The Fiduciary Reckoning, Part II: The Public Record on Morgan Stanley
A note on this series
In Part I, The Fiduciary Reckoning, Part I: The Public Record on Wells Fargo, we walked the public regulatory record of Wells Fargo from September 2016 through March 2026.1 Eight years of Federal Reserve enforcement. Six federal agencies. More than $8 billion in penalties and consumer redress. One word still on the marketing materials: fiduciary.
Part II turns to Morgan Stanley.
This is not a series about individuals at any firm. It is a series about a structural problem the industry has built around a word it has been allowed to dilute. The series' premise from Part I holds: when firm revenue depends on something other than client outcomes, the regulatory record becomes the predictable output of the structure, not its failure. Each installment walks one firm's public record. The cumulative case is the case.
A reader picking up the series here can do so without having read Part I. The argument restates each time. The receipts are what change.
The same structural question
The structural distinction at the heart of this series is between two regulatory regimes. Investment Adviser Representatives — IARs — operate under the Investment Advisers Act of 1940 and a true fiduciary duty of loyalty and care. Broker-dealer registered representatives operate under FINRA and Regulation Best Interest, which is a "best interest" standard, not a fiduciary one, and which explicitly contemplates substantial conflicts of interest provided they are disclosed.
Most "advisors" at the major wirehouses, including Morgan Stanley, are dual-registered. The same person operates under both regimes depending on which kind of account is being discussed and which kind of transaction is being executed. The client cannot tell which standard governs a given conversation. The firm's compensation structure does not depend on the client being able to tell.
This is the structural problem. The public regulatory record is what the structure produces.
The wealth management record (2020–2025)
Failure to supervise — December 2024
On December 9, 2024, the Securities and Exchange Commission charged Morgan Stanley Smith Barney LLC with failing to supervise four of its financial advisors who, over a seven-year period, collectively misappropriated approximately $10 million from advisory client and brokerage customer accounts through hundreds of unauthorized Automated Clearing House transfers and wire transfers to themselves or for their personal benefit.2
The advisors were named in the SEC's order: Michael Carter, Chingyuan "Gary" Chang, Douglas McKelvey, and Jesus Rodriguez. The conduct ran from at least 2015 through July 2022.
The central supervisory failure is unusual in its specificity. Until at least December 2022, Morgan Stanley Smith Barney had no policy or procedure to screen externally-initiated ACH payment instructions to detect when the named beneficiary on a payment matched the name of the financial advisor assigned to the account. The control did not exist. The firm agreed to a $15 million penalty, a censure, a cease-and-desist order, and an independent compliance consultant review of all forms of third-party cash disbursements from customer and client accounts.
The SEC's Acting Director of Enforcement, Sanjay Wadhwa, said in the announcement: "Safeguarding investor assets is a fundamental duty of every financial services firm, but MSSB's supervisory and compliance policy failures let its financial advisors make hundreds of unauthorized transfers from their customer and client accounts and put many other such accounts at significant risk of harm."
Wadhwa is the same enforcement official quoted in Part I's coverage of the January 2025 coordinated cash sweep proceeding that charged Wells Fargo Advisors and Merrill Lynch in the same order. The framing of the regulatory concern across the two installments is not editorial selection. It is articulated by the SEC's own enforcement leadership.
Customer data disposal — September 2022
On September 20, 2022, the SEC announced that Morgan Stanley Smith Barney would pay $35 million to settle charges of extensive failures to safeguard the personal identifying information of approximately 15 million customers.3
The conduct ran from 2015 onward. During a 2016 data center decommissioning project, Morgan Stanley Smith Barney hired a moving and storage company with no experience or expertise in data destruction services. That vendor resold thousands of devices on internet auction sites with unencrypted customer information still on them — account numbers, Social Security numbers, passport numbers, asset values, and holdings data. A records reconciliation undertaken by the firm during the decommissioning revealed that 42 servers were missing, all potentially containing unencrypted customer PII. The local devices being decommissioned had been equipped with encryption capability, but the firm had failed to activate the encryption software for years.
In 2017, an Oklahoma IT consultant emailed Morgan Stanley to inform the firm that he had purchased its hard drives — full of customer data — on an internet auction site.
The SEC's then-Director of Enforcement, Gurbir S. Grewal, described the conduct: "MSSB's failures in this case are astonishing. Customers entrust their personal information to financial professionals with the understanding and expectation that it will be protected, and MSSB fell woefully short in doing so."
The $35 million SEC penalty sat on top of an earlier $60 million Office of the Comptroller of the Currency penalty and a $68.2 million private class action settlement. The aggregate cost to the firm, across enforcement and litigation, was approximately $163 million. Court filings allege that the underlying decision — replacing a qualified vendor with an unqualified one — was driven by a goal of saving approximately $100,000.
Recordkeeping — September 2022
On September 27, 2022, the SEC announced settlements with fifteen broker-dealers and one investment adviser for widespread and long-standing failures by employees, including senior personnel, to preserve business communications conducted on personal devices and unapproved messaging platforms. The aggregate penalties totaled $1.1 billion. Morgan Stanley & Co. LLC, together with Morgan Stanley Smith Barney LLC, paid $125 million — among the highest individual firm penalties in the sweep.4 A parallel Commodity Futures Trading Commission action added $75 million, bringing Morgan Stanley's total to $200 million.
The conduct period ran from January 2018 through September 2021. Employees, including senior personnel, routinely communicated about business matters using personal devices and unapproved platforms — WhatsApp and similar — where the messages were not preserved as required by Section 17(a) of the Exchange Act and Rule 17a-4(b)(4). The firm's own policies prohibited the practice. Enforcement of those policies was inadequate.
Misleading wrap fee disclosures — May 2020
On May 12, 2020, the SEC settled charges that Morgan Stanley Smith Barney provided misleading information to retail wrap fee clients about trade execution services and transaction costs.5 In a wrap fee program, clients pay a single asset-based fee covering investment advice and brokerage execution; the implicit promise is that the all-in cost is captured in that single fee. The SEC found that Morgan Stanley Smith Barney clients were not adequately informed that sub-advisers in the program were directing trades to broker-dealers other than Morgan Stanley Smith Barney — "trading away" — and that this practice generated additional, undisclosed transaction costs that the clients ultimately bore.
The firm agreed to pay a $5 million penalty distributed to harmed investors and consented to a cease-and-desist order. The SEC found violations of Sections 206(2) and 206(4) of the Investment Advisers Act and Rule 206(4)-7 thereunder.
Cash sweep — investigated, then closed (April 2024 – May 2025)
The most structurally revealing entry in Morgan Stanley's recent wealth management record is not an enforcement action. It is a sequence of disclosures in the firm's own SEC filings.
In April 2024, the SEC's Division of Enforcement began requesting information from Morgan Stanley regarding advisory account cash balances swept to affiliated bank deposit programs and compliance with the Investment Advisers Act of 1940. Morgan Stanley disclosed the inquiry in its August 2024 quarterly filing.6
During the active investigation, Morgan Stanley raised the interest rate it pays advisory clients on uninvested cash. The advisory sweep rate moved from 0.01% to approximately 2%, effective August 1, 2024. The firm's Chief Financial Officer attributed the change to "changing competitive dynamics" in remarks to analysts.
In May 2025, Morgan Stanley disclosed in its next quarterly filing that the SEC had formally concluded the investigation without recommending enforcement action.7
The same conduct under SEC investigation at Morgan Stanley produced enforcement against Wells Fargo Advisors and Merrill Lynch in the coordinated January 2025 proceeding covered in Part I — $60 million in civil penalties, plus a separate $18 million action against LPL Financial. Morgan Stanley's investigation closed under a new administration with no parallel enforcement.
The structural question the rate change asks remains unanswered. Either 0.01% reflected an acceptable practice — in which case the firm cannot explain the change by reference to fiduciary duty, since fiduciary duty does not produce a 200-fold rate adjustment in response to competitive pressure — or 0.01% did not reflect an acceptable practice, in which case the prior period requires its own accounting. State-level investigations and class action lawsuits remain ongoing as of this writing.
The broader institutional record (2014–2024)
The wealth management record above is one part of the picture. The broader regulatory record at Morgan Stanley's investment banking and capital markets divisions adds context to the structural argument: the same firm operates across multiple businesses, each with its own enforcement record, all under the same corporate umbrella that markets itself as fiduciary to wealth management clients.
Block trading fraud — January 2024
On January 12, 2024, the SEC and the U.S. Attorney's Office for the Southern District of New York announced a coordinated resolution with Morgan Stanley totaling $249 million.8 Morgan Stanley entered into a three-year non-prosecution agreement with the U.S. Attorney's Office in which the firm admitted responsibility for its employees' actions.
The conduct period ran from June 2018 through August 2021. Pawan Kumar Passi, the former head of Morgan Stanley's U.S. equity syndicate desk, and a subordinate disclosed to select buy-side investors non-public, potentially market-moving information about pending block trades — large privately-negotiated stock sales — that Morgan Stanley had been invited to bid on or was actively negotiating with selling shareholders. Those buy-side investors used the information to "pre-position" by taking short positions in the relevant stocks ahead of the block sales, then covered their shorts with allocations from Morgan Stanley after the trades executed.
The SEC found that this conduct generated more than $138 million in illicit profits across 28 transactions. The selling shareholders — who had asked for confidentiality — bore the cost in the form of executed prices worse than they would otherwise have received.
Gurbir Grewal's framing: "Despite assuring selling shareholders that they would keep their efforts to sell large blocks of stock confidential, Morgan Stanley and Pawan Passi instead leaked that material non-public information to mitigate their own risk, win more block trade business, and generate over a hundred million dollars in illicit profits."
Residential mortgage-backed securities — February 2016
On February 11, 2016, the Department of Justice announced that Morgan Stanley would pay $2.6 billion to resolve federal claims related to the firm's marketing, sale, and issuance of residential mortgage-backed securities between 2005 and 2007.9 Parallel state settlements with New York and Illinois added another $572.5 million, bringing the total to $3.2 billion.
In the settlement's Statement of Facts, Morgan Stanley formally acknowledged that it failed to disclose critical information to investors about the quality of the subprime mortgage loans underlying the RMBS it marketed. Morgan Stanley represented to investors that it did not securitize underwater loans — loans exceeding the value of the underlying property — but did not disclose that in April 2006 the firm had expanded its "risk tolerance" to purchase and securitize loans regardless.
The Statement of Facts includes a May 2006 internal email from the head of Morgan Stanley's mortgage valuation due diligence team to a colleague:
"please do not mention the 'slightly higher risk tolerance' in these communications. We are running under the radar and do not want to document these types of things."
This is the firm's own acknowledgment in a federal Statement of Facts, not journalism. Smoking-gun internal communications of this clarity rarely make it into the public record in a primary-source-citable form. The line is reproduced here because no paraphrase carries the same weight.
The 2016 DOJ resolution was part of an aggregate of approximately $5 billion in Morgan Stanley RMBS-related settlements through the RMBS Working Group of state and federal regulators.
FHFA mortgage-backed securities — February 2014
On February 4, 2014, Morgan Stanley announced a $1.25 billion settlement with the Federal Housing Finance Agency, acting as conservator for Freddie Mac and Fannie Mae, to resolve litigation in the Southern District of New York alleging misrepresentation of the underwriting characteristics and credit quality of RMBS sold to the two government-sponsored enterprises before the 2008 financial crisis.10 This action anchors the early end of the period covered by Part II.
A note on what this article does not cover
Morgan Stanley's regulatory history extends earlier than the 2014 starting point of this article. The 2003 Global Research Analyst Settlement, in which Morgan Stanley was one of ten investment firms that paid into an aggregate $1.4 billion to resolve enforcement actions concerning conflicts of interest between equity research analysts and investment banking personnel, is the most prominent earlier example.11 The settlement is documented and the firm's participation is a matter of public record. It is mentioned here so the reader cannot fairly argue that this article cherry-picks a recent window of an otherwise unblemished history. The structural argument the series makes does not depend on pre-2014 material; the body of this article focuses on the past twelve years.
The pattern
Twelve years. Multiple federal agencies — SEC, DOJ, OCC, CFTC, FHFA — plus state regulators in New York, Illinois, and elsewhere. Approximately $5 billion in documented federal and state enforcement and settlement, excluding private litigation, state attorney general investigations not separately enumerated, and the open class-action cash sweep litigation. One non-prosecution agreement, one Statement of Facts acknowledged in writing by the firm, one independent compliance consultant required.
The conduct categories the record covers: failure to supervise advisors who stole client money, failure to safeguard customer data covering 15 million clients, failure to preserve required business communications, misleading retail clients about wrap fee execution costs, capital markets fraud admitted to in writing, mortgage securities fraud admitted to in writing, and — outside the formal enforcement column but inside the public record — an SEC cash sweep investigation that closed without action after the firm raised the rate it pays clients on uninvested cash by a factor of two hundred during the investigation itself.
What this record does not contain is any pattern of conduct that the structural model — broker-dealer revenue capture inside an enterprise that also markets itself as a fiduciary — would predict against. The pattern is the pattern.
The same word still appears on the marketing materials. The structural distinction Part I drew — the fiduciary standard governs only some of the conversation when the same employee operates under two regulatory regimes — is the distinction the record continues to illustrate.
What this means for the series
Part I of the Fiduciary Reckoning argued that the regulatory record of the major wirehouses is the predictable output of a business model in which the firm's revenue depends on something other than client outcomes. Part II extends that argument to Morgan Stanley.
Parts III through V will cover Merrill Lynch, Goldman Sachs, and JPMorgan Chase. An optional Part VI will offer the synthesis: what the cumulative record across five firms shows about the structural model, the BD-vs-RIA distinction, and what a wealth management firm built differently looks like.
Fiduciary rhetoric is a marketing layer. The structure is what governs. The receipts continue.
This material is educational and reflects our analytical framework based on the public regulatory record. It is not a recommendation to buy, sell, or hold any security. Past regulatory action does not predict future conduct or performance. Information presented is drawn from primary regulatory sources cited in the footnotes and represents the public record as of the date of publication.
Commons Capital is a fee-only Registered Investment Adviser regulated under the Investment Advisers Act of 1940. We have no broker-dealer arm, no proprietary products, no commission incentives. This series reflects our editorial position on the structural model underlying the major wirehouses and the meaning of fiduciary duty.
1. Commons Capital. "The Fiduciary Reckoning, Part I: The Public Record on Wells Fargo." May 2026. https://www.commonsllc.com/insights/the-fiduciary-reckoning-part-i-the-public-record-on-wells-fargo
2. U.S. Securities and Exchange Commission. "SEC Charges Morgan Stanley Smith Barney for Policy Deficiencies that Resulted in Failure to Prevent and Detect its Financial Advisors' Theft of Investor Funds." Press Release 2024-193. December 9, 2024. https://www.sec.gov/newsroom/press-releases/2024-193
3. U.S. Securities and Exchange Commission. "Morgan Stanley Smith Barney to Pay $35 Million for Extensive Failures to Safeguard Personal Information of Millions of Customers." Press Release 2022-168. September 20, 2022. https://www.sec.gov/newsroom/press-releases/2022-168
4. U.S. Securities and Exchange Commission. "SEC Charges 16 Wall Street Firms with Widespread Recordkeeping Failures." Press Release 2022-174. September 27, 2022. https://www.sec.gov/news/press-release/2022-174
5. U.S. Securities and Exchange Commission. "SEC Charges Morgan Stanley Smith Barney With Providing Misleading Information to Retail Clients." Press Release 2020-109. May 12, 2020. https://www.sec.gov/newsroom/press-releases/2020-109
6. Morgan Stanley. Form 10-Q for the quarterly period ended June 30, 2024, filed with the SEC August 2024. Disclosure of SEC information request regarding advisory cash sweep practices.
7. Morgan Stanley. Form 10-Q for the quarterly period ended March 31, 2025, filed with the SEC May 6, 2025. Disclosure of SEC closure of cash sweep investigation without enforcement action.
8. U.S. Securities and Exchange Commission. "SEC Charges Morgan Stanley and Former Executive Pawan Passi with Fraud in Block Trading Business." Press Release 2024-6. January 12, 2024. https://www.sec.gov/newsroom/press-releases/2024-6
9. U.S. Department of Justice. "Morgan Stanley Agrees to Pay $2.6 Billion Penalty in Connection with Its Sale of Residential Mortgage Backed Securities." February 11, 2016. https://www.justice.gov/opa/pr/morgan-stanley-agrees-pay-26-billion-penalty-connection-its-sale-residential-mortgage-backed
10. Morgan Stanley. Form 8-K filed with the SEC February 4, 2014. Disclosure of $1.25 billion settlement in principle with the Federal Housing Finance Agency, S.D.N.Y., Case No. 11 Civ. 6739. https://www.sec.gov/Archives/edgar/data/0000895421/000095010314000764/dp43592_8k.htm
11. U.S. Securities and Exchange Commission. "Ten of Nation's Top Investment Firms Settle Enforcement Actions Involving Conflicts of Interest Between Research and Investment Banking." Press Release 2003-54. April 28, 2003. https://www.sec.gov/news/press/2003-54.htm
