What Is Forex Broker Licensing?
Forex broker licensing is the regulatory authorisation a business needs to legally accept retail or institutional clients for foreign-exchange and contracts-for-difference trading. The licence is granted by a national financial regulator and prescribes which client classifications the broker may serve, what business models are permitted (market-maker, straight-through processing, or both), what capital must be held, and how client funds must be segregated.
The market the licence governs is the largest financial market in the world. BIS's 2025 Triennial Central Bank Survey put global daily foreign-exchange turnover at USD 9.6 trillion in April 2025, up 28% on the USD 7.5 trillion recorded three years earlier.[1] Retail and online forex/CFD broking is a small share of that total in notional terms but dominates the licensing conversation because retail brokers are where regulators have concentrated investor-protection rules over the past decade.
A forex broker licence is not a single product. The regulators in this space sit on a spectrum. At one end, EU and EU-equivalent regimes (Cyprus, Gibraltar, several DFSA and FSRA categories in the UAE) cap retail leverage, require segregated client funds, impose capital adequacy under the Investment Firms Regulation, and increasingly require operational resilience under the EU's Digital Operational Resilience Act, which has applied to all EU MiFID investment firms since .[2] At the other end, several offshore and Caribbean jurisdictions either set lighter requirements or, in the case of SVG and Saint Lucia, do not authorise forex business at all and require operators to evidence a licence held elsewhere.
The decision is rarely about finding the cheapest licence. It is about finding the lowest-cost licence that the banks, payment processors, liquidity providers, and target markets will all accept. That short sentence is the entire framing of this page.
Who Needs a Forex Broker Licence?
A forex broker licence is required by any business that accepts client funds to provide foreign-exchange or CFD execution services. The trigger is not the volume of trades but the activity: accepting client deposits, holding client positions, executing client orders, and earning revenue from spreads, commissions, or principal-side dealing. Different operator types map to different licence categories and capital tiers.
Retail B2C brokers are the largest single population. Any broker accepting non-professional retail clients in a regulated jurisdiction needs a full investment-firm licence. In the EU and EU-aligned regimes this is a MiFID II investment firm authorisation under Annex I Section A; in Cyprus this is the Cyprus Investment Firm (CIF) licence under Investment Services and Activities and Regulated Markets Law 87(I)/2017.[3]
Institutional and ECP-only brokers that serve exclusively professional clients and eligible counterparties still need authorisation but face lighter conduct obligations under MiFID II Article 30. DFSA Category 3A and FSRA Category 3A in the UAE free zones are the most commonly used routes for this profile.[4]
Market-makers and STP/ECN brokers sit in different cells of the same matrix. A market-maker (B-book) is the principal counterparty to client trades and earns from client losses; it must hold the MiFID II Annex I A(3) "dealing on own account" permission and carries the highest initial-capital floor under the Investment Firms Regulation: €750,000.[5] An STP or ECN broker passes flow to liquidity providers, earns commission or spread mark-up, and operates under reception-and-transmission and execution permissions with a €150,000 initial-capital floor where client money is held. Practitioner observation: most application errors at the licence-class stage come from operators assuming "STP only" when the actual business model already has hedge-book exposure or quote-stack overlay, which crosses the line into dealing-on-own-account and requires re-papering at the regulator's request.
Prop-trading firms are the live regulatory grey area. Pure proprietary trading of firm capital generally falls within the MiFID II Article 2(1)(d) exemption. The funded-trader and evaluation-fee model that has scaled rapidly since 2021 is a different question. The Czech National Bank, Italy's CONSOB, Belgium's FSMA, and Spain's CNMV have all issued investor warnings during 2024 and 2025 suggesting that where the trading is not, in fact, on a simulated basis, MiFID services may be triggered.[6] ESMA has not published dedicated guidance as of .
Introducing brokers, liquidity aggregators, copy-trading and PAMM/MAM platforms, and white-label arrangements sit in a fourth band. Introducing brokers typically operate either as authorised firms or as tied agents of an authorised firm under MiFID II Article 29. Copy-trading and PAMM/MAM platforms that execute trades automatically across client accounts are routinely treated as portfolio management under MiFID II Annex I A(4), with the corresponding capital and conduct obligations.
Where to Get Licensed
Ten jurisdictions cover the practical universe of forex broker licensing options for crypto-native and high-risk operators. They split into three tiers: regulated (Cyprus, Gibraltar, UAE), established offshore (Belize, Bahamas, Bermuda, Labuan), and light-touch or unregulated (SVG, Saint Lucia, Costa Rica). The right choice depends on target markets, banking tolerance, capital position, and leverage strategy.
Tier 1: Regulated (Cyprus, Gibraltar, UAE)
The regulated tier is where banking, liquidity, and Tier-1 payment-rail acceptance live, and where the regulatory cost is correspondingly high.
Cyprus is the historic centre of European forex broking. The Cyprus Securities and Exchange Commission (CySEC) supervises Cyprus Investment Firms under Law 87(I)/2017 and the Investment Firms Regulation. The CIF licence carries a passport to all 30 EEA member states, services commencing 15 days post-notification under MiFID II Articles 34 and 35. Retail leverage is capped at 30:1 majors / 20:1 non-majors and major indices and gold / 10:1 other commodities and non-major indices / 5:1 equities / 2:1 crypto CFDs under CySEC Directive DI87-09 (tightened on to bring commodities other than gold and non-major indices down to 10:1, from the previous 20:1), mirroring the ESMA permanent product-intervention regime.[7]
Capital under IFR Article 9 is €75,000 for reception-and-transmission, €150,000 for execution with client money, and €750,000 for dealing on own account. Realistic application-to-licence timeline runs 9 to 14 months. Cyprus corporate tax was raised to 15% for tax years from onwards, gazetted , as part of the country's OECD Pillar Two alignment; profits earned in FY 2025 remain at 12.5%.[8]
Gibraltar lost EEA passporting on and now operates as a UK gateway. The Gibraltar Financial Services Commission (GFSC) authorises investment firms under the Financial Services Act 2019 and the Financial Services (Investment Firms)(Prudential Requirements) Regulations 2021 (the "IFPR Regs"), which mirror the EU IFR/IFD regime. UK market access is preserved through the permanent Gibraltar Authorisation Regime, introduced by Schedule 6 of the UK Financial Services Act 2021 inserting Schedule 2A into FSMA 2000, with transitional passporting between the UK and Gibraltar extended to by the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 (in force ).[9]
Capital floors are sterling equivalents of the EU figures: £75,000 / £150,000 / £750,000. Gibraltar corporate tax was raised to 15% from , with a Qualified Domestic Minimum Top-up Tax for in-scope MNE groups under the Global Minimum Tax Act 2024 (Act 2024-20, enacted ). Timeline: 9 to 12 months.
United Arab Emirates is the most-misrepresented jurisdiction in the licensing market because three separate regulators run three separate regimes. From , the federal regulator, formerly the Securities and Commodities Authority, was reconstituted as the CMA under Federal Decree-Laws Nos. 32 and 33 of 2025, with a 12-month transitional period for existing licensees.[10] CMA Category 1 is the principal-broker route for OTC derivatives and spot FX on the UAE mainland.
Inside the Dubai International Financial Centre, the Dubai Financial Services Authority licenses brokers under the post-CP161 framework: matched-principal dealing reclassified from Category 3A to Category 2 from , with agent-only firms remaining in Cat 3A at a reduced USD 200,000 base capital requirement.[23] Inside Abu Dhabi Global Market, the Financial Services Regulatory Authority licenses brokers under FSRA Category 3A with a USD 500,000 base capital requirement.[11] Federal corporate tax is 9% on profits above AED 375,000; DIFC and ADGM entities may qualify for the Qualifying Free Zone Person regime at 0% on qualifying income, though dealing-as-principal income to retail clients is typically not qualifying.
Practitioner observation: when an operator says "I want a Dubai forex licence", the first conversation is which of the three regulators they actually need, because the answer changes everything from capital to client geography to tax position.
Tier 2: Established Offshore (Belize, Bahamas, Bermuda, Labuan)
The established offshore tier is where most non-EU retail brokers actually sit. Capital and fees are materially lower than Tier 1; banking access is harder but not closed.
Belize runs the most heavily used offshore retail-forex regime. The Financial Services Commission, established under the FSC Act No. 8 of 2023 (which consolidated the former IFSC into a single regulator), issues a "Trading in Commodity-based and Other Financial Instruments" licence under Schedule I Part B Item 13 of the FSC (Licensing) Regulations 2023.[12] Application fee USD 1,000 plus annual licence USD 25,000. No statutory leverage cap. Realistic timeline 4 to 6 months. Belize IBCs licensed for trading in financial and commodity derivatives operate effectively at 0% under the Income & Business Tax Act's Ninth Schedule.
Bahamas is mid-tier. The Securities Commission of The Bahamas regulates CFD brokers under the Securities Industry (Contracts For Differences) Rules 2020, which set a 200:1 retail leverage cap, 50% margin close-out on net equity, and mandatory negative-balance protection.[13] Initial registration and quarterly activity fees produce all-in regulatory cost around USD 230,000 a year. Minimum capital is USD 300,000 for combined agent-and-principal dealing. The 2024 Domestic Minimum Top-Up Tax Act introduced 15% CIT for Bahamian constituent entities of MNE groups with consolidated revenue at or above €750 million; smaller entities remain at 0%.
Bermuda is institutional in orientation. The Bermuda Monetary Authority licenses under the Investment Business Act 2003 with no dedicated retail-forex licence class. There is no statutory leverage cap; substance and net-asset requirements take precedence. The Corporate Income Tax Act 2023 introduced 15% CIT from fiscal years beginning on or after , but only for Bermuda Constituent Entities of MNE groups with consolidated revenue at or above €750 million.[14] Smaller entities, which means the vast majority of forex broker structures, remain at 0%.
Labuan is the Asia-Pacific mid-tier. The Labuan Financial Services Authority issues a Money Broking Licence under section 86 of the Labuan Financial Services and Securities Act 2010, with retail leverage capped at 100:1 on FX (1:1 on digital assets) and a clear restriction to intermediary activity only.[15] The revised Guidelines on the Establishment of Money Broking Business in Labuan IBFC raised the baseline minimum paid-up capital from RM 500,000 to RM 1,000,000, with RM 1,500,000 required for activities under paragraphs 6.1 and 6.2 of the Guidelines (including digital-asset money broking).
The Revised Fee Structure effective (finalised ) sets application USD 500 and a phased annual licence for Money Broker Conventional: USD 1,500 in 2026, USD 3,250 in 2027, reaching the steady-state USD 5,000 in 2028. Tax is 3% on net audited profits under the Labuan Business Activity Tax Act, but only if substance is met (at least two full-time employees in Labuan and annual operating expenditure of at least RM 100,000). The RM 20,000 flat-tax election was abolished for trading activity from year of assessment 2020, which is the single most common factual error on competing pages.
Tier 3: Light-touch and unregulated (SVG, Saint Lucia, Costa Rica)
The light-touch tier is where most marketing fictions in this space concentrate. None of these three jurisdictions issues a forex broker licence. Operators incorporate a company and rely on a substantive licence held elsewhere, or operate outside any regulatory perimeter at their own risk.
Saint Vincent and the Grenadines is unambiguous. The SVG Financial Services Authority's published position, issued as a Memorandum and reinforced by repeated warning notices, is that the FSA "neither regulates nor licenses" business companies or LLCs involved in forex trading or brokerage, and that no SVG forex licence is issued.[16] The 2023 Memorandum requires any BC or LLC engaging in forex activity to provide notarised and apostilled copies of the licence or licences from the jurisdiction or jurisdictions where the activities are conducted, with sanctions under FSA Act section 37(1) for non-compliance. Existing operators were given until to comply.
Saint Lucia publishes the equivalent disclaimer. The Saint Lucia FSRA Warning Notice on Forex Business states that "forex business is not licensed in Saint Lucia" and that documents indicating regulatory affiliation are "false and misleading".[17] Brokers using Saint Lucia incorporate as IBCs under IBC Act Cap. 12.14 and rely on a licence held elsewhere; IBC Act section 12 (subsections including (2) and (4)) bars banking, insurance, mutual-fund business, and solicitation of Saint Lucian residents.
Costa Rica has no dedicated forex broker licensing regime. SUGEVAL regulates only puestos de bolsa operating in or from Costa Rican territory or targeting Costa Rican investors; offshore-facing FX brokers incorporate as ordinary S.A. or S.R.L. and operate outside the regulatory perimeter. Costa Rica's tax regime is territorial: 30% on Costa Rica-source income only, with foreign-source income generally exempt subject to the substance test introduced by Law 10381 of 2023 for MNE groups.
Jurisdiction comparison
The table's twelve rows cover the ten jurisdictions, with the UAE split across its three regulatory clusters. They group into three regulatory tiers: five Tier-1 regulated regimes (Cyprus, Gibraltar, and the three UAE clusters), four offshore regulated regimes (Belize, Bahamas, Bermuda, Labuan), and three light-touch regimes (SVG, Saint Lucia, Costa Rica) where forex is not licensed locally and brokers rely on a foreign licence held elsewhere. Rows below are ordered Tier-1, then Offshore, then Light-touch.
| Jurisdiction | Regulator | Licence / Vehicle | Min. Capital | Retail Leverage Cap | Timeline | Corporate Tax | EU Passporting |
|---|---|---|---|---|---|---|---|
| Cyprus | CySEC | CIF (MiFID II) | €75k / €150k / €750k | 30:1 majors → 2:1 crypto | 9–14 months | 15% CIT | EEA passport |
| Gibraltar | GFSC | Investment firm permission | £75k / £150k / £750k≈ $101K / $202K / $1M | 30:1 majors → 2:1 crypto | 9–12 months | 15% CIT | UK gateway via GAR/TPR |
| UAE (CMA) | CMA (federal) | Category 1 OTC derivatives + spot FX | AED 10–30m (subject to CMA fees schedule)≈ $2.7M–8.2M | ~30:1 majors (broker-disclosed) | 6–12 months | 9% federal CIT | Mainland UAE |
| UAE (DFSA) | DFSA (DIFC) | Cat 2 (matched-principal) / Cat 3A (agent) / Cat 4 (arranging) | USD 500k / USD 200k / USD 10k | 30:1 majors → 2:1 crypto | 8–12 months | 0% QFZP or 9% | DIFC; restricted to professional |
| UAE (FSRA) | FSRA (ADGM) | Cat 3A / Cat 4 | USD 500k / USD 10k | Calibrated by client class | 6–10 months | 0% QFZP or 9% | ADGM; restricted to professional |
| Belize | FSC of Belize | Trading in derivatives licence | USD 500,000 | None statutory | 4–6 months | 0% effective (IBC + IBT Ninth Schedule) | None |
| Bahamas | SCB | Broker-Dealer + CFD authorisation | USD 300k (agent & principal) | 200:1 + 50% MCO + NBP | 3–6 months | 0% / 15% if MNE ≥€750m | None |
| Bermuda | BMA | Investment Business Act 2003 standard licence | Liquid assets ≥ 3 months OPEX | None statutory | 3–6 months | 0% / 15% if MNE ≥€750m | None |
| Labuan | Labuan FSA | Money Broking Licence | RM 1m (RM 1.5m for digital)≈ $220K ($330K digital) | 100:1 FX, 1:1 digital | 4–6 months | 3% on net profit (with substance) or 24% | Not Malaysian residents |
| SVG | SVG FSA (does not licence forex) | LLC / BC + foreign licence required | None | None | 3–5 business days for LLC | 30% territorial (offshore activity typically out of scope) | None |
| Saint Lucia | FSRA (does not licence forex) | IBC + foreign licence | None | None | 1–7 business days | 30% territorial / 0% foreign-source (post-2019 ES) | None |
| Costa Rica | None for offshore FX | S.A. / S.R.L. | None | None | 1–4 weeks | 30% territorial / 0% foreign-source | None |
The right column to read first is the one on the right. Without bankable market access, the rest of the table is academic. Operators with retail customers in regulated markets need a Tier-1 licence or two. Operators with institutional or professional clients in Asia, the Gulf, or LatAm have more options.
Editorial position: the choice between Cyprus and a UAE free zone is now closer than it was three years ago. Cyprus's 15% CIT, ongoing CySEC enforcement intensity (record AML fines in 2025), and the cost of full IFR/IFD compliance have narrowed the cost gap; DFSA and FSRA prudential reform from has widened the institutional-client appeal.
Key Requirements
Forex broker licence requirements vary by jurisdiction and tier, but five categories appear in every regulated regime: capital adequacy, corporate substance and key persons, client-fund segregation, AML/CFT and risk management, and operational resilience. The depth, evidence standard, and enforcement intensity of each varies sharply across the three tiers.
Capital adequacy is the requirement most often underestimated. In the EU and Gibraltar, the binding figure is rarely the initial capital floor under IFR Article 9. It is the higher of the permanent minimum capital, the fixed-overhead requirement (one quarter of the previous year's fixed overheads), and the K-factor capital under IFR Title III. A market-maker that warehouses risk faces a K-NPR (net position risk) charge that can scale materially above the €750,000 PMR floor as positions grow. CySEC Circular C736 of flagged supervisory findings on IFR/IFD calculations across Cyprus firms.[18]
Experienced applicants size the regulatory capital line around the ESMA permanent product-intervention regime's leverage caps and the K-NPR scaling that follows from retail-flow internalisation, not around the €750,000 floor; the firms that file at the floor are the ones that hit a Pillar 2 add-on at the first ICAAP review and have to recapitalise within twelve months of grant.
Corporate substance and key persons is the second universal. Every regulated regime requires a locally incorporated company with a registered office, a board with fit-and-proper directors, and a senior management team with relevant experience. Offshore jurisdictions add economic-substance regimes: the Bermuda Economic Substance Act 2018, the Bahamas Commercial Entities (Substance Requirements) Act 2018, the Belize Economic Substance Act 2019, and the UAE Economic Substance Regulations under Cabinet Decision 57/2020. These require board direction and "core income-generating activities" in the jurisdiction with adequate staff and operating expenditure. Practitioner observation: substance failures are increasingly the cause of post-licence regulatory action, not pre-licence rejection. Several offshore brokers we have worked with have had to retrofit local staff and office space twelve to eighteen months after grant when the annual substance return is challenged.
Client-fund segregation is universal in name and inconsistent in practice. Under CySEC Directive DI87-01 and equivalent rules at every regulated authority, client money must be held in segregated accounts at authorised credit institutions with daily reconciliation and a prohibition on intra-day use of client funds for own-account purposes.[19] The Investor Compensation Fund in Cyprus covers up to €20,000 or 90% of net retail-client losses, whichever is lower. Pre-licence segregated banking is the single most cited reason for delayed CIF grant: the regulator wants the segregated account in place before authorisation, and credit institutions want a licensed entity before opening the account.
In practice, the liquidity-provider acceptance hierarchy mirrors the segregated-banking hierarchy: Tier-1 prime brokers and bank-affiliated LPs open new lines for CySEC, FCA and DFSA Category 2 brokers within four to six weeks of licence grant, but extend acceptance to Belize, Bahamas and Labuan licensees only against a US dollar collateral wall or a Tier-1 EMI custodian sitting between the broker and the LP, which is the operational ceiling on offshore retail-FX pricing.
AML/CFT and risk management is the area where regulatory expectations have moved fastest. The EU AML Reform Package (Regulation 2024/1624, the AMLR; Regulation 2024/1620 establishing AMLA; Directive 2024/1640, the AMLD6) applies from with AMLA already operational since .[20] For EU-licensed brokers this means a single rulebook, direct supervision of high-risk firms, and a €10,000 EU-wide cash payment limit. Caribbean offshore regulators tightened in parallel: the Bahamas, Belize, and SVG all updated AML frameworks during 2024 and 2025. The common mistake is reading AMLA's direct-supervision threshold as a size test rather than a cross-border-footprint test; the first selection from targets the 40 obliged-entity groups operating in at least six Member States with elevated inherent ML/TF risk, which is exactly the profile of a CySEC or BaFin-passporting forex broker with retail-CFD activity across the EEA.
Operational resilience under DORA is the requirement most often missing from competitor pages. The Digital Operational Resilience Act (Regulation (EU) 2022/2554) has applied since to every EU MiFID investment firm.[2] It mandates an ICT risk-management framework, a 24-hour incident-reporting cadence for major incidents, a maintained Register of Information for all ICT third-party providers, periodic resilience testing including threat-led penetration testing for in-scope firms, and oversight of "critical" ICT third-party providers.
Administrative penalties on financial entities are set by Member States under Article 50 and vary widely: turnover-based ceilings range from 5% (Spain) to 10% (Sweden), with absolute ceilings from EUR 2 million (Czech Republic) to EUR 20 million (Italy); critical ICT third-party providers face periodic penalty payments of up to 1% of average daily worldwide turnover under Article 35(8).[21] The European Supervisory Authorities designated the first 19 critical ICT third-party providers on .[22] Practitioner observation: the dry-run exercise the ESAs ran in 2024 found that only around 6.5% of the nearly 1,000 firms tested passed all 116 register-of-information data-quality checks, and the gap shows up immediately when a CySEC or BaFin review starts asking about ICT third parties.
How Jagelski & Partners Helps
Jagelski & Partners coordinates forex broker licensing as a single mandate that runs corporate formation, licence application, banking placement, capital structuring, and AML and DORA programme set-up in parallel rather than in sequence. We assess the operator's commercial model first, then recommend the jurisdiction tier and licence category that fit target markets, capital position, and banking tolerance, then sequence the workstreams so that capital, substance, and banking arrive ahead of the regulator asking.
The first work item on every mandate is a tier and jurisdiction call. A retail B2C broker with a European customer base, €1.5 million of available capital, and a 14-month runway needs a different recommendation than a B2B liquidity provider targeting institutional clients in the Gulf with USD 4 million of capital and a 9-month runway. We do not recommend a jurisdiction before mapping the operator's regulated activities (RTO, execution, dealing on own account, portfolio management for copy-trading), the markets it actually targets, and the leverage levels it intends to offer. Leverage strategy is a constraint as binding as capital: a broker that has built its product around 500:1 leverage cannot operate under ESMA's 30:1 retail cap and needs an offshore or hybrid structure.
Once the jurisdiction is selected, we run formation in parallel with the licence application. For Cyprus that means a Cypriot holding company with resident directors and registered office in place before the CIF file is submitted to CySEC, with senior management interviews scheduled. For a UAE free-zone licence that means a DIFC or ADGM entity with leased office space and key approved persons identified. We coordinate formation through our company formation service at the depth the licence requires, not the cheapest depth available.
The banking placement runs alongside, not after. Forex broking is a Tier-1 high-risk category at every acquirer and EMI, and pre-qualification with institutions that have an active programme for licensed investment firms is the difference between a four-week banking timeline and a four-month one. The segregated client-money account, the operating account, and the regulatory capital account each have different acceptability profiles. Editorial position: the operators who land their CIF grant cleanly are not the ones with the strongest application file. They are the ones whose segregated client-money banking was confirmed before CySEC opened the substantive review. Banking pre-qualification is handled through our high-risk business accounts workflow.
DORA readiness, AML manual, KYC tooling, risk-management framework, and the regulatory reporting infrastructure are sequenced into the application timeline so that on the day the regulator grants the licence the operator can go live, not start a three-month build. Post-launch we handle ongoing compliance reporting, annual fees, key-person changes, and the regulatory milestones that fall due (CySEC's annual ICAAP-equivalent, DFSA prudential phase-2 transition in , FSRA filings, the Bahamas quarterly activity returns).
For licensing work, Jagelski & Partners is engaged by the client on a fixed-fee or fixed-fee-plus-success basis depending on the mandate. For banking placement coordinated alongside, Jagelski & Partners is paid by the institution, not by the client. We do not mark up institutional banking or EMI pricing, and we do not charge a banking onboarding fee. The institutional rates the client sees on banking onboarding documentation are the rates the institution applies.
Frequently Asked Questions
Yes. A Cyprus Investment Firm licence, or any MiFID II investment-firm authorisation issued by an EEA national competent authority, passports to all 30 EEA member states under MiFID II Articles 34 and 35. Services may commence 15 days after the home authority notifies the host authority. Cyprus is the most commonly used route for retail forex/CFD brokers because of the regulator's specialist familiarity with the product, established service-provider ecosystem, and direct presence on most institutional liquidity networks. Gibraltar lost EEA passporting on and now operates as a UK gateway via the permanent Gibraltar Authorisation Regime, with UK–Gibraltar transitional passporting in place until ; this is not an EU passport.
Because SVG company formation is fast and cheap, and historically operators used SVG-incorporated LLCs without disclosing that no SVG forex licence existed. The SVG Financial Services Authority published a Memorandum on requiring any business company or LLC engaging in forex activity to provide notarised and apostilled copies of the licence held in the jurisdiction or jurisdictions where the activities are actually conducted. Existing operators had until to comply, with sanctions under FSA Act section 37(1). An SVG LLC is a corporate vehicle, not a forex broker authorisation, and any marketing material describing it as a "forex licence" is inaccurate.
All-in Year 1 costs vary by an order of magnitude. Cyprus runs €300,000 to €1.5 million once capital, advisory fees, the segregated-banking deposit, DORA readiness, AML build, and first-year supervision fees are included, scaling with licence permissions. Gibraltar is broadly equivalent in sterling. UAE DFSA Cat 3A and FSRA Cat 3A run USD 600,000 to USD 1.5 million with the office and approved-persons stack. Bahamas all-in regulatory cost alone runs around USD 230,000 a year before capital and operational expenditure. Belize and Labuan run USD 80,000 to USD 200,000 in Year 1. SVG, Saint Lucia, and Costa Rica are formation-only at USD 2,000 to USD 8,000, but require a substantive licence held elsewhere to operate legitimately.
Realistic timelines from instruction to licence grant are 9 to 14 months for Cyprus, 9 to 12 months for Gibraltar, 6 to 12 months for a UAE CMA Category 1, 8 to 12 months for DFSA Cat 3A, 6 to 10 months for FSRA Cat 3A, 3 to 6 months for the Bahamas SCB CFD authorisation, 4 to 6 months for Belize and Labuan, and 3 to 6 months for a Bermuda standard licence. The variance within each band is driven by UBO complexity, source-of-funds evidence quality, the regulator's interview round, and whether banking and DORA readiness are run in parallel. Sequencing in parallel saves three to four months on Tier-1 mandates.
In the EU and EU-aligned regimes, retail leverage is capped at 30:1 on major currency pairs, 20:1 on non-majors and major indices and gold, 10:1 on other commodities and non-major indices, 5:1 on individual equities, and 2:1 on cryptocurrency CFDs, with a 50% margin close-out rule and mandatory negative balance protection. The UK FCA, BaFin, AMF, CONSOB, CNMV, and every other EEA national competent authority apply the same numbers under permanent national product-intervention measures. The Bahamas applies a 200:1 cap with the same margin-close-out and NBP framework. Labuan caps FX at 100:1 and digital-asset trading at 1:1. Belize, Bermuda, SVG, Saint Lucia, and Costa Rica impose no statutory cap, but banking and liquidity providers apply their own internal thresholds that effectively cap the offer.
Yes, materially. A market-maker (B-book) is the principal counterparty to client trades and must hold the MiFID II Annex I A(3) "dealing on own account" permission. Under the EU Investment Firms Regulation, this requires permanent minimum capital of €750,000 plus K-factor charges including K-NPR on net position risk. An STP or ECN broker passes flow to liquidity providers and operates under reception-and-transmission and execution permissions, with €150,000 PMR where client money is held. Hybrid models that warehouse a portion of flow require the same A(3) permission and capital treatment as a full B-book. Misclassifying the model at application stage is one of the most common causes of re-papering at the regulator's request.
It depends, and the regulatory perimeter is moving. Pure proprietary trading of firm capital generally falls within the MiFID II Article 2(1)(d) exemption. The funded-trader and evaluation-fee model is a grey area. The Czech National Bank, Italy's CONSOB, Belgium's FSMA, and Spain's CNMV have all issued investor warnings during 2024 and 2025 indicating that where the trading is not in fact on a simulated basis, MiFID services (reception and transmission, execution, dealing on own account) may be triggered. ESMA has not published dedicated guidance as of . The conservative position is that any model with a real-money execution layer, even partially, should be reviewed against MiFID II Annex I before launching in regulated markets.
A Tier-1 EU or UAE licence typically opens the door to segregated client-money banking with credit institutions that have an active programme for licensed investment firms, with caveats on the deposit ladder and ongoing transaction monitoring. Bahamas SCB licensees can access regional banking with effort. Belize, Bermuda, Labuan, and SVG-Saint Lucia-Costa Rica structures require a layered EMI or payment-institution overlay in most cases, which adds €25,000 to €80,000 of annual structural cost. The licence by itself does not guarantee banking. Pre-qualification with institutions that have an active programme is the operational reality.
The Digital Operational Resilience Act (Regulation (EU) 2022/2554) has applied since to every EU MiFID investment firm, which includes every EU-licensed forex broker. DORA mandates an ICT risk-management framework, a 24-hour incident-reporting cadence for major incidents, a maintained Register of Information for ICT third-party providers, periodic resilience testing including threat-led penetration testing for in-scope firms, and oversight of "critical" ICT third-party providers (the first 19 designated on ).
Administrative penalties on financial entities are set by individual Member States and vary widely: turnover-based ceilings range from 5% to 10%, with absolute ceilings from EUR 2 million to EUR 20 million; critical ICT third-party providers face periodic penalty payments of up to 1% of average daily worldwide turnover under Article 35(8). Brokers licensed outside the EU are not directly in scope but those serving EU clients via reverse solicitation or those onboarding EU institutional clients increasingly face DORA-equivalent demands at the counterparty level.
Federal Decree-Laws Nos. 32 and 33 of 2025 reconstituted the Securities and Commodities Authority as the Capital Market Authority with effect from . English translations of both decree-laws are publicly available on the SCA website. The existing SCA Rulebook, Decision No. 13/Chairman (also rendered 13/RM) of 2021, which governs the financial activities including OTC derivatives and brokerage, remains operative under FDL 32 Article 27 to the extent not in conflict with the new framework, pending CMA-issued implementing regulations under a 12-month transitional period. Existing licensees do not need to re-apply but should expect a register migration, updated reporting templates, and a strengthened extraterritorial perimeter that captures cross-border activity targeting UAE clients. New applicants in 2026 should engage on the basis that CMA-branded rulebook updates will issue during the transitional period.
Start Your Forex Broker Licensing Mandate
Jagelski & Partners maps the broker's commercial model to the licensing tier and jurisdiction that fits, sequences corporate formation, banking and licence application in parallel, and covers ten jurisdictions across regulated, established offshore, and light-touch tiers.
References
Show all references
- Bank for International Settlements, Triennial Central Bank Survey of foreign exchange turnover in April 2025, , bis.org, accessed .
- European Union, Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA), OJ L 333/1, eur-lex.europa.eu, accessed .
- Cyprus Securities and Exchange Commission, Investment Firms (Cypriot), cysec.gov.cy, accessed .
- Dubai Financial Services Authority, DFSA Rulebook: Prudential Investment, Insurance Intermediation and Banking Module (PIB), dfsaen.thomsonreuters.com, accessed .
- European Union, Regulation (EU) 2019/2033 on the prudential requirements of investment firms (IFR), OJ L 314/1, eur-lex.europa.eu, accessed .
- CONSOB, Public statement on prop trading firms and the MiFID perimeter, 2024, consob.it, accessed .
- Cyprus Securities and Exchange Commission, Directive DI87-09 on the marketing, distribution and sale of CFDs to retail clients (as amended 5 September 2025), cysec.gov.cy, accessed .
- Republic of Cyprus, Cyprus Tax Reform Laws, Government Gazette , mof.gov.cy, accessed .
- UK Government, Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 (made , in force ); UK Financial Services Act 2021, Schedule 6 (Gibraltar Authorisation Regime inserting FSMA Schedule 2A), legislation.gov.uk, accessed .
- United Arab Emirates, Federal Decree-Law No. 32 of 2025 (CMA Establishment) and Federal Decree-Law No. 33 of 2025, in force , sca.gov.ae, accessed .
- Abu Dhabi Global Market, FSRA Fees Rules (effective 1 January 2024), en.adgm.thomsonreuters.com, accessed .
- Belize Government, Financial Services Commission Act, No. 8 of 2023 and FSC (Licensing) Regulations 2023, S.I. 120/2023, nationalassembly.gov.bz, accessed .
- Securities Commission of The Bahamas, Securities Industry (Contracts For Differences) Rules 2020, laws.bahamas.gov.bs, accessed .
- Government of Bermuda, Corporate Income Tax Act 2023, in force , gov.bm, accessed .
- Labuan Financial Services Authority, Guidelines on the Establishment of Money Broking Business in Labuan IBFC (revised effective 9 September 2024), labuanfsa.gov.my, accessed .
- Saint Vincent and the Grenadines Financial Services Authority, Warning Notice on FX Revenues and Memorandum to Holders of Forex BCs and LLCs (6 January 2023), svgfsa.com, accessed .
- Financial Services Regulatory Authority of Saint Lucia, Warning Notice on Forex Business, fsrastlucia.org, accessed .
- Cyprus Securities and Exchange Commission, Circular C736 on IFR/IFD calculations, , cysec.gov.cy, accessed .
- Cyprus Securities and Exchange Commission, Directive DI87-01 on safeguarding client funds, cysec.gov.cy, accessed .
- European Union, Regulation (EU) 2024/1624 (AMLR), Regulation (EU) 2024/1620 (AMLA), Directive (EU) 2024/1640 (AMLD6), eur-lex.europa.eu, accessed .
- DLA Piper, DORA Penalty Regimes: Overview of Divergence Among Member States, , dlapiper.com, accessed .
- European Banking Authority, European Supervisory Authorities designate critical ICT third-party providers under the Digital Operational Resilience Act, , eba.europa.eu, accessed .
- ACA Group, New Prudential Rules for Firms Operating in the DIFC (DFSA CP161 Phase 1 effective 1 July 2025), acaglobal.com, accessed .