Portugal's Comissao do Mercado de Valores Mobiliarios, the CMVM, is the securities market supervisor. It authorises and supervises investment firms, oversees market conduct and disclosure, supervises collective investment undertakings, and publishes warnings about entities offering financial services without authorisation. Prudential supervision in Portugal is shared, with the Banco de Portugal responsible for credit institutions, so a Portuguese financial group can sit under more than one authority depending on its structure.
The authorisation is a MiFID authorisation
Whatever the local terminology, the substance is the EU framework. A Portuguese investment firm is authorised for a specific set of MiFID II services, and the obligations attached scale with those services: governance and fit and proper testing of directors, an organisational structure with real people in Portugal, capital sized to the permissions applied for, ongoing regulatory reporting, complaints handling, and the conduct rules that govern how retail clients are onboarded and categorised.
Two obligations catch new entrants. The first is client money segregation, which is an operational discipline rather than a policy document, and supervisors test it by looking at reconciliations. The second is transaction reporting, which is a data problem before it is a compliance problem. If your platform cannot produce complete, timestamped, correctly identified records of every order and execution, the reporting obligation becomes a permanent manual burden. That is a technology decision made years before the licence arrives.
What applies to CFDs
Retail contracts for difference sold to clients in the EU are governed by the product intervention framework that ESMA introduced and national authorities carried forward. Leverage is capped by asset class, negative balance protection applies on a per account basis, margin close out has a defined trigger, monetary and non monetary inducements to trade are prohibited, and a standardised risk warning with a firm specific loss percentage must appear on communications. Those leverage caps apply to a Portuguese firm exactly as they apply to a German or Irish one. There is no member state inside the EU where a retail CFD business escapes them.
National authorities also police advertising. Marketing rules for high risk products differ in detail between member states, and a firm passporting into several countries has to satisfy the strictest of them in each market it targets rather than the most convenient. Anyone building a paid acquisition plan should read what the marketing restrictions actually prohibit before commissioning creative.
This is descriptive commentary, not legal advice. Portuguese authorisation requirements and conduct rules are matters for Portuguese counsel and the CMVM.
Who accepts a Portuguese licence
The honest ranking of counterparties is roughly this.
Banks. A euro area investment firm supervised by an EU authority is a recognised counterparty type, and that alone puts you ahead of any offshore registration. Correspondent banking de-risking then operates on the risk profile of your actual flows. Compliance teams look at where clients are resident, whether any of those countries sit on FATF listings, how much of your inbound volume arrives as small third party payments, and whether your sanctions screening is real. A country listing in your client base changes the file materially, and it changes it faster than any licence upgrade can fix.
Acquirers and PSPs. Card schemes place leveraged trading in high risk merchant categories. That determines reserve requirements, settlement delays and the chargeback ratio at which monitoring programmes engage. An EU licence is normally required for a European acquirer to underwrite you at all, and once underwritten your approval rates depend on issuer behaviour, 3-D Secure implementation and descriptor clarity rather than on your regulator.
Liquidity providers. An authorised EU entity can open institutional relationships that an unregulated one cannot. Credit terms, collateral and any give up arrangements are then negotiated on financial strength.
Platform vendors. Software suppliers contract with lawfully authorised firms and generally do not have a jurisdiction preference beyond sanctions compliance and their own contractual restrictions. The constraint here is usually vendor licensing terms, not the regulator.
App stores and ad platforms. Both operate verification programmes for financial services. They ask for the authorisation covering the countries you want to reach. An EU licence answers that question for the EU. An offshore registration does not answer it at all, which is why offshore firms end up buying traffic through intermediaries and lose the audit trail in the process.
Portugal against the alternatives
Cyprus built an ecosystem for retail brokerage: legal firms, auditors, compliance staff who have done it before, and a supervisor with a long list of authorised investment firms. That depth is worth something real, and it is the honest reason CySEC remains the default. Portugal offers a different profile: fewer retail CFD specialists in the local market, a supervisor without the same volume of similar applications, and a professional services layer that is thinner for this specific business model.
Where Portugal wins is substance. If your management genuinely lives in Lisbon or Porto, if you are hiring locally, and if your business is broader than retail leverage, an authorisation where the people actually are removes an entire class of future supervisory argument. Where it loses is speed, because a supervisor seeing an unfamiliar model asks more questions, and every one of those questions is time. Founders should read how licence timelines really run before promising a launch date to investors.
SINGUARD supplies software to firms in this position, the trading platform, the CRM and the client portal, with the reporting and audit trails a supervised firm needs. It holds no financial services licence and gives no legal advice, and any firm reading this should take its own.
"A regulator that asks you hard questions before approval is doing you a favour. The ones that approve fast are the ones your bank will ask about later."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- The CMVM supervises Portuguese investment firms and market conduct, with the Banco de Portugal handling prudential supervision of credit institutions.
- EU retail CFD rules apply in Portugal without exception: leverage caps by asset class, negative balance protection, margin close out and standardised risk warnings.
- Transaction reporting is a data problem first. A platform that cannot produce complete timestamped records turns reporting into a permanent manual cost.
- Cyprus offers ecosystem depth, Portugal offers substance where your people actually live. Choose on where the team is, not on the brochure.
Frequently Asked Questions
What does the CMVM supervise?
The CMVM is Portugal's securities market authority. It authorises and supervises investment firms, oversees market conduct and disclosure obligations, supervises collective investment undertakings and issues public warnings about entities offering services without authorisation. Prudential supervision of credit institutions in Portugal sits with the Banco de Portugal.
Are CFDs allowed in Portugal?
Retail contracts for difference are sold in the EU under the product intervention framework carried forward from the ESMA measures, which caps leverage by asset class, requires negative balance protection and margin close out, bans trading inducements and mandates a standardised risk warning. Those rules apply to Portuguese authorised firms as they do elsewhere in the bloc. Leveraged trading carries a high risk of loss.
Is a Portuguese licence accepted by banks and payment providers?
An EU authorisation is recognised as a valid entity type by European banks and acquirers, which is the main practical advantage over offshore registration. Underwriting outcomes then depend on client jurisdictions, sanctions exposure, chargeback ratios and the high risk merchant category that leveraged trading normally falls into.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.