How Dutch bemiddelaars and volmacht agents can use WhatsApp within the Wft and AFM supervision: licence scope, duty of care, Autoriteit Persoonsgegevens, iDEAL.
The Netherlands is one of the easiest European markets in which to put WhatsApp at the centre of client service, and one of the most demanding in which to do it carelessly. WhatsApp is the dominant messaging app in the country by a wide margin, according to Newcom's annual Nationale Social Media Onderzoek, and Dutch clients expect a reply in the same channel they wrote in. At the same time, the Wet op het financieel toezicht (Wft) gives the AFM a detailed conduct rulebook, and the Autoriteit Persoonsgegevens has a reputation for enforcing GDPR against firms of every size. This guide sets out what an adviseur, bemiddelaar or gevolmachtigd agent needs to have in place.
The AFM supervises the conduct of three categories that overlap in most broking firms:
| Role | Dutch term | Licence basis | Typical activity |
|---|---|---|---|
| Adviser | adviseur | Wft licence for advising | Recommends a specific product to a client |
| Intermediary | bemiddelaar | Wft licence for intermediation (article 2:80 Wft) | Arranges the contract between client and insurer |
| Authorised agent | gevolmachtigd agent (volmacht) | Wft licence for acting as authorised agent (article 2:92 Wft) | Underwrites and administers policies on the insurer's behalf, often as co-developer of the product |
Three features of the Dutch regime shape how the channel is used. First, professional competence is personal and continuous: the relevant Wft diploma (for example Wft Schade particulier or Wft Schade zakelijk) and ongoing permanent education are required for the people who advise. Second, the duty of care (zorgplicht) and the information duties in the Wft and the Besluit Gedragstoezicht financiële ondernemingen (Bgfo) apply regardless of the channel, and the AFM expects a firm to be able to show the advice trail. Third, remuneration transparency: complex products have been subject to the commission ban since 2013, and for non-life policies sold to consumers the firm must proactively disclose the commission amount — the actieve provisietransparantie that applies since July 2024. A WhatsApp conversation in which the adviser gives a recommendation without the written confirmation and disclosure is a conversation the AFM can hold against the firm. Adfiz, the trade association for advisers and intermediaries, maintains a Wft portal for members that tracks these rules as they change.
A gevolmachtigd agent acts under a power of attorney from one or more insurers. It issues policies, collects premiums and often settles claims. The insurer remains responsible towards the AFM and towards its own prudential supervisor, De Nederlandsche Bank, for what the agent does in its name, and the AFM has reporting duties for insurers that discover breaches by their agents. In practice that means a volmacht firm using WhatsApp with policyholders must satisfy the insurer's audit as well as its own: who answered, what was promised about cover, how a claim notification was logged. The NVGA, the association of volmacht firms, sets protocol standards that many insurers write into their volmacht agreements. The safe structure is a single firm number per volmacht entity, a shared inbox, and a log that distinguishes between the agent's own advice activity and its underwriting activity on the insurer's behalf.
GDPR applies through the Uitvoeringswet AVG, supervised by the Autoriteit Persoonsgegevens. For a Dutch intermediary the points to settle before rolling out WhatsApp are:
ORIS records WhatsApp opt-in, marketing opt-out and service opt-out as separate flags on each customer, tags every campaign as service or marketing, and keeps audit logs of who sent what. That is the minimum the Autoriteit Persoonsgegevens would expect to see if it asked how the channel is governed.
Dutch premiums are paid overwhelmingly by SEPA direct debit (automatische incasso) for recurring premiums and by iDEAL for one-off amounts. WhatsApp does not process either, and ORIS has no payment function, so the channel's role is to get the right information to the client at the right time: the reminder that a monthly incasso will be collected after a failed attempt, the iDEAL link generated by the firm's own invoicing system for a first premium, the confirmation that payment has been received. Two practical rules apply. Do not paste bank details or payment links that the client cannot verify as coming from the firm — the registered WhatsApp Business account with the firm's verified name is what makes the message credible. And keep the collection reminder factual: amount, date, consequence under the policy conditions if the premium remains unpaid, and a way to talk to someone.
Advisers and intermediaries serving consumers are registered with Kifid, the complaints institute for financial services, and must have an internal complaints procedure. In a dispute about advice, the written record carries the argument; a WhatsApp exchange shows what the client asked and what the adviser answered, which can confirm the written record or contradict it. Keep the export path tested. Those running several offices will recognise the pattern from our piece on running a shared WhatsApp inbox in a brokerage; the mechanics are the same, the regulator is different. Further reading on related obligations is gathered under compliance and regulation, and the country pages summarise the regulator and data-protection authority for each market.
The Wft does not prohibit a channel. Advice given in a chat must still be based on the client's situation, recorded, and confirmed in writing with the disclosures the Wft and Bgfo require, including commission transparency for consumer non-life products. Use the chat to discuss and the written document to confirm.
Not legally, but it is often simpler for audit purposes. If one number is used, the archive and the logging should make clear whether a conversation belongs to the agent's own intermediation or to its underwriting on the insurer's behalf, since the insurer is accountable for the latter.
A reminder about the client's own policy is a service message based on the contract, not direct marketing under the Telecommunicatiewet. Meta still requires that the number has opted in to WhatsApp contact with the firm, and an opt-out must be honoured for marketing regardless.
No. iDEAL and SEPA direct debit run through the firm's banking and invoicing systems. WhatsApp carries the reminder and, if the firm chooses, a payment link generated elsewhere. ORIS does not process payments.
The advice file, the disclosures, the client's instructions and the communications around them, for the period set by the firm's retention policy. WhatsApp threads are part of the communications and should be exportable in full, with dates and the name of the adviser who wrote each message.
Shared WhatsApp inbox, client records, follow-ups and opportunities for the whole brokerage. 15-minute demo.
A marketing message sent to a segment of your book is a financial promotion. What ICOBS 2.2, the Consumer Duty and FG24/1 require inside a WhatsApp message.
PROD 4 makes your commission part of what the customer pays. What a small UK brokerage has to assess, review and be able to show — and where the proof sits.
How a UK brokerage archives client WhatsApp conversations under SYSC 9 and ICOBS, sets a retention policy, handles personal devices and exports evidence for the FOS.
