If your bank or credit union posts about savings accounts on social media, the Truth in Savings Act applies. So does Regulation DD, the rule that implements it. That means specific disclosures, specific language, and specific hyperlink practices — all inside a format (a tweet, a Reel, a Story) that wasn’t designed for regulatory disclosure.
Most financial institutions know Reg DD applies to their print and web advertising. Fewer have translated the same requirements into their social media workflow. Here’s how to do it, and where compliance most often breaks down.
Yes. The Truth in Savings Act is a federal consumer protection statute that helps consumers compare deposit accounts across financial institutions. Regulation DD, which implements the Act, applies to any commercial message in any medium that directly or indirectly promotes the availability or terms of a deposit account.
That last part is the piece that catches institutions off guard. Reg DD is medium-neutral. It doesn’t distinguish between a newspaper ad, a website banner, an Instagram post, a TikTok, or a paid social ad. If the message promotes the availability or terms of a savings account, it’s an advertisement under the rule, and the disclosure obligations attach.
Two requirements do the heavy lifting for social media compliance.
Every social media post that mentions a savings product must be accurate. It cannot contain misleading statements about the account’s terms, features, or costs.
The most common violation: describing an account as “free” or “no cost” when any maintenance fee, activity fee, or similar charge could apply. Reg DD is specific on this point. If a fee of any kind could be assessed on the account, the words “free” and “no cost” (and any equivalent) are prohibited.
This extends beyond the obvious. Language like “no strings attached,” “nothing to pay,” or “open at no charge” runs into the same rule if any fee could apply.
If your post states a rate of return on a savings account, that rate must be stated as an annual percentage yield (APY). The abbreviation APY is acceptable, but the full phrase “annual percentage yield” must appear at least once in the advertisement.
Stating an APY is what regulators call a triggering term. Once triggered, additional disclosures become required, including:
None of that will fit in a tweet, a caption, or a fifteen-second Reel. Which is why the next question exists.
Regulators recognized early on that a full Reg DD disclosure won’t fit into most social media posts. The accepted workaround is a hyperlink that takes the consumer directly to the complete disclosures. This is commonly known as the “one click away” rule.
For the link to actually satisfy Reg DD, three things need to be true.
Best practice is to also include a brief in-post disclosure of any key information that can fit (the APY, the offering period, the fact that fees may apply), with the hyperlink handling the rest. Overloading the post with legal copy defeats the purpose. Providing nothing shifts too much weight onto the link.
Reg DD applies uniformly across formats. The compliance workload doesn’t.
Text posts (Facebook posts, LinkedIn posts, tweets with sufficient character limits) are the easiest. You can include an APY, a brief disclosure, and a compliant hyperlink in a single post.
Short-form video (Reels, TikToks, Shorts) is harder. Any spoken or on-screen APY triggers the disclosure requirements. If the disclosure appears only in the caption, and the video is watched with audio off (increasingly common), the compliance is arguably weaker than a text post with an inline disclosure. Most institutions handle this by including on-screen text disclosures within the video itself, plus a compliant link in the caption.
Stories and ephemeral content pose a distinct problem. Content that disappears after 24 hours still counts as an advertisement while it’s live. Some institutions avoid making rate claims in ephemeral formats entirely and keep the promotional heavy lifting on permanent posts.
Paid social ads carry the highest compliance stakes. Paid amplification means the post reaches consumers who wouldn’t otherwise see it, in states and markets the institution may not have specifically targeted. Reg DD applies to the ad content itself, and any misstatement in a paid ad gets amplified with the media spend.
A handful of patterns account for most Reg DD social media findings.
Reg DD is one of several rules that apply simultaneously to a single social media post.
Institutions with mature social media compliance programs treat Reg DD as one line item on a broader checklist, not as a standalone review.
Reg DD violations rarely produce direct consumer lawsuits. The enforcement pathway is regulatory. Depending on the institution’s primary regulator (OCC, Federal Reserve, FDIC, NCUA, or state banking department), findings typically appear as:
The direct financial cost of a single Reg DD social media violation is usually modest. The indirect cost, showing up as increased examination scrutiny, elevated compliance monitoring, and remediation expense, adds up quickly. Most institutions treat social media Reg DD compliance as a preventable risk, because it is.
Yes, if the post promotes the availability or terms of a deposit account. Regulation DD is medium-neutral. A Facebook post that mentions a specific savings account and its terms is an advertisement under the rule and must meet Reg DD’s accuracy and disclosure requirements.
Only if the post states a rate of return. A post that mentions a savings account without quoting a rate does not trigger the APY disclosure requirement. Once you state any rate, however, it must be expressed as an APY, and the additional disclosures become required.
Yes, if the video (including any on-screen text and caption) contains the required accuracy and disclosure elements. Because video is often watched without audio, best practice is to include disclosures as on-screen text within the video itself, in addition to any caption or link to full terms.
The hyperlink in your social media post must take the consumer directly to a page containing the complete Reg DD disclosures for the advertised account. Not the homepage. Not a general landing page. The exact page with the disclosures. The link should also be clearly labeled so the consumer knows what they’re clicking to.
Using the word “free” on accounts that carry any fees, using the abbreviation APY without also spelling out annual percentage yield, hyperlinks that don’t go to the actual disclosures, and outdated rate claims on old posts that were never updated when the rate changed.
Potentially. If a personal post by an employee promotes a specific account and rate, and the employee’s affiliation with the institution is apparent, the post can be attributed to the institution for compliance purposes. Institutions should have clear policies on what employees can and cannot post about the institution’s products.
Reg DD compliance on social media is not particularly complex. It’s the kind of compliance work that fails through inattention rather than through difficulty. The rules are stable, well-known, and well-documented. What breaks down is the workflow: a marketing team drafting posts under time pressure, a compliance team reviewing at volume, and an institution trying to keep pace with the demands of continuous social media content.
The institutions that get this right typically build Reg DD into their content approval process rather than checking for it after the fact. That means shared templates with the disclosures already in place, a pre-approved hyperlink library for each active product, and a clear escalation path when a rate changes or an account’s terms shift.
None of that is glamorous. All of it is cheaper than the alternative.
For a deeper look at how Reg DD fits into a broader social media compliance program, see our guide to FFIEC social media compliance for banks and credit unions. If your institution needs help building or auditing its social media compliance program, contact The Social Media Law Firm.
Author
Ethan Wall, Esq.
Founding Attorney, The Social Media Law Firm
Nationally Recognized Social Media Lawyer
Legal Disclaimer: This content is for informational purposes only and does not constitute legal advice.
For more legal tips, give us a follow on Instagram, TikTok, Linkedin, or check out our YouTube Channel.
Subscribe to The Social Media Lawcast on Spotify Podcasts.
