By Guilherme J. · Updated April 2026
How to Verify a Forex Broker is Legitimate
Do not trust a broker's website footer. Scammers copy licence numbers and fake regulatory badges. This is the exact, step-by-step process to verify a broker using official government databases before depositing a single dollar.
Every month, traders lose millions of dollars not to market movements, but to unregulated entities posing as forex brokers. The sophistication of these scams has increased dramatically. A modern scam broker does not look like a scam. They have professional websites, MT4 integrations, responsive live chat, and they display tier-1 regulatory badges in their footers. They even process small initial withdrawals to build trust before securing a larger deposit.
The only defense against counterparty fraud in retail forex is independent verification. You cannot rely on a broker's marketing material, Trustpilot reviews (which are heavily manipulated in this industry), or the word of an account manager who called you. You must verify the broker's legal existence and regulatory status directly through the government authority that issued the licence.
This guide provides the exact URLs for the major regulatory databases and explains how to cross-reference a broker's claims. It also details how to avoid the "clone firm" trap, which bypasses basic regulatory checks by impersonating a legitimate firm's credentials.
If you are evaluating brokers for a large deposit, regulatory verification is only the first step. See our large accounts guide for how to assess the financial stability and fund segregation quality of a regulated broker once its legitimacy is established.
Step 1: Locate the Claimed Licence Number
Scroll to the very bottom of the broker's website (the footer). Legitimate brokers are required by their regulators to publish their legal entity name, regulatory authority, and licence number on every page.
You are looking for specific text. For example: "Exness (UK) Ltd is authorised and regulated by the Financial Conduct Authority (FCA) under the Financial Services Register number 730729." Or: "International Capital Markets Pty Ltd is regulated by the Australian Securities and Investments Commission (ASIC), AFSL No. 335692."
Write down the exact legal entity name (e.g., "International Capital Markets Pty Ltd", not just "IC Markets") and the licence number. If a broker does not list a specific licence number and regulator in its footer, close the tab. Do not proceed further. No legitimate regulated broker omits this information.
Step 2: Search the Official Regulator Database
Open a new browser tab and navigate directly to the regulator's official website. Do not click a link provided by the broker, as scammers create fake regulator websites. Type the URL yourself.
Official Regulator Database URLs:
- UK (FCA): register.fca.org.uk
- Australia (ASIC): connectonline.asic.gov.au (Search Professional Registers)
- Cyprus (CySEC): cysec.gov.cy/en-GB/entities/investment-firms
- Dubai (DFSA): dfsa.ae/Public-Register
- South Africa (FSCA): fsca.co.za (Search FSP Register)
Enter the licence number you wrote down. The database should return a match for the legal entity name. Check the status field: it must say "Active", "Authorised", or "Current". If it says "Lapsed", "Suspended", "Cancelled", or "Appointed Representative", the broker does not hold a valid primary licence.
Step 3: Defeat the Clone Firm Trap
This is the most critical step, and the one most traders skip. A "clone firm" is a scam that copies the details of a legitimate broker. If you search the licence number of a clone firm, the database will confirm the licence is active—because the licence belongs to the real broker the scammer is impersonating.
To verify you are on the real broker's website, look at the regulator's database entry for the firm. Regulators list the approved website domains and contact phone numbers for the regulated entity. Compare the domain listed on the FCA or ASIC register with the URL in your browser address bar.
They must match exactly. If the FCA register lists "www.pepperstone.com" and you are currently on "www.pepperstone-trading-portal.com", you are on a clone firm site. Close it immediately. The domain check is the only way to confirm you are interacting with the entity that actually holds the licence.
The Offshore Entity Complication
Verifying a broker becomes complicated because almost all major legitimate retail brokers (including Exness, IC Markets, and HFM) operate multiple legal entities. They hold tier-1 licences (FCA/ASIC) for clients in those specific jurisdictions, and offshore licences (FSA Seychelles, FSC Mauritius, SVG) for international clients who want higher leverage.
If you reside outside the UK or Australia and open an account with a major broker, your specific account will likely sit under the offshore entity. If you check the FCA register, you will see the broker's UK entity is authorised, but your account is not with that entity. Your account is governed by the offshore regulator.
Is this safe? It is a calculated compromise. Trading with the offshore entity of a broker that also holds FCA and ASIC licences is generally considered safe from outright fraud, because the parent company has a global reputation to protect and operates under strict compliance frameworks elsewhere. However, trading with a broker that only holds an offshore licence (e.g., an SVG registration) and has no tier-1 presence carries extreme risk. An offshore registration alone is not proof of legitimacy; it is simply a corporate filing.
The 5 Red Flags of a Forex Scam
If a broker passes the database check, evaluate their operational behavior. Regulated brokers operate like banks; scam brokers operate like high-pressure sales operations. If you experience any of the following, withdraw your funds immediately.
- The Account Manager Trades For You: Legitimate brokers provide execution infrastructure. They never assign an "account manager" to place trades on your behalf or advise you on specific currency directions. If someone from the broker calls offering to trade your account to generate guaranteed returns, it is a fraud.
- Withdrawal Taxes or Fees: The most common scam finale. You request a withdrawal of your profits, and the broker says you must first pay a 20 percent "capital gains tax" or "release fee" out of pocket before they release the funds. Regulated brokers deduct standard withdrawal fees from your balance; they never require a new external payment to release your money. The "tax" is just a second layer of theft.
- Crypto-Only Deposits: While legitimate brokers (like Exness and Vantage) accept crypto, they also offer standard bank wire and credit card options. A broker that only accepts deposits via Bitcoin or USDT to a changing wallet address is avoiding the banking system to prevent chargebacks and freeze requests.
- Unsolicited Phone Calls: Regulated brokers do not cold-call individuals who have not registered on their website. If a broker calls you out of the blue pitching an investment opportunity, hang up.
- Absurd Bonus Offers: A 500 percent deposit bonus is mathematically impossible for a broker processing trades to the real market. It is only possible if the broker never intends to let you withdraw. See our deposit bonus guide for how these traps work.
Verifiable Legitimate Brokers
| Broker | Primary Licences | Entity Verification | Audited Financials |
|---|---|---|---|
| IC Markets | ASIC 335692 | IC Markets (EU) Ltd on CySEC | No (Private) |
| Exness | FCA 730729 | Exness (UK) Ltd on FCA | Yes (Deloitte) |
| Pepperstone | FCA 684312, ASIC 414530 | Pepperstone Ltd on FCA | UK Companies House |
| FP Markets | ASIC 286354 | First Prudential Markets | No (Private) |
Related guides
Frequently asked questions
How do I verify a forex broker is regulated?
Go directly to the official regulator database: for the UK FCA, use register.fca.org.uk. For the Australian ASIC, use connectonline.asic.gov.au. Search the exact company name or licence number provided by the broker. The database must show the status as 'Active' or 'Authorised'. Most importantly, check the approved domains listed on the regulator's site to ensure they exactly match the website URL you are using, confirming you are not on a clone site.
What is a clone firm scam?
A clone firm is a scam that steals the identity of a genuinely regulated broker. They copy the name, address, and registration number of a real firm (e.g., IC Markets) and build an identical website with a slightly different URL (e.g., icmarkets-pro-trading.com). When you check the FCA register, the company appears legitimate, but you are depositing with the scammer. The only defense is verifying the exact domain name against the regulator's approved list.
What is the difference between regulated and authorised?
A regulated broker holds an active licence directly from a financial regulator and is subject to capital adequacy requirements and audits. An 'Appointed Representative' (AR) operates under the umbrella of another regulated firm. The principal firm is responsible for the AR's conduct, but the AR itself does not hold the primary licence. In retail forex, it is significantly safer to trade directly with the principal regulated entity rather than an Appointed Representative.
What are the warning signs of a forex scam broker?
Red flags include: no verifiable licence number on a tier-1 regulator database, unsolicited phone calls pressing for immediate deposits, promises of guaranteed returns (illegal under FCA/ASIC rules), inability to process withdrawals without paying an out-of-pocket 'tax' or 'fee', account managers offering to trade on your behalf, and accepting deposits exclusively via untraceable crypto wallets.
Is an offshore regulated broker safe?
Offshore regulators (like FSA Seychelles, FSC Mauritius, or SVG) impose minimal capital requirements and offer no government compensation schemes like the UK's FSCS. If an offshore-only broker goes bankrupt, your funds are likely lost. However, trading with the offshore entity of a major broker that also holds tier-1 licences (like Exness or IC Markets) carries less operational risk, as the parent company maintains high compliance standards globally to protect its tier-1 status.
What does segregated client funds mean?
Segregation means the broker holds client deposits in a bank account separate from its own operating capital. If the broker goes bankrupt, creditors cannot seize the segregated accounts to pay the broker's debts. Regulators like the FCA and ASIC mandate strict segregation rules at approved tier-1 banks. Unregulated brokers often claim to segregate funds, but without regulatory audits to enforce it, the claim is meaningless.
Can I check a broker's financial health?
For private companies, it is difficult. Publicly traded brokers publish quarterly financial statements. UK-registered entities file abbreviated accounts at Companies House. Exness is unique among private retail brokers for publishing externally audited annual financials (by Deloitte) on its website, showing equity and client liabilities. If a private broker refuses to disclose its capitalization, the strength of its regulatory licence is your only proxy for financial health.
What should I do if I deposited with a scam broker?
Stop depositing immediately. Do not pay any 'withdrawal tax' or 'release fee'—this is the final phase of the scam. If you deposited via credit card, contact your bank immediately to initiate a chargeback for services not rendered. If you deposited via bank wire or crypto, the funds are likely unrecoverable. Report the entity to your local financial regulator (e.g., the FCA or SEC) and local cybercrime police. Beware of 'recovery agencies' that contact you afterward; they are often secondary scams targeting the same victims.
Trade with verified ECN brokers
IC Markets and Exness hold multiple tier-1 licences and operate transparent ECN infrastructure. Both are fully verified legitimate entities.