How to check if a forex broker is regulated (and avoid clone firms)

To check whether a forex broker is regulated, identify the exact company that will hold your account, find that legal entity in the regulator’s own register, and match the register’s website and contact details to the broker you are using. A familiar brand name or licence number on a footer is not proof by itself.

The five-minute forex broker regulation check

• Find the legal entity in the account-opening form, client agreement or terms—not only the marketing homepage.
• Note the regulator name and licence, reference or registration number claimed for that entity.
• Search the regulator’s official register yourself. Do not start from a link sent by a salesperson or social-media account.
• Match the company name, authorised activities, website domain, address and phone number. A licence belonging to a different company does not cover the broker in front of you.
• Confirm that your country and account will actually be served by that regulated entity before depositing.

For United Kingdom firms, use the FCA Financial Services Register. For US retail forex firms, the CFTC recommends checking registration and disciplinary history through NFA BASIC. Other jurisdictions have their own official registers, including ASIC in Australia and CySEC in Cyprus.

Regulated brand does not always mean regulated account

Large broker groups often operate several legal entities. One may be supervised by a major regulator while another is registered offshore under different leverage limits, compensation arrangements and complaint procedures. The brand can look identical on both websites. Your protection follows the entity named in your agreement, not the strongest licence displayed somewhere in the group footer.

That is why the ForexCake broker comparison separates regulatory entities from marketing claims and shows when fields were last checked.

How clone-firm scams work

A clone firm copies the name, licence number, address or branding of a genuine authorised business. The scammer then changes a small detail: the domain, email address, phone number, payment account or social handle. A search for the copied licence may show a real company, which creates false confidence.

The FCA’s clone-firm warning advises consumers to use contact details from the official register and to check for subtle differences. Call or email the registered firm using those details if anything does not match.

Red flags that deserve a pause

• Guaranteed returns, “risk-free” trading or pressure to deposit before a deadline.
• A request to pay crypto or transfer money to an individual or unrelated company.
• A salesperson who refuses to identify the contracting legal entity in writing.
• A domain registered recently while the broker claims a long operating history.
• Withdrawal demands for a new tax, unlocking fee or additional deposit.
• Only screenshots or influencer testimonials offered as proof of legitimacy.

The CFTC forex fraud advisory recommends verifying registration and background, getting information in writing and never depositing more than you can afford to lose.

Does regulation guarantee that a broker is safe?

No. Regulation can impose capital, disclosure, conduct and complaint-handling requirements, but it cannot eliminate trading losses, operational failures or misconduct. Registration is a minimum verification step—not a guarantee of execution quality, easy withdrawals or profitability.

What if the broker is offshore or unregulated?

Treat the absence of meaningful supervision as a material risk. You may have fewer practical routes for complaints or recovery, especially across borders. If a broker claims that offshore registration is “the same” as full authorisation, ask which regulator accepts client complaints and what compensation or insolvency protections apply to your exact entity.

The decision rule

If the company, domain and regulator record do not match cleanly, do not send money while you investigate the mismatch.

Keep a PDF or screenshot of the client agreement, regulator entry, deposit terms and withdrawal policy from the day you open the account. Those records are more useful in a dispute than a later memory of what the website used to say.