Forex Broker Regulation Check: How to Verify a Broker

A forex broker regulation check answers one question: which legal entity will hold your money, and is that entity authorized by a regulator to serve clients in your country? Every step below works back to that question. A well-known brand name, a licence number in a website footer or a high rating does not answer it on its own. The register entry for the exact company named in your client agreement does.

The brand and the entity are not the same thing. Many brokers operate several companies under one name, each licensed in a different jurisdiction, and clients are assigned to one of them based on where they live. A broker can be fully authorized in the UK while your account sits with an offshore subsidiary that offers fewer protections.

What a regulation check can and cannot establish

Each fact you collect proves something specific, and nothing more.

• A licence on a regulator’s register establishes that a named company is authorized for named activities in that jurisdiction. It does not establish that the website you are using belongs to that company, that your account will be opened with it, or that the firm is financially sound.
• The absence of regulator warnings establishes only that the registers you searched had no warning under the names you searched. Regulators publish warnings after they receive reports, so a new or renamed operation may not appear yet.
• A regulator warning establishes that a specific authority stated a specific thing on a specific date, usually that an entity or website was not authorized there. It does not necessarily mean the firm is unlicensed everywhere, but it does mean you cannot rely on that regulator’s protection.
• Complaints and reviews show what some users reported. They are not a measure of how often problems happen.

No combination of these facts proves a broker is safe or rules out a scam. Together they tell you what legal protection you would have and which questions remain open.

Step 1: Identify the legal entity behind your account

Start with the broker’s own documents, not its marketing pages.

1. Open the client agreement or terms of business and find the full legal name of the company you would contract with. It is usually in the first section or the definitions.
2. Read the website footer and the “regulation” or “legal” page. Multi-entity brokers list each company, its registered address, its regulator and its licence or reference number.
3. Check which entity applies to your country. The onboarding flow or the terms usually state that residents of certain regions are served by a particular company. If the site lists a UK entity and a Seychelles entity, find out which one would accept you.
4. Note the registered address and company number. You will compare these with the register entry.

If you cannot identify a named legal entity at all, or the documents name one company while the site displays another, that is a finding in itself.

Step 2: Confirm the licence on the regulator’s own register

Never verify a licence through a link or a PDF supplied by the broker. Go to the regulator’s official website directly, open its public register, and search for the entity name and the licence number separately.

What to match on the register entry

Where to look

Each major regulator runs its own public lookup:

• United Kingdom: the FCA Financial Services Register. Entries show permissions, approved websites and, for clone warnings, the details fraudsters are using.
• Australia: ASIC’s professional registers, where Australian financial services (AFS) licensees appear with licence numbers and authorizations.
• United States: the NFA’s BASIC system. Retail forex dealers must be registered with the CFTC (as a retail foreign exchange dealer or futures commission merchant) and be NFA members. BASIC shows the NFA ID, registration categories and any disciplinary history.
• Cyprus: CySEC’s register of Cyprus investment firms, which also shows firms passported into other EU states.
• Other European regulators such as BaFin (Germany), CONSOB (Italy), CNMV (Spain), the AMF (France) and the FMA (Austria) publish both registers and warning lists.
• Switzerland: FINMA’s list of authorized institutions and its warning list.

If a broker claims a licence from a regulator that has no public register, or the regulator’s website cannot be found independently, treat the claim as unverified.

Step 3: Check the permissions and your jurisdiction

A valid licence still has limits that determine whether it covers you.

Geography. A licence applies to the regulator’s jurisdiction. Within the EU and EEA, a firm authorized in one member state can passport its services into others, and the home regulator’s register normally shows which countries. A UK licence does not automatically cover clients in Australia, and an Australian licence does not cover clients in the US.

The US is a closed market. US residents trading retail forex can legally do so only with CFTC-registered, NFA-member firms. An offshore broker that accepts US clients without that registration is operating outside the US framework, and US regulators have repeatedly brought actions against such firms.

Offshore and lighter-touch regimes. Some jurisdictions license brokers with lower capital requirements, fewer conduct rules and no compensation scheme. A licence there is a real record, but the protections attached to it are narrower. That difference matters more than whether the broker’s other entities hold stronger licences, because your money sits with only one of them.

Permission type. Confirm the register lists the activities you would rely on, especially holding client money and dealing in CFDs or rolling spot forex.

Step 4: Read the client protections attached to that entity

Protections belong to the entity and its regulator, not to the brand. Check each of these against the specific company that would hold your account.

• Segregation of client funds. Major regulators require client money to be held separately from the firm’s own funds, typically in trust or designated accounts. The client agreement should say where funds are held and under which rules.
• Negative balance protection. Since ESMA’s 2018 product intervention measures, retail CFD clients of EU-authorized firms cannot lose more than their account balance. The UK adopted equivalent rules. Outside these regimes, protection may be a voluntary company policy that can change, or absent.
• Leverage limits. ESMA and UK rules cap retail leverage at 30:1 on major currency pairs, with lower limits on other instruments, and require margin close-out when equity falls to 50% of required margin. ASIC introduced comparable CFD leverage limits for retail clients in 2021. US rules cap retail forex leverage at 50:1 on major pairs and 20:1 on others. An entity offering far higher leverage to retail clients is operating under a different regime, which tells you which rules apply.
• Compensation schemes. If a regulated firm fails and client money is missing, a scheme may pay eligible clients up to a limit. In the UK, the FSCS covers eligible investment claims up to £85,000 per person per firm. Cyprus’s Investor Compensation Fund covers eligible clients of CySEC firms up to €20,000. Many jurisdictions have no equivalent for forex and CFD clients. In the US, SIPC protection does not extend to retail forex.
• Dispute resolution. Some jurisdictions give retail clients access to an independent ombudsman, such as the Financial Ombudsman Service in the UK or the Australian Financial Complaints Authority. Check whether the entity is a member and whether you would qualify as an eligible complainant.
• Client categorization. Being classed as a “professional client” usually removes retail protections such as leverage caps and negative balance protection. Read what you give up before accepting an offer to switch.

Step 5: Search regulator warning lists and clone alerts

Search warning lists under the brand name, every legal entity name, and every domain the broker uses. Warnings take several forms:

• A false licence claim. The NFA reported in 2023 that Loyal Primus claimed NFA ID 0555433 but was not an NFA member.
• A website block. CONSOB blacklisted and blocked Binetrix’s website in 2023 for offering financial services without authorization. Italian authorities can order blocks of unauthorized sites; a mirror domain may still be reachable elsewhere.
• A domain-level warning. CNMV’s 2022 warning on unauthorized entities referenced IC-FOREXMARKET.COM and related domains rather than a company name.
• A warning naming several entities. Austria’s FMA warned in 2026 that Tag Markets, T.M. Financial Ltd and Tag Markets Ltd were not authorized to conduct licensable securities transactions in Austria, so a search under only one of those names can miss it.

Each of these is a statement by one regulator about its own jurisdiction on a stated date. The regulator’s own site remains the authoritative source for its current list.

Clone firms deserve particular attention. A clone uses the name, licence number and sometimes the address of a genuinely authorized firm, then changes the contact details, domain or payment instructions. The register entry looks perfect because it belongs to the real firm. Contact details and approved domains on the register are how you tell the difference: if the phone number, email or website you were given does not match the register, contact the firm through the register’s details only.

Step 6: Weigh complaint evidence carefully

Complaints can reveal problems that registers do not, such as withdrawal delays, account closures after profitable trading, or disputed slippage. They also have limits.

• Read for specifics. A complaint with dates, amounts, ticket references and the broker’s response tells you more than a star rating.
• Separate complaint types. Withdrawal refusals and unexplained account freezes bear directly on fund safety. Complaints about losing trades often describe market risk rather than broker misconduct.
• Check the entity. A complaint about a broker’s offshore entity does not describe its UK entity, and the reverse.
• Do not count. A large broker will attract more complaints than a small one simply because it has more clients. Neither a high nor a low number measures how risky a firm is.

Regulator enforcement records are stronger evidence than user posts. The FCA, ASIC and NFA publish final notices, fines and disciplinary actions, and the NFA’s BASIC entries list regulatory actions against members.

Reading broker scores and “Tier-1” labels

Broker scores, such as AvaTrade at 9.4 (ASIC) or Pepperstone at 9.1 (FCA), are our own rating metric. They are not a regulatory finding and not a probability that your funds are safe. The regulator shown is one regulator associated with the brand: a brand labeled FCA may serve clients in your country through a different company under a different regulator. “Tier-1” describes how strict that regulator’s regime is generally considered, not the firm, and it carries over to you only if your account sits with the entity that regulator authorizes. A broker holding many licences across many regulators is not safer for you than one holding a single licence; what matters is the licence covering your entity.

Comparing brokers on regulation

When choosing between two regulated brokers, compare the specific entities that would serve you:

1. Which company would hold your account, and which regulator authorizes it?
2. Is client money segregated under that regulator’s rules?
3. Does negative balance protection apply as a legal requirement or as a company policy?
4. Which compensation scheme, if any, covers that entity, and up to what limit?
5. Can you take an unresolved dispute to an independent ombudsman?
6. Are there warnings or enforcement actions against any of the brand’s entities or domains?

Risks a clean check does not remove

Even when every step checks out, some risks remain:

• Firm failure. Segregation and compensation schemes reduce the damage if a broker collapses, but schemes have limits and claims take time.
• Execution and pricing. Regulation sets conduct rules but does not guarantee tight spreads or fill quality. Slippage and requotes are a separate evaluation.
• Changes after you sign up. Brokers move clients between entities, regulators revoke licences, and terms change. Rechecking the register periodically, and whenever the broker asks you to accept new terms, catches these changes.
• Impersonation. Payment instructions sent by email or chat that point to a different company or a personal account are a classic fraud pattern, even when the broker itself is genuine.

If a question about the entity or the licence remains open after these steps, opening an account does not answer it. The answer has to come from the regulator’s register or the broker’s documents before any money moves.