How to Spot an Unregulated Broker in 5 Minutes

Spotting an unregulated broker is rarely difficult: most broker scams are not sophisticated. They rely on nobody spending five minutes checking, because the checks are public, free and boring. Here is the five-minute version, in the order that finds problems fastest — each step is designed to end the search early when the answer is bad.

1. Find the exact legal entity, not the brand

Scroll to the website footer and note the company name and the jurisdiction it is registered in. Large brands operate several entities behind one logo: an FCA-regulated company for UK clients, a CySEC one for Europe, and an offshore company in Seychelles, Vanuatu, Mauritius or St Vincent for everyone else. The website is shared; the protections are not.

Your protections come from the entity named on your account agreement, not from the strongest licence on the website. Before depositing, open the client agreement and find which company you are actually contracting with — it is usually stated in the first clause, and it is frequently not the one whose licence number is displayed most prominently.

2. Verify the licence on the regulator's own register

Go to the regulator's public register and search the entity name. The FCA Financial Services Register, ASIC's professional registers, CySEC's regulated entities list, BaFin, FINMA, the CFTC's and NFA's BASIC system, and South Africa's FSCA all publish searchable records. A licence number printed on a website means nothing on its own — copying a real number is the cheapest part of building a fake broker.

Two details on the register entry matter more than its existence. First, the permissions: many entries cover payment services, advisory work or crypto-asset registration but not dealing in retail derivatives. Second, the website and contact details on the record. If the register lists a different domain from the one you are on, you have found a clone firm, which is a scam that borrows a real company's identity.

Most regulators also publish a warning list of firms known to be operating without authorisation, which is the closest thing there is to a register of every unregulated broker. Searching the broker's name there takes ten seconds and is the single highest-yield check on this page.

3. Check what the jurisdiction actually requires

"Regulated" is not one thing. An EU, UK or Australian licence brings segregated client money, a cap on retail leverage, mandatory negative balance protection, a compensation scheme, and an ombudsman you can escalate to for free. An offshore registration typically brings a company number, an annual fee and no compensation scheme.

That does not make every offshore broker a fraud — many well-known names serve non-EU clients through such entities. It does mean the recourse you are imagining probably does not exist. Decide whether you are comfortable with that before you deposit, not after a withdrawal stalls.

4. Read withdrawal complaints, not star ratings

Search the broker's name together with the word "withdrawal" and read the worst reviews rather than the average. Aggregate ratings are easy to inflate; the complaint pattern is not. One pattern matters above the rest: deposits clear instantly, withdrawals require a verification step that never completes.

The variants are recognisable once you have seen them. A bonus whose terms lock the deposit until an impossible volume target is met. A tax, fee or "insurance" payment demanded before a withdrawal can be released — always a scam, because no broker asks for money to give you money. An account manager who trades for you, then explains that the account needs more funds to recover. A profitable account frozen for a "compliance review" with no end date.

5. Look at how they want to be paid

Payment routing is the hardest thing for a fake broker to disguise. Deposits sent to a company whose name is different from the broker's, in a country neither of you is in, are a strong signal. So is crypto as the only deposit route, or a card payment that is later described as something other than a broker deposit.

A regulated broker returns funds to the source they came from, which is an anti-money-laundering requirement rather than a courtesy. If the deposit page accepts a card but the withdrawal page offers only crypto or a third-party wallet, the asymmetry is the tell.

The signals that are weaker than they look

A professional website proves nothing — templates are cheap, and the site of an unregulated broker often looks better than a licensed one's. An SSL certificate proves nothing. A long list of awards proves very little, since several award schemes sell the trophies.

Advertised leverage above the local cap is not evidence of fraud either, only of which entity you are being onboarded to: 1:500 offered to a European resident means the account will not be the European one. Read it as a routing decision rather than a crime.

The missing risk warning is a better signal. Firms authorised in the EU, UK or Australia must display the share of retail accounts that lose money when they advertise CFDs. A site targeting those markets with no such warning anywhere is either not authorised there or not complying, and both are reasons to stop.

If you have already deposited

Stop depositing, especially if you are being asked for a payment to release a withdrawal. Save everything: the account agreement, the transaction records, the chat logs and the names used. Request a withdrawal in writing through the platform so a formal record exists.

Then report it to the regulator that should have authorised the firm and to your bank or card issuer — card payments can sometimes be charged back within the scheme's time limits, which is why acting quickly matters. Be sceptical of anyone who contacts you afterwards offering to recover the funds for an upfront fee: recovery-room fraud targets victims of the first scam, often using details taken from it.

Every review on this site starts with the regulation check — it is the first row of the quick-facts table, with the entity and the licence numbers we verified. A platform that fails the five-minute test does not get a review here; it gets left out.

Frequently asked questions

How can I check if a forex broker is regulated?

Search the exact legal entity name on the regulator's own public register, then confirm the permissions cover retail derivatives and that the website listed on the record matches the site you are using. A licence number on a broker's page is not evidence by itself.

What is a clone firm?

A fraud that copies an authorised company's name, address and licence number, and changes the website and contact details. Comparing the domain and phone number against the register entry is what exposes it.

Is an offshore broker automatically a scam?

No. Many established brokers serve non-EU clients through offshore entities. What changes is recourse: usually no compensation scheme, no ombudsman, no guaranteed negative balance protection and no leverage cap.

Why are withdrawals the thing to check?

Because a fraudulent broker has no reason to block deposits and every reason to delay withdrawals. Complaints about slow or conditional withdrawals appear long before anything else goes publicly wrong.

A broker is asking for a fee before releasing my withdrawal. Is that normal?

No. No legitimate broker requires a payment to release your own funds, whatever it is called — tax, insurance, clearance or conversion. It is one of the most reliable indicators of fraud.

Does high leverage mean a broker is unregulated?

It means the entity offering it is not the EU, UK or Australian one, since those cap retail leverage at 30:1 on major pairs. The offshore entity behind the offer may still be registered somewhere — with far fewer obligations to you.