Forex broker regulation FAQ

For EU retail traders the key regulators are: CySEC (Cyprus — the most common EU passport), BaFin (Germany), AMF (France), CONSOB (Italy), CNMV (Spain), and ESMA (the EU-wide authority that sets overarching rules). The FCA (UK) is highly respected but no longer passports into the EU post-Brexit. Always check that the specific entity you trade with holds the licence — brokers often have multiple entities.

An offshore broker is registered in a jurisdiction with minimal oversight — commonly Vanuatu, St. Vincent and the Grenadines, Seychelles, or Belize. These jurisdictions have little or no effective enforcement. Offshore brokers can offer very high leverage (sometimes 2,000:1), but provide no negative balance protection, no investor compensation fund, and are extremely difficult to take legal action against. For EU retail traders, trading with an offshore broker carries very high risk of losing all funds with no recourse.

Go directly to the regulator's official website and search by broker name or registration number. Never rely on a "Regulated by…" badge on the broker's own site. Key register URLs:

CySEC: cysec.gov.cy → Regulated Entities
BaFin: bafin.de → Company Database
FCA: register.fca.org.uk
AMF: regafi.fr
Always check the specific trading entity name, not just the parent company — a broker's marketing company may be unregulated even if a sister company is.

If a broker's licence is revoked, they must stop accepting new clients, close open positions in an orderly manner, and return client funds. CySEC publishes enforcement actions on its website. If the broker cannot return funds, the ICF steps in (up to €20,000). You can also file a complaint with the regulator, pursue arbitration, or take civil legal action. Keep records of all deposits, withdrawals, and communications.

ESMA (European Securities and Markets Authority) is the EU's unified financial regulator. It sets rules that all 27 EU national regulators must implement under MiFID II. Key ESMA measures for forex traders: leverage caps (30:1 on major pairs), mandatory negative balance protection, standardised risk warnings showing the percentage of retail accounts that lose money, and bans on bonus schemes that encourage excessive risk-taking.

MiFID II (Markets in Financial Instruments Directive II) is the EU law that governs investment services, including forex trading. It requires brokers to: act in your best interest, disclose all costs and charges upfront, provide mandatory risk warnings showing the percentage of retail accounts losing money, keep your funds segregated, and only offer products appropriate to your knowledge and experience. All EU-regulated brokers must comply.

ESMA requires all EU-regulated brokers to display a prominent risk warning showing the specific percentage of retail investor accounts that lose money when trading CFDs with that broker. This number typically ranges from 65% to 85%. The exact percentage must be based on the broker's own client data, recalculated regularly. A broker not displaying this warning is a significant red flag.

Yes — by qualifying as a professional client. You must meet at least two of three criteria: (1) significant trading activity (10+ CFD trades per quarter of meaningful size over the past year), (2) a financial instrument portfolio over €500,000, or (3) professional experience in the financial sector for at least one year. Professional status removes negative balance protection and some other safeguards — consider carefully before applying.

Regulated EU brokers must hold client funds in segregated accounts, separate from the broker's own capital. If the broker becomes insolvent, your funds should not form part of the bankruptcy estate. Additionally, CySEC-regulated brokers must participate in the Investor Compensation Fund (ICF), which covers up to €20,000 per client if the broker cannot return funds. This does not protect against trading losses — only against the broker failing to return money it owes you.

Negative balance protection means your account cannot go below zero, even if the market moves sharply against you. It was made mandatory for EU retail clients by ESMA in 2018. If you have €500 in your account and the market gaps, your maximum loss is €500 — the broker absorbs any excess. Professional clients do not automatically receive this protection, which is one reason most retail traders should not apply for professional status.

No — if you are classified as a retail client with an EU-regulated broker, negative balance protection ensures you cannot lose more than your deposited funds. Your maximum loss is your account balance. This protection is mandatory under ESMA rules for all retail clients and has been in force since 2018.

An investor compensation scheme is a fund that pays clients if a regulated broker becomes insolvent and cannot return client money. CySEC-regulated brokers contribute to the Investor Compensation Fund (ICF), which covers up to €20,000 per client. The FCA's Financial Services Compensation Scheme (FSCS) covers up to £85,000. These schemes do not cover trading losses — they only apply when the broker itself fails to return funds it owes you.

Not legally if they are regulated. EU-regulated brokers must give advance notice before closing accounts, follow specific procedures for margin calls and stop-outs, and cannot freeze or seize funds without a valid legal reason. They must also return client funds promptly upon request. Unregulated offshore brokers have no such obligations — fund seizures and withdrawal blocks are among the most common complaints about unregulated brokers.

CySEC (Cyprus Securities and Exchange Commission) is the most common regulator for EU-passported forex brokers. A CySEC licence lets a broker operate legally in all 27 EU member states. FCA (UK Financial Conduct Authority) is considered stricter in many respects, but post-Brexit, FCA-only brokers no longer have automatic EU access. Many brokers hold both licences — EU clients are served by the CySEC entity, UK clients by the FCA entity. Check which entity you are signing up with.

Yes — many major brokers hold both a CySEC licence and an FCA licence. Examples include AvaTrade, eToro, Pepperstone, and IC Markets. EU clients are served by the CySEC-regulated entity; UK clients by the FCA entity. During the sign-up process, check which legal entity you are registering with — the protections and compensation limits differ between jurisdictions.

First, use the broker's own complaints procedure (MiFID II requires them to have one, with a written response within a set timeframe). If unresolved, escalate to the relevant regulator:

CySEC: cysec.gov.cy/Complaints
BaFin: bafin.de/complaints
FCA: fca.org.uk/consumers/how-complain
In Cyprus, you can also use the Financial Ombudsman (financialombudsman.gov.cy). Keep records of all communications, transaction history, and any screenshots of issues.