How the August 2024 selloff found brokerages’ capacity limit before the first trade
On August 5, 2024, customers of large retail brokerages struggled to log in and see balances. The strain sat in the pre-trade path, in three layers with different owners: identity checks, account views and shared vendors. No rule set the target.
Looking Back revisits one week at a time, from January 2020 to today, and asks what it meant for the banks, health systems and public agencies we serve. The series was written in 2026, with the benefit of hindsight, and each article says which week it looks back on.
The week
On Monday, August 5, 2024, global markets fell sharply. A weak US jobs report the previous Friday combined with a rapid unwinding of trades funded in Japanese yen. Japan’s Nikkei 225 fell about 12 percent, its worst day since 1987. The Cboe Volatility Index briefly reached its highest level since 2020. US stocks opened sharply lower and recovered over the following days. That morning, customers of Charles Schwab, Fidelity and Vanguard reported trouble logging in and viewing balances, according to Reuters and other outlets citing outage-tracking sites. Schwab said a technical issue had been resolved shortly after midday Eastern time. Fidelity described intermittent issues that it said were fixed. Trading venues themselves operated normally.
Retail brokerages build order routing and execution for bursts. On August 5 the order path held. Customers struggled earlier, at signing in and loading the account page. Call it the pre-trade path: everything that has to work before a customer can decide to trade. On a stress morning every customer opens the app within the same hour, and most only want to look. The rules leave the capacity target to the firm. Regulation SCI, which requires tested capacity at exchanges, clearing agencies and certain other market infrastructure, did not cover retail broker-dealers. The SEC had proposed in 2023 to extend it to some large broker-dealers, but that proposal was still pending. Broker-dealers had to keep a business continuity plan under FINRA Rule 4370 and supervise their systems, without a numeric standard for customer channels. The pre-trade path has three layers, each with a different owner: the identity layer, the account view and the shared vendors underneath both.
The identity layer
A login at a brokerage is a chain of checks. The password is verified with a hashing method that is deliberately expensive in computing terms, so that stolen hashes are hard to crack. A risk engine scores the device and location. A one-time code may go out through an SMS aggregator. A session token is issued and stored. Each step has its own ceiling, and the security team usually owns them.
A stress morning also looks like an attack. Credential stuffing produces a burst of logins from many sources, and so does a market drop. Bot defenses and rate limits tuned for normal days can turn away legitimate customers just as volume peaks. Customers then retry, and apps may retry automatically, which multiplies load on a tier that is already saturated.
Firms have several options, each with a trade-off. Passkeys and app-based push approvals cut dependence on SMS delivery and are cheaper to verify at scale. Longer sessions on trusted devices reduce the number of full logins on a stress day, at some cost in exposure if a device is stolen. Risk engines can carry a volatility mode that relaxes some friction for known devices while holding it for new ones. Retry logic in the app should back off rather than hammer. On August 5 there was also warning time. The Nikkei fell during the US night, hours before the New York open. A pre-open trigger, such as an overseas index move or volatility futures spike, can start pre-scaling the identity tier before customers wake up.
The account view
Once signed in, most customers go straight to the portfolio page. It is often the most expensive page in the app. It pulls positions, applies real-time quotes to each holding, computes gains and losses, and may call for news and research content as well. On a normal day these calls are spread across hours. On a stress morning they arrive together, and the market data lookups multiply with every position held.
The engineering response is graceful degradation decided in advance. Product and operations teams should agree a short list of features that can be switched off by flag when load crosses a threshold, such as charts, research panels, personalized content and non-essential calculations. Positions can be served from a cache that refreshes every few seconds rather than on every request, with the timestamp shown. Order entry and order status must be protected above everything else, with their own capacity reserved.
When the platform still cannot keep up, a virtual waiting room with an honest estimate is better than error pages that invite refreshes. A status page hosted outside the main platform, and a message pointing to phone trading where it exists, reduce call volume. They also give customers a record of what the firm said, which matters later if customers complain about trades they could not place.
The shared vendors
Under both layers sit services that the firm does not run: identity providers, content delivery networks, SMS aggregators, market data vendors and cloud regions. A market drop is a surge for every brokerage at once, so the shared vendors take the combined load of the whole industry. That correlation is easy to miss when each firm plans its own capacity.
Vendor contracts tend to promise availability as a percentage of time. Few state throughput, such as messages or requests per second that the vendor will sustain for this customer during a market-wide burst. Vendor management should ask for that number, test it jointly where possible, and confirm how the vendor rations capacity across clients. Inside the firm, each external call on the pre-trade path needs a timeout, a circuit breaker and a fallback. A slow dependency can be worse than a dead one, because waiting requests tie up resources and trigger retries. A second channel for one-time codes and a second market data source for the portfolio page are the most common fallbacks worth paying for.
Each of the three layers needs a measurable target. A firm might set one as logins per minute at a stated multiple of its worst observed morning. Without a regulator setting the target, the board or risk committee is the natural place to approve it.
With hindsight
The August 5 selloff was short-lived. US indexes recovered their losses within weeks, and the episode is remembered as a volatility shock rather than a crisis. The access problems at Schwab, Fidelity and Vanguard were resolved the same day. They followed a familiar pattern, after retail platform strain in March 2020 and during the meme-stock surges of early 2021. On regulation, the gap described here widened rather than closed. On June 12, 2025, the SEC formally withdrew fourteen pending proposals, including the 2023 plan to expand Regulation SCI to some large broker-dealers and a proposed cybersecurity rule for broker-dealers. Capacity for retail customer channels therefore remains governed by business continuity plans, supervision and customer expectations, not by a specific standard. That leaves the target where this article puts it, with each firm’s own risk governance.