Reverse solicitation is a narrow exception written into financial services law that lets a firm serve a client in a country where it holds no license or authorisation, on the theory that the client sought the firm out entirely on their own initiative rather than being marketed to. The idea sits underneath almost every piece of cross-border financial regulation: a license requirement exists to protect people a firm is actively pursuing as customers, and if no pursuit happened — the client simply picked up the phone, opened an account online, or walked into a branch abroad — regulators generally accept that the protection the license is meant to provide was never triggered in the first place. The exception shows up under slightly different names and conditions in EU investment and banking law, UK financial promotion rules, Swiss banking law, and the rules many offshore financial centres apply to foreign banks and brokers, but the underlying logic — client-initiated contact removes the need for local authorisation — is the same everywhere it is used.
How the exception works in practice
The clearest illustration is a Swiss or Singaporean private bank with no branch, subsidiary or passporting rights in France. Under EU and French rules, a bank without French authorisation cannot market its services to French residents, open accounts for them through local agents, or run advertising aimed at the French market. But if a French resident travels to Geneva, opens an account there unprompted, and continues to manage that relationship from France afterwards, the bank has not solicited anyone — the client solicited the bank. The same logic governs a US brokerage dealing with a foreign investor who contacts it directly, or a crypto exchange without a local electronic money institution or money-transmitter registration that onboards a user who found the platform on their own and signed up without being targeted by any local-language advertising, local app-store listing, or in-country sales call. In every case, the firm's defence rests on being able to show the client made the first move and that nothing the firm did constitutes solicitation.
Why regulators treat it as narrow, not a loophole
Reverse solicitation is deliberately built to be hard to rely on at scale, because regulators are well aware it could otherwise become a backdoor around regulatory perimeter rules entirely. European regulators in particular have tightened guidance so the exception only covers the specific service the client actually asked for — a bank that is approached about a savings account cannot then use the same reverse-solicitation basis to sell that client a structured derivative, a mortgage, or a different product line, because that second product was not what the client initiated contact about. Ongoing servicing of the relationship, renewals, and any proactive follow-up contact from the firm can also strip the exemption away, since continued outreach starts to look like the ordinary solicitation the rule was built to exclude. ESMA and national regulators across the EU have also made clear that any website, app, or marketing material visibly aimed at a specific country — translated into the local language, listing local phone numbers, referencing local tax rules, or appearing in local-market advertising — undermines a reverse-solicitation defence even if an individual client's contact was, in isolation, unprompted. A firm cannot build a business model around “unsolicited” clients while quietly running country-targeted marketing to attract exactly those clients.
Documentation and the burden of proof
Because reverse solicitation is a defence a firm has to assert rather than a status a regulator grants in advance, firms that rely on it are expected to keep records proving the client-initiated nature of the relationship: the first contact method and date, evidence the client reached the firm's own channels rather than being directed there, and a record that no marketing, agent, or affiliate reached into the client's home jurisdiction beforehand. Supervisors reviewing a firm's cross-border book will ask for this evidence directly, and the burden sits with the firm, not the client or the regulator, to show the exemption genuinely applies. This is one reason reverse solicitation functions well as a narrow safety valve for occasional, client-driven cross-border relationships but works poorly as a regulatory arbitrage strategy for building a cross-border customer base — a firm that tried to do the latter and got it wrong would effectively be running unlicensed cross-border business, with the usual enforcement consequences that follow.
Where it fits alongside licensing and passporting
Reverse solicitation is best understood as the exception to a rule, not an alternative to one. The default position in most regulated markets is that a foreign firm needs a license, a passport from an equivalent home-country regime, or a sponsorship arrangement with a locally licensed partner before it can actively pursue customers there; reverse solicitation only covers the specific, narrower case where the firm did none of the pursuing. Firms expanding deliberately into a new market — through advertising, local staff, an agent network, or a formal MiFID II or equivalent passport — are operating under ordinary licensing compliance rules, and reverse solicitation has no bearing on what they are doing. It becomes relevant only at the edges: the handful of clients who show up unprompted, the occasional cross-border inquiry a firm did not seek out, and the compliance analysis of whether a given relationship can be classified that way at all. Compliance teams at banks, brokers, and crypto platforms that operate internationally typically maintain a reverse-solicitation policy specifically to define, in advance, what evidence staff must collect before treating any foreign client relationship as falling under the exception, precisely because getting the classification wrong converts what looked like a compliant edge case into unlicensed activity in the client's home market.