Why the licence matters more than the spread
Traders compare spreads and leverage for hours, then skip the one check that decides whether they can get their money back. Regulation is what determines your recourse: whether client funds must be held separately from the firm's own money, whether there is an independent complaints body above the broker, and whether any compensation scheme exists if the firm fails. A tighter spread is worth nothing if a withdrawal is refused and there is no one to appeal to.
The problem is that regulation is easy to imply and hard for a beginner to check. Websites display regulator logos, licence numbers and impressive-sounding entity names, and none of it is verified by anyone before it is published. Some firms hold a genuine licence in one country while the entity you actually sign with is registered somewhere else entirely. The only reliable move is to stop reading the broker's website and go to the regulator's own register instead.
The five steps below take about five minutes and work for any broker, anywhere. They are the same steps we use for our own broker safety checks.
Step 1: Find the exact legal entity you would be contracting with
Brands are not companies. A broker may market itself under one name globally while your account is actually opened with a specific subsidiary in a specific country - and that subsidiary is the one whose regulation applies to you. A group might have a UK-regulated arm, an Australian arm and an offshore arm, and route clients from most countries to the offshore one.
Find the truth in the legal documents, not the homepage. Open the Client Agreement or Terms and Conditions (usually linked in the footer) and look for the clause that names the company: it will read something like "The Company is ... incorporated under the laws of ..., with registration number ..., authorised and regulated by ...". Write down three things exactly as written: the full legal entity name, the company registration number, and the regulator plus licence number.
Two details in that document matter as much as the licence. First, the governing-law clause - it tells you which country's courts would hear a dispute, and "exclusive jurisdiction" in a small offshore jurisdiction means realistic legal recourse is close to nil for most retail clients. Second, check whether the entity taking your deposit is the same one holding the licence; if payments are processed by a differently-named company, note that too.
Step 2: Look the entity up on the regulator's own register
Now verify the claim at the source. Every serious regulator publishes a free, searchable public register. Search the exact entity name and, where possible, the licence number from step 1. Do not search the brand name alone - a match on the brand with a different legal entity is a red flag, not a confirmation.
The main registers are: the FCA Financial Services Register (register.fca.org.uk) for the UK; CySEC's Cyprus Investment Firms register for Cyprus; ASIC Connect for Australia; the FSCA's FSP register for South Africa; NFA BASIC for the United States; CIRO for Canada; the FMA register for New Zealand; the MAS Financial Institutions Directory for Singapore; the SFC register for Hong Kong; and the DFSA public register for Dubai's DIFC. Offshore jurisdictions publish registers too - the Seychelles FSA, for example, publishes its licensed capital-markets entities online.
When you find the entry, read it properly rather than just confirming a name appears. Check that the status is current and not lapsed or withdrawn; that the permissions actually cover dealing in derivatives or contracts for difference, since some licences only permit advising or arranging; and that the registered address matches the one in the broker's documents. A mismatch between the regulator's record and the company's own paperwork is worth asking about before you deposit, not after.
Be aware of what an offshore licence does and does not buy you. A licence from a small offshore authority is a real licence and its holders are genuinely registered - but the supervision, the reporting requirements and above all the practical ability of a foreign client to escalate a complaint are far weaker than under a tier-one regulator. It is a meaningful difference in your protection, not a technicality.
| Regulator | Public register | Licence number format | What it covers |
|---|---|---|---|
| FCA (UK) | register.fca.org.uk | "FRN" — a 6-digit Firm Reference Number (e.g. FRN 509956) | UK-authorised firm status and which permissions it holds, including whether dealing in CFDs/derivatives is covered |
| ASIC (Australia) | asic.gov.au — ASIC Connect / service.asic.gov.au | "AFSL" — an Australian Financial Services Licence number, 6 digits (e.g. AFSL 286354) | Licence status and the financial services the licensee is authorised to provide in Australia |
| CySEC (Cyprus) | cysec.gov.cy — Cyprus Investment Firms register | A CIF licence number formatted as a number over a 2-digit year (e.g. 371/18) | MiFID investment-firm authorisation, which can be passported across the EU/EEA |
| NFA (USA) | nfa.futures.org/BasicNet | An NFA ID, typically a 7-digit number (e.g. 0339826) | Membership status as a Futures Commission Merchant or Retail Foreign Exchange Dealer, plus disciplinary history |
| FMA (New Zealand) | fma.govt.nz/business/licensed-providers | An FSP number from the Financial Service Providers Register (e.g. FSP41187) | Registration as a Financial Service Provider and, separately, licensing as a derivatives issuer |
| DFSA (UAE/DIFC) | dfsa.ae/public-register/firms | A reference formatted as "F" plus 6 digits (e.g. F003484) | Authorisation to operate from Dubai's DIFC and the specific licensed activities covered |
| FSA (Seychelles) | fsaseychelles.sc/regulated-entities/capital-markets | An "SD" number (e.g. SD120) | An offshore Securities Dealer licence — genuine, but with materially lighter supervision than a tier-one regulator (see the caveat above) |
| FSC (Belize) | belizefsc.org.bz/registered-individuals-companies | A numeric licence number, commonly 7 digits (e.g. Licence No. 9759600) | An offshore International Financial Services licence — again a real licence, but offshore-tier supervision |
Formats and examples are drawn from FXMARE's own verified broker dataset (licences checked against each register on the dates recorded on our broker pages) — they illustrate the pattern each regulator uses, not a guarantee every licence from that regulator follows it exactly. Always search the register directly rather than pattern-matching a number yourself.
Step 3: Search the warning and alert lists
A firm can hold a valid licence in one country and still be operating unlawfully in yours. Regulators publish warning lists naming firms that solicit their residents without local authorisation, and these are free to search. The FCA Warning List covers the UK; IOSCO runs a portal that aggregates investor alerts from members worldwide; and national regulators such as Italy's CONSOB, Spain's CNMV, Germany's BaFin, Belgium's FSMA and the Securities Commission Malaysia publish their own lists, with CONSOB regularly ordering internet providers to block unauthorised brokers' websites.
Search the entity name, the brand name and the exact domain, because alerts are sometimes published against a website rather than a company. Read any hit carefully and understand what it actually means: an alert for offering services without local authorisation says the firm was not permitted to solicit residents of that country. That is serious and worth knowing, but it is not the same as a finding of fraud, and honest research should not blur the two.
Also search for the broker's name plus the word "clone". Fraudsters routinely clone legitimate regulated brokers - copying the logo, the licence number and the entity details onto a near-identical domain - so that a victim who checks the register finds a genuine entry belonging to the real firm. Always reach the broker through a link you found on the regulator's register or by typing the official domain yourself, never through a link in an advert, a message or a social media DM.
Step 4: Read the terms that govern your withdrawals
Most disputes traders actually experience are not about regulation in the abstract; they are about a withdrawal being refused. The contract terms that allow this are published in advance, and almost nobody reads them. Before depositing, search the Client Agreement for the clauses on bonuses, "abusive" or "prohibited" trading, and the company's right to close positions, void profits or terminate an account.
Pay particular attention to any clause letting the firm cancel trades or void profits retrospectively on the grounds that the trading style was abusive, that a bonus condition was breached, or that arbitrage, latency or hedging strategies were used. Terms of this kind vary enormously in how tightly they are drawn: some target genuine manipulation, others are broad enough to cover ordinary profitable trading. Bonus and promotional offers deserve extra suspicion, because accepting one frequently attaches conditions that restrict withdrawal of both the bonus and your own funds.
Then check the practical mechanics: stated withdrawal processing times, withdrawal fees, minimum withdrawal amounts, inactivity fees, and whether the firm reserves the right to change these terms unilaterally. Finally, confirm what the documents say about segregation of client money and about the complaints route - specifically, which independent body you can escalate to if the firm's own complaints procedure fails you.
Step 5: Weigh the reviews properly
Reviews are useful evidence but they are noisy, so read them structurally rather than emotionally. A high overall score can sit on top of a serious, consistent problem, because the majority of a broker's clients never attempt a large profitable withdrawal and so never encounter it. Go straight to the one- and two-star reviews and look for a repeating, specific pattern - the same complaint, described the same way, by unconnected people over months.
Read the company's replies too. A firm that responds to complaints with specific, checkable explanations is behaving differently from one that ignores them or answers every case with identical boilerplate. Where the broker disputes a reviewer's account, note that the dispute exists - you are usually reading two contested versions of events, and honest assessment means saying so.
Finally, be sceptical of the review ecosystem itself. Some broker "review" sites are paid affiliates whose rankings track commission rather than quality, and several rating sites simply republish one another's scores, so three sites agreeing may really be one source repeated. Look for whether a site discloses how it makes money, and weight primary evidence - the register entry, the warning lists, the contract terms - above any score out of ten.