A broker licensed in one European Economic Area state can serve clients in another through a passport. What that broker cannot do is market into Hungary with no authorisation and no notification, and the Magyar Nemzeti Bank is comparatively public about naming firms it believes are doing exactly that. The warning lists are the visible edge of a system that most founders only meet after their advertising has already been running for three months.
One authority, integrated in 2013
The Magyar Nemzeti Bank, the MNB, is Hungary's central bank. In 2013 the separate financial supervisory authority was folded into it, giving the central bank responsibility for authorising and supervising credit institutions, investment firms, insurers, fund managers, payment service providers and the market infrastructure around them, along with consumer protection in financial services. Monetary policy and financial supervision sit in the same institution.
That structure has consequences for tone. An integrated central bank supervisor thinks about system stability and household exposure before it thinks about market attractiveness. Hungary also has a specific history behind that instinct: the collapse of several brokerage houses in 2015 caused significant retail losses and led directly to harder supervision, more frequent inspection and a much lower tolerance for client asset handling that cannot be reconciled. A supervisor that has watched retail clients lose money in its own market behaves differently from one that has not.
What a Hungarian authorisation covers
Investment firms are authorised under the Hungarian investment services act, which transposes MiFID II, with the standard European permission set and capital scaled to the permissions requested. A firm acting as counterparty to leveraged contracts for difference needs dealing on own account. The full European conduct package applies: appropriateness assessment for retail clients, product intervention limits on leverage, negative balance protection, standardised risk warnings and restrictions on inducements and promotion.
Hungary is not a volume jurisdiction for retail CFD authorisations. Firms serving Hungarian clients overwhelmingly do so on a cross border basis from Cyprus or elsewhere in the EEA. That is legitimate when done properly, and it is the source of most of the friction when it is not.
How host state supervision actually works
Under MiFID II, the home state regulator is responsible for prudential supervision of the firm. The host state, Hungary in this case, retains real powers over conduct within its territory and over the marketing of the product to its residents. Practically, the sequence looks like this. The home regulator receives the passport notification and forwards it. The Hungarian authority then knows the firm exists and can see it in the register. Local language obligations, complaint handling routes and national marketing rules attach.
Where a firm skips the notification and advertises anyway, the host authority has options that do not require the home regulator to move first: public warnings, referral to the home supervisor, consumer alerts and, depending on the conduct, engagement with law enforcement. None of that is unique to Hungary. What Hungary does is publicise it, which is why its name comes up so often in this conversation. The wider mechanics are in cross border passporting limits.
This is general description, not legal advice. Cross border marketing rules differ by member state and change, so any firm targeting Hungarian residents should take Hungarian regulatory advice before running campaigns.
What a warning listing does to a business
Founders underestimate this. A public warning from an EEA supervisor is indexed, cited and cross referenced. It flows into the compliance databases used for know your business checks. Once it is in those databases, it is seen by every counterparty that runs a screening step, and that includes the ones the firm needs most.
Correspondent banks run adverse media and regulatory warning screening as part of periodic review, and a hit will not necessarily close an account, but it triggers enhanced due diligence and it sits in the file permanently. Payment service providers and acquirers run the same screening at onboarding, and a warning is a straightforward decline reason inside a merchant category already classified as high risk. Liquidity providers assessing credit risk read regulatory warnings as governance evidence. Advertising platforms and app stores run financial services verification programmes that check regulator registers and warning lists, and a firm flagged in a market it advertises into loses that channel. Screening drivers are covered in sanctions screening basics.
The asymmetry is what makes this a bad trade. The upside of skipping a notification is a few weeks of speed. The downside is a permanent database entry that every future counterparty sees.
Payments, forint and the practical layer
Hungary is an EU member state that has kept the forint rather than adopting the euro, which adds an operating question that Czech and Polish firms recognise. Client deposits arrive in forint, the trading account is usually denominated in dollars or euro, and someone absorbs the conversion. If the firm absorbs it silently through a poor internal rate, that is a conduct issue as much as a commercial one, because the cost is a charge the client was not clearly told about. Disclosure of conversion cost belongs in the fee schedule, not in the spread.
Cross border euro payments themselves are straightforward under the single euro payments area, and the acceptance obligations that come with it are covered in SEPA versus SWIFT. Card acquiring behaves as it does across the region: the trading merchant category is high risk, priced with a reserve, and monitored against chargeback thresholds no matter which EEA regulator issued the licence.
How to decide
Very few firms should seek a Hungarian authorisation, because very few firms have a business centred on Hungary. Most should hold an EEA licence elsewhere, file the passport notification into Hungary properly, meet the local conduct and language obligations, and treat the MNB as a host supervisor with real teeth over how the product is sold. Before onboarding a Hungarian client base, check the firm's own status in the public registers the way any counterparty would, using how to check a broker licence. Leveraged trading carries a high risk of loss, and a supervisor that has already seen retail clients harmed in its market will act on marketing that obscures it.
"Every EEA regulator can name the firms selling into its country without permission. Hungary just publishes the list, which is why founders think it is unusually aggressive. It is not. It is unusually open about it."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- The Magyar Nemzeti Bank absorbed the separate financial supervisor in 2013 and now authorises and supervises the whole Hungarian financial market.
- Most firms serving Hungarian clients do so cross border from another EEA state, which is legitimate only with a proper passport notification and compliance with local conduct rules.
- A public regulatory warning enters the compliance databases used by banks, payment providers, liquidity providers and ad platforms, and it does not expire when the dispute does.
- Hungary uses the forint, so deposit conversion cost is a disclosure question and belongs in the fee schedule rather than hidden in an internal rate.
Frequently Asked Questions
Does a broker need a Hungarian licence to accept Hungarian clients?
A firm authorised in another European Economic Area state can serve Hungarian residents on a cross border basis using the MiFID II passport, which requires a notification through its home regulator. Hungarian conduct and marketing rules still apply to how the product is sold locally.
What does the MNB supervise?
As Hungary's integrated financial supervisor it authorises and supervises credit institutions, investment firms, insurers, fund managers and payment service providers, and it also carries financial consumer protection responsibilities alongside its central banking functions.
How serious is appearing on a regulator's warning list?
It is durable. Warning lists feed the screening databases used in know your business checks, so correspondent banks, payment providers, liquidity providers and advertising platforms all encounter the entry during onboarding and periodic review, long after the original issue.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.