COBS - Client Communications and Financial Promotions
The Conduct of Business Sourcebook (COBS) applies to financial firms in the UK that deal with client investments. COBS rules cover client communications.Client communications refer to any document that is likely to be read by a retail client. Included in this is all financial promotions that investment firms send to existing and prospective clients.
Our COBS for Client Communications Course explains the FCA Conduct of Business Rules for communicating with clients in the investment business.
- 20 Minutes
- All staff
- Based on UK legislation, but suitable for global audiences upon the removal of UK-specific references and translation as necessary.

Learning objectives
- Appreciate the need to be fair, clear and not misleading
- Recognise the rules for presenting investment performance
- Know the rules for cold calling and non-written promotions
- Understand the systems and control requirements
- Identify and apply the record-keeping requirements
What can you expect your employees to learn?
Welcome
What is COBS - Client Communications?
What are client communications?
- Exercise: What is a financial promotion?
Fair, clear & not misleading
Presenting investment performance
Calculating return
Direct offer financial promotions
Cold calling
Approving financial promotions
Systems & controls
Record keeping
Scenario: Financial promotion
Summary
Affirmation
Assessment
Start your compliance e-learning journey with a free trial
Our no-obligation free trial gives you access to our libraries and compliance platform.
Ready to start your free trial? Complete the form, and a member of the Skillcast team will be in touch with further details.
Your questions, answered
CoreCompliance
Common FAQs
Which courses are included in CoreCompliance?
All users get access to courses on popular compliance topics, such as: bribery, cybersecurity, equality, health and safety. In addition, you can get courses specific to your business sector.
There are over 150 courses included within the CoreCompliance package. The actual courses provided depend on the sector chosen for the subscription.
Are CoreCompliance courses only intended for use by those based in the UK?
Do the courses bookmark my progress?
What are in-depth courses?
What are microlearning courses?
Can we use a Skillcast certificate to evidence training to regulators, courts, etc?
What is "mandatory training"?
How do I check my mandatory training?
What is in my training record?
Can I get certificates for courses I've completed?
How do I update my details?
Do I get a dashboard to manage my employees?
How do I start a subscription?
Can I change the number of seats in my subscription?
Can I get monthly or annual subscriptions?
Can I get an invoice for the subscription?
How long do I have to wait to assign training after making the payment?
How do I purchase more seats?
Can I reuse the seats of employees who have left my company?
Can I add more than 50 users to my subscription?
Can I get a refund if I terminate my subscription partway through the year?
Can small businesses be held accountable under competition law?
Can small businesses be prosecuted under the Criminal Finances Act 2017?
How can small businesses ensure compliance with proliferation financing regulations?
Are Skillcast courses SCORM-compliant?
What other tools are needed beyond training?
Is our training content still compliant with the latest legislation?
- You can check the latest course content updates in our library updates page: https://www.skillcast.com/compliance-course-library-updates
- For major legislative changes, we:
- Will send you email alerts to ensure you are notified
- Offer you a free trial of newly created or updated content
- Host webinars with compliance experts to explain the changes and how our training supports your ongoing compliance
Can you translate our content into other languages?
What file types are supported by the Skillcast system?
Features |
Supported file types and details |
File Exchange |
File types: PDF, Excel spreadsheets, Word documents, SCORM and xAPI files, and compressed zip files. Max file size: Default is 1GB, can be increased to a max of 2GB |
SCORM files |
Versions: SCORM 1.2, SCORM 1.2 for Moodle, SCORM 2004 2nd, 3rd and 4th Edition. Max file size: 1024MB |
xAPI file |
Max file size: 2GB |
Videos |
File types: MP4 or MOV. Videos must be optimised, with a max file size of 100MB. If the file is bigger, our Design Team can help |
Images |
File types: jpg, png and gif. The file size should ideally be 100KB, but it can be up to 250KB |
CPD evidence |
File types: Word, PDF, Excel and CSV. File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB |
Policy documents |
PDF or Word File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB |
Offline activities evidence |
File types: PDF, DOC, DOCX, XLS, XLSX, CSV, PNG, GIF, JPEG, JPG, PPTX and MSG. File size: the limit should be whatever the portal config option is set to. Servers are set to max 2GB |
Client logo files |
File types provided by client: EPS, PDF, AI and SVG |
Registers |
PDF, DOC, DOCX, XLS, XLSX, CSV, PPT, PPTX, POT, PPA, PPS, JPG, JPEG, PJEPG, PNG, BMP, GIF, MP4, MOV, WMV, CPTX, CP, TXT, ZIP and MSG files |
Declarations |
JPG, JPEG, PNG, GIF, XLS and XLSX files |
Related courses
Boost your compliance efforts with our range of courses. Varying in length and topic, our courses equip you with the tools to create an ethical and resilient workplace.
Anti-Money Laundering
To prevent the proceeds of crime from finding their way into the formal economy, most countries have extremely tough laws with severe penalties.
Phishing
It's essential for your employees to know what phishing is, how to spot the signs of an attempt and how to protect themselves and your Company.
Information Security
The loss or theft of commercially sensitive information may damage revenues, reputation and consumer trust.

Working Safely
Employees need to know how to protect their own health, safety and welfare as well as ensuring they don't cause harm to others.
Customer Due Diligence
Customer Due diligence is a legal requirement and plays a vital role in protecting your Company.
Anti-Competitive Agreements
Any agreement between companies that restricts market competition is a criminal offence.
Understanding Modern Slavery
Modern slavery remains a persistent, inhumane practice affecting millions through forced labour, trafficking and exploitation.
Gifts and Hospitality
Gifts and hospitality can create a risk of actual or perceived bribery if not handled correctly.
Spot a Phishing Attempt
Phishing emails are fraudulent attempts by cybercriminals to trick individuals into revealing sensitive information.
Abuse of Position
Fraud by abuse of position occurs when someone in a position of trust dishonestly exploits their role for personal gain or to cause loss to others.
Whistleblowing
Whistleblowing is the act of reporting wrongdoing such as fraud, bribery or safety breaches to protect an organisation and its stakeholders.
Money Laundering Red Flags
Detecting and reporting money laundering red flags is essential for maintaining anti-money laundering (AML) compliance.
Business Email Compromise
Business Email Compromise (BEC) is a targeted cyberattack where criminals impersonate executives or hack accounts to steal money or sensitive information.
Speak Up
Speaking up against misconduct or unethical behaviour can be challenging, but it is essential to maintaining integrity in the workplace.
Display Screen Equipment
Correctly setting up display screen equipment (DSE) is crucial for maintaining comfort and preventing strain or injury.
Identity Fraud
Identity fraud occurs when criminals steal personal information to commit fraud, often leading to financial loss and reputational damage.
Slips and Trips
Slips and trips are among the most common causes of workplace injuries, often resulting in serious harm such as fractures or concussions.
Manual Handling
Manual handling tasks, such as lifting, carrying, pushing or pulling objects, can lead to injuries if not done correctly.
Modern Slavery
Modern slavery is a serious crime with harsh penalties.
Records Management
Records management refers to employees' creation, storage, archiving, and disposal of business records.

Slips and Trips
Educate your staff on the controls that your Company has in place and what they should do to prevent slips and trips at work.

General Office Hygiene
Educate your staff on general office hygiene protocols to reduce common viruses and infections from spreading at the workplace.
Understanding Conflicts of Interest
A conflict of interest is where competing interests interfere with the exercising of judgement in a relationship.
Foreign Agent Bribery Risk
Operational risk in financial services arises from internal process failures, people, systems or external events.
Compliments vs Sexual Harassment
Genuine compliments can be part of a positive workplace, but inappropriate remarks can cross the line into sexual harassment.
Failing to Disclose Information
Fraud can occur when someone deliberately withholds information to gain an unfair advantage or cause loss to others.
Targets of Sexual Harassment
Sexual harassment can occur in various forms and affects everyone in the workplace.
Forced Labour Indicators
Forced labour is a serious violation of human rights, often hidden within workplaces and supply chains.
Interacting on Social Media
Social media offers great opportunities for communication, but it also presents risks to data protection, security and reputation.
Dealing With Stress at Work
Workplace stress can arise from tight deadlines, high-pressure environments and personal challenges.
Deepfake Awareness
Deepfakes use artificial intelligence to create fake images, audio or videos that can deceive individuals and organisations.
Horizontal Agreements
Competition drives innovation, fair pricing and better services for customers.
The Three Stages of Money Laundering
Money laundering is the process criminals use to disguise illicit funds as legitimate income through placement, layering and integration.
Common Cyber Threats
Cyber threats such as phishing, malware, ransomware and unsecured networks pose significant risks to businesses.
Preventing Tipping Off
Tipping off is a criminal offence that occurs when someone under investigation for financial crime is made aware of the suspicion against them.
Personal Data Breaches
Personal data breaches can occur through hacking, human error or unauthorised access, leading to serious legal and reputational consequences.
Understanding Sexual Harassment
Sexual harassment is unwanted behaviour of a sexual nature that violates a person’s dignity or creates an intimidating, hostile or offensive environment.
Understanding Facilitation Payments
Facilitation payments are small, unofficial payments made to speed up routine services, but they are considered bribes under anti-bribery and corruption laws.
Data Protection Impact Assessments
Data Protection Impact Assessments (DPIAs) are used to evaluate our data processing activities and mitigate risks to individuals.
Zero Trust Cybersecurity
The zero trust cybersecurity model ensures IT systems remain inaccessible by default, requiring strict verification before granting access.
Bring Your Own Device Security
Bring Your Own Device (BYOD) policies offer convenience and flexibility but also introduce cybersecurity risks.
Device Hygiene
Device hygiene is the practice of keeping digital devices secure and free from cyber threats to protect company data and networks.
Malware
Malware is malicious software designed to harm or exploit computer systems, ranging from viruses and ransomware to spyware and botnets.
Ransomware
Ransomware is a type of malware that encrypts files and demands payment for their release, often causing severe financial and operational damage.
Smishing
Smishing is a targeted phishing scam that uses deceptive text messages to gain sensitive information.
Spear Phishing
Spear phishing targets specific individuals with convincing emails designed to deceive them.
Video Conferencing
Video conferencing is a vital business tool, but it also presents security and privacy risks if not used correctly.
Vishing
Vishing is a social engineering attack where cybercriminals use phone calls to trick individuals into revealing sensitive information.
Creating Strong Passwords
Strong password protection is essential to safeguarding company systems from cyber threats such as brute force attacks and password guessing.
Multi-factor Authentication
Multi-factor authentication (MFA) enhances security by requiring users to verify their identity through multiple authentication methods.
Reacting to Password Breaches
Password breaches can lead to unauthorised access, fraud and data theft, often resulting from weak passwords, phishing or insecure networks.
Information Classification
This training helps employees understand different levels of information classification, their restrictions and how to handle data securely.
Information Security on the Move
Handling company information securely, especially when working remotely or traveling, is essential to prevent data breaches and security risks.
Tailgating and Piggybacking
Cybersecurity is not just about digital protection but also involves securing physical access to critical systems.
Secure Web Browsing
Practicing safe web browsing helps to reduce security risks and protect sensitive information.
Supply Chain Cybersecurity
A company’s cybersecurity is only as strong as its weakest link and supply chain vulnerabilities can expose businesses to major breaches.
Transferring Information Securely
Securely transferring information is essential to protect sensitive data from breaches, legal risks and business disruptions.
Using Wi-Fi safely
Wi-Fi connectivity offers convenience but also exposes devices and data to security risks if not properly managed.
Advising Customers on Cybersecurity
Cybersecurity is everyone's responsibility, including guiding customers to protect themselves from online threats.
CEO Fraud
CEO fraud is a type of Business Email Compromise where cybercriminals impersonate executives to trick employees into making payments or sharing confidential information.
Guide to Secure Remote Working
Remote work provides flexibility but also introduces cybersecurity risks that can compromise company data and systems.
Think Before You Click
Clicking on malicious links or attachments is one of the most common ways cybercriminals infect IT systems with malware.
Bribery Offences and Penalties
Bribery is a serious offence that carries severe consequences for individuals and companies.
Corrupt Hiring Practices
Bribery risks in hiring arise when jobs or internships are offered in exchange for business favours or political influence.
Controllers and Processors
The differences between data controllers and data processors are crucial to understanding data protection obligations.
Special Category Data
In many workplaces, sensitive data, including special category data, is collected and requires extra care.
GDPR Principle 1
The first principle of the GDPR requires that personal data must be processed lawfully, fairly and transparently.
GDPR Principle 2
The second principle of the GDPR, purpose limitation, requires that personal data be collected for specified, explicit and legitimate purposes.
GDPR Principle 3
The third principle of the GDPR, data minimisation, requires that personal data collected must be adequate, relevant and limited to what is necessary.
GDPR Principle 4
The fourth principle of the GDPR, accuracy, requires that personal data must be correct, up to date and not misleading.
GDPR Principle 5
The fifth principle of the GDPR, storage limitation, requires that personal data be retained only for as long as necessary for its intended purpose.
GDPR Principle 6
The sixth principle of the GDPR, integrity and confidentiality, requires that personal data be protected against unauthorised access, loss or damage.
GDPR Principle 7
The seventh principle of the GDPR, accountability, requires organisations to take responsibility for compliance and demonstrate good governance in data protection.
GDPR and Consent
Consent is one of the six lawful bases for processing personal data under the GDPR, requiring individuals to give clear, informed and voluntary agreement.
GDPR Lawful Bases for Processing
The General Data Protection Regulation (GDPR) requires organisations to have a lawful basis for processing personal data, chosen from six legal grounds.
GDPR Legitimate Interests
Legitimate interests is a flexible lawful basis for processing personal data, but it requires balancing business needs with individuals' rights.
GDPR International Transfers
The international transfer of personal data is restricted to ensure individuals' privacy rights are protected when data is sent abroad.
GDPR Individual Rights
The General Data Protection Regulation (GDPR) grants individuals eight specific rights over their personal data, ensuring transparency and control.
GDPR Subject Access Requests
Individuals have the right to access their personal data and organisations must respond to subject access requests (SARs) within legal timeframes.
Cartels
Competition in a free market encourages businesses to innovate, improve quality and reduce prices for consumers.
Trade Association Red Flags
Trade association meetings serve legitimate purposes but can pose competition risks if sensitive business information is exchanged.
Vertical Agreements
Vertical agreements between manufacturers, wholesalers and retailers can restrict competition and harm consumers.
Online Selling Restrictions
Competition law ensures fair sales practices and prohibits restrictions that limit competition.
Resale Price Maintenance
Resale price maintenance involves manufacturers controlling how retailers price their products.
Tying and Bundling
Tying and bundling involve selling a product or service with another commitment or package.
Dawn Raids
A dawn raid is an unannounced investigation by a regulator or law enforcement agency, often related to suspected financial crimes or anti-competitive practices.
Abuse of Dominant Position
Companies with significant market power must compete fairly without distorting competition.
Risks in the Use of AI
This training highlights how AI can be used effectively while identifying and addressing potential risks.
Stereotyping
Stereotypes are generalised beliefs about individuals or groups that can lead to prejudice and bias.
Understanding ESG
Companies are increasingly expected to integrate environmental, social and governance principles into their operations to attract investors.
Identifying Who is Vulnerable
Vulnerable individuals are those who face heightened risks of harm, abuse, neglect or exploitation due to various circumstances.
Screening Employees in Safeguarding Roles
The Safeguarding Vulnerable Groups Act protects children and vulnerable adults from harm by preventing unsuitable individuals from working with them.
Terrorist Financing Red Flags
Terrorist groups use legal and illegal methods to raise and move funds, often exploiting financial systems to conceal their activities.
Understanding Terrorist Financing
Terrorist groups rely on financial support from various sources, both intentional and unintentional.
Enhanced Customer Due Diligence
Bring "Enhanced Customer Due Diligence" training to life using animation characters and storylines.
Politically Exposed Persons
Politically exposed persons present a high risk of money laundering due to their influence and access to state resources.
Suspicious Activity Reporting
Employees must report any knowledge or suspicion of money laundering or terrorist financing to the Money Laundering Reporting Officer.
Unexplained Wealth Orders
Unexplained wealth orders allow law enforcement to seize assets if their owners cannot justify their wealth as coming from a legitimate source.
Supplier Fraud
Supplier fraud occurs when vendors engage in deceptive practices, such as false invoicing, overpricing or bribery.
Authorised Push Payment Fraud
Authorised push payment fraud occurs when scammers impersonate trusted figures to trick individuals into transferring money.
False Representation
Fraud by false representation happens when someone deliberately provides misleading or untrue information for personal or financial gain.
Employee Fraud and Insider Threats
Employee fraud can take many forms, from theft and false expense claims to data misuse and conflicts of interest.
Fraud Offences and Penalties
Fraud is any dishonest action or omission intended to gain or cause a loss, regardless of whether it is temporary or permanent.
Mandatory Leave
Mandatory leave is time off that certain organisations enforce to help prevent fraud, errors and other risk incidents.
The Fraud Triangle
Fraud is often committed by ordinary people who find themselves in difficult situations and make poor choices.
10 Essential Office Hygiene Practices
Hygiene is a key factor in maintaining a clean, safe and healthy workplace.
10 Steps to Healthy Working
A fast-paced work environment can take a toll on physical and mental health if risks are not managed.
Fire
Fires pose a serious threat in any workplace, making fire prevention and safety measures essential.
Personal Protective Equipment
Personal protective equipment is essential in minimising exposure to workplace hazards but should be the last line of defence.
Transport
Work-related driving poses significant risks, contributing to a large percentage of road accidents.
Work Equipment
Work equipment includes tools, machines and other devices used to perform tasks safely and efficiently.
Menopause Awareness
Menopause is a natural stage in life that can bring physical and emotional challenges and potentially affect work performance.
Mental Health at Work
Stress, anxiety and depression are major workplace health risks, accounting for over half of work-related ill-health cases.
New and Expectant Mothers at Work
When an employee is pregnant or returning from maternity leave, certain legal rights and health considerations apply.
Understanding Intellectual Property
Intellectual property rights are exclusive rights that protect creators and inventors, allowing them to benefit commercially from their work.
Don't Deal with Inside Information
Insider dealing occurs when someone uses non-public, price-sensitive information to gain an unfair advantage in financial markets.
Understanding Inside Information
Inside information is precise, non-public information about a financial instrument or issuer that could significantly impact market prices if disclosed.
Understanding Market Abuse
Market abuse distorts financial markets and disadvantages investors.
Unlawful Disclosure of Inside Information
Inside information is precise, non-public information about a financial instrument or issuer that could impact market prices if disclosed.
The Three Characteristics of Harassment
Harassment in the workplace occurs when unwanted behaviour violates a person's dignity or creates an intimidating or offensive environment.
Minimum Disclosure Rules
The Common Reporting Standard was introduced to prevent offshore tax evasion, but authorities continue to find ways in which it is being circumvented.
Unwanted Behaviour of a Sexual Nature
Sexual harassment is unwanted behaviour of a sexual nature that can create an intimidating, degrading or hostile work environment.
The 4D Bystander Intervention Model
Creating a safe and respectful workplace requires everyone to take action when witnessing bullying harassment or inappropriate behaviour.
Understanding Tax Evasion
Tax evasion is the illegal act of dishonestly reducing tax liability, while tax avoidance involves exploiting legal loopholes.
To Pay or Not To Pay?
Small facilitation payments made to officials for expediting a permit or approval might seem harmless, but they are illegal and could land your employees in prison.
CASS 10 - CASS Resolution Pack
A CASS Resolution Pack (RP) contains a specific set of documents that helps speed up client money and assets return if a firm fails.
CASS 6 - Custody Rules
The rules and guidance in CASS 6 apply to a firm when it is safeguarding and administering custody assets.
CASS 7 and 7A - Client Money Rules and Client Money Distribution and Transfer
The rules and guidance in CASS aim to achieve the FCA's objective of ensuring that consumers are adequately protected.
CASS 8 - Mandates
Under the requirements of CASS 8, you must understand what a mandate is and how to deal with them.
CASS 9 - Information to Clients
Under the requirements of CASS 9, you are required to pass on certain information to clients, particularly where prime brokers, custody assets and client money are concerned.
COBS - Appropriateness
The FCA's Conduct of Business Sourcebook (COBS) applies to financial firms that deal with customer investments on an execution-only basis.
COBS - Client Communications High Risk Investments
The Conduct of Business Sourcebook (COBS) rules that relate to client communication apply to all promotional communications that investment firms have with their clients and prospects.
COBS - Suitability
The FCA Conduct of Business Sourcebook (COBS) applies to finance and investment firms in the UK.

Control of Substances Hazardous to Health (COSHH)
Educate your staff on the risks of using hazardous substances as well as what they should do to prevent accidents and incidents when using them.

Electricity
Educate your staff on the controls your Company has in place and what they should do to stay safe and manage the risks associated with electricity and electrical devices.

Fire Warden Training
Gain a comprehensive understanding of your role as a fire warden, which encompasses not only how to respond effectively in the event of a fire but also proactive measures to prevent such incidents from occurring.

Lone Working
Lone working offers greater flexibility, autonomy and creates a broader talent pool for businesses.

New and Expectant Mothers at Work
Being a new or expectant mother is an exciting time.

Noise
Educate your staff on the controls that your Company has in place and what they should do to prevent exposure to noise at work.
Packaged Retail and Insurance-based Investment Products (PRIIPs) Regulation in Finance
The Packaged Retail and Insurance-based Investment Product (PRIIP) Regulation affects retail investors who need to understand the complexities of these products.
Sustainability Disclosure Requirements (SDR) and Investment Labels
The introduction of sustainability rules aims to enhance the transparency and credibility of financial products with sustainability objectives.
Swap Execution Facilities (SEFs) and Designated Contract Markets (DCMs)
Swap Execution Facilities (SEFs) and Designated Contract Markets (DCMs) exist as part of the US response to the financial crisis.