12 CFR §349.24

1. (a)Specific authorization required. No FDIC-supervised insured depository institution may directly or indirectly effect a retail forex transaction for the account of any retail forex customer unless, before the transaction occurs, the retail forex customer specifically authorized the FDIC-supervised insured depository institution to effect the retail forex transaction.
2. (b)Requirements for specific authorization. A retail forex transaction is “specifically authorized” for purposes of this section if the retail forex customer specifies:
   1. (1)The precise retail forex transaction to be effected;
   2. (2)The exact amount of the foreign currency to be purchased or sold; and
   3. (3)In the case of an option, the identity of the foreign currency or contract that underlies the option.