
For cold email, that rules out the tricks that inflate reply rates elsewhere: subject lines that hide the purpose, performance figures without context, "limited capacity" pressure. A short, plain email that says who you are and what you manage is both compliant and, in my experience, what institutional readers answer.
If you are an authorised firm, or a firm relying on article 19 or 49, this is the order of work:
PECR and UK GDPR still apply on top: identify yourself, give a valid opt-out address, honour objections permanently. The asset and wealth management page covers how this plays out for asset managers reaching institutions.
If an agency will send outbound for a regulated firm, ask:
For B2B campaigns we do run, the terms are a setup of $1,000–$3,000, then $200–$500 per qualified meeting that took place, or a flat $5,000/month. No minimum term, nothing for a no-show. Our public results so far are from PR and hospitality, not finance: PR Noir's 27 leads produced 10 qualified meetings and a $90K deal, and P1 Communications, a hospitality PR firm, got 20+ qualified meetings.
To check whether your outbound is a plain B2B campaign or a financial promotion before it goes out, book 30 minutes or email moe@roimaxi.com.
Moe Alhosni, founder, ROI Maximizer (M Ventures LTD, 4 Beau Street, Bath BA1 1QY).
About the author: Moe Alhosni, founder of ROI Maximizer. Before that he spent four and a half years in sales at Moody's in London, most recently as Assistant Director, Sales, working with banks, asset managers and private equity firms. He runs the campaigns behind the first-hand data on this site. LinkedIn
Or run the free GTM teardown on your own site for the ICP, cold email and numbers specific to your company.
ROI Maximizer is a trading name of M Ventures LTD, registered in England and Wales, company no. 15554493. Registered office: 4 Beau Street, Bath BA1 1QY, United Kingdom. moe@roimaxi.com
© 2024–2026 M Ventures LTD. Privacy notice