EU Broker Regulation Map 2026

Forex and CFD regulation in Europe is not a single system. It is 27 national regulators, each transposing the same EU directives (MiFID II, MiFIR, IDD) with their own enforcement culture, compensation ceilings, marketing restrictions, and dispute-resolution mechanisms. Add the UK (post-Brexit, ESMA-equivalent but separate) and Switzerland (bilateral, FINMA banking licence), and you have 30 jurisdictions a trader might encounter.

This page maps all 30. For each regulator, we document: the investor compensation limit, deposit protection ceiling, marketing restrictions beyond the ESMA baseline, dispute-resolution mechanism, and which of the top 15 EU-relevant brokers hold a direct licence there. We then flip the matrix: for each major broker, we show every licence they hold and which entity EU traders are assigned to.

The practical takeaway: your protection depends not on your country of residence but on which legal entity holds your account. A German trader using Exness trades under CySEC regulation (EUR 20,000 ICF), not BaFin. A Spanish trader using Pepperstone trades under BaFin regulation (EUR 100,000 deposit protection). Know your entity.

Every forex broker serving EU clients must hold a licence from at least one EU/EEA national regulator. Under MiFID II passporting, that single licence grants legal access to all 30 EU/EEA member states. The home regulator retains primary supervisory responsibility; host-country regulators can impose additional national-level rules (marketing restrictions, language requirements) but cannot block a properly passported firm.

These three pillars are the floor. Every EU/EEA regulator enforces them. The variation comes in what each regulator adds on top: France bans CFD advertising entirely (Sapin II), Belgium bans CFD distribution to retail (FSMA 2014), Germany requires regulator-approved marketing templates.

The EU minimum investor compensation is EUR 20,000 per client per firm. But several countries exceed this — sometimes dramatically. This is the single most practical protection difference between regulators, because it determines your maximum recovery if a broker becomes insolvent.

ESMA sets the floor: mandatory risk warnings, no bonuses to retail, quarterly loss-rate disclosure. Three countries go significantly further — these national-level restrictions affect which brokers actively serve residents and how they can market.

Of the 15 brokers mapped above, 9 hold a CySEC licence. Only 3 hold BaFin. This concentration is not random — it reflects structural incentives:

The trade-off is real: CySEC is cheaper and faster, but BaFin carries more credibility with institutional clients, German retail traders, and partnership teams of other regulated firms. Three brokers — Pepperstone, IG, and CMC Markets — have invested in BaFin licences specifically for the reputational signal.

If a broker dispute cannot be resolved directly, each jurisdiction provides a dispute-resolution mechanism. Quality varies significantly — from Italy's ACF (free arbitration up to EUR 500,000) to some countries where the process is purely advisory.

Before 2021, most EU traders used their broker's FCA-regulated entity. Brexit ended MiFID II passporting between the UK and EU, forcing brokers to establish or expand EU entities. The migration had practical consequences:

• Compensation downgrade: FSCS (GBP 85,000 / ~EUR 98,000) replaced by ICF (EUR 20,000) for migrated accounts
• Entity relocation: Most brokers chose CySEC for the EU entity. Pepperstone, IG, and CMC Markets chose BaFin.
• Regulatory arbitrage closed: UK residents now cannot use EU entities; EU residents cannot use UK entities. The broker's geo-routing assigns you to the correct entity.
• Crypto CFDs banned in UK: FCA permanently banned the sale of crypto-derivatives to UK retail in January 2021. EU brokers (CySEC) can still offer crypto CFDs at 2:1 leverage.