How to Check a Forex Broker Is Regulated

Most forex scams and most of the brokers that quietly fail were never regulated in a way that meant anything. The good news is that checking takes about five minutes, and the checks are the same wherever you are in Asia. This is the process. For a reference on the regulators themselves, see our global forex regulators guide.

Step 1: find the exact legal entity

Scroll to the footer of the broker's website, or open the client agreement. You are looking for a sentence like "[Brand] is a trading name of [Company Ltd], registered in [country], licence number [X], regulated by [regulator]". Big brokers run several companies, one under a strong licence and others under weak or offshore ones. The entity you are onboarded to is the one that matters, and it is often not the one in the marketing.

Step 2: look the licence up on the regulator's own site

Do not trust a certificate image on the broker's site, because those are trivially faked. Go to the regulator directly:

Search the company name or licence number. Confirm three things: the entity exists, the licence covers dealing in investments or forex (not just "company registration"), and it is current, not lapsed or withdrawn.

Step 3: check which entity accepted you

This is where people get caught. A broker advertises its FCA or ASIC licence, but when you sign up from Asia you are onboarded to the Seychelles or Mauritius entity, which offers higher leverage and far weaker protection. Read the client agreement you accept. It will name the entity and the regulator. If it is a light-touch jurisdiction, that is your real level of protection, whatever the homepage said.

Step 4: check for clone and warning notices

• Search the regulator's warnings or "unauthorised firms" page for the broker's name and domain.
• Check your own country's alert list, such as the RBI Alert List (India), Bank Negara Financial Consumer Alert (Malaysia), SEC Investor Alert (Thailand), or Bappebti blocked sites (Indonesia).
• A "clone firm" warning means scammers are using a real broker's licence details. If you see one, only use links you typed yourself, never a link from an ad or a message.

Step 5: sanity-check the basics

1. Client funds held in segregated accounts, stated plainly.
2. A real registered address, not just a PO box in an island jurisdiction.
3. Withdrawal terms that do not depend on trading volume or "bonus" conditions.
4. A domain that is more than a year or two old (a WHOIS lookup takes seconds).

What a strong licence protects

Regulation is not a guarantee you will make money, and it does not stop a broker from going out of business. What a strong licence such as the FCA, ASIC or CySEC does is impose rules that reduce the specific ways brokers harm clients: client money must be segregated from company money, the firm must hold minimum capital, marketing cannot promise returns, and there is a complaints process with teeth. Some jurisdictions also run a compensation scheme that pays out a capped amount if the broker fails.

A light-touch licence, from somewhere like Seychelles, Vanuatu or Saint Vincent, imposes far fewer of those requirements. The company is registered, and there may be a nominal capital rule, but segregation, marketing conduct and dispute resolution are weakly enforced or not enforced at all. That is why brokers route Asian clients there: it lets them offer 1:1000 and pay affiliates aggressively, at the cost of your protection.

Red flags that override everything

• No entity name or licence number anywhere on the site or in the agreement.
• A licence number that, when checked, belongs to a different company or a lapsed registration.
• The broker is on your country's alert list, or carries a clone-firm warning.
• You reached the site through an ad, a Telegram link or a "mentor", and there is pressure to deposit fast.

Farhan almost funded a broker showing an FCA number in its footer. He looked the number up on the FCA register: it belonged to a payments company, not a broker, and the FCA had a clone-firm warning attached with the exact domain he was on. He had reached the site through a Telegram link. He never deposited, and later saw the same site rebranded under a new name.

First check	The exact legal entity in the client agreement
Where to verify	The regulator's own register, not the broker's site
Common trap	Onboarded to a weak entity, sold on a strong one
Also check	Your country's alert list, and clone-firm warnings
Time needed	About five minutes

Frequently asked