Most people launching a brokerage spend months on the trading platform, weeks on the brand and about one afternoon deciding where to get licensed. That afternoon ends up shaping almost everything that follows: which clients the firm can accept, how much leverage it can offer, which banks will open an account and how much capital sits frozen on the balance sheet for years.
The choice is wider than it looks. Advisory firms that specialise in investment firm and forex broker licensing now work with more than 20 distinct brokerage and fund manager authorisations, from full EU permissions to fast offshore registrations. For many founders the first serious option on the table is a Cyprus Investment Firm licence from CySEC, because it opens the whole European Economic Area with a single authorisation. It is not the right answer for everyone, though, and the reasons why say a lot about how the licensing market really works.
Start with the permission, not the passport
Regulators do not license "brokers" in the abstract. They license specific investment services, and the services a firm chooses drive its capital, its staffing and its risk profile.
The EU framework is the clearest illustration. Under the Investment Firms Directive, a firm that only receives and transmits orders, executes them for clients, manages portfolios or gives investment advice, and never holds client money, needs initial capital of €75,000. Once it is allowed to hold client money, the figure rises to €150,000. A firm that deals on its own account, which covers any CFD or forex broker acting as market maker and taking the other side of client trades, needs €750,000.
That last point catches people out. A "B-book" execution model, where the broker internalises client risk instead of passing every order to a liquidity provider, is a dealing-on-own-account activity almost everywhere. Deciding the execution model before choosing a jurisdiction can easily save half a million euros in trapped capital, or at least stop a business plan from being rejected at the first review.
The same logic applies to asset managers. Discretionary portfolio management, fund management and advice are separate permissions in most frameworks. Hong Kong makes it explicit with its numbered regulated activities: Type 1 for dealing in securities, Type 4 for advising on securities and Type 9 for asset management. A firm that plans to do all three needs to apply for all three.
What the tiers actually mean
Brokers and their clients talk about regulatory "tiers", and the label is shorthand for two things: how strictly a regulator supervises, and how much a licence from it is trusted by banks, payment providers and institutional counterparties.
The top tier usually means the UK Financial Conduct Authority, the Australian Securities and Investments Commission, the Monetary Authority of Singapore and EU regulators such as CySEC. These are the licences that make onboarding with tier-one banks and liquidity providers realistic. They also come with the tightest conduct rules. Since ESMA's product intervention measures, retail CFD clients in the EU face leverage caps of 30:1 on major currency pairs, falling to 2:1 on cryptocurrencies, along with negative balance protection and mandatory margin close-out. ASIC introduced almost identical caps for Australian retail clients in 2021.
Those caps are the main reason offshore licences still exist in the retail trading world. Regulators in jurisdictions such as Seychelles, Mauritius and the Bahamas generally do not impose the same leverage limits, and the capital and timeline are lighter. The trade-off is credibility. An offshore-only broker will find some banks, payment processors and marketing channels closed to it, and experienced traders increasingly check who regulates the entity they are actually opening an account with, not just the group logo.
For readers looking at this from the other side of the screen, the same logic is worth applying when [INTERNAL LINK: choosing a broker]: the licence number on the account agreement tells you far more than the one in the website footer.
This is why so many established brands run a dual structure. A tier-one entity serves clients in strictly regulated markets and anchors the group's reputation, while an offshore entity serves clients elsewhere under a different rulebook. It works, but only if the two entities are genuinely separate in who they onboard and how they market.
The main routes in practice
In Europe, the Cyprus Investment Firm licence remains the workhorse for forex and CFD brokers and increasingly for portfolio managers. MiFID II passporting lets a CIF offer services across all 30 EEA states once it notifies CySEC, and Cyprus has a deep bench of experienced compliance officers, auditors and platform providers. The cost is substance: real local staff, a physical office, ongoing capital adequacy reporting and contributions to the Investor Compensation Fund.
The UK offers a very different entry point. Instead of seeking full FCA authorisation, some firms start as an Appointed Representative, operating under the permissions of an already authorised principal firm. It can take weeks rather than a year and needs no regulatory capital of its own, which suits introducing brokers and advisers testing the market. The limits are real, though. The AR can only do what its principal is permitted to do, and since the FCA tightened its rules for principals in 2022, principals have become far more selective about who they take on.
Australia's Australian Financial Services Licence carries global weight, but a firm issuing OTC derivatives generally has to hold net tangible assets of at least AUD 1 million. In Asia, a Singapore Capital Markets Services licence or a Hong Kong SFC licence gives access to some of the most sophisticated wealth markets in the world, with timelines and scrutiny to match. In the Middle East, the Dubai Financial Services Authority's Category 4 licence covers advisory and arranging business inside the DIFC and is a common first step for firms building a Gulf client base.
Offshore and mid-tier options fill in the rest of the map. The Seychelles Securities Dealer licence is the cost-efficient route many retail brokers start with. Mauritius offers investment dealer and investment adviser licences with access to a wide treaty network. The Bahamas, the British Virgin Islands and the Cayman Islands serve firms whose clients are professional investors and funds rather than retail traders.
The costs that rarely appear in the business plan
Regulatory capital gets all the attention, but it is usually not what strains a new firm. The recurring costs are what founders underestimate: a qualified compliance officer and money laundering reporting officer, resident directors where the regulator requires them, annual audits, internal capital adequacy assessments, transaction reporting and the technology behind client onboarding and screening.
Banking is the other hidden line. A licence gets a firm to the table with banks and payment providers, but it does not guarantee an account. Institutions that serve brokers review the business model, the target markets and the ownership chain in detail, and the process can run in parallel with the licence application only if it starts early.
Then there is time. A realistic plan allows for the entire licensing period before revenue, plus a buffer for regulator questions. Firms that budget for a six-month approval and then face a year of back-and-forth often burn through their runway before the first client deposits.
A sequence that holds up
Founders who get licensed efficiently tend to follow the same order. They decide which services they will provide and how they will execute trades. They look at where their clients are and which rulebook those clients' home regulators expect. They choose a primary licence that fits both, and only then consider whether an additional entity makes commercial sense. Banking, platform and compliance staffing all start in parallel, because each one takes longer than expected.
A licence is the single most expensive decision a new brokerage or asset manager makes, and it is very hard to undo. Getting it right at the start is slower in the first month and far cheaper over the life of the business.
