Early in my trading career, I threw $5,000 into a broker that plastered "FCA regulation" all over their homepage. Three months later, I couldn't pull my money out. Turns out, the FCA register listed their UK entity as legit — but my account was opened under their offshore arm. I had no idea.
That mistake cost me five grand. Here's the checklist I've used ever since.
Step 1: Find the License Number
Every legit broker puts their license number in the footer. Look for it. Write it down. Common formats:
- FCA (UK): FRN number (e.g., 522157)
- CySEC (Cyprus): CIF license number (e.g., 123/10)
- ASIC (Australia): AFSL number (e.g., 443670)
- FSA (Seychelles): License number with SD prefix
- BAPPEBTI (Indonesia): Member ID or license reference
No license number visible? Red flag. Walk away.
Step 2: Verify on the Official Register
Go straight to the regulator's database. Don't click any links from the broker's site — they can send you to fake verification pages.
Search by license number or company name. The entry should show what the firm is allowed to do and whether they can hold client money.
Step 3: Check Which Entity Your Account Falls Under
This step most traders skip — and it's exactly what got me. A broker can hold multiple licenses in different jurisdictions. Your account could be under any of them.
Dig into your account opening agreement or client terms. Find the legal entity name at the top. If it doesn't match the regulated entity on the website, your funds might not be protected by that regulator.
Step 4: Verify the Regulator's Reputation
Not all regulation is equal. Here's how I rank the major gold trading regulators by trust level:
| Tier | Regulators | Client Protection |
|---|
| Tier 1 | FCA (UK), ASIC (Australia), CFTC (US) | Strong leverage caps, negative balance protection, compensation schemes (£85k / A$1M) |
| Tier 2 | CySEC (Cyprus), BaFin (Germany), AMF (France) | ESMA-aligned rules, ICF compensation (€20k), negative balance protection |
| Tier 3 | FSA (Seychelles), FSC (Mauritius), LFSA (Labuan) | Basic oversight, limited or no compensation scheme, higher leverage allowed |
| Tier 4 | SVG FSA (St. Vincent), Vanuatu VFSC | No retail forex license, no client protection, no compensation scheme |
Step 5: Read the Risk Warning
Most brokers bury a specific disclosure in their terms and conditions. It'll say something like: "Your account is held under [Entity X], which is regulated by [Regulator Y]. Client funds are [protected / not protected] under [Scheme Z]."
If that disclosure says your account is under an SVG entity, you have zero regulatory protection — no matter what the homepage claims.
Red Flags I Learned the Hard Way
- License displayed but no entity match — the number exists on the register, but the website company name doesn't line up
- Claims of regulation without a verifiable number — "regulated by top-tier authorities" is marketing fluff, not a fact
- Multiple jurisdiction claims — "FCA, CySEC, ASIC, and SVG regulated" usually means the strongest one is just a billboard
- Pressure to deposit before verifying — if a salesperson is rushing you, that's the biggest red flag of all
I run every broker I trade with through these five steps. Takes ten minutes. Since my $5,000 screw-up, it's saved me from depositing with at least three shady brokers.