How to verify a forex broker is actually regulated

A broker's homepage might claim regulation by the FCA or CySEC, but anyone can type those letters on a website. In 2024, the UK's Financial Conduct Authority warned about 83 clone firms in a single quarter, fake operations using real broker names and invented licence numbers to steal deposits. If you're moving money to a trading account, you need to check the paperwork yourself.

This guide walks through the exact steps to verify a broker's regulatory status, match the legal entity on your account agreement to the one on the regulator's public register, and spot the red flags that separate legitimate operations from clones.

Why regulation claims are easy to fake

A scammer can copy a real broker's layout, paste "Regulated by CySEC" in the footer, and invent a six-digit licence number. Unless you cross-check that number on the regulator's own website, you have no way to know whether the entity holding your money is the one on the licence.

Clone firms often pick well-known brand names, sometimes adding a dash or changing .com to .net, to ride on reputation. The website looks professional, the spreads sound competitive, and the support chat answers in seconds. The only difference is that when you deposit, the money lands in an unregulated account that no watchdog can help you recover.

Even when a broker group holds multiple licences, only one entity usually accepts your region. If you're in Malaysia and the broker routes you to an offshore subsidiary in Vanuatu, you don't get the protections of the group's Australian or UK licence. Knowing which entity you're actually trading with matters.

Step-by-step: checking a broker's licence number

Start at the broker's website footer or "Regulation" page. You're looking for three pieces of information: the regulator's name, the licence or reference number, and the full legal name of the licensed entity. If any of these are missing, that's the first red flag.

1. Find the regulator's public register

Every major regulator publishes a searchable database of authorised firms. Go directly to the regulator's official domain, don't click links from the broker's site, because a clone can link to a fake register page.

• CySEC (Cyprus): cysec.gov.cy, click "Entities" and search by name or licence number
• FCA (United Kingdom): register.fca.org.uk, use the Financial Services Register
• ASIC (Australia): asic.gov.au, search Professional Registers
• FSCA (South Africa): fsca.co.za, use the FSP Register
• FSA (Seychelles): fsaseychelles.sc, check Securities Dealers

If the broker lists an abbreviation you don't recognize. FSC, VFSC, LFSA, search "[abbreviation] financial regulator" and confirm the official domain before you proceed.

2. Search by licence number, then by entity name

Type the licence number into the register's search box. A legitimate licence will return one result: the full legal name of the entity, its registration address, the licence type (investment services, forex dealing), and the date it was granted.

Now search again using the entity name the broker gave you. Both searches should return the same record. If the licence number is valid but belongs to a different company, you've found a clone.

Pay attention to spelling. "ABC Capital Ltd" and "ABC Capital Limited" might look identical, but only one is on the register. Clones often change a single letter or add "Global" or "International" to a real firm's name.

3. Check the entity's authorized activities

The register entry lists what the licence allows. Look for "Forex," "CFDs," or "Investment Services" under permitted activities. Some licences cover only advisory services or fund management, if it doesn't explicitly mention trading or dealing, the entity can't legally take your deposits for forex trading.

UK FCA licences have tier codes: "Matched Principal Broker" or "Investment Firm." Cyprus CySEC licences show category (CIF for investment firms). Australian ASIC licences list an AFSL number and authorised representative structure. If you're not sure what the terms mean, our guide on choosing a broker explains the main licence types.

4. Match the entity on your account agreement

When you open an account, the broker sends a client agreement or terms PDF. The first page names the legal entity you're contracting with. That name must match the one on the regulator's register, character for character.

If the agreement says "XYZ Forex Ltd, Belize" but the broker's website claims FCA regulation, the UK licence belongs to a different entity in the group. You're trading under Belize law, not UK law. Belize's FSC has weaker capital requirements and no compensation scheme, so you've lost the protections the marketing promised.

Red flags that point to fake regulation

Some warning signs appear before you even reach the regulator's website. If you see any of these, pause and dig deeper.

No licence number at all. Legitimate brokers display their reference number on every page footer, sometimes in multiple places. "Regulated by CySEC" without a number means you can't verify anything.

The domain doesn't match the brand. A broker calling itself "IC Markets" with a domain like icmarkets-trade.com is not IC Markets. The real IC Markets operates from icmarkets.com. Clones add hyphens, country codes, or words like "pro" or "official."

The legal entity is incorporated in a different jurisdiction. If the site claims ASIC regulation but the company address in the terms is in Saint Vincent and the Grenadines, that's a mismatch. ASIC regulates Australian entities or foreign firms with an AFSL branch in Australia.

Pressure to deposit quickly. Legitimate brokers let you read terms, download agreements, and compare account types at your own pace. Clones push you to "claim a bonus today" or "fund now before rates change" because they know scrutiny kills the scam.

Support can't name the regulator's reference number. Ask live chat for the exact licence number and which entity it belongs to. A real broker's support can copy-paste that in seconds. A clone will deflect or go silent.

How to handle multi-entity broker groups

Large broker groups hold licences in multiple countries and route clients to different entities based on residence. Exness, for example, is regulated by CySEC (Cyprus), FSCA (South Africa), and FSA (Seychelles). When you sign up from Nigeria, you'll likely be assigned to the FSA entity; a trader in South Africa goes to the FSCA entity.

This isn't illegal, but you need to know which entity you're actually using. Check the account-opening email for the legal name and compare it to the list on the broker's regulation page. If you want the stronger protections of the CySEC licence but you're being routed to an offshore entity, you may need to choose a different broker or ask support if entity selection is possible.

Some brokers disclose entity routing transparently. Vantage lists ASIC, FCA, CIMA, and VFSC licences and specifies which regions each serves. Others bury the entity name in a 40-page PDF. If the broker won't clearly state which entity holds your account, walk away.

What happens when a broker operates under multiple brands

Occasionally a single licensed entity operates several trading brands. The FCA or CySEC register will show one legal name, but the marketing sites use different domains and logos. This is legitimate as long as all brands declare the same licence number and entity.

White-label arrangements are trickier. A technology provider with a CySEC licence might host platforms for ten different brands, each taking clients under the provider's licence. Your account agreement should name the actual licensed entity, if it names a brand that doesn't appear on any register, you're in murky territory.

Checking Islamic account and segregated fund claims

If you need swap-free accounts, confirm that the entity you're assigned to actually offers them. A broker might advertise Islamic accounts on the homepage but only provide them under the offshore entity. The CySEC or FCA entity may not support swap-free trading at all.

Segregated client funds are a regulatory requirement in most tier-one jurisdictions. CySEC, FCA, and ASIC rules force brokers to keep client money in separate trust accounts. Offshore regulators often have no such rule, so "segregated funds" becomes a marketing claim with no legal enforcement. Check the regulator's rulebook if you want to be sure.

Real-world examples: brokers with clear licensing

Here's what transparent disclosure looks like:

• [FP Markets](/reviews/fp-markets) is regulated by ASIC (reference 286354), CySEC (371/18), and FSA (SD047). The footer on fpmarkets.com lists all three, and the client agreement specifies which entity you're contracting with based on your country.
• [Axi](/reviews/axi) holds an FCA licence (509746), ASIC (318232), DFSA (F003543), and FSA (SD039). The website breaks down entity coverage by region and links directly to each regulator's register page.
• [AvaTrade](/reviews/avatrade) operates under multiple licences including CBI (Ireland C53877), ASIC (406684), FSCA (45984), and ADGM (190018). Each licence is listed with the supervising regulator and reference number on the "Regulation" page.

None of these brokers hide entity names or licence numbers. If a broker makes you hunt through six pages to find a regulator reference, that's a warning.

What to do if you find a mismatch

If the licence number doesn't match the entity name, or the entity name doesn't match your account agreement, stop depositing. Contact the broker's compliance team, not live chat, via the official email on their regulation page. Ask for written confirmation of the entity name, licence number, and which regulator oversees your account.

If you don't get a straight answer within 48 hours, report the site to the regulator the broker claims to operate under. The FCA has a consumer helpline (+44 800 111 6768) and an online reporting form. CySEC publishes a complaints procedure on cysec.gov.cy. ASIC offers a "Report misconduct" tool.

Never deposit with a broker that won't clearly identify the licensed entity in writing. Broker insolvency protections only apply if your money was held by the regulated entity in the first place.

Alternatives: brokers with strong track records and transparent licensing

If your current broker's paperwork doesn't add up, consider switching to one with a clear regulatory footprint and a reputation you can verify independently.

[Exness](/reviews/exness) has been operating since 2008 and holds CySEC, FSCA, and FSA licences. The minimum deposit is $10, spreads start at 0.0 pips on the Zero account, and it supports UPI and local e-wallets across India, Indonesia, Malaysia, and the Philippines. Trustpilot shows 4.7/5 from over 30,000 reviews.

[XM](/reviews/xm) is regulated by CySEC, ASIC, DFSA, and FSC, with a $5 minimum deposit and Standard account spreads from 0.6 pips. It's been around since 2009 and offers swap-free accounts for Islamic traders. Strong coverage in Vietnam, Thailand, Pakistan, and the Philippines.

[Vantage](/reviews/vantage) launched in 2009 and now operates under ASIC, FCA, CIMA, and VFSC. Raw ECN spreads start at 0.0 pips, minimum deposit is $50, and it supports cTrader alongside MT4 and MT5. Trustpilot rating is 4.4/5 across 14,573 reviews. Popular in Malaysia, Indonesia, and the UAE.

[Tickmill](/reviews/tickmill) was founded in the UK in 2014 and holds FCA, CySEC, FSA, FSCA, and LFSA licences. Pro account spreads start at 0.0 pips, minimum deposit is $100, and it supports swap-free trading. Solid choice for traders in the UK, UAE, and across Southeast Asia.

All four disclose their entity structure clearly and link to regulator registers from their homepages.

Quick checklist before you deposit

Before you move money to any forex account, run through this list:

• Broker's website footer shows regulator name and licence number
• You've searched that licence number on the regulator's official website
• The entity name on the register matches the entity in your account agreement
• The licence covers forex or CFD trading, not just advisory services
• The domain matches the brand name (no hyphens, no extra words)
• Support can confirm the entity and reference number in writing

If you can tick all six, you're dealing with a legitimate, verifiable operation. If any box stays empty, you're taking a risk that no spread discount or bonus is worth.

Open the regulator's website right now, search your broker's licence number, and confirm the entity name on your last statement matches the one on the register. If it doesn't, contact compliance today and get it sorted before you deposit again.

Ready to trade?

Compare the top forex brokers side-by-side. spreads, regulation, platforms, deposit methods.