CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage. Between 74–89% of retail investor accounts lose money when trading CFDs. You should consider whether you understand how CFDs work and whether you can afford to take the high risk of losing your money.
Affiliate disclosure: CompareFX is an independent comparison site. Some links on this page are affiliate links, and we may earn a commission if you open an account with a broker we list — at no extra cost to you. This never affects our safety assessments or rankings. This page is educational only and is not financial advice.
Your broker holds your money and your personal data. Before you trust either to them, run this 9-point security checklist. It takes about ten minutes and it is the difference between a safe deposit and losing your funds to an unregulated or poorly-run operation. Work through every point — a broker only needs to fail one to be worth avoiding.
1
Verify the regulatory licence on the regulator's own site
Find the broker's licence number, then check it directly on the regulator's website — not the broker's. For EU clients, look for CySEC (cysec.gov.cy), BaFin (bafin.de), AMF (regafi.fr), or FCA (register.fca.org.uk) for legacy relationships. If the number does not appear, or the entity name does not match, stop here.
2
Confirm client funds are held in segregated accounts
A regulated broker must keep your money in bank accounts separate from its own operating funds. This means if the broker goes insolvent, your money is not part of its assets and cannot be used to pay its creditors. The broker's legal or terms page should state this explicitly. No mention of segregation is a warning sign.
3
Check for an investor compensation scheme
EU-regulated brokers participate in a compensation scheme that protects a portion of client funds if the firm fails. Cypriot (CySEC) firms fall under the Investor Compensation Fund, covering up to €20,000 per client. Confirm the broker's entity is covered and understand the limit — it protects against broker insolvency, not against trading losses.
4
Verify negative balance protection is on your account
Under ESMA rules, EU retail clients cannot lose more than they deposit — the broker absorbs any negative balance from extreme market moves. Confirm this applies to your specific account type. Professional accounts are not covered, so do not opt up to "professional" status unless you fully understand what you give up.
5
Check the site uses HTTPS and strong login security
The trading portal and client area must load over HTTPS (a padlock in the address bar). Better brokers also offer two-factor authentication (2FA) on login and withdrawals. If a broker lets you log in and move money with only a password, your account security depends entirely on that one password — a real weakness.
6
Read the data protection and privacy policy
An EU-facing broker must comply with GDPR. The privacy policy should explain what data it collects, how it is stored, and your rights to access or delete it. Vague or missing privacy terms suggest weak internal controls — the same controls that protect your money.
7
Test the withdrawal process before you rely on it
Deposit a small amount, place no trades, and request a withdrawal. A safe broker returns funds within a few business days with no obstacles. Watch for: sudden identity-verification demands only at withdrawal, "you must trade X volume first" conditions, or fees that were never disclosed. Withdrawal friction is where unsafe brokers are exposed.
8
Confirm a verifiable company registration and address
A legitimate broker publishes its full legal name, company registration number, and registered office. Cross-check the company in the relevant corporate registry. An offshore shell with only a PO box, or no registration details at all, cannot be held accountable if something goes wrong.
9
Search for a pattern of withdrawal complaints
Search "[broker name] withdrawal problem" and read Reddit, Trustpilot, and independent forums. One or two complaints among thousands of users is normal. A consistent, repeated pattern of refused or delayed withdrawals is the single strongest signal that a broker is unsafe — take it seriously.
Automatic disqualifiers
If any of these are true, do not deposit
- Licence number cannot be verified on the regulator's official website
- No mention of segregated client funds anywhere on the site
- Bonus offers that lock your own deposit until you trade a high volume
- Withdrawal conditions or identity checks that only appear when you try to cash out
- Guaranteed-profit or "risk-free" marketing claims
- No verifiable company registration or physical address
- Pressure to deposit more, upgrade, or join a "managed account" service
- Consistent third-party complaints about refused withdrawals
The two-minute core check
If you only have time for one step: take the broker's licence number, go to the regulator's official site, and search it. A verifiable, active licence with matching entity details clears the single biggest risk. No licence, no deposit.
Brokers that pass the security checks for EU clients
The following brokers are EU-regulated, use segregated client funds, and offer negative balance protection to retail clients. We maintain full reviews on each — always run the checklist above against your specific account before depositing:
- Pepperstone — FCA, ASIC and CySEC regulated; segregated funds; negative balance protection for retail clients.
- IC Markets — CySEC, ASIC and FSA regulated; segregated funds; strong withdrawal track record.
- FP Markets — CySEC and ASIC regulated; segregated funds; low minimum deposit.
This is not personalised financial advice. Use the 9-point checklist to verify any broker yourself before trusting it with your money.
Compare brokers side by side
See regulation, licence details, fund protection, and withdrawal ratings for all major EU-available brokers in one table.
Compare all brokers →