If you send a pitch deck or investment memorandum to someone you had no reasonable grounds to treat as meeting the exemption you relied on, for example someone who had not signed the required statement, you may have breached section 21 of the Financial Services and Markets Act 2000, and breaching it is a criminal offence under section 25, not a paperwork slip you tidy up afterwards. This article covers what that exposure actually looks like, why "we only meant to send it to sophisticated investors" is not itself a control, and what genuine recipient control looks like in practice. It is the consequence piece to our companion guide on when a pitch deck becomes a financial promotion, and like that article, it carries a plain specialist-review recommendation throughout, rather than repeating the clause-by-clause content in our investor disclaimer template guide.
What "reaching the wrong person" actually means
The exemptions most founders rely on under the Financial Promotion Order, for investment professionals, high net worth individuals, and certified or self-certified sophisticated investors, are conditional. They apply only to communications made to people you have reasonable grounds to believe fall within the defined category, and for the high net worth and self-certified sophisticated investor exemptions the category is defined by the signed statement itself: the person must have completed and signed the statement set out in the Order within the 12 months before you send the material. Being wealthy or experienced is not enough without it. The certified sophisticated investor exemption also needs a certificate from an FCA-authorised firm dated within the last three years, and the investment professionals exemption covers only people whose business involves this kind of investment. If you send your deck or memorandum to someone outside that category, post it somewhere people outside it can reach, or send it to a list that was never actually screened, the exemption does not cover those communications. At that point you have made a financial promotion without authorisation, without approval from a permitted authorised firm and without a valid exemption, which is the exact scenario section 21 exists to prevent.
Some of the routes by which material reaches the wrong person are yours, and some are not. A deck you send or copy to a partner or a friend considering a co-investment is your communication to them, whether or not they were part of the original categorisation, because the invitation is aimed at them too. Copying an email to someone the invitation is not aimed at, such as your own assistant, does not in the FCA's view make it a communication to that person, but keep the copy list to people who need it. A recipient who forwards the deck to a colleague without being asked takes their own active step to communicate it, and in the FCA's view you cause an onward communication if, for example, you ask recipients to pass the deck on. The FCA's guidance also puts primary responsibility on whoever originates the material, so the practical answer is the same either way: control exactly what you send, and do not invite onward sharing.
The regulatory and practical consequences
It is worth being plain rather than soft about this. A breach of section 21 is a criminal offence under section 25, punishable by up to two years' imprisonment, a fine, or both. One defence is that you took all reasonable precautions and exercised all due diligence to avoid committing it, which is where a clear record of who you sent material to, and on what basis, earns its keep. The other is that you believed on reasonable grounds that the content had been prepared, or approved with the FCA's permission, by an authorised firm. Separately, section 30 makes an agreement entered into as a result of an unlawful promotion unenforceable against the investor, who can recover what they paid plus compensation, unless a court is satisfied it is just and equitable to let it stand. That combination, criminal exposure plus a live question over whether the investment itself can be unwound, is why this is a matter for specialist review, not a drafting inconvenience to patch after the fact.
There is also a practical, non-regulatory cost worth naming honestly. A founder who cannot say with confidence who received their investment materials, and on what basis, looks unreliable to serious investors and their advisers, who will ask exactly this question during their own diligence on the round. A scattered, uncontrolled distribution history is the kind of thing that surfaces in a later due diligence request list and raises questions about the whole raise, not just the specific document.
Why "we only meant to send it to sophisticated investors" is not a control
This is the mistake at the centre of most exposure in this area, and it deserves to be said directly: intention is not control. Believing your distribution list was limited to qualifying investors does not establish that it actually was, and it certainly does not establish it to a regulator or a court after the fact. A genuine control has three features an intention does not: it actually prevents the wrong person from opening the material, it records who did open it and when, and it can show, on request, exactly what categorisation basis each recipient met before they saw anything. "We were careful" is not evidence. A verified access log is.
What real recipient control looks like in practice
Controlling distribution starts before the material is sent, not after. Rather than emailing a deck as an attachment, which can be forwarded without your knowledge the moment it leaves your outbox, share it as a gated, tracked, revocable link, one per recipient, with a verified email required before the material opens at all. This does not answer the underlying legal question of whether the exemption genuinely applies, which remains a matter for specialist advice, and it is not a substitute for the signed statements the high net worth and sophisticated investor exemptions require: a click in any piece of software, including ours, does not provide one. What it does, which intention alone cannot, is make a forward visible rather than silent: anyone who opens the link has to verify their own email address first, so the record shows exactly who accessed the material, and you can revoke access in one click. It does not stop a recipient passing the link on, so it is a record and an off switch, not a lock.
Page-by-page analytics show who opened the material and for how long, distinguishing a verified viewer who cleared the gate from a raw visit, which is the record you would want if you are ever asked who received a specific promotion. Where a recipient drops out of a round, or where you learn the material has been shared onward against your intention, one-click revocation cuts off access immediately, rather than leaving a live, forwardable link circulating with no way to pull it back. None of this is a substitute for getting the underlying exemption and categorisation right in the first place, which is squarely a job for specialist advice, but it is the difference between hoping a distribution stayed controlled and being able to show that it did.
What to do if a promotion has already reached the wrong person
If you discover material has reached someone outside the intended exemption, the honest first step is to stop, not to keep sending and hope the issue resolves itself. Revoke access to any live link immediately. Take specialist advice promptly, because the appropriate response, whether that involves a correction, a formal notification, or simply documenting the error and tightening controls going forward, depends on facts specific to what happened and who received the material. This is not an area where a template article can tell you the fix, and treating it as a documentation exercise you handle alone is the wrong instinct. The whole point of flagging this as regulatory rather than administrative is that the right response usually needs a specialist, quickly.
This article addresses the UK regime under FSMA, which applies across England, Wales, Scotland and Northern Ireland. If you are dealing with investors or promotions connected to another jurisdiction, the specific consequences of an unlawful promotion will differ, but the underlying discipline, verify and record who actually receives investment material, rather than assuming intention is enough, holds everywhere serious money changes hands.
Frequently asked questions
What happens if my pitch deck gets forwarded to someone who is not a qualifying investor?
It depends on who forwarded it. If you sent it to them, or asked a recipient to pass it on, it is your communication, and unless you had reasonable grounds to treat them as meeting the exemption it is not covered, which can be a criminal offence under section 25. If a recipient forwarded it without being asked, you did not cause that forward, but the FCA's guidance still puts primary responsibility for the material on whoever originated it. Either way, take specialist advice promptly. This is general information, not legal advice.
Can a breach of section 21 affect the investment itself, not just me?
Yes. Section 30 of FSMA makes an agreement entered into as a result of an unlawful financial promotion unenforceable against the investor, who can recover what they paid plus compensation, unless a court decides it is just and equitable to let it stand. This is one reason the issue reaches further than the promotion itself.
Does having a disclaimer protect me if the material reaches the wrong person?
No, not on its own. A disclaimer records the basis you believed applied. It does not retroactively make a promotion lawful if it reached someone outside the exemption, and it is not a substitute for actually controlling who receives the material in the first place.
What does real recipient control actually involve?
Verified, gated distribution, one tracked link per recipient rather than a forwardable attachment, a record of who actually opened the material and when, and immediate revocation if access needs to be cut off. It also requires getting the underlying categorisation right, which is a job for specialist advice, not a drafting checklist.
What should I do if I realise a promotion has already reached the wrong person?
Revoke access immediately and take specialist advice promptly. The right response depends on the specific facts, who received it, how, and what the material said, and this is exactly the kind of situation where acting alone rather than involving an adviser quickly tends to make things worse.
Control who receives your investor materials
Understand what an investor disclaimer contains through our investor disclaimer guide (our own template is withdrawn), then share investment materials through the same room as a gated, tracked, revocable link per recipient, with page-by-page analytics showing who opened them, so intention is backed by an actual record. The free tier gives three rooms and twenty-five active links, forever, with no card required. Start for free, and get specialist review of both your disclaimer and your recipient list before anything goes out.
This is a regulated area. This article is general information, not legal or financial advice, and it is not a substitute for specialist review before sending investment material to anyone.
Sources
- Restriction on financial promotion by unauthorised persons: Financial Services and Markets Act 2000, s.21, https://www.legislation.gov.uk/ukpga/2000/8/section/21
- The criminal offence and its reasonable-precautions defence: Financial Services and Markets Act 2000, s.25, https://www.legislation.gov.uk/ukpga/2000/8/section/25
- Unenforceability of agreements made as a result: Financial Services and Markets Act 2000, s.30, https://www.legislation.gov.uk/ukpga/2000/8/section/30
- Who communicates, and who causes a communication to be made: FCA Perimeter Guidance, PERG 8.6, https://www.handbook.fca.org.uk/handbook/PERG/8/6.html
- Exemptions relied on for investment professionals, high net worth individuals and sophisticated investors, and their qualifying conditions: Financial Services and Markets Act 2000 (Financial Promotion) Order 2005, articles 19, 48, 50 and 50A and Schedule 5, https://www.legislation.gov.uk/uksi/2005/1529/contents ; the amendments of 31 January 2024, https://www.legislation.gov.uk/uksi/2023/1411/made ; and the amendments of 27 March 2024 that reversed the January 2024 threshold increases, https://www.legislation.gov.uk/uksi/2024/301/made
- The financial promotion regime and its supervision: Financial Conduct Authority, https://www.fca.org.uk