Fri. Oct 9th, 2026

Forex Broker Licenses Explained: FCA, CySEC, ASIC and Offshore Regulators

ByJohan Shamshad

October 8, 2026 #Forex Broker

Retail traders often treat a broker licence like a star rating: FCA is ‘strong,’ CySEC is ‘European,’ ASIC is ‘strict,’ and offshore licences are placed in a lower tier. That shorthand misses what regulation actually does. A licence is a legal bundle of permissions, capital requirements, client-money rules, product restrictions, complaint channels and failure protections. Two brokers can both be genuinely regulated while offering very different leverage and very different remedies if something goes wrong.

Regime What the licence broadly means for retail FX/CFD clients Key point traders often miss
FCA (UK) Authorised investment firm under UK rules; CFD product restrictions, CASS client-money rules and access to UK complaint/compensation architecture where eligible FSCS protection is conditional and does not reimburse ordinary trading losses
CySEC (Cyprus / EU) Cyprus Investment Firm operating under MiFID framework; EU-style CFD restrictions and safeguarding rules ICF compensation is capped at the lower of 90% of covered claims or €20,000
ASIC (Australia) AFS licence with product intervention, client-money, design/distribution and financial-resource rules Australia has AFCA and a targeted CSLR, not a simple blanket broker-account insurance promise
Offshore regulators Real licences can exist in Seychelles, BVI, Mauritius and similar centres Offshore regulation is not one regime; leverage, compensation and cross-border rights vary by jurisdiction
Company registration only A legal company exists Registration is not a forex-broker licence

The Core Question: What Does a Broker Licence Actually Protect?

A regulator does not certify that a broker will never fail, never misprice an order or never refuse a withdrawal. ASIC itself warns that holding an Australian Financial Services licence is a point-in-time licensing assessment and does not guarantee the quality or probity of a firm’s services.

What a serious licence does is create enforceable obligations before and after the account is opened. It defines the activities the legal entity may perform, how much capital it must maintain, how client money is handled, what products may be sold to retail clients, what disclosures are required, how complaints are escalated and what the regulator can do if the firm breaches the rules.

That is why the correct way to compare licences is not by asking ‘which badge is best?’ It is to ask which layers of protection exist in the account you actually hold.

Figure 1. A broker licence is a layered legal framework. A licence number by itself says little unless the trader checks the permissions and protections behind it.

1. FCA: Strong Product Rules Plus a Mature Failure Framework

The UK’s Financial Conduct Authority regulates rolling spot forex and CFDs as high-risk retail products. For retail clients, FCA rules cap leverage between 30:1 and 2:1 depending on the underlying asset, require a 50% margin close-out threshold, impose negative-balance protection, prohibit monetary and non-monetary incentives designed to encourage CFD trading and require standardised risk warnings.

For major currency pairs, the leverage ceiling is 30:1. That means a broker cannot simply offer a UK retail client 500:1 leverage under its FCA entity and call the product the same. If the brand offers materially higher leverage, the trader should expect that a different legal entity or client classification is involved.

The second important FCA layer is client money. Under CASS 7, segregation of client money from the firm’s own money is an explicit safeguard. When the normal approach applies, client money is to be paid directly into designated client bank accounts rather than first flowing through the broker’s own operating account. Firms also face detailed recordkeeping and reconciliation requirements.

The third layer is failure protection. FSCS says eligible investment claims can be covered up to £85,000 per person per failed authorised firm. That is not deposit insurance for every trading balance, and it is not insurance against market losses. It can matter where an authorised provider fails and there is a valid claim, including certain shortfalls in money or assets that the firm was holding for the client.

For complaints, dealing with the correct authorised entity can also provide access to the Financial Ombudsman Service. The FCA explicitly warns that using a firm that is merely registered rather than properly authorised can mean losing both Ombudsman and FSCS protections.

2. CySEC: Similar CFD Rules, Different Compensation Economics

CySEC supervises Cyprus Investment Firms under the EU/MiFID framework. For retail CFDs, Cyprus uses the same basic product-intervention architecture that emerged from ESMA: leverage limits by asset class, margin close-out, negative-balance protection, restrictions on incentives and standardised risk warnings.

In February 2026, ESMA reminded investment firms that these protections continue to apply when newer products such as perpetual contracts effectively meet the definition of a CFD. The point matters for forex traders because a broker cannot escape investor-protection obligations merely by changing the marketing label on a leveraged derivative.

CySEC adds a particularly useful verification feature: it publishes both a register of Cyprus Investment Firms and a separate list of approved domains. That addresses a common scam pattern in which a fake website copies the name or licence number of a real regulated firm. A genuine licence and a genuine website are two different things to verify.

Where Cyprus differs sharply from the UK is investor-compensation scale. The Cyprus Investor Compensation Fund defines the maximum as the lower of 90% of a covered client’s cumulative covered claims or €20,000.

Figure 2. The Cyprus Investor Compensation Fund formula. The calculation applies to established covered claims and does not compensate ordinary market losses.

A €10,000 established covered claim therefore has a maximum ICF amount of €9,000. A €20,000 claim produces €18,000. Once the claim reaches roughly €22,222, the €20,000 ceiling binds. A €100,000 claim does not become €90,000 of compensation; the cap remains €20,000.

The complaint route also differs. CySEC says it does not itself have restitution powers for individual complaints. A client generally complains first to the Cyprus Investment Firm, then may approach the Financial Ombudsman, with court action remaining available. That is a useful reminder that ‘the regulator’ and ‘the body that can order compensation for my individual dispute’ may not be the same institution.

3. ASIC: Product Intervention Plus Financial-Resource Testing

Australia’s AFS licensing regime combines conduct regulation with a particularly visible set of financial-resource requirements for retail OTC derivative issuers.

ASIC’s current CFD intervention caps major-FX leverage at 30:1, minor FX and gold at 20:1, commodities other than gold at 10:1, shares at 5:1 and crypto CFDs at 2:1. It also standardises margin close-out, limits retail losses to funds in the CFD account through negative-balance protection and prohibits certain trading inducements.

Figure 3. FCA, CySEC/EU and ASIC all converge on 30:1 maximum retail leverage for major currency-pair CFDs. Offshore regimes do not share one universal retail cap.

ASIC’s 2026 enforcement data show why the licence should not be viewed as ceremonial. In a sector-wide review of 52 licensed CFD issuers, the regulator secured nearly A$40 million in refunds to more than 38,000 retail investors and identified widespread weaknesses in distribution practices. In July 2026 it suspended the licence of GFA Capital Markets after finding client-money, reporting, financial-resource and systems failures.

The capital framework is also more dynamic than a simple licence-entry fee. Retail OTC derivative issuers must hold net tangible assets equal to the greater of A$1 million or 10% of average revenue. They also face cash-flow projection, liquidity and audit requirements.

Figure 4. Illustrative application of ASIC’s NTA formula. At higher revenue levels, the 10% test overtakes the A$1 million floor.

That means a broker with A$5 million of average revenue still faces the A$1 million floor. At A$10 million, the two tests are equal. At A$20 million, the minimum becomes A$2 million; at A$50 million, A$5 million. The formula forces the financial buffer to scale as the business grows.

Australian client money for retail OTC derivatives is generally held in designated trust accounts, with daily and monthly reconciliation obligations. For external dispute resolution, AFS licensees providing services to retail clients are generally required to belong to AFCA.

Australia also has a Compensation Scheme of Last Resort, but traders should not treat it as an Australian version of blanket broker-account insurance. The CSLR pays up to A$150,000 for eligible unpaid AFCA determinations in specified categories such as personal advice, credit and securities dealing. Its scope is narrower and claim-specific, so a retail CFD customer should verify whether the relevant complaint actually falls within the scheme rather than assuming that every CFD-broker insolvency is insured.

Why FCA, CySEC and ASIC Look Similar on Leverage

The convergence is not accidental. UK and EU restrictions were built around the same post-2018 intervention logic: retail clients were losing money rapidly in leveraged OTC products, and leverage magnified both market losses and transaction costs. Australia adopted a closely aligned architecture after its own reviews reached similar conclusions.

For a retail trader, the 30:1 major-FX cap therefore functions as more than a regulatory nuisance. It is an engineered risk limit. A €10,000 or £10,000 account cannot be used to create the same maximum notional exposure as an account offering 500:1 or 1000:1 leverage.

This does not mean 30:1 leverage is safe. It means the regulator has placed a hard ceiling on one source of risk. A trader can still lose the entire account through poor risk management, repeated losses or gaps. The licence reduces a class of harm; it does not replace trading discipline.

The Capital Requirement Is More Important Than the Licence Application Fee

Online comparisons frequently rank licences by application cost. That is one of the least useful numbers for a retail client.

For an FCA investment firm authorised to deal on own account, the permanent minimum capital requirement can be £750,000, and the ongoing own-funds requirement can be higher because the firm must also consider fixed overheads and K-factor requirements. Cyprus similarly sets €750,000 initial capital for investment firms authorised for dealing on own account. These figures matter because a market-making CFD broker is taking operational, credit and potentially market risk.

But even these figures should not be converted into a league table without context. Currency differs, business permissions differ, and the permanent minimum is only one component of prudential supervision. A more useful question is whether the regime scales capital with risk, requires audited reporting and gives the regulator tools to intervene before client money is exhausted.

4. Seychelles: A Real Offshore Securities Licence, Not a Company Registration

Seychelles is a useful example of why ‘offshore’ and ‘unregulated’ should not be treated as synonyms. The Financial Services Authority regulates non-bank financial services and licenses securities dealers under the Securities Act.

The law requires a securities dealer licence for businesses dealing in securities in or from Seychelles, and licences specify the permitted securities activity. The FSA publishes regulated entities and enforcement notices, can revoke licences, and has issued repeated alerts about forged securities-dealer licences and cloned websites.

That is real regulation. What it does not automatically give a foreign retail client is the same package found under FCA, EU or ASIC retail-CFD regimes. There is no single cross-jurisdiction rule saying that every Seychelles-licensed forex dealer must mirror the UK’s 30:1 leverage ceiling, UK FSCS coverage or the Cyprus ICF.

This is the recurring analytical mistake in licence rankings: the question is not whether the offshore regulator exists. It is which investor protections its law actually imposes on the product and client in question.

5. BVI: Investment Business Is Licensed by Activity

The British Virgin Islands uses an activity-based investment-business framework under the Securities and Investment Business Act. Category 1 covers dealing in investments, with sub-categories for dealing as agent and dealing as principal. Other categories cover arranging deals, management, investment advice and custody.

The BVI Regulatory Code contains customer-asset rules requiring customer assets to be identifiable, appropriately segregated and protected, and customer bank accounts generally to be separate from the licensee’s own accounts.

The BVI regulator also publishes public statements when entities circulate forged investment-business licences. That is important because a licence certificate shown on a broker website is not sufficient evidence by itself. The licence must be verified against the regulator’s records and matched to the exact legal entity and website.

6. Mauritius: Another Offshore Licence With Its Own Rulebook

Mauritius also demonstrates why offshore regulators cannot be treated as one tier. The Financial Services Commission licenses investment dealers under the Securities Act and publishes separate licence categories, including derivatives and currency-derivatives activities.

The FSC also maintains enforcement, unauthorised-entity and surrendered-licence notices. Consumers can use a complaints process, while the Office of the Ombudsperson for Financial Services handles qualifying complaints against financial institutions and can make compensation awards where appropriate.

Again, that does not make a Mauritius licence economically identical to FCA, CySEC or ASIC authorisation. It means there is a real regulator and a legal framework that must be analysed on its own terms.

The Biggest Mistake: Confusing the Group’s Licence With Your Account’s Licence

Large forex groups often operate through several regulated companies. The homepage may list FCA, CySEC, ASIC, Seychelles and other licences in one footer. That does not mean every customer receives the protections of every regulator.

The client agreement usually names one legal entity. That entity determines the governing law, leverage rules, client-money treatment, complaint body and compensation framework. A trader onboarded to an offshore subsidiary does not normally inherit FSCS or EU ICF coverage merely because the same brand has a UK or Cyprus sister company.

Regulators increasingly focus on this ‘regulatory halo.’ The FCA has warned about firms using UK authorisation as a badge while directing business to associated third-country entities. CySEC tells investors to verify approved domains rather than trusting a logo. ASIC added licensee website addresses to its professional register in 2026 specifically to combat impersonation scams.

Licence Verification: A Five-Minute Process That Catches Many Problems

Step What to verify Why it matters
1. Find the exact company name Use the client agreement, not the marketing brand One brand can contain several legal entities
2. Search the regulator’s own register Status, licence number, permissions and conditions A copied licence certificate can be fake
3. Match the website/domain Use approved-domain or website fields where available Clone sites often copy genuine company names
4. Check retail permissions Confirm the firm can serve retail clients in the product you want A licence may cover only wholesale clients or different activities
5. Read the complaints and client-money sections Identify ombudsman, segregation and compensation terms These matter most after a dispute or failure
6. Check for recent enforcement Suspension, cancellation, restrictions or surrendered status A historical licence number may no longer be active

A Licence Does Not Mean the Regulator Guarantees the Broker

This point is easy to lose in discussions about regulation. A regulated broker can still fail. It can still suffer fraud, cyber incidents, weak controls, poor execution or misconduct.

ASIC’s 2026 actions are a useful reminder. The regulator found widespread weaknesses across licensed CFD issuers, secured large refunds and suspended individual licences for client-money and systems failures. The existence of enforcement is evidence that the regulatory system is active—but also evidence that a licence is not proof of perfect behaviour.

The FCA says the same thing more directly: authorisation greatly reduces risk but does not remove all risk. A licence gives the customer a legal framework and supervisory backstop, not a promise that every trade or withdrawal will be problem-free.

How to Compare Two Brokers With Different Licences

Question Broker A: FCA / CySEC / ASIC style regime Broker B: offshore licence
Maximum leverage Usually tightly capped for retail CFDs May be higher; check actual local rules and broker contract
Negative balance protection Mandatory under major retail CFD regimes May be regulatory, contractual or absent depending on jurisdiction
Client-money rules Detailed statutory segregation/reconciliation frameworks Can exist, but exact rules differ materially
External dispute resolution FOS, Financial Ombudsman / AFCA-type channels Depends on jurisdiction
Compensation after firm failure Potential statutory scheme, subject to scope and eligibility Do not assume one exists
Marketing bonuses Often restricted for retail CFDs Can be permitted depending on local law
Best reason to choose Stronger standardised retail protections Higher leverage / broader product flexibility may be available
Main hidden risk Trader assumes regulation prevents all loss Trader assumes a real offshore licence equals onshore protection

What Would Prove the ‘Tier Ranking’ Approach Wrong?

The popular tier-ranking model would be less misleading if every regulator imposed the same product rules and only supervisory quality differed. They do not.

A useful licence analysis must separate at least five dimensions: prudential capital, treatment of client assets, retail product restrictions, dispute resolution and insolvency compensation. A jurisdiction can be strong in licensing and enforcement yet provide no UK-style compensation scheme. Another can provide a statutory compensation fund but at a low cap. A third can impose unusually demanding client-money reporting.

The strongest evidence against simplistic ranking is that even FCA, CySEC and ASIC—often placed in the same ‘top tier’—do not give a retail trader identical rights.

Bottom Line

Forex broker licences matter, but not because a famous regulator’s logo guarantees safety. They matter because they determine which legal rules exist when leverage magnifies losses, when client money has to be segregated, when the broker’s finances deteriorate and when a dispute has to be escalated.

FCA, CySEC and ASIC converge on a broadly similar retail-CFD risk architecture: 30:1 leverage on major FX, margin close-out, negative-balance protection and restrictions on incentives. But their complaint and compensation structures differ. The UK offers FSCS investment protection up to £85,000 for eligible claims; Cyprus caps ICF compensation at the lower of 90% or €20,000; Australia’s AFCA and CSLR architecture is different again.

Offshore licences can be genuine and enforceable. Seychelles, BVI and Mauritius all maintain real financial-services licensing regimes. What traders should not do is assume that ‘regulated offshore’ means the same leverage, compensation or recovery rights as an FCA, CySEC or ASIC retail account—or assume that a company registration is a broker licence.

The practical rule is simple: ignore the logo first. Find the legal entity. Verify it on the regulator’s register. Confirm the permissions and website. Then read the client-money, complaints and compensation provisions that apply specifically to that entity. That is what the licence actually means.

Methodology

Research is current through October 8, 2026 and prioritises regulator handbooks, statutes, compensation-scheme pages, professional registers and enforcement notices. The article treats rolling spot forex offered to retail clients as part of the CFD/leveraged-derivative framework where the relevant regulator does so.

Derived calculations: Cyprus ICF examples apply the official formula of 90% of covered claims subject to a €20,000 cap. ASIC NTA scenarios apply the current rule requiring retail OTC derivative issuers to hold the greater of A$1 million or 10% of average revenue. These are mechanical illustrations, not forecasts of actual compensation or broker solvency.

Capital requirements are not directly ranked across countries because the currencies, permissions and prudential formulas differ. For FCA and CySEC examples, the article refers to the permanent/initial capital applicable to investment firms authorised to deal on own account. Ongoing capital can be higher under each regime’s broader prudential framework.

 

 

Sources

1. FCA — Contract for Differences — Link. Current UK retail CFD requirements including leverage, close-out, negative-balance protection and risk warnings.

2. FCA Handbook — COBS 22.5 — Link. Binding UK rules for retail CFD marketing, risk warnings and inducements.

3. FCA Handbook — CASS 7 Client Money — Link. Client-money segregation, recordkeeping and reconciliation framework.

4. FCA — How to Check a Firm Is Authorised — Link. Difference between authorisation and registration; current consumer verification guidance.

5. FSCS — Investment Protection — Link. Current £85,000 limit for eligible investment claims against failed firms.

6. FCA Handbook — MIFIDPRU 4.4 — Link. Current UK permanent minimum capital rules, including £750,000 for dealing on own account.

7. ESMA — 2026 CFD Product Intervention Reminder — Link. Current EU reminder on leverage, close-out, negative balances and perpetual derivatives.

8. CySEC — CFD Product Intervention Framework — Link. Cyprus adoption framework for EU retail CFD restrictions.

9. CySEC — Investor Compensation Fund — Link. Official ICF formula: lower of 90% of covered claims or €20,000.

10. CySEC — Complaint Regarding CIFs — Link. Complaint sequence through the CIF, Financial Ombudsman and courts.

11. CySEC — Approved Domains — Link. Official list matching regulated firms to approved websites.

12. CySEC — Licensed Cyprus Investment Firms — Link. Official current CIF register.

13. Cyprus Investment Firms Prudential Supervision Law — Link. Initial capital requirements, including €750,000 for dealing on own account.

14. ASIC — CFD Product Intervention Order — Link. Current leverage limits and retail CFD protections; order remains in force through May 2027 unless remade.

15. ASIC — Client Money Reporting Rules — Link. Trust-account, reconciliation and reporting obligations for retail OTC derivative client money.

16. ASIC — Financial Requirements for Retail OTC Derivative Issuers — Link. NTA requirement of greater of A$1 million or 10% of average revenue.

17. ASIC — REP 828 Risky Business — Link. 2026 sector-wide review of CFD issuers.

18. ASIC — Nearly A$40m Refunded to CFD Investors — Link. Current enforcement and remediation data across 52 licensed CFD issuers.

19. ASIC — Professional Registers Search — Link. Official licence and permission verification tool.

20. ASIC — Compensation Scheme of Last Resort — Link. Current CSLR scope and A$150,000 limit for eligible unpaid AFCA determinations.

21. Seychelles FSA — Capital Markets / Securities Dealer Framework — Link. Primary regulator portal for securities-dealer licensing, registers and enforcement.

22. Seychelles Securities Act 2007 (as amended) — Link. Statutory basis for securities-dealer licensing and permitted activities.

23. BVI FSC — Securities and Investment Business Act — Link. Category 1 dealing-as-agent/dealing-as-principal investment-business licence structure.

24. BVI FSC — Regulatory Code — Link. Customer-asset identification, segregation and customer-account requirements.

25. Mauritius FSC — Securities Licensing — Link. Current investment-dealer and derivatives licensing categories.

26. Mauritius FSC — Complaints Handling — Link. Complaint and Ombudsperson framework for financial-services consumers.

Financial Markets Analyst and Journalist at  |  More Posts

Johan Shamshad is a financial markets writer at Dave Finances covering cryptocurrencies, trading platforms, brokers, fintech, financial regulation, and developments across global markets. He previously worked at Gulf News, adding newsroom experience to his coverage of fast-moving financial and digital-asset markets.

His work focuses on identifying market-moving events, company developments, regulatory changes, product launches, and shifts in trading and financial infrastructure.

Johan contributes news and analysis designed to help readers understand not only what happened, but why a development matters and how it may affect the wider financial landscape.

Leave a Reply

Your email address will not be published. Required fields are marked *