The Cyprus Securities and Exchange Commission has imposed two more administrative fines on Lydya Financial Ltd, the regulated investment firm behind the Forex24 trading name, extending a run of compliance and governance interventions involving the company.
CySEC published both decisions on October 2, 2026. Each carries a €1,300 penalty, bringing the latest combined financial sanction to €2,600. The regulator made the decisions at its August 3 board meeting.
The violations concern regulatory reporting rather than the treatment of trading clients. One decision relates to requirements under CySEC’s Risk-Based Supervision Framework, while the other concerns statistical reporting obligations imposed on Cyprus Investment Firms.
There is no allegation in the October decisions of manipulation of forex or CFD prices, improper execution, misuse of client assets or other trading misconduct.
That distinction is important because Lydya operates directly inside the retail trading industry. Its documentation identifies Forex24 as a trading name and covers contracts for difference on foreign exchange, commodities and other underlying assets.
Lydya Remains an Active CySEC-Regulated Investment Firm
Despite the latest penalties, Lydya Financial remains on CySEC’s register of Cyprus Investment Firms under licence 300/16.
The licence was issued on April 22, 2016. CySEC currently authorises the company to receive and transmit orders, execute orders on behalf of clients and provide investment advice. Its permitted ancillary activities include foreign-exchange services where connected to investment services.
This is materially different from a licence suspension or withdrawal.
CySEC recently withdrew Eurotrader’s Cyprus investment-firm licence after finding that the operating company no longer met conditions attached to its authorisation. Lydya, by contrast, remains on the active register following the latest fines.
The distinction matters for investors because regulatory sanctions exist on a spectrum. A small administrative fine for a filing breach does not carry the same consequences as a licence withdrawal that forces a firm to cease regulated investment services.
Investor Takeaway: The €2,600 amount is small and the violations do not concern client funds or trade execution. The more significant issue is recurrence: Lydya has now faced several reporting sanctions alongside a separate shareholder-level governance intervention during 2026.
The October Fines Follow Two Similar Penalties in 2025
The latest action is not Lydya’s first problem with CySEC reporting deadlines.
In August 2025, the regulator fined the company €100 after it failed to successfully submit its QST-CIF statistical form for the first quarter of 2025 within the deadline required by Circular C691.
Two months later, another penalty followed.
CySEC imposed an €850 fine after Lydya failed to submit its RBSF-CIF return for 2024 within the deadline required by Circular C706.
The two forms serve different supervisory purposes.
Quarterly statistical filings give CySEC recurring data on the firms it supervises, while the Risk-Based Supervision Framework provides a broader dataset that helps the regulator assess the financial, operational and compliance risks associated with each investment firm.
That makes repeated failures more meaningful than the nominal fines suggest. A regulator relying increasingly on structured data cannot properly assess a firm’s risk profile if required information arrives late, fails validation or is not submitted at all.
Reporting Failures Are Administrative, but They Are Not Meaningless
It would be excessive to treat a missed regulatory return as evidence that a broker is mishandling client money or running a defective trading platform.
There is no such finding in these decisions.
But regulatory reporting is also not paperwork performed simply for recordkeeping.
For a supervised broker, recurring submissions are part of the mechanism through which the regulator sees capital, activity, customer exposure and other operational indicators without carrying out a physical inspection every quarter.
A reporting weakness therefore creates two risks.
The first is direct compliance risk: deadlines are missed and fines accumulate.
The second is supervisory risk: the regulator may begin questioning whether repeated administrative failures indicate weaknesses in staffing, controls, governance or compliance resources elsewhere in the organisation.
This broader focus on organisational substance is visible across the CFD industry. The UK’s crackdown on 24 CFD firms, for example, has shown regulators becoming increasingly unwilling to treat an investment-firm licence as a passive badge. Firms are expected to demonstrate that the governance, controls and regulated activities behind the authorisation are real and effective.
CySEC Had Already Intervened Against Lydya’s Sole Shareholder
Lydya’s reporting record becomes more notable when placed alongside a separate action CySEC took earlier this year.
On March 19, the regulator announced that it had concluded the influence exercised by David Masika, identified as Lydya’s sole shareholder and ultimate beneficial owner, was “prejudicial to the sound and prudent management” of the investment firm.
CySEC responded with measures that went considerably further than a monetary fine.
It suspended the voting rights attached to Masika’s shares, which represented the entirety of Lydya’s share capital, and prohibited him from carrying out management duties on the company’s board.
The measures took immediate effect.
CySEC said the intervention was intended to end Masika’s influence over the firm’s management. The regulator did not withdraw Lydya’s investment-firm licence, and the company continues to appear among active regulated firms.
That makes the March action important but also easy to mischaracterise.
It was not a finding that Forex24’s trading operations were fraudulent, nor was it a licence cancellation. CySEC targeted the influence of a controlling shareholder while allowing the regulated firm itself to remain authorised.
Licence Status and Brand Names Need to Be Separated
The case also illustrates why investors should distinguish a broker’s brand from the legal company holding its regulatory authorisation.
Lydya Financial is the regulated Cyprus Investment Firm. Forex24 is the trading name associated with its brokerage activities.
The same distinction appears throughout the retail-trading industry. Dave Finances recently confirmed that AvaTrade-linked Direct Investment Hub remains active under its CySEC licence, while stressing that a group brand and a particular regulated legal entity should not automatically be treated as interchangeable.
That distinction becomes particularly important when regulatory status changes. A familiar brand can continue appearing online while one legal entity loses a licence, moves clients elsewhere or operates under a different jurisdiction.
For Lydya, the relevant fact as of October 2026 is that licence 300/16 remains active even after the reporting penalties and shareholder intervention.
Investor Takeaway: Investors should not interpret the latest fines as equivalent to a suspension or loss of authorisation. Lydya remains regulated by CySEC, but its recent history shows that holding an active licence does not mean a firm is free from ongoing supervisory concerns.
The Pattern Matters More Than the €2,600
From a financial perspective, €2,600 is unlikely to materially affect a regulated brokerage.
The regulatory pattern is more relevant.
Lydya has now moved through several separate supervisory events: a €100 quarterly-reporting fine in August 2025, an €850 annual RBSF reporting penalty in October 2025, the shareholder intervention in March 2026 and two further €1,300 fines announced this October.
Any one of those events could be viewed independently.
Together, they raise a more useful question about whether the company has fully resolved the internal compliance and governance issues that have repeatedly brought it back onto CySEC’s decision register.
For comparison, other CySEC-regulated brokers are competing partly on regulatory safeguards themselves. Mitrade recently added additional insolvency insurance for its CySEC clients beyond statutory protections. That illustrates how compliance and client protection can increasingly become commercial differentiators as well as legal obligations.
The Next Filing Cycle Will Be More Informative Than Another Small Fine
The next important signal for Lydya is unlikely to be whether CySEC imposes another €100 or €1,300 penalty.
It is whether the recurring reporting failures stop.
If future quarterly and annual returns are submitted successfully and on time, the recent fines may ultimately look like the tail end of an administrative weakness that has since been corrected.
If similar decisions continue appearing, the argument that these are isolated clerical mistakes becomes more difficult to sustain.
The March governance intervention raises the stakes further. CySEC has already demonstrated that it is prepared to act directly against ownership and management influence when it considers the sound and prudent operation of the company at risk.
That does not mean harsher action will follow. There is currently no published decision suspending Lydya’s licence, restricting Forex24’s trading activity or alleging harm to customer funds.
But regulatory supervision is cumulative. Repeated reporting failures matter because each new breach becomes part of the firm’s history when the regulator evaluates whether systems, controls and management are functioning adequately.
For Forex24 clients, the latest decision therefore calls for proportion rather than alarm.
The immediate monetary sanction is minor. The offences are reporting-related rather than trading-related. Lydya remains an authorised Cyprus Investment Firm.
The reason the story deserves attention is the sequence: four reporting penalties across two years, combined with an unusual intervention against the company’s sole shareholder.
The €2,600 is the smallest part of that story. Whether Lydya can now demonstrate consistent regulatory reporting and stable governance will determine whether October’s fines remain minor administrative footnotes or become another step in a longer compliance problem.
Johan Shamshad is a financial markets writer at Dave Finances covering cryptocurrencies, trading platforms, brokers, fintech, financial regulation, and developments across global markets. He previously worked at Gulf News, adding newsroom experience to his coverage of fast-moving financial and digital-asset markets.
His work focuses on identifying market-moving events, company developments, regulatory changes, product launches, and shifts in trading and financial infrastructure.
Johan contributes news and analysis designed to help readers understand not only what happened, but why a development matters and how it may affect the wider financial landscape.