NASAA Form U-6, the Uniform Disciplinary Action Reporting Form, is the filing a securities regulator uses to report a disciplinary action, sanction, or disclosure event against a broker-dealer, investment adviser, agent, or other person in the Web CRD/IARD system. State securities administrators and self-regulatory organizations file it, not the firms or individuals being reported on.
The form feeds the public records that investors check before they trust someone with their money, so a single mistyped name or wrong disclosure type can attach a sanction to the wrong person or hide one that should be public. Information reported on Form U-6 that is deemed disclosable flows straight to the public through BrokerCheck and IAPD, where any investor can read it. That public reach is why regulators treat each field with care.
Here is what you will learn in this guide:
- 🧭 What Form U-6 is, who files it, and how it differs from Forms U-4 and U-5
- 🗂️ Every document and data point you need to gather before you open the form
- ✍️ A field-by-field walkthrough of the U-6 inside Web CRD, with sample entries
- 👥 Three full filing scenarios for a cease-and-desist, a revocation, and a firm fine
- ⚠️ The mistakes that attach a sanction to the wrong person and how to dodge them
What the Form Is and Who Must File It
Form U-6 is the standard form regulators use to report disciplinary actions and disclosure events against individuals and organizations in the securities industry. The North American Securities Administrators Association (NASAA) maintains it as one of the Uniform Forms used across all U.S. states and territories, and FINRA hosts the electronic version inside Web CRD and IARD. FINRA also uses the form to report final arbitration awards against broker-dealers and associated persons.
The filer is always a regulator. That means a state securities division, FINRA, or another self-regulatory organization. A broker or an advisory firm never files its own U-6. Instead, the firm has a separate duty to report the same event on its own Form BD, Form U-4, or Form U-5 once it learns of the regulator’s action.
The statute behind the form is state securities law, often a version of the Uniform Securities Act adopted by each state, paired with FINRA By-Laws and rules for SRO filings. The plain-English point is simple. State law gives the securities administrator the power to sanction a person, and the U-6 is how that sanction enters the national record. If a regulator ignores this reporting step, the public record stays incomplete and an investor may trust a person who has already been barred elsewhere.
A common misconception is that the U-6 is a court filing. It is not. It is an administrative reporting form filed inside a regulatory database, and it carries no filing fee. The agency that receives it is FINRA, acting as the operator of Web CRD/IARD on behalf of the states and SROs.
Before You Start: Documents and Information You Need
Gather every fact about the action before you open the form, because Web CRD runs a completeness check at submission and will block a filing that is missing required data. A pending U-6 also self-deletes after 60 days, so you do not want to start the form and then hunt for documents. Below is the pre-filing checklist.
- The final order, consent agreement, or decision. This is the source document for dates, sanctions, and the conduct described, and without it the narrative fields will be wrong.
- The subject’s full legal name. A name that does not match the CRD record can attach the action to the wrong person or create a duplicate record.
- The subject’s CRD number, if one exists. This is the single most reliable way to tie the filing to the right individual or firm.
- The subject’s Social Security Number and date of birth. You need these to create a new CRD record for a non-registered individual who has never been in the system.
- The firm’s CRD/IARD number, for an organization filing. This routes the disclosure to the correct entity and to firms that must then report it.
- The action’s effective date and the date initiated. Wrong dates distort the timeline investors see on BrokerCheck.
- The sanction details. Note fines, bars, suspensions, revocations, and any monetary amounts so the disclosure shows the true penalty.
- The statute or rule violated. This supports the allegations field and shows the legal basis for the action.
- The correct DRP type. Knowing whether the event is regulatory, criminal, civil, or another category before you start prevents a wrong-page filing.
If any item is missing, stop and find it. A filing built on guesses can defame a registered person or, worse, leave a real threat off the public record.
Where to Get the Form and How to Access It
Form U-6 is not a paper form you download, fill in, and mail. It lives inside Web CRD and IARD, and only entitled regulatory users can open it. You can view blank PDF samples of the Form U-6 for an individual and the organization version on FINRA’s Form U6 page, which is useful for training and for planning your answers.
To reach the live form, entitled users log in to Web CRD at crd.finra.org with a user name and password. There are two paths once you are inside. You can click the Forms tab on the toolbar, then choose U6 Form from the sub-menu, then click the correct U6 filing type. Or you can open the Web CRD or IARD Site Map and click the link for the desired filing type directly.
You then choose Create New U6 Filing, which gives you two filing-type options. CRD Individual is for a person who is or was registered, or for a never-registered person whose record you create using their SSN and date of birth. CRD/IARD Organization is for a firm that is or was registered.
A nuance to remember is that the old Disclosure Only U6 path for non-industry individuals and firms was retired on October 1, 2017. Regulators now create CRD records for non-registered subjects of action directly. A misconception is that you need a separate login for IARD actions. The same entitled CRD/IARD credentials cover both, so you do not need a second account.
Step-by-Step: How to Fill Out Form U-6 Line by Line
The U-6 is organized around three core building blocks inside Web CRD: the Filing Type choice, the Subject of Action section, and one or more Disclosure Reporting Pages (DRPs). Each block below gets its own walkthrough. Use the exact labels shown on screen, and remember that the system pre-populates data when a CRD record already exists.
1. Select the Filing Type (CRD Individual or CRD/IARD Organization)
This first choice tells the system whether you are reporting on a person or a firm. In plain English, the form asks, “Is the subject of this action a human being or a business entity?”
To answer it, choose Create New U6 Filing, then click either CRD Individual or CRD/IARD Organization. Pick CRD Individual for an agent, an investment adviser representative, or any natural person. Pick CRD/IARD Organization for a broker-dealer or an advisory firm.
For example, a state examiner reporting a fine against the brokerage Coastal Securities LLC selects CRD/IARD Organization, while an examiner barring the agent Daniel Reyes selects CRD Individual.
A common edge case is the never-registered person. If Daniel Reyes has no CRD record because he sold securities without a license, you still choose CRD Individual and create a new record using his SSN and date of birth.
The most common mistake here is choosing the organization type when the action targets a single person inside the firm. The consequence is that the sanction attaches to the firm’s record instead of the individual’s, which can wrongly stain the firm and leave the real bad actor clean. A misconception is that you must wait for a firm to register the person first. You do not, because the form lets you build the individual record yourself.
2. Search for and Confirm the Subject of Action
This step pins the filing to the exact person or firm. The form asks, “Who is this disciplinary action about, and do they already exist in the system?”
To answer it, run a search from the Individual Search Results or Organization Search Results screen and select the matching record. For an individual with no existing record, enter the SSN and Date of Birth, then click Create New ID to generate a new CRD number and open the form.
For example, an examiner types CRD number 5821934 and confirms the record belongs to Daniel Reyes, born 07/22/1984, before going further.
The edge case to watch is two people with the same name. John A. Smith and John B. Smith may both appear, so you confirm the date of birth and any prior firm before you select.
The most damaging mistake on this entire form is selecting the wrong record. The direct consequence is that you publish a sanction against an innocent person who shares a name, which can end their career and expose your agency to a defamation claim. A misconception is that the search bar matches only exact spellings. It returns close matches too, which is exactly why you must verify the CRD number, SSN, or date of birth rather than trusting the name alone.
3. Enter Optional Subject Data in the U6 Subject of Action Section
This section captures extra identifying detail about the subject. The form asks for additional data points that help confirm identity and route the disclosure, and many of these fields pre-populate when a record exists.
To answer it, add any optional data you have in the U6 Subject of Action fields. The system fills in known values, and you supply anything missing, such as a current address or alternate name.
For example, the examiner adds that Daniel Reyes also did business as “Reyes Wealth Advisors” so the record links his alias to the action.
An edge case is the subject with a P.O. Box and no street address. You enter the mailing address you have rather than leaving the field blank, because partial location data still helps confirm identity.
A common mistake is dumping account numbers or a full SSN into a narrative field. The consequence is that personal data leaks into a record that may become public, so you follow FINRA guidance to use only non-identifying terms in narrative answers. The misconception is that every optional field must be filled. It does not, but accurate optional data reduces the chance of a mismatch later.
4. Select the Correct DRP Type
The Disclosure Reporting Page is the heart of the filing, and choosing its type sorts the event into the right category. The form asks, “What kind of event are you reporting?”
To answer it, select DRPs from the Navigation Bar, read the DRP Instructions, and choose the DRP type that matches your action. Categories include regulatory action, criminal, civil judicial, and others. Match the type to the document in front of you.
For example, a state cease-and-desist order is a Regulatory Action DRP, while a felony conviction tied to securities fraud is a Criminal DRP.
The edge case is an action that touches more than one category, such as a regulatory order that also imposes a civil penalty. You may need more than one DRP, each describing its own facet of the event.
The most common mistake is filing a civil event on a regulatory page or the reverse. The consequence is that the disclosure displays under the wrong heading on BrokerCheck and may not match the firm’s own report, which triggers confusion and follow-up. A misconception is that all government actions are “regulatory.” A court-ordered judgment is civil judicial, not regulatory, even though a government agency brought it.
5. Create a New DRP or Edit an Existing One
This step decides whether you are opening a fresh disclosure or updating one already on file. The form asks, “Is this a brand-new event, or more detail on an event already reported?”
To answer it, click Create New to report a new event and complete the DRP. If you are adding details or a final disposition to an event already in the system, click the Edit link next to the original occurrence and update that DRP instead.
For example, an examiner who earlier reported a pending cease-and-desist now clicks Edit to record that the order became final on 04/10/2026, rather than starting over.
The edge case is a settlement that resolves a previously reported pending matter. You edit the original DRP to show the settlement terms, keeping the event as one continuous record.
The most common mistake here is creating a duplicate DRP for an event that already exists. The consequence is that BrokerCheck shows the same sanction twice, making a person look worse than the facts support and forcing a later correction. The misconception is that each update needs its own page. The opposite is true, because updates belong on the original DRP through the Edit function.
6. Complete the DRP Narrative and Allegations
This is where you describe what happened in words. The page asks for the allegations, the sanctions, the dates, and the current status of the action.
To answer it, enter the conduct, the statute or rule violated, the sanction imposed, the date initiated, and the resolution. Write dates in the format the screen requests and keep the narrative factual and free of personal identifiers.
For example, the examiner writes that Daniel Reyes “offered and sold unregistered securities in violation of state law; the Division ordered him to cease and desist and imposed a $25,000 penalty on 04/10/2026.”
An edge case is an action still under appeal. You note the current status as pending appeal rather than final, so the record reflects that the matter is not closed.
The most common mistake is a vague narrative that omits the sanction amount or the rule violated. The consequence is that the firm cannot match the event on its own U-4 or U-5, and the public record understates the penalty. A misconception is that more detail is always safer. Narrative fields should stay precise and avoid account numbers or SSNs, which protects personal information that could otherwise go public.
7. Run the Completeness Check and Submit the Filing
The final step locks in the filing. The system asks, in effect, “Is everything required actually here?”
To answer it, select Submit Filing from the navigation panel. Web CRD runs an automatic completeness check. If the filing fails, the screen shows the error location and error description, and clicking the error location jumps you to the field to fix. Once it passes, a second Submit Filing button appears in the middle of the page; clicking it submits the filing and displays a success message. Click OK to return to the creation page.
For example, the examiner sees an error flag on a blank sanction date, clicks the link, enters 04/10/2026, and the second Submit button then appears.
An edge case is a filing you cannot finish in one sitting. It stays under Pending U6 Filings for up to 60 days, after which the system deletes it permanently.
The most common mistake is treating the first Submit click as final. The consequence is an unsubmitted filing that quietly expires after 60 days, leaving the action unreported. A misconception is that submission can be undone. Once submitted, a U-6 becomes part of the record and corrections must come through a new or edited DRP, not a deletion.
Three Filled-Out Examples Using Real Scenarios
The scenarios below show how three regulators move through the form from start to finish. Each person and firm is fictitious and used only to illustrate the fields.
Scenario 1: State administrator reports a cease-and-desist against an unregistered individual. Maria Lopez, an examiner at a state securities division, is reporting against Daniel Reyes, who sold unregistered notes without a license and has no CRD record.
| Form Section | What Maria Enters |
|---|---|
| Create New U6 Filing | Selects CRD Individual |
| Subject search | No record found; enters SSN and DOB 07/22/1984 |
| Create New ID | Clicks to generate a new CRD number for Daniel Reyes |
| U6 Subject of Action | Adds alias “Reyes Wealth Advisors” |
| DRP Type | Selects Regulatory Action DRP |
| New or Edit | Clicks Create New |
| Narrative/Allegations | Offered unregistered securities; ordered to cease and desist |
| Sanction | $25,000 penalty; effective 04/10/2026 |
| Submit | Passes completeness check, clicks second Submit Filing |
Scenario 2: Regulator reports a revocation of a registered agent. James Carter, a state examiner, revokes the registration of agent Priya Nair (CRD 6420817) for misappropriating client funds.
| Form Section | What James Enters |
|---|---|
| Create New U6 Filing | Selects CRD Individual |
| Subject search | Enters CRD 6420817, confirms Priya Nair |
| U6 Subject of Action | Confirms pre-populated address and firm history |
| DRP Type | Selects Regulatory Action DRP |
| New or Edit | Clicks Create New |
| Narrative/Allegations | Misappropriated client funds in violation of state law |
| Sanction | Registration revoked; barred from the industry |
| Date initiated | 03/15/2026 |
| Submit | Corrects one error flag, then submits |
Scenario 3: Regulator fines a broker-dealer firm. Coastal Securities LLC (CRD 148302) failed to supervise its agents, and examiner Robert Chen reports a monetary fine.
| Form Section | What Robert Enters |
|---|---|
| Create New U6 Filing | Selects CRD/IARD Organization |
| Subject search | Enters CRD 148302, confirms Coastal Securities LLC |
| U6 Subject of Action | Verifies pre-populated firm name and main address |
| DRP Type | Selects Regulatory Action DRP |
| New or Edit | Clicks Create New |
| Narrative/Allegations | Failure to supervise registered agents |
| Sanction | $100,000 fine and censure |
| Date initiated | 02/28/2026 |
| Submit | Passes completeness check and submits |
How to File the Completed Form
Form U-6 has a single filing channel, and that is electronic submission inside Web CRD/IARD. There is no mail, fax, or in-person option, because the form exists only inside the database. This keeps every disclosure in one searchable national record.
To file, you log in at crd.finra.org with entitled regulatory credentials, build the filing through the steps above, and click Submit Filing twice once it clears the completeness check. There is no filing fee for a U-6, since regulators file it as part of their official duties rather than as a paid service.
For proof of filing, use Print Preview, choose All Sections from the Navigation Bar, click the Printer Friendly icon, and print or save the full filing for your records. You can also retrieve any submitted filing later under Historical U6 Filings, search by filing type and identifying data, and view it section by section or in redline mode through View Changes from Previous Filing.
If you need help during the process, FINRA’s Regulatory User Support line is reachable at 240-386-4242, from 9 a.m. to 5 p.m. Eastern, Monday through Friday. Keep the printed copy and the filing ID, because they are your evidence that the action entered the record on the date you submitted it.
What Happens After You File
Once you submit a U-6, the information that is deemed disclosable becomes available to the public through BrokerCheck and IAPD. That means investors, employers, and other regulators can read the sanction within the public record, so the filing has immediate real-world weight.
The firm tied to the subject also receives a notification. When a regulator files a U-6 about a firm, a current registered individual, or a former individual, the firm can access the reported details and then has its own duty to report the matter on a Form BD, Form U-4, or Form U-5. This is how a regulator’s action triggers the firm’s separate reporting obligation.
Your submitted filing then lives in the system. You can view or print it anytime through Historical U6 Filings, and any later update flows through an Edit to the original DRP rather than a fresh page. If the event was pending and later becomes final, you return and record the final disposition so the public record stays current and accurate.
Mistakes to Avoid When Filling Out the Form
- Selecting the wrong subject record; the sanction attaches to an innocent person who shares a name.
- Choosing the organization filing type for an individual’s action; the firm gets stained instead of the real actor.
- Creating a duplicate DRP for an existing event; BrokerCheck shows the same sanction twice.
- Picking the wrong DRP type; the disclosure displays under the wrong category and confuses readers.
- Leaving the sanction amount out of the narrative; the public record understates the penalty.
- Entering a wrong effective or initiated date; the timeline investors see becomes inaccurate.
- Putting SSNs or account numbers in narrative fields; personal data may leak into a public record.
- Treating the first Submit click as final; the filing expires unsubmitted after 60 days.
- Failing to record a final disposition; the record shows a stale “pending” status forever.
- Misspelling the subject’s legal name; the system may create a duplicate or unmatched record.
- Skipping the CRD number when one exists; you risk linking the action to the wrong file.
- Ignoring the completeness-check error links; you submit a filing with blank required fields.
Do’s and Don’ts
Do’s
- Do verify the subject’s CRD number, SSN, or date of birth before selecting a record, because identity errors are the costliest mistakes on the form.
- Do read the DRP Instructions before choosing a DRP type, so the event lands in the right category.
- Do edit an existing DRP for updates, because that keeps a single event as one clean record.
- Do print or save the full filing through Print Preview, since that is your proof the action was reported.
- Do record the final disposition once an action concludes, so the public record reflects the true outcome.
- Do use non-identifying language in narrative fields, because those answers can become public.
Don’ts
- Don’t create a new DRP to update an event, because duplicates make a person look worse than the facts allow.
- Don’t enter account numbers or full SSNs in narrative boxes, since that exposes private data.
- Don’t rely on name matches alone, because close-match searches can surface the wrong person.
- Don’t leave a filing pending past 60 days, because the system deletes it without warning.
- Don’t assume submission can be reversed, since corrections must come through a new or edited DRP.
- Don’t guess at dates or sanction amounts, because firms cross-check these against their own filings.
Filing on Your Own vs. With Help
Regulators rarely file a U-6 truly alone, since most agencies pair the examiner who knows the case with legal review before submission. The trade-offs below compare handling the filing internally versus routing it through legal counsel or a compliance specialist.
Pros of filing it yourself (the case examiner)
- You know the facts firsthand, so the narrative is accurate.
- You can file fast once the order is final, reducing public-record delay.
- You avoid hand-off errors that come from explaining the case to someone else.
- You learn the system, which speeds up future filings.
- You keep full control of how the sanction is described.
Cons of filing it yourself
- You may miss a legal nuance that affects the DRP type.
- You risk identity-match errors without a second reviewer.
- You carry sole responsibility if the wrong record is selected.
- You may overlook personal-data rules in narrative fields.
- You have no built-in check before the irreversible submission.
Form U-6 vs. U-4 vs. U-5
These three Uniform Forms are easy to confuse because they share a database, but each has a different filer and purpose.
| Form and Filer | Purpose |
|---|---|
| Form U-6 (filed by regulators) | Reports a disciplinary action or disclosure event against a person or firm |
| Form U-4 (filed by firms) | Registers or amends the record of an individual joining the industry |
| Form U-5 (filed by firms) | Reports the termination of an individual’s registration with a firm |
The key relationship is that a regulator’s U-6 often triggers a firm’s duty to update its U-4 or file matching detail, so the forms work together. A firm never files a U-6, and a regulator never files a U-4 or U-5.
FAQs
Who files Form U-6?
Yes, only regulators file it. State securities administrators, FINRA, and other self-regulatory organizations submit Form U-6 to report disciplinary actions, while firms report the same events on their own forms.
Is there a filing fee for Form U-6?
No, there is no fee. Regulators file the form as part of their official duties through Web CRD/IARD, so no payment is required to submit a U-6.
Can a broker-dealer or adviser file its own U-6?
No, firms cannot file a U-6. They report disclosure events on Form BD, Form U-4, or Form U-5 after a regulator’s U-6 notifies them of the action.
Does Form U-6 information become public?
Yes, disclosable information goes public. Details deemed disclosable appear on BrokerCheck and the IAPD website, where investors and employers can review them.
Do I choose CRD Individual or CRD/IARD Organization for a single agent?
Yes, choose CRD Individual for a single agent. The Organization type is only for a firm, so picking it for one person attaches the sanction to the wrong record.
What if the subject has never been registered in Web CRD?
Yes, you can still file. Choose CRD Individual, enter the person’s SSN and date of birth, and click Create New ID to build a new CRD record.
Should I create a new DRP to add a final disposition?
No, do not create a new DRP. Click the Edit link next to the original occurrence and update that DRP, because a duplicate shows the event twice on BrokerCheck.
Which DRP type do I pick for a court judgment?
No, it is not a regulatory DRP. A court-ordered judgment is a civil judicial DRP, even when a government agency brought the case to court.
Can I put account numbers in the narrative fields?
No, never enter account numbers. Use non-identifying terms in narrative answers, because the disclosure may become public and personal data must stay protected.
How long can a U-6 filing stay pending?
Yes, up to 60 days. A filing left under Pending U6 Filings past 60 days is automatically deleted by the system and cannot be recovered.
Is the Disclosure Only U6 path still available?
No, it was retired. The Disclosure Only U6 functionality for non-industry individuals and firms ended October 1, 2017, and regulators now create CRD records directly.
Can I undo a U-6 once I submit it?
No, you cannot reverse it. A submitted U-6 becomes part of the record, and any correction must come through a new filing or an edit to the existing DRP.
How do I keep proof that I filed?
Yes, use Print Preview. Select All Sections, click the Printer Friendly icon, and print or save the full filing; you can also retrieve it later under Historical U6 Filings.
Who do I call for help with Web CRD?
Yes, call Regulatory User Support. FINRA staffs the line at 240-386-4242 from 9 a.m. to 5 p.m. Eastern, Monday through Friday, for Web CRD filing questions.
Related reading
- How to Fill Out SEC Form U4 (w/Examples) + FAQs
- How to Fill Out SEC Form U5 (w/Examples) + FAQs
- How to Fill Out NASAA Form U-1 (w/Examples) + FAQs
- How to Fill Out NASAA Form U-2A (w/Examples) + FAQs
- How to Fill Out NASAA Form U-4 (w/Examples) + FAQs
- How to Fill Out NASAA Form U-5 (w/Examples) + FAQs
- How to Fill Out SEC Form S-1 (w/Examples) + FAQs