Broker regulation: what the license types mean and which regulators matter

Broker regulation is the primary investor protection mechanism in retail trading. A regulatory licence is not just a badge; it imposes specific legal obligations on the broker relating to capital adequacy, client fund handling, conduct standards, and dispute resolution. Understanding what different regulatory bodies actually require helps traders assess how much protection a licence provides.

What regulation actually requires

Licensed brokers must typically maintain minimum capital reserves, hold client funds in segregated accounts, submit to regular audits, follow fair conduct rules, and offer access to a complaints and compensation scheme. The specific requirements vary by regulator; tier-1 regulators are generally the most demanding and have the strongest enforcement track records.

Tier-1, tier-2, and offshore: what the differences mean in practice

Not all regulation is equal. Grouping regulators into tiers helps you quickly assess the level of oversight a broker is subject to.

Tier-1 regulators have genuine enforcement powers, rigorous licensing requirements, and meaningful client compensation schemes. They publish enforcement actions, maintain searchable public registers, and impose ongoing capital and conduct obligations. The main tier-1 regulators relevant to UK retail traders are the FCA (UK), ASIC (Australia), CySEC (Cyprus/EU), BaFin (Germany), and FINRA/CFTC/NFA (US). These bodies will act against a firm that violates client money rules, and their compensation schemes provide real protection if a firm fails.

Tier-2 regulators are generally legitimate but less rigorous. They may have lower capital requirements, less frequent auditing, or limited enforcement capacity. Some brokers hold a tier-2 licence alongside a tier-1 licence for clients in markets where no tier-1 authorisation is held. A tier-2 licence is not automatically a warning sign if a tier-1 licence is also held for the relevant client entity, but it should not be treated as equivalent to tier-1 oversight.

Offshore regulators — including the Financial Services Authority Seychelles (FSA), the Vanuatu Financial Services Commission (VFSC), and the Belize IFSC — carry minimal requirements and virtually no investor compensation. A broker operating only under offshore regulation has far less accountability to its clients. The critical question is whether the entity your account is held with carries a tier-1 licence. If it does not, your protections are substantially reduced regardless of what the broader broker group claims elsewhere.

One specific case worth understanding: St Vincent and the Grenadines does not regulate forex or CFD brokers at all. A broker claiming to be regulated or licensed in SVG is making a misleading claim. The presence of an SVG reference on a broker’s website is a red flag, not a neutral data point.

What FCA authorisation actually involves

The FCA authorisation process is substantive. Firms must demonstrate that they have adequate financial resources, that their directors and senior managers are fit and proper persons with relevant experience and clean regulatory records, that their business model and systems are appropriate for the activities they intend to carry out, and that they have adequate client money controls and risk management processes in place.

Once authorised, FCA firms are subject to ongoing obligations: regular financial reporting, supervision visits, compliance with the FCA’s Conduct of Business sourcebook (COBS), client money rules (CASS), and market conduct rules. Breaches can result in fines, business restrictions, or withdrawal of authorisation. The FCA publishes enforcement actions publicly, providing transparency about how it handles misconduct.

Retail clients of FCA-authorised investment firms receive several specific protections: negative balance protection (you cannot lose more than your deposit on leveraged products), leverage limits imposed under ESMA product intervention rules, clear and fair disclosure of risks, and participation in the FSCS compensation scheme up to £85,000.

FCA Authorised vs FCA Registered: why the distinction matters

The FCA Register contains both authorised firms and registered firms, and these are not the same thing. Authorised firms hold direct permissions to carry out regulated investment activities. Registered firms — which include certain payment service providers and e-money institutions — are registered for a narrower set of activities and do not hold investment permissions.

See also  Copy trading explained: how it works, which platforms offer it, and the risks

A firm showing as FCA Registered cannot legally offer CFD trading, spread betting, or investment advice without separate authorisation. If a broker claims to be FCA-regulated but shows only as Registered on the register, or if the permitted activities do not include dealing in investments, that is a serious problem. Always verify the firm’s status and permitted activities explicitly on the register — not just that the firm appears there at all.

CySEC and the EU passporting system

CySEC is the Cyprus Securities and Exchange Commission, the national financial regulator of Cyprus, an EU member state. Because Cyprus is in the EU, CySEC-regulated firms have historically benefited from the EU passporting system, which allows a firm authorised in one EU member state to offer services across the EU without needing separate authorisation in each country. This is why many pan-European brokers chose Cyprus as their base: lower operating costs than, say, Germany, combined with EU-wide access.

Post-Brexit, UK clients are no longer covered by EU passporting. CySEC-authorised brokers serving UK retail clients must either obtain FCA authorisation or operate under a temporary permissions regime. This means that a broker with CySEC regulation only may not be fully authorised to serve UK clients, depending on their specific licencing situation. Verify the entity your account is held with and whether it holds the appropriate UK permissions.

The CySEC investor compensation scheme — the Investor Compensation Fund (ICF) — covers eligible retail clients up to €20,000. This is significantly lower than the £85,000 FSCS limit for FCA-regulated firms. CySEC regulation is genuine tier-1 oversight, but the compensation ceiling is an important practical difference.

ESMA product intervention powers and the 2018 CFD restrictions

In 2018, the European Securities and Markets Authority (ESMA) used its product intervention powers to impose restrictions on CFDs and binary options across the EU. For CFDs, the key measures were leverage caps for retail clients: 30:1 for major forex pairs, 20:1 for major indices and gold, 10:1 for other commodities and minor forex pairs, 5:1 for individual equities, and 2:1 for cryptocurrencies. Additional measures included a margin close-out rule at 50% of required margin, negative balance protection, and a prohibition on brokers offering bonuses or incentives to trade.

Following Brexit, the FCA adopted equivalent rules under its own remit. These protections remain in force for retail clients of FCA-authorised brokers in the UK.

The reason offshore brokers advertise leverage of 1:500 or 1:1000 is precisely because they are not subject to these restrictions. Higher leverage is not a benefit — it is the absence of a protection. A retail trader using 500:1 leverage on a £1,000 account is controlling a £500,000 position. A 0.2% adverse move eliminates the account. This is why regulators imposed caps, and why the absence of those caps at offshore brokers should be read as a risk indicator, not a feature.

How to verify a broker’s licence on the relevant regulator’s website

Each major regulator maintains a public register. Here is where to look and what to check.

  • FCA (UK): register.fca.org.uk — search by firm name or FCA reference number. Check status (Authorised vs Registered) and permitted activities.
  • ASIC (Australia): search.asic.gov.au — check Australian Financial Services Licence (AFSL) number and authorised activities.
  • CySEC (Cyprus): cysec.gov.cy — lists all licensed Cyprus Investment Firms (CIFs).
  • BaFin (Germany): bafin.de — search under the companies database for authorised firms.
  • NFA (US): nfa.futures.org/basicnet/ — the Background Affiliation Status Information Center (BASIC) for NFA-registered firms.

When checking, verify three things: the entity name matches the firm you are dealing with exactly; the licence status is current and active; and the permitted activities include the specific products you intend to trade. A mismatch on any of these should be resolved by contacting the regulator directly, not by asking the broker for reassurance. For a complete pre-deposit checklist, see the guide to choosing a trading broker.

What happens to client funds if a regulated broker goes bankrupt

The outcome for clients depends heavily on the regulatory framework the broker operates under. For FCA-regulated brokers, client money rules (CASS) require that client funds are held in segregated bank accounts, separately from the firm’s own money. In an insolvency, this means client funds should not be available to general creditors — they sit outside the bankruptcy estate.

If the firm cannot return client funds — for example, because it commingled client money with its own funds, or because there is a shortfall — FSCS covers eligible claims up to £85,000 per person. Claims must be submitted to the FSCS directly, and resolution typically takes several months. The FSCS website provides current information on how to make a claim and which firms are in default.

See also  How to choose a trading broker: the checks that matter before depositing

For CySEC-regulated firms in the EU, the Investor Compensation Fund provides up to €20,000 per eligible retail client.

For offshore-regulated brokers, there is typically no equivalent compensation scheme. If the broker goes insolvent, client funds are likely pooled with company assets and distributed to creditors in insolvency proceedings. Recovery is unlikely and often zero. This is the most practical argument for using tier-1 regulated brokers even when offshore brokers appear to offer better trading conditions or higher leverage.

Tier-1 regulators at a glance

  • FCA (UK): client funds protected under FSCS up to £85,000 per eligible claimant.
  • ASIC (Australia): no equivalent compensation fund, but strict capital and conduct requirements.
  • CySEC (Cyprus): EU regulatory framework; Investor Compensation Fund covers up to €20,000.
  • BaFin (Germany): conservative standards with EU investor protection coverage.
  • FINRA/CFTC/NFA (US): highly restrictive for retail traders; leverage capped at 50:1 for major forex pairs.

Professional client status: what it means and when to consider it

Retail clients receive a set of protections under MiFID II regulations, including negative balance protection and leverage limits. Professional clients can access higher leverage but lose these protections. The distinction matters because many traders are drawn to professional status primarily for leverage, without fully understanding what they are giving up.

To qualify as a professional client, you must meet at least two of the following three criteria: a financial portfolio of over €500,000, at least one year of relevant professional experience in financial services, or executed trades of significant size at a frequency of 10 or more per quarter over the past year. Brokers are required to assess eligibility before granting professional status.

For most retail traders, the protections that come with retail status are worth more than any leverage increase. Negative balance protection alone prevents a scenario where a fast market move generates a loss larger than your entire deposit. Opting for professional status to access 1:200 leverage instead of 1:30 does not improve your edge; it increases your exposure to exactly the kind of losses that retail protections are specifically designed to limit.

Related reading

Frequently asked questions

Is CySEC regulation as safe as FCA regulation?

Both the FCA and CySEC are recognised tier-1 regulators with genuine enforcement powers. Regulated firms in both jurisdictions are subject to capital adequacy requirements, client fund segregation rules, and reporting obligations. The main practical difference is the compensation scheme: FSCS covers up to £85,000 per eligible claimant under FCA, while the Investor Compensation Fund covers up to €20,000 under CySEC. The FCA also has a more active public enforcement track record. Both are meaningfully safer than offshore regulation, which offers little practical protection for retail clients.

What does FCA Authorised mean vs FCA Registered?

Authorised firms hold direct permissions to carry out regulated investment activities and are subject to the full range of FCA conduct, capital, and client money rules. Registered firms — typically payment service providers or e-money institutions — are registered for a narrower set of activities and cannot legally offer CFD trading or investment services. Always confirm a broker’s status and permitted activities on the FCA Register directly at register.fca.org.uk, not just that the firm appears there.

Can I trade safely with a non-EU/UK broker?

It is possible, but the protections available to you depend entirely on the regulatory framework of the specific jurisdiction. ASIC-regulated brokers offer strong conduct protections without a compensation fund equivalent to the FSCS. Brokers regulated only in offshore jurisdictions — Seychelles, Vanuatu, SVG — carry minimal oversight and no meaningful compensation scheme. If you choose to trade with a non-UK or non-EU broker, verify the specific entity name on the relevant regulator’s public register and understand exactly what protections apply before depositing.

How do I verify a broker’s licence?

Go directly to the regulator’s public register rather than relying on the broker’s website. For the FCA, the register is at register.fca.org.uk. Search the broker’s exact legal company name or the registration number listed on their website. Confirm that the licence status is active and that the permitted activities include the type of trading you intend to do. An expired or cancelled registration is a serious red flag. See our full broker selection guide for all the checks that matter before depositing.