If you send a pitch deck or investment memorandum to someone who does not actually meet the exemption you relied on, you may have breached section 21 of the Financial Services and Markets Act 2000, which is a criminal offence with real consequences, not a paperwork slip you tidy up afterwards. This article covers what that exposure actually looks like, why "we only meant to send it to sophisticated investors" is not itself a control, and what genuine recipient control looks like in practice. It is the consequence piece to our companion guide on when a pitch deck becomes a financial promotion, and like that article, it carries a plain specialist-review recommendation throughout, rather than repeating the clause-by-clause content in our investor disclaimer template guide.
> Quick answer: A financial promotion you send to someone who does not meet the exemption relied on can be a criminal offence under section 25 of FSMA 2000, and any investment agreement that results can be unenforceable against the investor under section 30. You are responsible for what you send, and for what you cause to be passed on, for example by inviting recipients to share it; the FCA treats a recipient's own decision to forward it as their communication, not yours. Intending to reach only qualifying investors is not the same as controlling who actually receives the material, and a disclaimer does not retroactively fix a promotion that already reached the wrong person. This is general information, correct as at September 2026, not legal or financial advice.
What "reaching the wrong person" actually means
The exemptions most founders rely on under the Financial Promotion Order, for investment professionals, certified high net worth individuals, and certified or self-certified sophisticated investors, are conditional. They apply only to communications made to people who genuinely fall within the defined category, typically evidenced by a signed statement confirming they meet the relevant criteria. If you send your deck or memorandum to someone outside that category, post it somewhere people outside it can reach, or send it to a list that was never actually screened, the exemption does not cover those communications. At that point you have made a financial promotion without either authorisation or a valid exemption, which is the exact scenario section 21 exists to prevent.
Some of the routes by which material reaches the wrong person are yours, and some are not. A deck you BCC to an assistant, a partner or a friend considering a co-investment is your communication to each of them, whether or not they were part of the original categorisation. A recipient who forwards it to a colleague on their own initiative is, in the FCA's perimeter guidance, communicating it themselves: responsibility rests with whoever originates or causes a communication, and you cause an onward one if, for example, you ask recipients to pass the deck on. The practical answer is the same either way: control exactly what you send, and do not invite onward sharing.
The regulatory and practical consequences
It is worth being plain rather than soft about this. A breach of section 21 is a criminal offence under section 25, punishable by up to two years' imprisonment, a fine, or both. The defence is that you took all reasonable precautions and exercised all due diligence to avoid committing it, which is where a clear record of who you sent material to, and on what basis, earns its keep. Separately, section 30 makes an agreement entered into as a result of an unlawful promotion unenforceable against the investor, who can recover what they paid plus compensation, unless a court is satisfied it is just and equitable to let it stand. That combination, criminal exposure plus a live question over whether the investment itself can be unwound, is why this is a matter for specialist review, not a drafting inconvenience to patch after the fact.
There is also a practical, non-regulatory cost worth naming honestly. A founder who cannot say with confidence who received their investment materials, and on what basis, looks unreliable to serious investors and their advisers, who will ask exactly this question during their own diligence on the round. A scattered, uncontrolled distribution history is the kind of thing that surfaces in a later due diligence request list and raises questions about the whole raise, not just the specific document.
Why "we only meant to send it to sophisticated investors" is not a control
This is the mistake at the centre of most exposure in this area, and it deserves to be said directly: intention is not control. Believing your distribution list was limited to qualifying investors does not establish that it actually was, and it certainly does not establish it to a regulator or a court after the fact. A genuine control has three features an intention does not: it actually prevents the wrong person from opening the material, it records who did open it and when, and it can show, on request, exactly what categorisation basis each recipient met before they saw anything. "We were careful" is not evidence. A verified access log is.
What real recipient control looks like in practice
Controlling distribution starts before the material is sent, not after. Rather than emailing a deck as an attachment, which can be forwarded without your knowledge the moment it leaves your outbox, share it as a gated, tracked, revocable link, one per recipient, with a verified email required before the material opens at all. This does not answer the underlying legal question of whether the exemption genuinely applies, which remains a matter for specialist advice, and it is not a substitute for the signed statements the exemptions themselves require: a click in any piece of software, including ours, does not provide one. What it does, which intention alone cannot, is make a forward visible rather than silent: anyone who opens the link has to verify their own email address first, so the record shows exactly who accessed the material, and you can revoke access in one click. It does not stop a recipient passing the link on, so it is a record and an off switch, not a lock.
Page-by-page analytics show who opened the material and for how long, distinguishing a verified viewer who cleared the gate from a raw visit, which is the record you would want if you are ever asked who received a specific promotion. Where a recipient drops out of a round, or where you learn the material has been shared onward against your intention, one-click revocation cuts off access immediately, rather than leaving a live, forwardable link circulating with no way to pull it back. None of this is a substitute for getting the underlying exemption and categorisation right in the first place, which is squarely a job for specialist advice, but it is the difference between hoping a distribution stayed controlled and being able to show that it did.
What to do if a promotion has already reached the wrong person
If you discover material has reached someone outside the intended exemption, the honest first step is to stop, not to keep sending and hope the issue resolves itself. Revoke access to any live link immediately. Take specialist advice promptly, because the appropriate response, whether that involves a correction, a formal notification, or simply documenting the error and tightening controls going forward, depends on facts specific to what happened and who received the material. This is not an area where a template article can tell you the fix, and treating it as a documentation exercise you handle alone is the wrong instinct. The whole point of flagging this as regulatory rather than administrative is that the right response usually needs a specialist, quickly.
This article addresses the England and Wales regime under FSMA. If you are dealing with investors or promotions connected to another jurisdiction, the specific consequences of an unlawful promotion will differ, but the underlying discipline, verify and record who actually receives investment material, rather than assuming intention is enough, holds everywhere serious money changes hands.
Frequently asked questions
What happens if my pitch deck gets forwarded to someone who is not a qualifying investor?
It depends on who forwarded it. If you sent it to them, or invited a recipient to pass it on, it is your communication and the exemption does not cover it, which can be a criminal offence under section 25. If a recipient forwarded it on their own initiative, the FCA treats the forward as their communication rather than yours. Either way, take specialist advice promptly. This is general information, not legal advice.
Can a breach of section 21 affect the investment itself, not just me?
Yes. Section 30 of FSMA makes an agreement entered into as a result of an unlawful financial promotion unenforceable against the investor, who can recover what they paid plus compensation, unless a court decides it is just and equitable to let it stand. This is one reason the issue reaches further than the promotion itself.
Does having a disclaimer protect me if the material reaches the wrong person?
No, not on its own. A disclaimer records the basis you believed applied. It does not retroactively make a promotion lawful if it reached someone outside the exemption, and it is not a substitute for actually controlling who receives the material in the first place.
What does real recipient control actually involve?
Verified, gated distribution, one tracked link per recipient rather than a forwardable attachment, a record of who actually opened the material and when, and immediate revocation if access needs to be cut off. It also requires getting the underlying categorisation right, which is a job for specialist advice, not a drafting checklist.
What should I do if I realise a promotion has already reached the wrong person?
Revoke access immediately and take specialist advice promptly. The right response depends on the specific facts, who received it, how, and what the material said, and this is exactly the kind of situation where acting alone rather than involving an adviser quickly tends to make things worse.
Control who receives your investor materials
Understand what an investor disclaimer contains through our investor disclaimer guide (our own template is withdrawn), then share investment materials through the same room as a gated, tracked, revocable link per recipient, with page-by-page analytics showing who opened them, so intention is backed by an actual record. The free tier gives three rooms and twenty-five active links, forever, with no card required. Start for free, and get specialist review of both your disclaimer and your recipient list before anything goes out.
This is a regulated area. This article is general information, not legal or financial advice, and it is not a substitute for specialist review before sending investment material to anyone.
Sources
- Restriction on financial promotion by unauthorised persons: Financial Services and Markets Act 2000, s.21, https://www.legislation.gov.uk/ukpga/2000/8/section/21
- The criminal offence and its reasonable-precautions defence: Financial Services and Markets Act 2000, s.25, https://www.legislation.gov.uk/ukpga/2000/8/section/25
- Unenforceability of agreements made as a result: Financial Services and Markets Act 2000, s.30, https://www.legislation.gov.uk/ukpga/2000/8/section/30
- Who communicates, and who causes a communication to be made: FCA Perimeter Guidance, PERG 8.6, https://www.handbook.fca.org.uk/handbook/PERG/8/6.html
- Enforceability of agreements resulting from unlawful financial promotions: Financial Services and Markets Act 2000, s.30, https://www.legislation.gov.uk/ukpga/2000/8/section/30
- Exemptions relied on for investment professionals, high net worth and sophisticated investors, and their qualifying conditions, which have been amended over time: Financial Services and Markets Act 2000 (Financial Promotion) Order 2005, https://www.legislation.gov.uk/uksi/2005/1529/contents ; subsequent amendments to the Order, https://www.legislation.gov.uk/uksi/2023/1411/made
- The financial promotion regime and its supervision: Financial Conduct Authority, https://www.fca.org.uk