A firm launches a Spanish campaign. Landing page translated, affiliates briefed, an influencer signed for three posts. Within a fortnight the influencer's agency has pulled out, the affiliate stops sending Spanish traffic, and legal is asking why nobody read the CNMV rules first.
The Comision Nacional del Mercado de Valores took a route that few other European regulators took. Rather than tightening product rules further, it went at the demand side and restricted how CFDs may be promoted to retail investors at all.
What CNMV supervises
CNMV is the securities market authority for Spain. It authorises and supervises investment firms and their agents, maintains the public registers, polices market conduct, and publishes warnings about entities operating without authorisation. Spanish firms that are also credit institutions have the Banco de Espana involved on the prudential side, the same split Italy runs with CONSOB and the Banca d'Italia.
The registers are the practical tool. Every authorised investment firm, every branch, and every passported firm serving Spain should be findable there, along with the tied agents authorised to act for them. Spanish clients are told, repeatedly and by the regulator itself, to check the register before sending money, and the process is the one we describe in checking a broker licence.
Alongside the register CNMV publishes lists of entities it has warned about. The Spanish press calls them chiringuitos financieros, roughly "financial beach shacks". Names appear there quickly and stay findable, which is worth knowing for any firm considering how much brand risk an aggressive Spanish push carries.
The marketing restrictions
The core of the Spanish approach is a set of restrictions on advertising CFDs and similarly leveraged products to retail investors. The direction of travel is consistent: mass-market promotion is out, targeted communication to clients who have asked for it is in.
In practice that hits the channels most retail brokers rely on. Broad advertising campaigns aimed at the general public are restricted. Sponsorship arrangements that put a CFD brand in front of a mass audience are restricted. Promotion through public figures whose reach is general rather than financial does not sit comfortably with the framework. Communications that reach retail investors must carry the standardised risk warning with the firm's own share of losing retail accounts, and must not create an impression that trading is simple or suitable for everyone.
Firms accustomed to markets with lighter advertising rules find this severe. It is, and it is deliberate. The regulator's position is that a product with those loss statistics should not be sold by billboard. Whether or not a firm agrees, the compliance consequence is the same: the Spanish plan has to be built around content, education and inbound demand rather than paid reach. The wider European picture is in CFD marketing restrictions.
Affiliate traffic is your responsibility. A regulator that finds a Spanish affiliate running prohibited creative treats it as the firm's promotion, because the firm pays for it and benefits from it. Contractual language does not transfer the exposure. The controls that do work are in affiliate compliance rules.
Product rules on top
Spain applies the ESMA-derived retail framework: leverage caps by asset class, margin close-out at a set level, negative balance protection, no binary options for retail, and no bonuses tied to deposits. Those are the same limits described in the ESMA leverage caps guide, and the professional client route out of them requires meeting the qualifying tests properly rather than ticking a box.
Appropriateness testing matters more in Spain than in some markets because the conduct expectations sit on top of it. A retail client who fails the appropriateness assessment and is then onboarded anyway is a file waiting to be opened, and the mechanics are covered in appropriateness tests.
Serving Spain from elsewhere
An EEA-authorised firm can passport into Spain, and most retail brokers reaching Spanish clients do it that way rather than seeking a Spanish authorisation. Passporting moves prudential supervision to the home regulator but leaves conduct and marketing under CNMV on Spanish territory, so the advertising restrictions apply to a Cypriot or Irish firm exactly as they apply to a Spanish one. The mechanics are in EU passporting rules.
Firms based outside the EEA sometimes argue that Spanish clients came to them unprompted. The exemption exists and it is narrow, and Spanish-language funnels, Spanish payment methods and Spanish affiliates defeat it. We take the argument apart in reverse solicitation.
What a compliant Spanish operation looks like
Start with the register entry, because clients and journalists both check it. Build the client portal so that Spanish clients see Spanish leverage tiers, the current loss percentage in the risk warning, and terms in Spanish with a record of which version each client accepted. Run appropriateness before the account funds, not after. Keep every marketing asset in a reviewed library and pay affiliates only from that library.
Most of that is configuration rather than development, provided the underlying system treats jurisdiction as data. A broker CRM that hard-codes one leverage table and one set of terms will need engineering work for every country you add, which is how firms end up shipping the wrong disclosure to the wrong market.
The firms that do well in Spain accept the constraint early and build around it: long-form education, a clean register entry, transparent pricing, and support in Spanish. It is slower than buying reach. It is also the only version that survives a CNMV review.
"Spain is the market where the compliance question is not can we sell this, it is can we say anything about it. Most firms only discover the difference after their first campaign is pulled."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- CNMV restricted how CFDs may be advertised to Spanish retail investors rather than banning the product, which closes off mass-market promotion channels.
- Sponsorship and general-audience celebrity promotion do not fit the framework, and every retail communication needs the standardised risk warning with the firm's own loss percentage.
- Affiliate creative counts as the firm's promotion, so a reviewed asset library and enforced controls are the only workable defence.
- Passporting in from another EEA state moves prudential supervision but leaves Spanish conduct and marketing rules fully in force.
Frequently Asked Questions
Are CFDs banned in Spain?
No. CFDs may be offered to Spanish retail investors, but promotion of them to retail is heavily restricted and the ESMA-derived product rules apply, including leverage caps, margin close-out and negative balance protection. The restriction is on advertising rather than on the product itself.
What is a chiringuito financiero?
It is the Spanish term for an entity offering investment services without authorisation. CNMV publishes warnings naming such entities, and those warnings remain publicly findable, which is why an unauthorised Spanish push carries lasting brand risk as well as legal risk.
Does a CySEC licence allow marketing to Spanish clients?
A CySEC-authorised firm can passport services into Spain after the correct notification, but Spanish conduct and advertising rules still apply on Spanish territory. Home-state authorisation does not exempt a firm from CNMV marketing restrictions.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.