Most EU countries split financial supervision between a central bank doing prudential work and a market authority doing conduct. Austria took the other path. The Finanzmarktaufsicht, the FMA, is an integrated authority covering banking, securities and investment services, insurance and pension funds, working alongside the Oesterreichische Nationalbank on aspects of banking supervision. For a founder, the practical effect is that your investment firm application is assessed inside an institution whose reference point includes credit institutions, and the governance expectations tend to reflect that.
What the FMA authorises
Austria implements the EU framework, so the services an authorised firm may provide come off the MiFID II list: order transmission, execution, dealing on own account, portfolio management, investment advice, underwriting and placing, and the ancillary services. Austrian law distinguishes between investment firms and investment services providers with narrower permissions, and the obligations attached differ accordingly. Anyone checking a counterparty should read the entry on the FMA's public company database rather than trusting a logo on a website. Register checking is a five minute job that prevents most of the problems described in verifying a broker licence.
The requirements themselves are familiar to anyone who has been through an EU authorisation: qualified and vetted management with demonstrable experience, a business plan with financial projections that survive questioning, an organisational structure with compliance, risk and internal audit functions appropriate to the scale of the firm, an AML programme with a named responsible officer, and regulatory capital scaled to the permissions requested. Outsourcing arrangements get particular attention, because a firm whose critical functions all sit with third parties in another country raises the question of what is actually being supervised in Vienna.
Retail derivatives in Austria
Retail contracts for difference and similar leveraged products sold to EU clients fall under the intervention framework: leverage limits by asset class, negative balance protection on a per account basis, a defined margin close out rule, a prohibition on inducements to trade and a standardised risk warning showing the firm's own retail loss percentage. Those caps are not negotiable at national level in the direction of loosening. Some member states have historically applied stricter national measures, and binary options have been treated differently from CFDs in the EU intervention history. The direction of travel across the bloc has been toward restriction rather than relaxation, and a business plan that assumes otherwise is a bad plan.
Austrian conduct supervision also takes appropriateness testing seriously. Selling complex leveraged products to retail clients requires assessing whether the client understands the risks, and a testing flow designed to be passed by everyone is a finding waiting to happen. That is a product design decision inside your onboarding software, not a policy PDF.
Descriptive only, not legal advice. Austrian authorisation and conduct requirements are questions for Austrian counsel and the FMA.
Who accepts an Austrian licence
Banks. Austria is a euro area member with a well regarded supervisor, and an Austrian authorised investment firm reads well to European bank compliance teams. That gets the file opened. What decides it is the same set of factors everywhere: client residency mix, exposure to jurisdictions under FATF monitoring, sanctions screening quality, the proportion of inbound payments from third parties, and whether your business model produces the kind of transaction patterns that trigger alerts. Correspondent banking de-risking is a portfolio decision by the bank, and firms get exited for being expensive to monitor rather than for being illegitimate.
Acquirers and PSPs. Leveraged trading is classified into high risk merchant categories by the card schemes. Expect reserves, expect settlement delay, expect chargeback monitoring. An EU licence is generally a precondition for a European acquirer to consider the file. It does not lower the risk category. Approval rate work is then technical: descriptor clarity, 3-D Secure implementation, retry logic and issuer level analysis.
Liquidity providers and platform vendors. Institutional counterparties want a supervised entity and financial strength. Software vendors want a lawfully authorised counterparty and their own contractual conditions satisfied.
App stores and ad platforms. Financial services verification programmes ask which regulator authorises you and for which countries. An Austrian licence with a German language market focus is an unusually clean answer for the DACH region, because the verification question and the target market line up. Firms that market into Austria or Germany from outside the EU face the opposite problem and usually cannot complete verification at all.
What the FMA asks that catches applicants out
Three areas produce the most follow up questions in Austrian files, and none of them are exotic. The first is the fitness of management, where the authority looks for experience matched to the permissions requested rather than seniority in general. A capable executive from an unrelated industry does not carry an application for a dealing firm. The second is the outsourcing map: which functions run in house, which run at a group company abroad, which run at a vendor, and what happens if a vendor fails. Operational resilience expectations across the EU have tightened, and a firm that cannot describe how it continues trading if its platform provider goes offline is describing a gap. The third is AML, where the question is whether the programme reflects the actual client base rather than a template. A firm onboarding clients from high risk jurisdictions with a generic risk assessment has answered the wrong question.
None of this is unique to Austria. What is Austrian is the tone: the questions arrive in a structured sequence and the authority expects the answer to the previous one to hold. Contradictions between the business plan, the capital calculation and the marketing material get noticed.
Where Austria fits
Austria is a sensible home for a firm with real German speaking operations and a broader product than retail leverage: wealth management, portfolio management, a bank adjacent business. It is a poor choice as a cheap passporting shell, both because substance expectations are high and because an integrated supervisor with a banking reference point does not hurry. Compare it honestly against Germany's BaFin if the DACH market is the target, and against Cyprus if volume retail brokerage is the model.
The wider point applies in every member state. The licence decides which counterparties will talk to you. Your client mix and your controls decide whether they keep talking to you a year later. SINGUARD builds the platform, CRM and portal software supervised firms run on, and nothing more than that. It is not a broker, bank or adviser, and the structuring decision belongs to your own lawyers.
"Integrated supervisors compare you to banks. That is uncomfortable at application stage and useful for the ten years after it."
— Alex Onta, Executive Director, SINGUARD
Key Takeaways
- The FMA is an integrated supervisor covering banking, securities, insurance and pensions, working alongside the national bank on parts of banking supervision.
- Austrian investment firm authorisation follows the MiFID II service list, and outsourcing arrangements get close attention where critical functions sit abroad.
- EU retail derivative rules apply in full: leverage caps, negative balance protection, margin close out, no trading inducements and standardised risk warnings.
- Ad platform and app store verification asks which regulator covers your target countries, which is where an EU licence and a DACH market focus line up cleanly.
Frequently Asked Questions
What does the Austrian FMA supervise?
The FMA is Austria's integrated financial market authority. Its remit covers credit institutions, investment firms and investment services providers, insurance undertakings and pension funds, alongside market conduct supervision. It works with the Oesterreichische Nationalbank on aspects of banking supervision and maintains a public database of supervised entities.
Can an Austrian firm offer CFDs to retail clients?
Retail leveraged products sold in the EU are subject to the product intervention framework covering leverage caps by asset class, negative balance protection, margin close out, a ban on inducements to trade and a standardised risk warning. Whether a specific firm may offer them depends on its permissions, and Austrian legal advice is required. Leveraged trading carries a high risk of loss and is not suitable for everyone.
Is an Austrian licence better than Cyprus for a broker?
Neither is better in the abstract. Cyprus has a deeper professional services ecosystem for retail brokerage and a supervisor experienced with the model. Austria suits firms with genuine German speaking operations and a broader product range, and its integrated supervisor tends to apply governance expectations shaped by banking supervision. The right answer follows where your people and clients actually are.
About the Author
Alex Onta is an Executive Director at SINGUARD. He built eTrader, the terminal, the mobile apps, eTrader Broker, Copytrading, Business and Community, along with the worldwide clustered-server infrastructure it all runs on, with his brother Roman Onta helping on the design, and he leads that division today. Together with Roman he builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals, and the two of them carry worldwide compliance, payment processing and international business structuring side by side. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.