+372 669 2066
Ask Emma

Banking

Licensing

Formation

Blog About Ask Emma
Free Assessment
Forex Broker Licensing Last updated:

Forex Broker Licensing: Regulation, Jurisdictions & Requirements

Jagelski & Partners scopes forex broker authorisations for crypto-native and high-risk operators worldwide. We map operator activity (B2C retail brokerage, B2B institutional, market-maker vs STP/ECN, copy-trading, and PAMM, white-label) to the licence type and jurisdiction that fit the commercial model, target markets, and banking tolerance, and we introduce independent specialists for corporate substance, capital structuring, and segregated banking in parallel with the application.

RJ
Richard Jagelski · Founder & Managing Director
Author profile · Strategic Infrastructure Advisor for Crypto, Fintech & High-Risk Businesses
Book a Free Licensing Assessment → View Licensing Verticals

Not ready to submit a brief? Ask Emma first. She answers now and can collect your written brief for a specialist introduction.

What Is Forex Broker Licensing?

Forex broker licensing is the regulatory authorisation a business needs to legally accept retail or institutional clients for foreign-exchange and contracts-for-difference trading. The licence is granted by a national financial regulator and prescribes which client classifications the broker may serve, what business models are permitted (market-maker, straight-through processing, or both), what capital must be held, and how client funds must be segregated.

In short: Forex broker licensing splits into three tiers: regulated (Cyprus, Gibraltar, UAE) at €750,000+ market-maker capital and 6 to 14 month timelines; established offshore (Belize, Bahamas, Bermuda, Labuan) at USD 80,000 to USD 230,000 excluding regulatory capital and 3 to 6 months; and light-touch formation routes (SVG, Saint Lucia, Costa Rica) with no regulator-imposed capital but growing banking and counterparty constraints. The right choice depends on target markets, banking tolerance, capital position, and leverage strategy, not on headline fee.

The market the licence governs is the largest financial market in the world. BIS's 2025 Triennial Central Bank Survey put global daily foreign-exchange turnover at USD 9.6 trillion in April 2025, up 28% on the USD 7.5 trillion recorded three years earlier.[1] Retail and online forex/CFD broking is a small share of that total in notional terms but dominates the licensing conversation because retail brokers are where regulators have concentrated investor-protection rules over the past decade.

A forex broker licence is not a single product. The regulators in this space sit on a spectrum. At one end, Cyprus, Gibraltar, the DIFC and ADGM cap retail leverage, require segregated client funds, and impose capital and conduct requirements under their own frameworks. EU MiFID investment firms such as Cyprus CIFs fall within the Investment Firms Regulation and have been subject to the EU’s Digital Operational Resilience Act since ; Gibraltar and the UAE financial free zones apply their own rules.[2]

At the other end, several offshore and Caribbean jurisdictions either set lighter requirements or, in the case of SVG and Saint Lucia, do not authorise forex business at all and require operators to evidence a licence held elsewhere.

The decision is rarely about finding the cheapest licence. It is about finding the lowest-cost licence that the banks, payment processors, liquidity providers, and target markets will all accept.

Who Needs a Forex Broker Licence?

A forex broker licence is required by any business that accepts client funds to provide foreign-exchange or CFD execution services. The trigger is not the volume of trades but the activity: accepting client deposits, holding client positions, executing client orders, and earning revenue from spreads, commissions, or principal-side dealing. Different operator types map to different licence categories and capital tiers.

In short: the population splits into retail B2C brokers, institutional ECP-only brokers, market-makers, and STP/ECN brokers, prop-trading firms, and introducing brokers, copy-trading and white-label arrangements. The dealing model (principal vs. agency) sets the capital floor and the licence permission set, not the brand label.

Retail B2C brokers are the largest single population. Any broker accepting non-professional retail clients in a regulated jurisdiction needs a full investment-firm licence. In the EU and EU-aligned regimes this is a MiFID II investment firm authorisation under Annex I Section A; in Cyprus this is the Cyprus Investment Firm (CIF) licence under Investment Services and Activities and Regulated Markets Law 87(I)/2017.[3]

Institutional and ECP-only brokers that serve exclusively professional clients and eligible counterparties still need authorisation but face lighter conduct obligations under MiFID II Article 30. In the UAE free zones this profile maps to DFSA Category 3A (dealing as agent) or Category 2 (matched principal), and to FSRA Category 3A.[4]

Market-makers and STP/ECN brokers sit in different cells of the same matrix. A market-maker (B-book) is the principal counterparty to client trades and earns from client losses; it must hold the MiFID II Annex I A(3) "dealing on own account" permission and carries the highest initial-capital tier under IFD Article 9: €750,000.[5] An STP or ECN broker passes flow to liquidity providers, earns commission or spread mark-up, and operates under reception-and-transmission and execution permissions with a €150,000 initial-capital floor where client money is held. Assess whether the proposed execution and hedging arrangements involve dealing on own account. The STP label alone does not establish the required permission.

Prop-trading firms are the live regulatory grey area. Pure proprietary trading of firm capital generally falls within the MiFID II Article 2(1)(d) exemption. The funded-trader and evaluation-fee model that has scaled rapidly since 2021 is a different question. The Czech National Bank said in that purely simulated trading on a demo account is not an investment service; its opinion expressly excludes models in which demo trading is part of a regulated service, such as mirroring demo orders onto a real trading account.[30] Italy's CONSOB warned investors in about paid trading challenges run by self-described prop firms, noting similar warnings from Belgium's FSMA and Spain's CNMV.[6] ESMA had published no dedicated guidance on these models by .

Introducing brokers, liquidity aggregators, copy-trading, and PAMM/MAM platforms, and white-label arrangements sit in a fourth band. Introducing brokers typically operate either as authorised firms or as tied agents of an authorised firm under MiFID II Article 29. Copy-trading and PAMM/MAM platforms that execute trades automatically across client accounts can amount to portfolio management under MiFID II Annex I A(4), depending on how trades are replicated, with the corresponding capital and conduct obligations.

Where to Get Licensed

This guide compares ten jurisdictions for crypto-native and high-risk forex operators. They split into three tiers: regulated (Cyprus, Gibraltar, UAE), established offshore (Belize, Bahamas, Bermuda, Labuan), and light-touch or unregulated (SVG, Saint Lucia, Costa Rica). The right choice depends on target markets, banking tolerance, capital position, and leverage strategy.

Tier 1: Regulated (Cyprus, Gibraltar, UAE)

The regulated tier is where banking, liquidity, and Tier-1 payment-rail acceptance live, and where the regulatory cost is correspondingly high.

Cyprus is the historic centre of European forex broking. The Cyprus Securities and Exchange Commission (CySEC) supervises Cyprus Investment Firms under Law 87(I)/2017 and the Investment Firms Regulation. The CIF licence passports to the other 29 EEA states under MiFID II Articles 34 and 35: cross-border services may start once CySEC has forwarded the notification to the host authority, which it must do within one month, and a branch may open on the host authority’s reply or at the latest two months after transmission.[33] Retail leverage is capped at 30:1 majors / 20:1 non-majors and major indices and gold / 10:1 other commodities and non-major indices / 5:1 equities / 2:1 crypto CFDs under CySEC Directive DI87-09, which carries forward the product-intervention measures ESMA imposed temporarily in 2018 and 2019.[31] An amendment of states expressly that CFDs on commodities or stock indices not otherwise listed carry a 10% initial margin (10:1).[7] On ESMA warned that derivatives marketed as perpetual futures, including on crypto-assets, are likely to fall within the national CFD measures.[31]

Initial capital under IFD Article 9 (Directive (EU) 2019/2034) is €75,000 for firms limited to reception and transmission, execution, portfolio management, advice, or placing without firm commitment, only where they may not hold client money or securities. Other firms generally need €150,000; dealing on own account or underwriting on a firm commitment basis requires €750,000.[5] Realistic application-to-licence timeline runs 9 to 14 months. Cyprus corporate tax was raised to 15% for tax years from onwards, gazetted , as part of the country's OECD Pillar Two alignment; profits earned in FY 2025 remain at 12.5%.[8]

Gibraltar lost EEA passporting on and now operates as a UK gateway. The Gibraltar Financial Services Commission (GFSC) authorises investment firms under the Financial Services Act 2019 and the Financial Services (Investment Firms)(Prudential Requirements) Regulations 2021 (the "IFPR Regs"), which mirror the EU IFR/IFD regime. UK market access currently rests on transitional passporting between the UK and Gibraltar, extended to by the Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 (in force ), pending the permanent Gibraltar Authorisation Regime that Schedule 6 of the UK Financial Services Act 2021 inserted as Schedule 2A into FSMA 2000.[9]

Capital floors are sterling equivalents of the EU figures: £75,000 / £150,000 / £750,000. Gibraltar corporate tax was raised to 15% from , with a Qualified Domestic Minimum Top-up Tax for in-scope MNE groups under the Global Minimum Tax Act 2024 (Act 2024-20, enacted ). Timeline: 9 to 12 months.

In the United Arab Emirates, three separate regulators run three separate regimes. From , the federal regulator, formerly the Securities and Commodities Authority, was reconstituted as the CMA under Federal Decree-Laws Nos. 32 and 33 of 2025, with a 12-month transitional period for existing licensees.[10] CMA Category 1 is the principal-broker route for OTC derivatives and spot FX on the UAE mainland.

Inside the Dubai International Financial Centre, the Dubai Financial Services Authority licenses brokers under the post-CP161 framework: matched-principal dealing reclassified from Category 3A to Category 2 from , with agent-only firms remaining in Cat 3A at a reduced USD 200,000 base capital requirement.[23] A Category 2 firm dealing as full principal, as a market-maker does, needs USD 2 million, or USD 500,000 where it deals only as matched principal.[4] Inside Abu Dhabi Global Market, the Financial Services Regulatory Authority licenses agency and matched-principal brokers under FSRA Category 3A with a USD 500,000 base capital requirement, rising to USD 2 million for matched-principal dealing in OTC leveraged products with retail clients, and principal dealers under Category 2 at USD 2 million.[11]

Federal corporate tax is 9% on profits above AED 375,000 for ordinary taxable persons; DIFC and ADGM entities may qualify for the Qualifying Free Zone Person regime, which taxes qualifying income at 0% and other taxable income at 9% without the AED 375,000 band, though dealing-as-principal income to retail clients is typically not qualifying.

RegulatorWhere it licensesRouteBase capital
CMA (formerly the Securities and Commodities Authority)UAE mainlandCategory 1, principal broker for OTC derivatives and spot FXSet by the SCA Rulebook (Decision 13/RM of 2021), which the CMA still applies
DFSADubai International Financial CentreCategory 2 for dealing as principal (matched principal moved here on ); Cat 3A stays agent-onlyUSD 2 million (USD 500,000 matched principal only); USD 200,000 for Cat 3A
FSRAAbu Dhabi Global MarketCategory 3A (agent, matched principal); Category 2 (principal)Category 3A: USD 500,000, or USD 2 million for retail OTC leveraged-product matched-principal dealing; Category 2: USD 2 million

Practitioner observation: when an operator says "I want a Dubai forex licence", the first conversation is which of the three regulators they actually need, because the answer changes everything from capital to client geography to tax position.

Tier 2: Established Offshore (Belize, Bahamas, Bermuda, Labuan)

The established offshore tier is where most non-EU retail brokers actually sit. Capital and fees are materially lower than Tier 1; banking access is harder but not closed.

Belize runs a widely used offshore retail-forex regime. The Financial Services Commission, established under the FSC Act No. 8 of 2023 (which consolidated the former IFSC into a single regulator), issues a "Trading in Commodity-based and Other Financial Instruments" licence under Schedule I Part B Item 13 of the FSC (Licensing) Regulations 2023.[12] Application fee USD 1,000 plus annual licence USD 25,000.

No statutory leverage cap. Realistic timeline 4 to 6 months. Belize charges no corporate income tax, but business tax falls on a company's gross receipts wherever received, and Schedule IX of the Income and Business Tax Act sets it at 3% on the receipts of persons licensed to provide international financial services (6% where these are mixed with domestic receipts). Only a company that is tax resident in another country outside the EU's Annex I list and has no permanent establishment in Belize can claim the section 106(5) exemption; a licensed broker with its substance in Belize is unlikely to qualify.[34]

Bahamas is mid-tier. The Securities Commission of The Bahamas regulates CFD brokers under the Securities Industry (Contracts For Differences) Rules 2020, which set a 200:1 retail leverage cap (20:1 on digital assets), 50% margin close-out on net equity, and mandatory negative-balance protection.[13] Under the Securities Industry (Fees) Rules, 2024, a CFD dealer pays USD 5,000 to apply, USD 20,000 on registration and USD 45,000 a year on renewal, and its CFD Supervisory Officer a further USD 1,250, USD 3,750 and USD 6,250.[24] A quarterly activity fee of up to USD 45,000 comes on top, scaled to the previous quarter’s gross CFD trading revenue: nil up to USD 100,000 of revenue, then USD 5,000, USD 15,000 and USD 30,000, and the full USD 45,000 at USD 10 million or more.[25] The dealer and officer renewals plus activity fees therefore run from about USD 51,000 a year for a low-volume dealer to about USD 231,000 at the full rate. The Commission consulted from to on draft rules that, if adopted, would raise the CFD registration and annual fees to USD 75,000 each from , require a CFD firm to keep USD 1 million on deposit with a bank licensed in The Bahamas, and replace the fixed retail margins with a margin policy each firm submits for approval.[35]

Minimum capital is USD 300,000 for combined agent-and-principal dealing. There is no corporate income tax; the Domestic Minimum Top-Up Tax Act, 2024 applies a 15% top-up tax only to Bahamian constituent entities of MNE groups with consolidated revenue at or above €750 million.

Bermuda is institutional in orientation. The Bermuda Monetary Authority licenses under the Investment Business Act 2003 with no dedicated retail-forex licence class. There is no statutory leverage cap; substance and net-asset requirements take precedence. The Corporate Income Tax Act 2023 introduced 15% CIT from fiscal years beginning on or after , but only for Bermuda Constituent Entities of MNE groups with consolidated revenue at or above €750 million.[14] Smaller entities, which means the vast majority of forex broker structures, remain at 0%.

Labuan is the Asia-Pacific mid-tier. The Labuan Financial Services Authority issues a Money Broking Licence under sections 90 and 92 of the Labuan Financial Services and Securities Act 2010, for institutional investors and high-net-worth clients only, with client leverage capped at 100:1 on FX (1:1 on digital assets) and a clear restriction to intermediary activity only.[15] The revised Guidelines on the Establishment of Money Broking Business in Labuan IBFC raised the baseline minimum paid-up capital from RM 500,000 to RM 1,000,000, with RM 1,500,000 required for activities under paragraphs 6.1 and 6.2 of the Guidelines (including digital-asset money broking).

Labuan FSA’s revised fee structure, announced for and in force under the fee regulations from , sets the application fee at USD 500 and the Money Broker (Conventional) annual licence fee at USD 5,000 for a new licensee.[28] Existing licensees phase in at USD 1,500 in 2026 and USD 3,250 in 2027, reaching USD 5,000 in 2028.[26] Tax is 3% on net audited profits under the Labuan Business Activity Tax Act, but only if substance is met (at least two full-time employees in Labuan and annual operating expenditure of at least RM 100,000). The election to pay a flat RM 20,000 instead of the 3% rate was abolished from the year of assessment 2020, which covers accounting periods ending in 2019.[42] From , Labuan FSA’s Guidelines on the Management of Digital Money Broking Platform require a money broker running a trading platform to execute a trade only where the client’s account holds sufficient funds to cover it, and bar credit to clients for buying assets traded on the platform.[41]

Tier 3: Light-touch and unregulated (SVG, Saint Lucia, Costa Rica)

The light-touch tier is where most marketing fictions in this space concentrate. None of these three jurisdictions issues a forex broker licence. Operators incorporate a company and rely on a substantive licence held elsewhere, or operate outside any regulatory perimeter at their own risk.

Saint Vincent and the Grenadines is unambiguous. The SVG Financial Services Authority states in its current warning notices that it does not issue licences for forex trading or brokerage in the jurisdiction, and does not regulate or license business companies or LLCs engaged in that activity.[16] It requires any BC or LLC engaging in forex activity to hold the appropriate licence or authorisation from the jurisdiction or jurisdictions in which its clients are located.

Saint Lucia publishes the equivalent disclaimer. The Saint Lucia FSRA Warning Notice on Forex Business states that "forex business is not licensed in Saint Lucia" and that documents indicating regulatory affiliation are "false and misleading".[17] Brokers using Saint Lucia incorporate as IBCs under IBC Act Cap. 12.14 and rely on a licence held elsewhere; IBC Act section 12 (subsections including (2) and (4)) bars banking, insurance, mutual-fund business, and solicitation of Saint Lucian residents.

Costa Rica has no dedicated forex broker licensing regime. SUGEVAL supervises securities intermediaries such as puestos de bolsa that operate in or from Costa Rica or target Costa Rican investors; offshore-facing FX brokers incorporate as ordinary S.A. or S.R.L. and hold no Costa Rican broker licence. Costa Rica's tax regime is territorial: 30% on Costa Rica-source income only, with foreign-source income generally exempt subject to the substance test introduced by Law 10381 of 2023 for MNE groups.

Jurisdiction comparison

The table's twelve rows cover the ten jurisdictions, with the UAE split across its three regulatory clusters. They group into three regulatory tiers: five Tier-1 regulated regimes (Cyprus, Gibraltar, and the three UAE clusters), four offshore regulated regimes (Belize, Bahamas, Bermuda, Labuan), and three light-touch regimes (SVG, Saint Lucia, Costa Rica) where forex is not licensed locally and brokers rely on a foreign licence held elsewhere. Rows below are ordered Tier-1, then Offshore, then Light-touch.

JurisdictionRegulatorLicence / VehicleMin. CapitalRetail Leverage CapTimelineCorporate TaxEU Passporting
CyprusCySECCIF (MiFID II)€75k / €150k / €750k30:1 majors → 2:1 crypto9–14 months15% CITEEA passport
GibraltarGFSCInvestment firm permission£75k / £150k / £750k≈ $99K / $200K / $990K30:1 majors → 2:1 crypto9–12 months15% CITUK gateway via transitional passporting to 31 Dec 2026 (permanent GAR pending)
UAE (CMA)CMA (federal)Category 1 OTC derivatives + spot FXSet by SCA Rulebook 13/RM of 2021~30:1 majors (broker-disclosed)6–12 months9% federal CITMainland UAE
UAE (DFSA)DFSA (DIFC)Cat 2 (principal; matched principal) / Cat 3A (agent) / Cat 4 (arranging)USD 2m (USD 500k matched) / USD 200k / USD 30k30:1 majors → 2:1 crypto8–12 months9%, or 0% on a QFZP’s qualifying incomeNone; DIFC-based, retail permitted
UAE (FSRA)FSRA (ADGM)Cat 2 (principal) / Cat 3A / Cat 4USD 2m / USD 500k / USD 50k30:1 majors (retail)6–10 months9%, or 0% on a QFZP’s qualifying incomeNone; ADGM-based, retail permitted
BelizeFSC of BelizeTrading in financial instruments licenceUSD 500,000None statutory4–6 monthsNo CIT; 3% business tax on receiptsNone
BahamasSCBBroker-Dealer + CFD authorisationUSD 300k (agent & principal)200:1 + 50% MCO + NBP3–6 months0% / 15% if MNE ≥€750mNone
BermudaBMAInvestment Business Act 2003 standard licenceLiquid assets ≥ 3 months OPEXNone statutory3–6 months0% / 15% if MNE ≥€750mNone
LabuanLabuan FSAMoney Broking LicenceRM 1m (RM 1.5m for digital)≈ $250K ($370K digital)100:1 FX, 1:1 digital (institutional and HNWI clients)4–6 months3% on net profit (with substance) or 24%None
SVGSVG FSA (does not license forex)LLC / BC + foreign licence requiredNoneNone1–5 business days28% territorial (offshore activity typically out of scope)None
Saint LuciaFSRA (does not license forex)IBC + foreign licenceNoneNone3–15 working days30% territorial / 0% foreign-source (post-2019 ES)None
Costa RicaNone for offshore FXS.A. / S.R.L.NoneNone1–4 weeks30% territorial / 0% foreign-sourceNone

Read the EU Passporting column first. It is a regulatory-access column, not a banking one, and the two constraints are separate: passporting decides which markets the licence itself reaches, while bankability decides whether the operator can hold client money and settle at all. A row reading “None” there is not disqualifying; it means the market has to be reached some other way.

Operators with retail customers in regulated markets need a Tier-1 licence or two. Operators with institutional or professional clients in Asia, the Gulf, or LatAm have more options.

Editorial position: the choice between Cyprus and a UAE free zone is now closer than it was three years ago. Cyprus's 15% CIT, ongoing CySEC enforcement, and the cost of full IFR/IFD compliance have narrowed the cost gap; the DFSA's and the FSRA's 2025 prudential reforms have widened the institutional-client appeal.

Key Requirements

Forex broker licence requirements vary by jurisdiction and tier, but five categories appear in every regulated regime:

  1. Capital adequacy
  2. Corporate substance and key persons
  3. Client-fund segregation
  4. AML/CFT and risk management
  5. Operational resilience

The depth, evidence standard, and enforcement intensity of each varies sharply across the three tiers.

In short: every regulated forex file turns on five pillars: capital adequacy (the higher of PMR, fixed-overhead requirement, and K-factor capital under IFR), corporate substance and key persons, client-fund segregation, AML, and CFT controls, and DORA operational resilience for EU MiFID firms. In practice, pre-licence segregated banking is a frequent cause of delayed grant.

Capital adequacy is the requirement most often underestimated. In the EU and Gibraltar, the binding figure is rarely the initial capital floor under IFD Article 9. It is the highest of three separately calculated numbers:

ComponentHow it is calculated
Permanent minimum capital (PMR)The fixed floor for the permission held, EUR 750,000 for a firm dealing on own account
Fixed-overhead requirementOne quarter of the previous year's fixed overheads
K-factor capitalRisk-sensitive, under IFR Title III; K-NPR scales with warehoused positions

A market-maker that warehouses risk faces a K-NPR (net position risk) charge that can scale materially above the €750,000 PMR floor as positions grow. CySEC Circular C736 of flagged supervisory findings on IFR/IFD calculations across Cyprus firms.[18]

Practitioner observation: experienced applicants size the regulatory capital line around the retail leverage caps and the K-NPR scaling that follows from retail-flow internalisation, not around the €750,000 floor; firms that file at the floor risk an additional own-funds requirement after the first supervisory review and a recapitalisation soon after grant.

Corporate substance and key persons is the second universal. Every regulated regime requires a local establishment: usually a locally incorporated company with a registered office, though some regimes also authorise a branch of a foreign firm for particular activities. Each expects fit-and-proper directors or responsible branch managers, and a senior management team with relevant experience. Offshore jurisdictions add economic-substance regimes: the Bermuda Economic Substance Act 2018, the Bahamas Commercial Entities (Substance Requirements) Act, 2023, and the Belize Economic Substance Act 2019; the UAE’s separate Economic Substance Regulations (Cabinet Decision 57/2020) no longer require filings for financial years ending after 31 December 2022, following Cabinet Resolution No. 98 of 2024.[39] These regimes require board direction and "core income-generating activities" in the jurisdiction with adequate staff and operating expenditure. Practitioner observation: substance failures are increasingly the cause of post-licence regulatory action, not pre-licence rejection; offshore brokers have had to retrofit local staff and office space twelve to eighteen months after grant when an annual substance return was challenged.

Permitted client-money placements depend on the regime. In the EU, Article 4(1) of Delegated Directive (EU) 2017/593 permits a central bank, an authorised credit institution, a bank authorised in a third country, or a qualifying money market fund. Placement in such a fund requires the client’s express consent under Article 4(2).[19]

In Cyprus, the Investor Compensation Fund compensates covered clients when a member firm cannot repay their funds or return their financial instruments, up to 90% of the covered claim or €20,000, whichever is lower; it does not compensate trading losses.[38]

Practitioner observation: pre-licence segregated banking is a frequent cause of delayed CIF grant, because the regulator wants the segregated account in place before authorisation while credit institutions want a licensed entity before opening it.

Practitioner observation: the liquidity-provider acceptance hierarchy mirrors the segregated-banking hierarchy: Tier-1 prime brokers and bank-affiliated LPs open new lines for CySEC, FCA, and DFSA Category 2 brokers within four to six weeks of licence grant, but extend acceptance to Belize, Bahamas, and Labuan licensees only against a US dollar collateral wall or a Tier-1 EMI custodian sitting between the broker and the LP, which is the operational ceiling on offshore retail-FX pricing.

AML/CFT and risk management is the area where regulatory expectations have moved fastest. The EU AML Reform Package (Regulation 2024/1624, the AMLR; Regulation 2024/1620 establishing AMLA; Directive 2024/1640, the AMLD6) applies largely from (AMLD6’s transposition deadlines run from for some beneficial-ownership access rules to for the single access point to real estate information), with AMLA already operational since .[20] For EU-licensed brokers this means a single rulebook, potential AMLA selection of high-risk cross-border financial institutions, and a €10,000 EU-wide cash payment limit.

Caribbean offshore regulators tightened in parallel: the Bahamas, Belize, and SVG all updated AML frameworks during 2024 and 2025. For AMLA, operating in at least six Member States brings a financial institution into periodic assessment; direct supervision also depends on a high residual-risk classification and selection. The first selection begins by and is capped at 40 when more entities qualify.

Supervision starts six months after publication of the selected list, with the first cycle expected in 2028. A broker’s passporting footprint alone does not establish that it will be selected.[20]

Operational resilience under DORA is the fifth requirement. The Digital Operational Resilience Act (Regulation (EU) 2022/2554) has applied since to every EU MiFID investment firm.[2] It mandates an ICT risk-management framework, initial notification of a major ICT-related incident as early as possible, within four hours of classification as major and normally no later than 24 hours after awareness (if classification occurs after that 24-hour window, within four hours of classification), a maintained Register of Information for all ICT third-party providers, periodic resilience testing including threat-led penetration testing for in-scope firms, and oversight of "critical" ICT third-party providers.[40]

Administrative penalties on financial entities are set by Member States under Article 50 and vary widely: turnover-based ceilings range from 5% (Spain) to 10% (Sweden), with absolute ceilings from EUR 2 million (Czech Republic) to EUR 20 million (Italy); critical ICT third-party providers face periodic penalty payments of up to 1% of average daily worldwide turnover under Article 35(8).[21] The European Supervisory Authorities designated the first 19 critical ICT third-party providers on .[22] In the ESAs’ 2024 dry run of the register of information, 6.5% of the 947 registers analysed, from 1,039 participating financial entities, passed all 116 data-quality checks; the ESAs judged the result in line with expectations for a best-effort exercise.[29] Practitioner observation: gaps in the register surface quickly once a supervisory review asks about ICT third parties.

How Jagelski & Partners Helps

An independent specialist introduced by Jagelski & Partners coordinates forex broker licensing as a single mandate that runs corporate formation, licence application, banking placement, capital structuring, and AML and DORA programme set-up in parallel rather than in sequence. The specialist assesses the operator's commercial model first, then recommends the jurisdiction tier and licence category that fit target markets, capital position, and banking tolerance, then sequences the workstreams so that capital, substance, and banking arrive ahead of the regulator asking.

The first work item on every mandate is a written tier and jurisdiction assessment. A retail B2C broker with a European customer base, €1.5 million of available capital, and a 14-month runway needs a different recommendation than a B2B liquidity provider targeting institutional clients in the Gulf with USD 4 million of capital and a 9-month runway.

We do not recommend a jurisdiction before mapping the operator's regulated activities (RTO, execution, dealing on own account, portfolio management for copy-trading), the markets it actually targets, and the leverage levels it intends to offer.

Leverage strategy is a constraint as binding as capital: a broker that has built its product around 500:1 leverage cannot operate under the 30:1 retail cap that EU regulators apply and needs an offshore or hybrid structure.

Once the jurisdiction is selected, formation runs in parallel with the licence application. For Cyprus that means a Cypriot holding company with resident directors and registered office in place before the CIF file is submitted to CySEC, with senior management interviews scheduled. For a UAE free-zone licence that means a DIFC or ADGM entity with leased office space and key approved persons identified.

An independent specialist introduced through our company formation service handles formation at the depth the licence requires, not the cheapest depth available.

The banking placement runs alongside, not after. Acquirers and EMIs treat forex broking as a high-risk category, and pre-qualification with institutions that have an active programme for licensed investment firms is the difference between a four-week banking timeline and a four-month one. The segregated client-money account, the operating account, and the regulatory capital account each have different acceptability profiles. Editorial position: the operators who land their CIF grant cleanly are not the ones with the strongest application file. They are the ones whose segregated client-money banking was confirmed before CySEC opened the substantive review. Banking pre-qualification is handled through our high-risk business accounts workflow.

DORA readiness, AML manual, KYC tooling, risk-management framework, and the regulatory reporting infrastructure are sequenced into the application timeline so that on the day the regulator grants the licence the operator can go live, not start a three-month build. Post-launch the compliance partner handles ongoing compliance reporting, annual fees, key-person changes, and the regulatory milestones that fall due (CySEC's annual ICAAP-equivalent, DFSA prudential returns after the phase-2 transition of ,[23] FSRA filings, the Bahamas quarterly activity returns).

A licence without banking access is a certificate on the wall. Forex brokers face two distinct banking workstreams: merchant-facing high-risk acquiring for retail funding and segregated client-money accounts under MiFID II Article 16(9), both classes the network supports. An independent specialist introduced by Jagelski & Partners coordinates banking placement alongside licensing, with pre-qualification across a network of 90+ banking and payment institutions before any formal application. The institutional rates the client sees are the rates the institution applies, with no markup added. See banking for regulated businesses for the full placement model.

For licensing work, the partner who carries the mandate pays Jagelski & Partners for the introduction, and Jagelski & Partners does not bill the client; independent specialists quote their own professional fees separately, and statutory charges remain payable. For banking introductions, Jagelski & Partners is paid by the institution, not by the client. We do not mark up institutional banking or EMI pricing, and we do not charge a banking onboarding fee. The institutional rates the client sees on banking onboarding documentation are the rates the institution applies.

Frequently Asked Questions

Regulatory landscape

Yes. A Cyprus Investment Firm licence, or any MiFID II investment-firm authorisation issued by an EEA national competent authority, passports to the EEA (the 27 EU states plus Iceland, Liechtenstein and Norway)[27] under MiFID II Articles 34 and 35. Cross-border services may start once the home authority has forwarded the notification to the host authority, which it must do within one month (Article 34(3)); a branch may open on the host authority’s reply or at the latest two months after the home authority transmits the file (Article 35(6)). Cyprus suits retail forex/CFD brokers because of the regulator's specialist familiarity with the product, established service-provider ecosystem, and direct access to institutional liquidity providers.

Gibraltar lost EEA passporting on and now operates as a UK gateway through UK–Gibraltar transitional passporting, in place until pending the permanent Gibraltar Authorisation Regime; this is not an EU passport.

Because SVG company formation is fast and cheap, and historically operators used SVG-incorporated LLCs without disclosing that no SVG forex licence existed. The SVG Financial Services Authority requires any business company or LLC engaging in forex activity to hold the appropriate licence or authorisation from the jurisdiction or jurisdictions in which its clients are located.

An SVG LLC is a corporate vehicle, not a forex broker authorisation, and any marketing material describing it as a "forex licence" is inaccurate.

Costs and timelines

On our planning estimates, all-in Year 1 costs vary by an order of magnitude. Cyprus runs €300,000 to €1.5 million once capital, advisory fees, the segregated-banking deposit, DORA readiness, AML build, and first-year supervision fees are included, scaling with licence permissions. Gibraltar is broadly equivalent in sterling. UAE DFSA Cat 3A and FSRA Cat 3A run USD 600,000 to USD 1.5 million with the office and approved-persons stack.

Under the 2024 fee rules, Bahamas regulatory fees for a CFD dealer run from about USD 51,000 a year at low trading volumes to about USD 231,000 at the full quarterly activity fee, before capital and operational expenditure. Belize and Labuan run USD 80,000 to USD 200,000 in Year 1 excluding regulatory capital, which is a separate USD 500,000 in Belize and RM 1 million (about USD 248,000) in Labuan. SVG, Saint Lucia, and Costa Rica are formation-only, at USD 2,000 to USD 8,000 on our planning estimate, but require a substantive licence held elsewhere to operate legitimately.

Realistic timelines from instruction to licence grant are 9 to 14 months for Cyprus, 9 to 12 months for Gibraltar, 6 to 12 months for a UAE CMA Category 1, 8 to 12 months for DFSA Cat 3A, 6 to 10 months for FSRA Cat 3A, 3 to 6 months for the Bahamas SCB CFD authorisation, 4 to 6 months for Belize and Labuan, and 3 to 6 months for a Bermuda standard licence. The variance within each band is driven by UBO complexity, source-of-funds evidence quality, the regulator's interview round, and whether banking and DORA readiness are run in parallel. Run independent banking and compliance preparation in parallel where practical; any reduction in the overall timeline depends on the specific application.

Products and operations

In the EU and EU-aligned regimes, retail leverage is capped at 30:1 on major currency pairs, 20:1 on non-majors and major indices and gold, 10:1 on other commodities and non-major indices, 5:1 on individual equities, and 2:1 on cryptocurrency CFDs, with a 50% margin close-out rule and mandatory negative balance protection. These limits carry forward ESMA's temporary 2018 measures, which lapsed on 31 July 2019 once most EEA national competent authorities had adopted permanent national measures at least as stringent;[31] the UK FCA, outside the EEA, applies the same limits to retail CFDs under its own rules, except that cryptoasset derivatives may not be sold to UK retail clients at all.[32] The DFSA and the FSRA set retail margins equivalent to 30:1 on major currency pairs.[36][37] As of September 2026, The Bahamas applies 200:1 (20:1 on digital assets) with the same margin-close-out and NBP framework.

Labuan is not a retail route: its money brokers serve institutional and high-net-worth clients only, with leverage capped at 100:1 on FX and 1:1 on digital assets. Belize, Bermuda, SVG, Saint Lucia, and Costa Rica impose no statutory cap, but banking and liquidity providers apply their own internal thresholds that effectively cap the offer.

Yes, materially. A market-maker (B-book) is the principal counterparty to client trades and must hold the MiFID II Annex I A(3) "dealing on own account" permission. Under the EU Investment Firms Regulation, a market-maker’s own-funds requirement is the highest of the €750,000 permanent minimum, the fixed-overheads requirement, and the applicable K-factor requirement, including K-NPR for net position risk. An STP or ECN broker passes flow to liquidity providers and operates under reception-and-transmission and execution permissions, with €150,000 PMR where client money is held.

Hybrid models that warehouse a portion of flow require the same A(3) permission and capital treatment as a full B-book. Misclassifying the model can require the application documents and requested permissions to be revised.

It depends, and the regulatory perimeter is moving. Pure proprietary trading of firm capital generally falls within the MiFID II Article 2(1)(d) exemption. The funded-trader and evaluation-fee model is a grey area. The Czech National Bank has said that purely simulated demo trading is not an investment service; its opinion excludes models in which demo trading is part of a regulated service, such as mirroring demo orders onto a real trading account, where MiFID services (reception and transmission, execution, dealing on own account) may be engaged. Italy's CONSOB, Belgium's FSMA, and Spain's CNMV have warned investors about paid trading challenges.

ESMA had published no dedicated guidance on these models by . The conservative position is that any model with a real-money execution layer, even partially, should be reviewed against MiFID II Annex I before launching in regulated markets.

Banking and operations

A Tier-1 EU or UAE licence typically opens the door to segregated client-money banking with credit institutions that have an active programme for licensed investment firms, with caveats on the deposit ladder and ongoing transaction monitoring. Bahamas SCB licensees can access regional banking with effort. Belize, Bermuda, Labuan, and SVG-Saint Lucia-Costa Rica structures require a layered EMI or payment-institution overlay in most cases, which on our planning estimate adds €25,000 to €80,000 a year. The licence by itself does not guarantee banking. Pre-qualification with institutions that have an active programme is the operational reality.

The Digital Operational Resilience Act (Regulation (EU) 2022/2554) has applied since to every EU MiFID investment firm, which includes every EU-licensed forex broker. DORA mandates an ICT risk-management framework, initial notification of a major ICT-related incident as early as possible, within four hours of classification as major and normally no later than 24 hours after awareness (if classification occurs after that 24-hour window, within four hours of classification), a maintained Register of Information for ICT third-party providers, periodic resilience testing including threat-led penetration testing for in-scope firms, and oversight of "critical" ICT third-party providers (the first 19 designated on ).

Administrative penalties on financial entities are set by individual Member States and vary widely: turnover-based ceilings range from 5% to 10%, with absolute ceilings from EUR 2 million to EUR 20 million; critical ICT third-party providers face periodic penalty payments of up to 1% of average daily worldwide turnover under Article 35(8). Brokers licensed outside the EU are not directly in scope but those serving EU clients via reverse solicitation or those onboarding EU institutional clients increasingly face DORA-equivalent demands at the counterparty level.

Federal Decree-Laws Nos. 32 and 33 of 2025 reconstituted the Securities and Commodities Authority as the Capital Market Authority with effect from . English translations of both decree-laws are published on the CMA website. The existing SCA Rulebook, Decision No. 13/Chairman (also rendered 13/RM) of 2021, which governs the financial activities including OTC derivatives and brokerage, remains operative under FDL 32 Article 27(4) and FDL 33 Article 82 to the extent not in conflict with the new framework, until the CMA issues implementing resolutions.

Existing licensees must adjust their status to the new law within one year of 1 January 2026, a period the CMA Board may extend (FDL 33 Article 83), and FDL 33 reaches persons targeting clients in the UAE even from abroad or from a financial free zone. New applicants in 2026 should engage on the basis that CMA-branded rulebook updates will issue during the transitional period.

Start Your Forex Broker Licensing Brief

Jagelski & Partners scopes the broker’s licensing and formation routes in writing and introduces independent specialists for delivery. The guide compares ten jurisdictions, distinguishing licensing regimes from corporate-only routes.

Book a Free Licensing Assessment → View All Licensing Verticals

Related Services

References

Show all references
  1. Bank for International Settlements, Triennial Central Bank Survey of foreign exchange turnover in April 2025, , bis.org, accessed .
  2. European Union, Regulation (EU) 2022/2554 on digital operational resilience for the financial sector (DORA), OJ L 333/1, eur-lex.europa.eu, accessed .
  3. Cyprus Securities and Exchange Commission, Investment Firms (Cypriot), cysec.gov.cy, accessed .
  4. Dubai Financial Services Authority, DFSA Rulebook: Prudential Investment, Insurance Intermediation, and Banking Module (PIB), dfsaen.thomsonreuters.com, accessed .
  5. European Union, Regulation (EU) 2019/2033 on the prudential requirements of investment firms (IFR), OJ L 314/1, eur-lex.europa.eu, accessed . The IFR governs the composition of own funds; the initial-capital tiers themselves are set by Directive (EU) 2019/2034 (IFD), Article 9, eur-lex.europa.eu, accessed .
  6. CONSOB, Press release: Beware of online trading “video games” (warning on prop-firm trading challenges; similar warnings by Belgium’s FSMA and Spain’s CNMV), , consob.it, accessed .
  7. Cyprus Securities and Exchange Commission, Directive DI87-09 on the marketing, distribution, and sale of CFDs to retail clients (as amended 5 September 2025), cysec.gov.cy, accessed .
  8. Republic of Cyprus, Income Tax (Amendment) (No. 4) Law of 2025, Law 244(I)/2025 (corporate income tax 15% from 1 January 2026), Official Gazette No. 5070, , cylaw.org, accessed .
  9. UK Government, Financial Services (Gibraltar) (Amendment) (EU Exit) Regulations 2025 (made , in force ); UK Financial Services Act 2021, Schedule 6 (Gibraltar Authorisation Regime inserting FSMA Schedule 2A), legislation.gov.uk, accessed .
  10. United Arab Emirates, Federal Decree-Law No. 32 of 2025 on the Capital Market Authority (Articles 27 and 30) and Federal Decree-Law No. 33 of 2025 on the Regulation of the Capital Market (Article 82: earlier resolutions continue until replaced; Article 83: status to be adjusted within one year, extendable by the Board), in force , uaecma.gov.ae, accessed .
  11. Abu Dhabi Global Market, FSRA Prudential – Investment, Insurance Intermediation and Banking Rules (PRU), VER21.160926, Rule 3.6 (base capital requirements by category), en.adgm.thomsonreuters.com, accessed .
  12. Belize Government, Financial Services Commission Act, No. 8 of 2023 and FSC (Licensing) Regulations 2023, S.I. 120/2023, Schedule I item 13 (Trading in Commodity-based and Other Financial Instruments: application fee USD 1,000, annual fee USD 25,000), as published by the Financial Services Commission, belizefsc.org.bz, accessed .
  13. Securities Commission of The Bahamas, Securities Industry (Contracts For Differences) Rules 2020, laws.bahamas.gov.bs, accessed .
  14. Government of Bermuda, Corporate Income Tax Act 2023, in force , gov.bm, accessed .
  15. Labuan Financial Services Authority, Guidelines on the Establishment of Money Broking Business in Labuan IBFC (revised effective 9 September 2024), labuanfsa.gov.my, accessed .
  16. Saint Vincent and the Grenadines Financial Services Authority, Warning Notice (the Authority does not issue forex or brokerage licences, and companies must be authorised where their clients are located), fsasvg.com, accessed .
  17. Financial Services Regulatory Authority of Saint Lucia, Warning Notice on Forex Business, , fsrastlucia.org, accessed .
  18. Cyprus Securities and Exchange Commission, Circular C736 on IFR/IFD calculations, , cysec.gov.cy, accessed .
  19. Cyprus Securities and Exchange Commission, Directive DI87-01 on safeguarding client funds, cysec.gov.cy, accessed .
  20. European Union, Regulation (EU) 2024/1624 (AMLR), Article 90, Regulation (EU) 2024/1620 (AMLA), Directive (EU) 2024/1640 (AMLD6), Article 78(1), eur-lex.europa.eu; eur-lex.europa.eu (AMLD6); AMLAR Articles 12, 13 and 106, accessed .
  21. DLA Piper, DORA Penalty Regimes: Overview of Divergence Among Member States, , dlapiper.com, accessed .
  22. European Banking Authority, European Supervisory Authorities designate critical ICT third-party providers under the Digital Operational Resilience Act, , eba.europa.eu, accessed .
  23. ACA Group, New Prudential Rules for Firms Operating in the DIFC (DFSA CP161 Phase 1 effective 1 July 2025; new obligations phase from 1 July 2026, first ABCR report due Q3 2026), acaglobal.com, accessed .
  24. Securities Commission of The Bahamas, Securities Industry (Fees) Rules, 2024 (S.I. No. 107 of 2024, gazetted ; CFD dealer application USD 5,000, registration USD 20,000, annual renewal USD 45,000; CFD Supervisory Officer USD 1,250, USD 3,750 and USD 6,250), scb.gov.bs, accessed .
  25. Securities Commission of The Bahamas, CFDs Reduced Quarterly Activity Fee Policy (Ref. PSs.22-201102, published ), scb.gov.bs, accessed .
  26. Labuan FSA, Revised Fees Schedule (fee table dated 6 January 2026: Money Broker (Conventional) USD 5,000 w.e.f. 1 January 2026; (d) Transitional Fees Applicable to Existing Licensed Entities), labuanfsa.gov.my, accessed .
  27. EFTA, EEA-Lex: Regulation (EU) 2023/1114 (MiCA), incorporated into the EEA Agreement by Joint Committee Decision No 41/2025 and in force in the EEA from 24 June 2025; Directive (EU) 2015/2366 (PSD2), JCD 165/2019, in force 1 May 2022; Directive 2009/110/EC (EMD2), JCD 120/2010, in force 1 November 2012; Directive 2014/65/EU (MiFID II), JCD 78/2019, in force 3 December 2019, efta.int, accessed .
  28. Labuan FSA, Circular No. 338/2026/ALL: The Gazettement of Revised Fee Regulations 2026 for Labuan IBFC (revised fees targeted for 1 January 2026; Regulations gazetted and in effect from 1 July 2026), , labuanfsa.gov.my, accessed .
  29. European Supervisory Authorities (EBA, EIOPA and ESMA), Key findings from the 2024 ESAs Dry Run exercise: reporting of the registers of information (1,039 participating financial entities; 947 registers analysed against 116 data-quality checks), , esma.europa.eu, accessed .
  30. Czech National Bank, K simulovanému obchodování na demo účtu (opinion RS2023-18 on simulated trading on a demo account), , cnb.cz, accessed .
  31. European Securities and Markets Authority, ESMA ceases renewal of product intervention measures relating to contracts for differences, , esma.europa.eu; ESMA reminds firms of their obligations under CFD product intervention measures amid rising offerings of perpetual futures, , esma.europa.eu, accessed .
  32. Financial Conduct Authority, PS19/18: Restricting contract for difference products sold to retail clients (rules applying to CFDs from 1 August 2019), , fca.org.uk, accessed .
  33. European Union, Directive 2014/65/EU (MiFID II), consolidated version of 17 January 2025, Articles 34(3), 35(3) and 35(6), eur-lex.europa.eu, accessed .
  34. Government of Belize, Income and Business Tax Act, Cap. 55 (Revised Edition 2020), sections 106(1)(b) and 106(5), section 107 and Schedule IX, item (q), agm.gov.bz, accessed .
  35. Securities Commission of The Bahamas, Draft Securities Industry (Contracts for Differences) (Amendment) Rules, 2026 and Draft Securities Industry (Fees) Rules, 2026, consultation documents (consultation 28 August to 25 September 2026; not in force), scb.gov.bs; scb.gov.bs, accessed .
  36. Dubai Financial Services Authority, DFSA Rulebook, Conduct of Business Module, COB 6.16.6: Margin requirements for Retail Clients (3.3% on major currency pairs; 50% on Crypto Tokens), dfsaen.thomsonreuters.com, accessed .
  37. Abu Dhabi Global Market, FSRA Conduct of Business Rulebook (COBS), Rule 23.6: Margin requirements for Retail Clients (3.33% on major currency pairs), en.adgm.thomsonreuters.com, accessed .
  38. Cyprus Securities and Exchange Commission, Investor Compensation Fund (ICF): Information (covered claims; coverage the lower of 90% of cumulative covered claims and €20,000), cysec.gov.cy, accessed .
  39. UAE Ministry of Finance, Economic Substance Regulations (ESR), including Cabinet Resolution No. 98 of 2024, mof.gov.ae, accessed .
  40. European Union, Commission Delegated Regulation (EU) 2025/301 (DORA incident-reporting content and time limits), Article 5(1), eur-lex.europa.eu, accessed .
  41. Labuan FSA, Guidelines on the Management of Digital Money Broking Platform (issued ; in effect from ; paras 4.1, 5.2 and 5.3), labuanfsa.gov.my, accessed .
  42. Laws of Malaysia, Finance Act 2019 (Act 823), section 40, substituting section 71 of the Finance Act 2018 (Act 812): section 76 of the 2018 Act, which deletes section 7 (tax charged upon election) of the Labuan Business Activity Tax Act 1990, has effect for the year of assessment 2020 and subsequent years of assessment; under section 2(1) of that Act the basis period for a year of assessment is the accounting period ending in the preceding calendar year, mysst.customs.gov.my (archived 16 May 2026), accessed .