FINAL Reminder - FINRA TRAQS Multi-Factor Authentication (MFA) Production Access

On December 31, 2025, FINRA will discontinue the use of SMS and voice authentication as multi-factor authentication (MFA) methods for access to TRAQS and API Reference Data files.

Users who currently rely on SMS or voice authentication to access TRAQS or the API must enroll in one of the following authentication methods to continue to get service:

• Google Authenticator;
• Okta Verify (Mobile);
• Okta Verify Desktop (FastPass using feature such as Windows Hello); or
• Federated Single Sign-on (SSO).

A dedicated Multi-factor Guide and MFA Web Help page are available for reference and should be reviewed carefully to understand the new offerings and process.

Users should use these references when preparing for the sunset of SMS and Voice MFA methods; please note that setups are required for each environment users need to access; test (NTF) and production:

• New users, meaning clients who have never enrolled in any MFA method need to establish an account first and should follow the directions listed in section 1 of the MFA User Guide. They can then choose one of the security methods that will continue beyond December 31, 2025.
• Existing users, meaning clients who currently use SMS, Voice, or any other MFA authentication method, and who need to establish a new security preference method(s) should reference section 2 "How to Add a Security Method(s)" of the MFA User Guide, and follow the prompts when adding the new method. These users simply can edit their security preferences by adding one of the methods and following the prompts on the menu.

FINRA will fully discontinue the use of SMS and voice authentication after the close of business on Wednesday, December 31, 2025.

Please contact FINRA Client and System Management with questions regarding this notice.