How to Check If a Forex Broker Is Regulated—and Verify Its Website

The word regulated does not answer which company is supervised, which regulator is responsible, what product the permission covers, or which customers may use it. A trading brand can operate through several companies in different countries. One company may offer a retail CFD to one region, another may serve professional clients, and an affiliated company may offer a different product. The logo on an advertisement is not necessarily the name of the company that will hold your account or owe you a contractual duty.

Authorization also does not mean that the regulator recommends the provider, guarantees a trade, or promises that you will recover money if the business fails. It is evidence about a specified entity and its permitted activities under a particular legal framework. It cannot establish that every claim on a website is true, that every investment is suitable, or that every complaint will receive compensation. Treat “licensed,” “regulated,” and “registered” as prompts to check the underlying record, not as quality ratings.

The verification question is therefore narrow: does this exact legal entity have current permission from the relevant authority to provide this type of leveraged currency product to a customer with my status in the place where I live? If a firm answers with a group brand, an offshore certificate, a company-registration number, or a regulator logo, ask for the contracting entity and the register entry that applies to your account.

Start with the account agreement, product disclosure, and the account-opening page. Record the full company name, registration or license number, registered address, the country that serves you, and the dispute or complaint contact. Look for wording such as “provided by,” “contract with,” or “your counterparty.” The entity named in a footer may be a parent, payment provider, or technology company rather than the party on your contract.

If the website presents several entities, do not choose the one with the most familiar regulator. Match the entity to your country of residence, account classification, and exact product. Save the version of the terms shown to you and note any entity selection made during sign-up. A later change in the website footer or a group-wide regulation page does not prove which company accepted your particular account.

Product names need the same care. “Forex” may mean an over-the-counter rolling spot contract, a currency CFD, a deliverable currency exchange, a listed currency future, or a signal service that sends orders to another firm. These arrangements can fall under different rules.

Open the regulator's website by typing its address yourself or using a trusted government directory. Avoid using a link supplied only by an unsolicited message, advertisement, salesperson, or the broker's own “verify our license” page. Search the exact legal name and, if available, the license number. A search-engine result or a screenshot sent by an account manager is not the authoritative record; open the entry on the regulator's own site.

The correct register depends on the product, activity, customer, and country. In the United States, the CFTC's registration-check page directs readers to the NFA BASIC database for CFTC registration, membership, disciplinary, and related background information for relevant derivatives firms and individuals. That is a US derivatives check; it is not a universal test for every currency app or cash-market exchange. If the product is a listed futures contract, confirm the intermediary category appropriate to that activity rather than assuming a retail forex dealer record is interchangeable.

In the UK, use the FCA Firm Checker and its guidance, then inspect the fuller Financial Services Register when you need details such as permissions, status, contact data, or a firm's history. In Australia, the ASIC Professional Registers Search includes AFS licensees and authorised representatives. In the EU/EEA, start with the national competent authority for the country serving you or use ESMA's explanation and register links. These examples have local scope; they do not replace checking the regulator where you live.

<!-- learn:illustration -->

An active result is only the beginning. Check the register's exact status and effective dates. Then open the permissions or activities section and look for the type of investment service and instrument that matches the offer. A company may be licensed for a different financial activity, may only serve wholesale or professional customers, may act as an appointed representative under a principal, or may have restrictions that matter to a retail forex account. A broad “financial services license” description is not enough.

Where the register distinguishes execution, dealing as principal, advising, arranging, or holding client money, read the relevant categories rather than guessing from a logo. Check whether the entity is permitted to deal with clients in your jurisdiction and whether the permission is current. If information is unclear, contact the regulator using a phone number or form on its own site and ask what the listed permission covers. Do not let the provider's salesperson interpret the register for you when the disputed claim is the provider's own authorization.

Registration, compensation, client-money treatment, and negative balance protection are separate questions. An authorization entry does not establish that your account qualifies for an investor compensation scheme, that every balance is segregated, or that trading losses stop at your deposit. Compare the relevant account and product terms; the negative balance protection guide explains why a liability limit is distinct from closeout or deposit insurance.

Compare the register's legal name, address, phone number, email, and listed website with the domain and contact channel you are using. Read the full domain from right to left: a familiar brand name appearing as a subdomain or as part of a longer unfamiliar address does not make the registrable domain official. Watch for extra words, changed endings, hyphens, look-alike characters, or a different country site. A secure connection icon only describes the connection; it does not establish who controls the website.

Clone firms copy genuine company names, license numbers, staff biographies, and even public regulatory details. A scammer can therefore send you a real firm's number while directing you to a different domain or bank account. The FCA specifically warns consumers to match contact details against its own Firm Checker. If a number, email, payment beneficiary, or site does not match the register, stop and contact the genuine firm using the details you retrieved independently. Do not reply to the questionable message to ask whether it is genuine.

An appointed representative or introducing intermediary also needs to be checked in context. A record may identify a principal firm and the activities an appointed representative is allowed to conduct. Ask the principal, using register-listed details, to confirm the intermediary, service, product, and customer group. Do not assume that an affiliate, white-label platform, educator, or payment processor inherits the broker's authorization simply because both use the same logo.

Search the regulator's warning list for the trading name, legal name, domain, phone number, and any claimed license number. You can also search the IOSCO I-SCAN alerts portal, which collects warnings and alerts shared by participating regulators about firms that may be offering services without authorization. Use it as an additional signal, alongside your own regulator's register and warnings.

Not finding a name on a warning list does not mean it is authorized or safe. IOSCO explains that member alerts are voluntary and its list is not complete. A new clone may not yet have been reported; a warning may use a different domain or spelling; or a regulator may not publish every complaint. Conversely, an old warning with a similar name needs careful identity matching before you conclude it concerns the entity in your contract. Follow the linked regulator notice and compare the full identifiers.

The CFTC notes that registration and a clean disciplinary record do not protect a customer from fraud. A record is a due-diligence input, not a prediction of future conduct. Also read the firm's disclosure, fee schedule, withdrawal terms, custody arrangements, and complaint process. For a cost comparison, use the same product, account currency, and order size when reading the spread and commission guide; an authorization badge does not tell you whether the trading terms fit your needs.

Imagine a fictional platform naming a company as its account provider, displaying a claimed license reference, and using broker-example.example. Searching that reference in the official register leads to a different entity and different website and phone details, with no permission matching the advertised retail FX product. The mismatch does not identify who runs the platform, but it is enough reason to pause until verified. Every name and domain in this example is fictional.

The result does not prove which individual is behind the second website, but it is enough to pause. The license number is real; the advertised website has not been shown to belong to the licensed firm. Do not transfer funds or send identity documents while the mismatch is unresolved. Contact the listed company through the official register details and ask whether it controls the exact domain and offers the named product to customers in your country. If it says no, treat the platform's claim as unverified and report it to your local regulator.

Now consider a different outcome: the name, status, website, and contact details match, but the firm's permissions cover only a different activity or customer category. That is still a mismatch for your intended account. “The company exists” and “the company has some license” do not establish permission for this contract. Ask the regulator or the listed principal to clarify the exact scope; do not substitute a general company registry for a financial-services authorization.

Make a short record with the legal entity, product, your customer classification, regulator, register link, status, relevant permission, restrictions, exact domain, and contact details. Save a dated copy of the agreement and register page. Recheck if the broker changes the contracting entity, moves your account, or asks you to use a new website or payment beneficiary. A check made when you first saw an advertisement may no longer describe the terms at the point you deposit.

Pause if the firm guarantees profits, creates pressure to deposit immediately, offers to recover a previous loss for an upfront fee, asks you to install remote-access software, or tells you to pay an unexpected “tax” or release charge before a withdrawal. These are warning signs, not a substitute for checking the facts. Verify any payment route against the contract and the firm's independently sourced contact details. Do not send money to an individual or unrelated company simply because a representative claims the account is protected.

If the records conflict, do not fund the account until the exact entity, permissions, website, and payment recipient are confirmed by the regulator or the genuine firm through independently verified channels. For more on separating account entry cost, collateral, and money at risk, see Forex Lot Size and Pip Value: Size a Position From Its Stop. Regulation can reduce some risks and provide routes for complaints, but it cannot remove market risk or guarantee that you will recover a loss.

For the difference between collateral requirements and leverage, see the forex margin and leverage guide.