Forex Broker Licensing

Forex Broker Licensing, Done Properly

A forex broker licence is the authorisation you need to accept retail or institutional clients for foreign-exchange and CFD trading. It sets which clients you may serve, which models are permitted (market-maker, straight-through processing, or both), how much capital you must hold and how client funds must be segregated. Getting it wrong at the application stage costs months. We are engaged to get it right the first time.

A forex licence is not a single product; regulators sit on a spectrum. EU and EU-equivalent regimes (Cyprus, Gibraltar, and several DFSA and FSRA categories in the UAE) cap retail leverage, require segregated client funds, impose capital adequacy under the Investment Firms Regulation, and require operational resilience under DORA. At the other end, offshore jurisdictions set lighter requirements, or, in the case of SVG and Saint Lucia, do not authorise forex business at all. The decision is rarely about the cheapest licence; it is about the lowest-cost licence that the banks, payment processors, liquidity providers and target markets will all accept. That is the judgement we bring, and the work we then file and stand behind.

Who Needs a Forex Broker Licence?

A forex broker licence is required by any business that accepts client funds to provide foreign-exchange or CFD execution. The trigger is the activity, not the volume: accepting deposits, holding client positions, executing orders, and earning from spreads, commissions or principal-side dealing. Different operator types map to different licence categories and capital tiers, and getting the classification right is half the job.

Retail B2C brokers are the largest population. Any broker accepting non-professional retail clients in a regulated jurisdiction needs a full investment-firm licence: in the EU and EU-aligned regimes, a MiFID II authorisation under Annex I Section A; in Cyprus, the Cyprus Investment Firm (CIF) licence under Investment Services Law 87(I)/2017. Institutional and ECP-only brokers serving exclusively professional clients and eligible counterparties still need authorisation but face lighter conduct obligations under MiFID II Article 30; the DFSA and FSRA categories in the UAE free zones suit this profile.

Market-makers and STP/ECN brokers sit in different cells of the same matrix. A market-maker (B-book) is the principal counterparty to client trades and must hold the MiFID II Annex I A(3) dealing-on-own-account permission, carrying the highest initial-capital floor under the Investment Firms Regulation: €750,000. An STP or ECN broker passes flow to liquidity providers under reception-and-transmission and execution permissions, with a €150,000 floor where client money is held. Most licence-class errors come from operators assuming “STP only” when the model already has hedge-book exposure that crosses into dealing on own account, forcing re-papering at the regulator’s request. We catch that before it happens.

Prop-trading firms are the live regulatory grey area. Pure proprietary trading of firm capital generally falls within the MiFID II Article 2(1)(d) exemption. The funded-trader and evaluation-fee model is a different question: the Czech National Bank, Italy’s CONSOB, Belgium’s FSMA and Spain’s CNMV have all issued warnings during 2024 and 2025 that where the trading is not on a simulated basis, MiFID services may be triggered. We review your model against the perimeter before you launch.

Introducing brokers, copy-trading and PAMM/MAM platforms, and white-label arrangements sit in a fourth band. Introducing brokers typically operate as authorised firms or tied agents under MiFID II Article 29; copy-trading and PAMM/MAM platforms that execute automatically across client accounts are routinely treated as portfolio management under MiFID II Annex I A(4), with the corresponding capital and conduct obligations.

Where to Get Licensed

Ten jurisdictions cover the practical universe of forex broker licensing for high-risk operators, in three tiers: regulated (Cyprus, Gibraltar, UAE), established offshore (Belize, the Bahamas, Bermuda, Labuan), and light-touch or unregulated (SVG, Saint Lucia, Costa Rica). The right choice depends on target markets, banking tolerance, capital position and leverage strategy. We recommend the tier that fits your model.

Tier 1: Regulated (Cyprus, Gibraltar, UAE)

The regulated tier is where banking, liquidity and top-tier payment-rail acceptance live, and where the regulatory cost is correspondingly high.

Cyprus is the historic centre of European forex broking. The Cyprus Securities and Exchange Commission (CySEC) supervises Cyprus Investment Firms under Law 87(I)/2017 and the Investment Firms Regulation. The CIF licence carries a passport to all 30 EEA member states, services commencing 15 days post-notification under MiFID II Articles 34 and 35. Retail leverage is capped under CySEC Directive DI87-09 at 30:1 on majors down to 2:1 on crypto CFDs, mirroring the ESMA product-intervention regime. Capital under IFR Article 9 runs €75,000 / €150,000 / €750,000 across the permission tiers; corporate tax is 15% from 1 January 2026 under OECD Pillar Two; the application-to-grant timeline is 9 to 14 months.

Gibraltar lost EEA passporting on 31 December 2020 and now operates as a UK gateway. The Gibraltar Financial Services Commission (GFSC) authorises investment firms under the Financial Services Act 2019 and prudential regulations mirroring the EU IFR/IFD regime. UK access runs through the permanent Gibraltar Authorisation Regime under FSMA 2000 Schedule 2A, with UK-Gibraltar transitional passporting extended to 31 December 2026. Capital floors are the sterling equivalents (£75,000 / £150,000 / £750,000); corporate tax is 15% from 1 July 2024; timeline 9 to 12 months.

United Arab Emirates is the most misrepresented jurisdiction in the market, because three separate regulators run three separate regimes. On the mainland, the federal regulator was reconstituted as the CMA from 1 January 2026 under Federal Decree-Laws Nos. 32 and 33 of 2025 (12-month transition); CMA Category 1 is the principal-broker route for OTC derivatives and spot FX. Inside the DIFC, the Dubai Financial Services Authority reclassified matched-principal dealing to Category 2 from 1 July 2025, with agent-only firms in Category 3A. Inside ADGM, the Financial Services Regulatory Authority licenses under Category 3A. Federal corporate tax is 9% above AED 375,000; DIFC and ADGM entities may reach 0% under the Qualifying Free Zone Person regime, though principal dealing to retail clients is typically not qualifying. When an operator asks for “a Dubai forex licence”, the first thing we settle is which of the three regulators they actually need, because the answer changes capital, client geography and tax.

Tier 2: Established Offshore (Belize, the Bahamas, Bermuda, Labuan)

The established offshore tier is where most non-EU retail brokers sit. Capital and fees are materially lower than Tier 1; banking access is harder, but not closed, and we run it in parallel.

Belize runs the most heavily used offshore retail-forex regime: the Financial Services Commission (FSC Act No. 8 of 2023) issues a “Trading in Commodity-based and Other Financial Instruments” licence under the FSC (Licensing) Regulations 2023, with no statutory leverage cap, a 4 to 6 month timeline, and effectively 0% tax under the Income and Business Tax Act’s Ninth Schedule. The Bahamas is mid-tier: the Securities Commission regulates CFD brokers under the Securities Industry (Contracts For Differences) Rules 2020, setting a 200:1 retail leverage cap, 50% margin close-out and negative-balance protection, with USD 300,000 minimum capital for combined agent-and-principal dealing; the 2024 top-up tax brings 15% only for entities of MNE groups at or above €750 million, others remaining at 0%.

Bermuda is institutional in orientation: the Bermuda Monetary Authority licenses under the Investment Business Act 2003 with no dedicated retail-forex class and no statutory leverage cap, substance and net-asset requirements taking precedence. The Corporate Income Tax Act 2023 brings 15% from 1 January 2025 only for MNE groups at or above €750 million; the vast majority of broker structures remain at 0%. Labuan is the Asia-Pacific mid-tier: the Labuan Financial Services Authority issues a Money Broking Licence under the 2010 Act, capping retail leverage at 100:1 on FX and 1:1 on digital assets, restricted to intermediary activity, with paid-up capital of RM 1,000,000 (RM 1,500,000 for digital-asset broking). Labuan tax is 3% on net audited profits where substance is met (two Labuan employees and RM 100,000 annual operating expenditure); the flat-tax election was abolished for trading activity from 2020, a point competing providers routinely get wrong.

Tier 3: Light-touch and unregulated (SVG, Saint Lucia, Costa Rica)

The light-touch tier is where most marketing fictions in this space concentrate. None of these three jurisdictions issues a forex broker licence: operators incorporate a company and rely on a substantive licence held elsewhere, or operate outside any regulatory perimeter at their own risk. We are candid about this. If a structure needs a real licence behind it, we say so.

Saint Vincent and the Grenadines is unambiguous: the SVG Financial Services Authority neither regulates nor licenses forex business, and its 2023 Memorandum requires any company engaging in forex activity to evidence the licence held where the activity is actually conducted. An SVG company is a corporate vehicle, not an authorisation. Saint Lucia publishes the equivalent position; its Financial Services Regulatory Authority states that forex business is not licensed and that documents indicating regulatory affiliation are false and misleading. Brokers incorporate as international business companies and rely on a licence held elsewhere. Costa Rica has no dedicated forex regime: SUGEVAL regulates only brokerages operating in or targeting Costa Rica, so offshore-facing FX brokers incorporate as ordinary companies under a territorial tax regime that generally exempts foreign-source income.

Jurisdiction comparison

The table below covers the ten jurisdictions, with the UAE split across its three regulatory clusters. Tell us your model and we will point you to the row that fits.

The column to read first is the last one: without bankable market access, the rest of the table is academic. Operators with retail customers in regulated markets need a regulated licence, sometimes two; operators with institutional or professional clients in Asia, the Gulf or Latin America have more options. The choice between Cyprus and a UAE free zone is closer than it was three years ago, as Cyprus’s 15% tax and full IFR/IFD compliance costs narrow the gap while DFSA and FSRA prudential reform widens the institutional appeal. We give you a straight recommendation, not a brochure.

Key Requirements

Requirements vary by jurisdiction and tier, but five categories appear in every regulated regime. We build all five into the file rather than bolting them on under regulator pressure.

Capital adequacy is the requirement operators most often underestimate. In the EU and Gibraltar, the binding figure is rarely the initial floor: it is the higher of permanent minimum capital, the fixed-overhead requirement (a quarter of the previous year’s fixed overheads), and K-factor capital under the Investment Firms Regulation. A market-maker that warehouses risk faces a net-position-risk charge that scales well above the €750,000 floor as positions grow. We size the regulatory capital line around the risk you actually run, not around the floor, so you do not hit a capital add-on at the first review.

Corporate substance and key persons is the second universal. Every regulated regime requires a locally incorporated company with a registered office, a board of fit-and-proper directors, and senior management with relevant experience; Bermuda, the Bahamas, Belize and the UAE add economic-substance regimes requiring core income-generating activity in the jurisdiction. Substance failures increasingly cause post-licence regulatory action rather than pre-licence rejection, with brokers forced to retrofit local staff and office space a year or more after grant. We build adequate substance from the start.

Client-fund segregation is universal in name and inconsistent in practice. Client money must be held in segregated accounts at authorised credit institutions, reconciled daily, with no intra-day use for own-account purposes. Pre-licence segregated banking is the single most common reason for a delayed grant: the regulator wants the account in place before authorisation, and a credit institution wants a licensed entity before opening it. We break that deadlock by pre-qualifying banking before the file goes in.

AML and CFT controls are where expectations have moved fastest. The EU AML reform package (the AMLR, the regulation establishing AMLA, and the sixth AML Directive) applies from 10 July 2027, with AMLA already operational, bringing a single rulebook, direct supervision of high-risk firms and a €10,000 EU-wide cash limit; Caribbean regulators tightened in parallel. The common mistake is reading AMLA’s direct-supervision threshold as a size test rather than a cross-border-footprint test, which is exactly the profile of a passporting forex broker. We design the AML programme to match.

Operational resilience under DORA is the requirement most often missing from competitor pages. The Digital Operational Resilience Act has applied since 17 January 2025 to every EU MiFID investment firm, mandating an ICT risk-management framework, 24-hour reporting of major incidents, a maintained Register of Information for ICT third-party providers, periodic resilience testing, and oversight of critical providers. When the European Supervisory Authorities dry-ran the regime in 2024, only around 6.5% of firms tested passed all the register-of-information data-quality checks, and that gap shows up immediately once a regulator starts asking. We build the DORA programme into the application so the firm goes live compliant.

How We Deliver

We deliver forex broker licensing as a single mandate: we form the company, file and manage the application, deal with the regulator directly, structure the capital, set up the AML and DORA programmes, and arrange banking, all in parallel rather than in sequence. You deal with one accountable firm. We do the work ourselves and through a controlled network of vetted in-country lawyers, accountants and licensed specialists we work with directly, and never offload your file to an unverified third party.

The first work item on every mandate is the jurisdiction call. A retail B2C broker with a European customer base needs a different recommendation than a B2B liquidity provider targeting institutional clients in the Gulf. We map your regulated activities (reception and transmission, execution, dealing on own account, portfolio management for copy-trading), your target markets and your intended leverage before recommending anything. Leverage strategy is as binding as capital: a broker built around 500:1 cannot operate under the EU’s 30:1 retail cap and needs an offshore or hybrid structure. We tell you that on day one, not after you have paid for the wrong licence.

Once the jurisdiction is selected, formation runs in parallel with the application, delivered through our company formation service at the depth the licence requires: for Cyprus, a company with resident directors and a registered office in place before the CIF file reaches CySEC; for a UAE free zone, a DIFC or ADGM entity with leased office space and key approved persons identified. The operational build runs alongside too. The AML manual, KYC tooling, risk-management framework, DORA programme and reporting infrastructure are sequenced into the timeline so that on the day the licence is granted you can go live, not start a three-month build. After launch we handle ongoing compliance reporting, annual returns, key-person changes and the regulatory milestones that fall due. One firm, accountable end to end.

We never quote a generic price for forex licensing, because the right scope depends on your model, your markets and the jurisdiction. Tell us what you are building and we will give you a clear, fixed scope and a straight answer on timeline. Book a free consultation and we will map your route.

Frequently Asked Questions

Regulatory landscape

Is there a single EU forex broker licence that passports across the European Union?

Yes. A Cyprus Investment Firm licence, or any MiFID II investment-firm authorisation issued by an EEA national competent authority, passports to all 30 EEA member states under MiFID II Articles 34 and 35. Services may commence 15 days after the home authority notifies the host authority. Cyprus is the most commonly used route for retail forex and CFD brokers because the regulator knows the product well. Gibraltar lost EEA passporting on 31 December 2020 and now operates as a UK gateway via the permanent Gibraltar Authorisation Regime, with UK–Gibraltar transitional passporting in place until 31 December 2026; this is not an EU passport. We file the route that fits your markets and deal with the regulator directly.

Why do operators use SVG, Saint Lucia or Costa Rica if they do not issue forex licences?

Because incorporation there is fast and cheap, and operators historically used these vehicles without disclosing that no local forex licence existed. The SVG Financial Services Authority’s 2023 Memorandum confirms it neither regulates nor licenses forex business and requires any company engaging in forex activity to evidence the licence held where the activity is actually conducted; Saint Lucia and Costa Rica publish equivalent positions. These are corporate vehicles, not authorisations. We will tell you honestly when a structure needs a substantive licence held elsewhere, and obtain it.

Cost and timelines

How long does a forex broker licence application take?

Realistic timelines from instruction to grant are 9 to 14 months for Cyprus, 9 to 12 months for Gibraltar, 6 to 12 months for a UAE CMA Category 1, 8 to 12 months for DFSA, 6 to 10 months for FSRA, 3 to 6 months for the Bahamas, and 4 to 6 months for Belize and Labuan. The variance is driven by ownership complexity, source-of-funds evidence and the regulator’s interview round. Running the workstreams in parallel, as we do, saves three to four months on the regulated mandates.

Products and operations

What retail leverage am I allowed to offer?

In the EU and EU-aligned regimes, retail leverage is capped at 30:1 on major currency pairs down to 2:1 on cryptocurrency CFDs, with a 50% margin close-out rule and mandatory negative-balance protection; the UK FCA, BaFin, AMF, CONSOB, CNMV and every other EEA competent authority apply the same numbers. The Bahamas applies a 200:1 cap; Labuan caps FX at 100:1 and digital assets at 1:1; Belize, Bermuda, SVG, Saint Lucia and Costa Rica impose no statutory cap, though banking and liquidity providers apply their own thresholds. We select a jurisdiction that supports the leverage strategy you intend to run.

Does the difference between a market-maker and an STP/ECN broker affect the licence I need?

Yes, materially. A market-maker (B-book) is the principal counterparty to client trades and must hold the MiFID II Annex I A(3) dealing-on-own-account permission, requiring permanent minimum capital of €750,000 plus K-factor charges. An STP or ECN broker passes flow to liquidity providers under reception-and-transmission and execution permissions, with €150,000 where client money is held. Hybrid models that warehouse a portion of flow need the same A(3) permission and capital treatment as a full B-book. Misclassifying the model is a common cause of re-papering at the regulator’s request, exactly the error we are engaged to prevent.

Do prop-trading firms with funded-trader programmes need a forex broker licence?

It depends, and the perimeter is moving. Pure proprietary trading of firm capital generally falls within the MiFID II Article 2(1)(d) exemption, but the funded-trader and evaluation-fee model is a grey area: the Czech National Bank, Italy’s CONSOB, Belgium’s FSMA and Spain’s CNMV have all warned during 2024 and 2025 that where the trading is not on a simulated basis, MiFID services may be triggered. Any model with a real-money execution layer, even partially, should be reviewed against MiFID II Annex I before launching. We do that review before you commit.

Banking and operations

Will my forex broker licence give me access to banking?

A regulated EU or UAE licence typically opens the door to segregated client-money banking with credit institutions that run a programme for licensed investment firms; Bahamas licensees can access regional banking with effort, and offshore structures usually need a licensed EMI or payment-institution overlay. The licence by itself does not guarantee banking, which is why we run banking placement in parallel with the application rather than after it.

What is DORA and does it apply to my forex business?

The Digital Operational Resilience Act has applied since 17 January 2025 to every EU MiFID investment firm, which includes every EU-licensed forex broker. It mandates an ICT risk-management framework, 24-hour reporting of major incidents, a maintained Register of Information for ICT third-party providers, resilience testing, and oversight of critical providers. Brokers licensed outside the EU are not directly in scope but those serving EU clients increasingly face DORA-equivalent demands at the counterparty level. We build the DORA programme into the application so the firm goes live compliant.

Banking & Payments

A company and a licence still need a bank account

Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.

Explore banking & payments →

Related Services

• Crypto Licensing (VASP / CASP / MiCA): crypto authorisations we deliver across Europe and beyond
• Gambling & iGaming Licensing: gaming licences delivered in Anjouan, Curacao, the Isle of Man, Kahnawake and Tobique
• EMI & Payment Institution Licensing: payment and e-money authorisations
• Company Formation: the corporate substance every licensed broker needs
• Banking & Payments: supporting banking for licensed operators