What protections do EU traders have by law?
European retail forex traders benefit from some of the strongest regulatory protections in the world, mandated by ESMA (European Securities and Markets Authority) and implemented through MiFID II and MiFIR.
Negative balance protection
You cannot lose more than you deposit. Mandatory for all EU retail clients. Brokers must absorb losses beyond your account balance.
Segregated client funds
Your money is held in separate bank accounts from broker operating funds. Cannot be used by the broker to cover its own liabilities.
ICF/FSCS compensation
CySEC: up to €20,000 per client via ICF. FCA: up to £85,000 via FSCS. Covers deposited funds if the broker becomes insolvent.
ESMA leverage limits
30:1 major FX · 20:1 minor FX · 10:1 commodities · 5:1 indices · 2:1 crypto. Applies to all EU retail accounts with EU-regulated entities.
No trading bonuses
EU regulations prohibit bonuses or monetary incentives that encourage excessive trading. Brokers cannot offer "deposit match" bonuses to EU retail clients.
50% close-out rule
Brokers must close your positions when your margin drops to 50% of the required level — before you reach zero. Protects against runaway losses.
Safety and compliance comparison table
| Broker | Primary regulation | Compensation | Segregated funds | Neg. bal. protection | Publicly listed | Year regulated |
|---|---|---|---|---|---|---|
| Exness | CySEC 178/12 | €20,000 (ICF) | ✓ | ✓ Retail | ✗ | 2012 |
| AvaTrade | CySEC 347/17 | €20,000 (ICF) | ✓ | ✓ Retail | ✗ | 2017 |
| Pepperstone | CySEC 388/20 + FCA 684312 | €20,000 (ICF) or £85,000 (FSCS) | ✓ | ✓ Retail | ✗ | 2020 |
| XM | CySEC 120/10 | €20,000 (ICF) | ✓ | ✓ Retail | ✗ | 2010 |
| IC Markets | CySEC 362/18 | €20,000 (ICF) | ✓ | ✓ Retail | ✗ | 2018 |
Pepperstone holds both CySEC and FCA licences. EU-resident clients who open under the FCA entity gain access to the FSCS (£85,000 compensation) instead of the ICF (€20,000). This is a significant safety advantage for large account holders.
Broker-by-broker safety review
Exness
Exness has operated under CySEC for over a decade without a major regulatory sanction. The broker processes the majority of withdrawal requests within minutes — an indicator of solid liquidity management. Negative balance protection resets after each trading session. Suitable for: EU beginners and cost-conscious traders who value regulatory track record and zero fees.
AvaTrade
AvaTrade's multi-jurisdictional regulation (including Central Bank of Ireland, ASIC, FSA Japan, and CySEC) is one of the broadest in the industry. The Irish parent entity (established 2006) predates CySEC regulation by over a decade. The AvaProtect tool allows traders to optionally insure specific trades against loss — a unique safety feature not found at most EU brokers.
Pepperstone
For EU traders with larger accounts, Pepperstone's dual-regulation is the standout safety feature. Opening under the FCA entity provides FSCS coverage up to £85,000 — more than four times the ICF limit. Clients can choose their preferred regulatory entity at signup. No inactivity fees reinforce this as the safest option for occasional larger-volume traders.
XM
XM has the longest CySEC track record of any broker in this comparison, holding its licence since 2010. The $5 minimum deposit makes it accessible for cautious beginners. Note the $5/month inactivity fee that activates after 90 days — budget-conscious traders who trade infrequently should account for this.
How to verify your broker is genuinely regulated
Clone brokers and fraudulent firms sometimes claim EU regulation falsely. Always verify directly with the regulator before depositing.
-
Go directly to the CySEC public registry — visit cysec.gov.cy/en-GB/entities/investment-firms/cypriot (never use a broker-provided link). Search by company name, not brand name (e.g., "Exness" is registered as "Exness (Cy) Ltd").
-
Check the exact licence number — the number shown on the broker's website must match the registry entry exactly. Exness: 178/12. AvaTrade: 347/17. A licence number that cannot be found on the registry is a red flag.
-
Verify the licence status is "Active" — licences can be suspended or revoked. The registry shows current status. Also check the CySEC Warning List for any sanctions against the broker.
-
Confirm the entity name matches — the regulated entity (e.g., "Exness (Cy) Ltd") must be the legal entity you are opening an account with. Some broker groups have multiple entities — only the EU entity gives you EU protections.
-
Read the KID before depositing — EU brokers are required to provide a Key Information Document listing all costs, risks, and protections before account opening. If no KID is offered, this is a compliance failure.
See our detailed guide: How to confirm a forex broker's CySEC licence — a practical verification checklist