Vertical · 5 min read

The second signer: elder financial protection that does not strip autonomy

Nadia Ferreira-StrandOperator's Playbook

The available controls for a client showing signs of diminished capacity are a hold, a phone call to a family member, and guardianship. The first two are weak, the third is the removal of a person's legal autonomy, and there is nothing between them.

Is there anything between doing nothing and a conservatorship?

There should be. Elder financial protection currently offers a binary: leave an account fully under the holder's control, or strip their autonomy through a court process. A revocable co-signature rule on defined transaction classes is the missing middle, and it is the person's own choice.

Key takeaways

Authority in financial accounts is modelled as binary. Powers of attorney transfer it wholesale, usually at the point where the client can no longer negotiate the terms.
A client-configured second-signer requirement, set while competent and revocable by the client, occupies the missing middle.
Coercion risk cuts both ways and is the central design problem, not a footnote — the second signer can be the abuser.

Part of Private capital and fund identity

What a firm can actually do today

The gap between the two ends is where almost every family actually sits.

Senior investor protection rules give firms a defined set of tools. A trusted contact person may be recorded at account opening and contacted in specified circumstances. A firm may place a temporary hold on a disbursement where it reasonably believes financial exploitation is occurring.

Both are meaningful and both are reactive. They trigger when the firm already suspects something, which means they depend on the firm detecting exploitation that is frequently being conducted by a family member the firm has met.

Tool	When it acts	What it achieves
Trusted contact	On suspicion	A phone call to someone who may be the exploiter
Temporary hold	On reasonable belief	Delay, followed by a difficult conversation
Power of attorney	On execution	Wholesale transfer of authority
Guardianship	On court order	Removal of legal autonomy

There is nothing a client can set up in advance, for themselves, that constrains their own future transactions without surrendering control.

The missing construct

Ask a seventy-year-old client what they would want. In practice, many say something close to: if I ever try to move more than fifty thousand pounds to someone I have not paid before, make my daughter confirm it — but do not let her stop me spending my own money.

That is a precise, implementable specification. It is a conditional second-signer requirement, scoped by transaction class and threshold, configured by the client, revocable by the client.

No financial system offers it, because account authority is modelled as a property of a person rather than as a constrained delegation.

The design

graduated_authority:
  principal:   [client, credential]
  configured:  [date, while competent]
  rules:
    - when: transfer_to_new_payee AND amount > [threshold]
      require: co_signature_from [named second signer]
    - when: change_of_address OR change_of_beneficiary
      require: notification_to [second signer] AND delay [72h]
  revocable_by: principal, at any time, with notification to second signer
  second_signer_may_not: initiate, modify rules, or revoke

The final line carries most of the safety. The second signer can confirm and can decline. They cannot initiate a transaction, cannot change the rules, and cannot remove the client's ability to revoke.

The coercion problem, treated properly

The uncomfortable fact about elder financial exploitation is that the perpetrator is most often someone close to the victim. A second-signer arrangement can therefore hand an abuser a formal role.

Design responses, none of which fully solves it:

Client-only revocation. The client can remove the second signer at any time, without the second signer's involvement or approval. An abuser cannot lock themselves in.
Second signer cannot initiate. The role is a veto and a confirmation, never an instruction.
Firm visibility. A pattern of declined transactions, or revocation shortly after a family visit, is a signal the firm can act on.
Optional third party. Permit a professional — an attorney, an accountant — rather than only a family member.

A client under sustained coercion can be made to revoke and can be made to consent. No technical construct prevents that, and any article claiming otherwise should be distrusted. What this does is raise the effort required and create observable signals where currently there are none.

Why it must be configured early

The construct only works if it is set up while the client has full capacity, which means firms should be offering it routinely rather than raising it when concerns emerge.

Raising it at sixty-five as a standard planning option is an ordinary conversation. Raising it at eighty-four after a suspicious transfer is an accusation, and it will be experienced as one.

The dignity argument

There is a framing point that determines whether this succeeds. This is not a control the firm applies to a client. It is an instrument the client uses to protect their future self, in the same category as an advance directive.

Firms that present it as protection of the client will meet resistance and should. Firms that present it as an option the client controls, alongside beneficiary designations and powers of attorney, will find take-up considerably higher than they expect.

What a graduated rule looks like

Tiers the account holder sets themselves
Transaction class	Rule
Everyday spending	No change
New payee above a threshold	Notify the second signer
Transfer to a new external account	Second signature required
Change to the rule itself	Second signature plus a delay

The last row is what makes it safe rather than dangerous. A rule an attacker can switch off is not a protection, and a delay on removing it means the second signer learns before it lapses.

Objections and honest limits

“This could be abused by the family member.” A genuine risk, and the reason the rule is a co-signature rather than a transfer of control: the second signer can block but cannot initiate. The holder retains the ability to revoke, with a delay.

“Trusted contact provisions already exist.” They permit a firm to reach out. They confer no authority to stop a transaction, which is the thing families actually want.

Designing a co-signature rule

Holder-initiated and revocable. It is their account and their choice.
Block-only for the second signer. They can stop, never initiate.
Delay on removing the rule. So the second signer is warned before it lapses.
Scoped to defined classes. New external destinations, not everyday spending.

Terms used here

Trusted contact: A person a firm may contact about an account, with no authority to act or block.
Conservatorship: A court-ordered arrangement transferring financial decision-making, and the only current alternative to doing nothing.
Co-signature: A rule requiring a second party's approval for defined transactions, without transferring control.

Frequently asked questions

What if the second signer is the exploiter? Client-only revocation, no initiation rights, and firm visibility of patterns limit the damage. It is not eliminated, and the article treats that as the central unresolved risk rather than a caveat.

Is this a power of attorney? No. A power of attorney transfers authority to act. This adds a confirmation requirement to the client's own transactions and transfers nothing.

Would regulators permit it? Nothing in senior investor protection rules prohibits a client from imposing conditions on their own account. Firms should confirm with counsel in their jurisdiction.

When should firms offer it? Routinely, as part of planning conversations, well before any concern arises. Offering it reactively converts an option into an allegation.

How is this different from a trusted contact? A trusted contact can be told. A co-signer can block a specific class of transaction, which is what families are actually asking for.

Could the second signer abuse it? They can block, never initiate, and the holder can revoke. That asymmetry is deliberate.

Why a delay on removing the rule? So a coerced or deceived holder cannot have the protection switched off in the same session as the transfer.

Where this fits in Manav

Manav binds the authorising individual to the exact record change or instruction, and produces a receipt a custodian, a transfer agent or a regulator can verify without calling the issuer.

See instruction receipts →

Sources and further reading

Safe smart account documentation
FCC — protecting consumers from SIM swap and port-out fraud
Published research on financial capacity, cognitive decline and exploitation by known persons.
Practice guidance on powers of attorney and their misuse.
CFPB — resources for older adults