Two firms, same product, same platform. One is incorporated in a country whose statute simply does not cover contracts for difference offered to non-residents. The other is incorporated in a country where that activity is covered, and it has not applied. Both call themselves unregulated. Only one of them is breaking a law, and it is not always the one people assume.
The distinction that decides almost every practical outcome is the regulatory perimeter. A perimeter is the list of activities a statute defines as regulated in that jurisdiction, plus the list of people it applies to. Outside the perimeter, no licence exists to obtain. Inside it, operating without permission is an offence, and in most developed markets a criminal one. So "unregulated" describes three completely different situations that get flattened into one word.
Three states that all get called unregulated
The first is outside the perimeter. Some jurisdictions never brought retail derivatives dealing into their financial services statute, or brought it in only for firms dealing with residents. A company there is lawful, unsupervised and unaccountable. There is no register to check and no complaints body to escalate to. That is the honest description, and it is the one the difference between regulated and unregulated brokers turns on.
The second is registered but not licensed. Company registries, business licences and international business company registrations are administrative acts. They confirm a legal entity exists and that fees were paid. They say nothing about conduct rules, client money segregation or capital. Firms display these certificates because they look like regulatory documents. Reading the actual permission on the face of the document usually settles it in a minute, which is why checking a licence against the regulator's own register is worth doing before any other diligence.
The third is inside a perimeter and unauthorised. This is the dangerous one. If a firm solicits clients in a country that requires authorisation for that activity, incorporation elsewhere changes nothing. The offence is committed where the client is. Enforcement then runs through warning lists, domain blocking, payment blocking and, in some markets, prosecution of directors personally.
None of this is legal advice. Whether a specific activity falls inside a specific perimeter is a question of local law and facts, and a firm has to take its own advice in every market it touches. What follows describes mechanisms, not conclusions about any particular business.
Why the client's country decides, not yours
Financial services law is territorial in a way company law is not. Most regimes attach the licensing requirement to the act of dealing with, or promoting to, a person located in that territory. Some allow a narrow carve-out where the client approached the firm entirely on their own initiative, and that carve-out is read strictly by supervisors. A landing page in the local language, a paid ad targeted at the country, or a local phone number tends to defeat it.
The practical consequence is that an offshore registration is a tax and corporate decision. It is not a shield against the law of your clients' home markets. A firm that wants European retail clients needs a route into the European regime, and no Caribbean or Indian Ocean registration substitutes for it. That is the honest reading of what offshore broker licences do and do not cover.
The commercial penalty arrives before the legal one
Very few unlicensed firms are shut down by a regulator. Almost all of them are shut down by their own payment stack. Banks and payment providers do not run legal analysis on the perimeter question. They run risk scoring, and the inputs are jurisdiction of incorporation, business category, expected chargeback profile and whether a named supervisor stands behind the entity.
Correspondent banking is where this bites first. A local bank in a small jurisdiction can only move dollars or euros through a correspondent relationship with a larger institution, and those relationships are withdrawn wholesale when the risk of a category outweighs the revenue. De-risking is not aimed at any one firm. It removes a country's access to a currency, and every firm banked there loses the rail at once.
Card acquiring works the same way. Schemes classify trading and gambling adjacent businesses into higher-risk programmes with monitoring thresholds attached, and acquirers underwrite the merchant against those thresholds before a single transaction settles. An entity with no supervisor and no audited accounts is harder to underwrite, so the underwriting file either gets declined or gets priced and reserved as if it will fail. Add a FATF listing on the jurisdiction and enhanced due diligence applies to every counterparty touching the entity, regardless of what that entity actually does.
What the word should be replaced with
Stop describing a firm as regulated or unregulated and describe four things instead. Which authority issued the permission. What activity that permission covers, in the regulator's own wording. Which client types it allows. Which countries the firm accepts clients from, and on what legal basis for each one. Those four answers survive scrutiny from a bank, an acquirer, a liquidity provider and a platform vendor, and they are what a distribution partner actually reviews.
A firm operating lawfully outside any perimeter should say so plainly rather than dressing a company registration up as supervision. It costs less than the alternative. Regulators publish warning lists for firms that overstate their status, and a listing follows the brand into every onboarding file it ever submits. SINGUARD builds software for licensed and unlicensed operators alike and takes no position on where a firm should sit, but the pattern is consistent: the firms that describe their status accurately keep their banking longer than the ones that stretch it.
"People argue about whether they are regulated. The only question a bank asks is which authority would answer the phone if something went wrong."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- Unregulated covers three different situations: outside the perimeter, registered but unlicensed, and inside a perimeter without permission.
- Licensing duties usually attach to where the client sits, so an offshore incorporation is a corporate decision and not a defence.
- Payment and banking access fails long before enforcement does, driven by de-risking, jurisdiction ratings and card scheme risk categories.
- Replace the word unregulated with the authority, the permission wording, the client types and the accepted countries.
Frequently Asked Questions
Is it illegal to run a brokerage without a licence?
It depends entirely on where the firm operates and where its clients are. Some jurisdictions do not regulate the activity at all, so no offence exists. Where a jurisdiction does regulate it, dealing with or promoting to residents without authorisation is usually an offence for the firm and sometimes for its directors personally. Only local counsel can answer this for a given business.
Does an offshore company registration count as a licence?
No. A company registration or international business company certificate confirms an entity exists and its fees are paid. A financial services licence lists permitted activities and imposes conduct, capital and client money rules. Regulators publish registers so the difference can be checked directly.
Why do banks refuse firms that are not doing anything unlawful?
Banks and acquirers price categories, not individual legal opinions. Jurisdiction risk ratings, FATF listings, correspondent banking withdrawals and card scheme high risk programmes all apply at the category level, so a lawful but unsupervised firm can be declined simply because the file is harder to underwrite.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.