Is Your Money Safe? Segregated Funds and the ICF
How client deposits are meant to be held
Segregation is a custody rule rather than a marketing phrase. A CySEC-regulated firm must hold retail client money in accounts at credit institutions, kept separate from the firm's own operating funds and reconciled regularly.
The short answer: under CySEC rules, retail client money must be held in segregated accounts at credit institutions, separate from the firm's own funds, so that client balances are identifiable and are not available to the firm as working capital. That requirement applies to IQ Option Europe Ltd as a Cyprus Investment Firm, and it is the foundation everything else on this page rests on.
What segregation actually means
People often picture a vault with their name on it. The real mechanism is more mundane and more useful. The firm banks client money in designated client accounts at a credit institution, records each client's entitlement in its own books, and reconciles those records against the bank balances on a regular cycle. The money is legally the client's, not the company's. If the company is wound up, client money is not treated as an asset available to the company's general creditors.
Two consequences follow from that, and they matter more than the vault image:
- Your deposit is not the firm's revenue. A licensed firm cannot fund salaries, marketing or its own trading book out of client balances. That single rule removes the most common failure mode of unregulated operators, which is spending deposits and hoping new deposits cover the withdrawals.
- Your balance is traceable. Reconciliation creates a paper trail that a regulator, an auditor or an administrator can follow. Unregulated firms produce no such trail, which is why so few offshore collapses ever return anything.
The custody chain, step by step
- You send funds from a payment method in your own name to the firm's designated client account.
- The firm credits your trading account and records your entitlement in its client-money ledger.
- Client balances are reconciled against the bank's records on a regular cycle, with breaks investigated.
- Open positions are collateralised from that balance; margin moves between your entitlement and the firm's position, but the underlying custody obligation stays.
- On withdrawal, funds leave the client account and return to the payment route you used to deposit, where that route allows it.
Where the chain is strong and where it thins out
| Link in the chain | What backs it | Residual risk |
|---|---|---|
| Money held apart from firm funds | CySEC client-money rules under MiFID II | Depends on the firm applying the rule correctly; supervision, not certainty |
| Bank holding the client account | The credit institution's own solvency and regulation | A bank failure is a separate event with its own protections |
| Record of your entitlement | The firm's client-money ledger and reconciliations | Record-keeping quality is exactly what regulators inspect and fine for |
| Payment processors in the route | Their own licences and terms | Delays and reversals commonly happen here, outside the broker's system |
| Non-EEA account entity | Whatever local rules apply to that entity | None of the above may apply at all |
Supervision is a process, not a guarantee
An honest page has to concede this. The rule says client money must be segregated; the regulator checks whether firms are complying; and when they are not, decisions and settlements get published. The 2019 CySEC settlement involving this firm is part of that record, and it concerned compliance matters including conflict-of-interest safeguards, due diligence and transaction security rather than a finding that client money went missing. Our page on what CySEC regulation actually covers works through what the licence obliges the firm to do, and the regulator record sets out the enforcement history with its dates.
Treat segregation as a strong structural protection with an inspection regime attached, and not as a promise that nothing will ever go wrong. That is a far better position than the alternative, where nobody inspects anything.
Segregation keeps your deposit off the firm's balance sheet and creates a traceable record, which is why regulated custody survives a firm failure and unregulated custody usually does not.
The Investor Compensation Fund explained
Cyprus runs a compensation scheme for clients of failed investment firms. It pays out when a licensed firm collapses and cannot return client assets, and it is silent on trading losses and disputed withdrawals.
The short answer: the Cyprus Investor Compensation Fund covers clients of a CySEC-regulated Cyprus Investment Firm in one specific scenario, which is the firm failing and being unable to return client money or assets. It is a last-resort backstop for insolvency, not an insurance policy on your account.
When the fund is triggered
The trigger is failure. A determination is made that the firm cannot meet its obligations to clients, eligible claims are assessed, and compensation is paid up to a statutory maximum per eligible client. Everything about that sentence is narrow on purpose: the scheme exists so that a collapse does not wipe out retail clients entirely, not so that any bad experience can be converted into a payout.
What the cap is, and why we do not print a number here
There is a statutory maximum per eligible client, and figures circulate widely online. We deliberately do not state one: caps and eligibility rules are set by the scheme and can change, and a stale number on a trust page is worse than no number. Check the current maximum on the CySEC and ICF pages before you rely on it, and check it again if your balance ever approaches that level. If your account is large enough that the cap is a live question, spreading balances across more than one regulated firm is the standard answer.
Who is eligible
- Retail clients of the licensed Cyprus entity. Eligibility attaches to the account being with the CySEC-regulated firm, which is why the entity on your agreement is the first thing to check.
- Not professional clients or institutions in the same way. Compensation schemes are designed for retail protection; asking to be reclassified as professional to obtain higher leverage also gives up protections like this one.
- Not clients of a non-EEA entity. If a different company onboarded you, the Cyprus scheme has nothing to do with your account, regardless of the brand on the website.
How a claim would actually run
- The regulator determines the firm cannot meet client obligations and the scheme is activated.
- An invitation to submit claims is published with a deadline.
- Clients file evidence: statements, the account agreement, transfer records, identity documents.
- Claims are assessed against the scheme's eligibility rules and the per-client maximum.
- Payment is made from the fund, which is financed by contributions from member firms.
Notice how much of step 3 depends on records you keep yourself. Anyone who has ever tried to reconstruct two years of deposits from memory knows how this goes. Export statements periodically and keep the account agreement; it costs nothing and it is the difference between an eligible claim and an argument.
How the fund is financed
The scheme is funded by contributions from its member firms rather than by taxpayers, which has one useful implication for a reader trying to judge a broker: membership is an ongoing cost that only licensed firms carry. An operator registered in a jurisdiction with no compensation scheme has a lower cost base and a weaker promise, and the gap between those two facts is the whole argument for paying attention to where a broker is licensed.
It also explains why coverage is capped rather than unlimited. A mutual fund financed by an industry can absorb the failure of a member; it cannot absorb an open-ended guarantee on every account balance in the market. The cap is the price of the scheme being solvent when it is needed.
Why this still matters even if it is never used
The value of the scheme is not only the payout. Membership is a marker: the fund's member list is another independent place where a firm's licensed status shows up, and the contributions themselves impose a cost that unlicensed operators simply avoid. Comparing CySEC with offshore registrations shows how much of the practical difference between the two comes from exactly this kind of unglamorous infrastructure.
The compensation fund is insolvency cover for clients of the licensed EU entity, with a statutory cap you should verify at the source — it does not touch trading losses or withdrawal disputes.
What is protected and what is not
Two columns matter here. Custody, conduct and firm failure sit inside the protection perimeter, while market outcomes, strategy, OTC pricing differences and non-EEA accounts sit outside it, and no licence moves them.
The short answer: EU regulation protects how your money is held and how the firm must behave toward you. It does not protect what your trades do. Most disappointment with regulated brokers comes from expecting the first set of rules to deliver the second.
Inside the perimeter
- Segregated custody. Retail client money held at credit institutions, separate from firm funds.
- Negative balance protection. A retail account cannot be driven below zero into a debt to the firm. This is a real and underrated protection: it caps your downside at the money in the account.
- Compensation on firm failure. Coverage through the Cyprus Investor Compensation Fund, subject to eligibility and the statutory cap.
- Product intervention rules. Retail leverage caps, standardised risk warnings, and a ban on monetary inducements such as deposit bonuses for retail clients.
- Conduct obligations. Appropriateness checks, disclosure duties, complaints handling, and a supervisory authority that publishes decisions when firms fall short.
Outside the perimeter
- Losing trades. No regulator refunds a market outcome. Leveraged and short-expiry products produce losses for a large share of retail traders as a normal statistical result.
- Your own strategy and position sizing. The rules constrain the firm, not your risk-taking.
- OTC pricing differences. OTC instruments are priced from the broker's own quote model rather than by an exchange, which is a disclosed structural feature and a genuine conflict of interest to understand before you trade it. We cover it in the price manipulation question.
- Third-party fraud using the brand name. Clone domains, fake apps and "account manager" schemes are outside any broker's system entirely.
- Accounts held outside the EEA. The whole first list, gone.
The entity gap, stated bluntly
This is the most important caveat on the site. Segregation, the compensation fund and negative balance protection attach to accounts held with the CySEC-licensed EU entity. Clients outside the EEA are typically onboarded by a non-EU entity, which does not carry CySEC protections. The website looks the same. The platform looks the same. The legal position is not the same.
Open your account agreement and find the sentence naming the company you contracted with. If it is not IQ Option Europe Ltd, the protections described in this article are not yours, and the correct next question is what your own jurisdiction offers instead.
A comparison worth keeping
| Concern | EU entity, retail client | Non-EEA entity |
|---|---|---|
| Client money segregation | Required by CySEC rules | Depends entirely on the local regime; may be absent |
| Negative balance protection | Required for retail clients | Not guaranteed |
| Compensation on firm failure | Cyprus Investor Compensation Fund, up to the statutory cap | Typically none |
| Leverage limits and inducement ban | ESMA/CySEC product intervention applies | Local rules only |
| Escalation route for complaints | Firm procedure, then CySEC and the Cyprus Financial Ombudsman | Often the firm itself and nothing beyond it |
Reading that table as "the EU account is safe and everything else is a scam" would be the wrong lesson. The right one is that protection is a property of the contract, not of the logo, and you can find out which one you have in about two minutes.
Regulation governs custody and conduct, never outcomes — and the protections stop at the EEA border, so the entity named in your agreement decides which set of rules you actually have.
Deposit and withdrawal safety in practice
Money moves through payment rails the broker does not own. That is why most "my funds are stuck" stories turn out to be verification gaps and routing mismatches rather than custody failures.
The short answer: deposits and withdrawals are the part of fund safety you interact with, and almost every complaint about them traces back to three causes — incomplete identity verification, a withdrawal route that does not match the deposit route, or a payment provider in the middle taking its own time. Understanding those three removes most of the anxiety.
Why withdrawals return to the funding method
Regulated brokers generally require withdrawals to go back to the original funding method where possible, and cannot release funds before identity verification is complete. Both rules exist for anti-money-laundering reasons rather than to inconvenience you: returning money to its source prevents the platform being used to move value between unrelated accounts, and verification prevents payouts to someone who is not the account holder.
The practical consequence catches people out constantly. Deposit by card, withdraw to card, up to the amount deposited. Deposit through an e-wallet, expect the wallet to be the exit. Fund from an account in someone else's name and you have created a problem that no support ticket can solve, because the firm is not permitted to pay a third party.
The three friction patterns, and what each looks like
| Pattern | Typical symptom | What actually resolves it |
|---|---|---|
| Verification incomplete | Withdrawal request sits pending, or is cancelled back to the balance | Complete every document category and wait for explicit approval, not just upload confirmation |
| Route mismatch | Request rejected, or split across methods you did not choose | Withdraw to the deposit method first; only the surplus follows the alternative route |
| Processor timing | Marked processed by the broker, absent from your bank | Check the broker-side status and the bank-side status separately before escalating |
Verification is the single biggest lever
Most withdrawal complaints are timing complaints in disguise. Traders verify when they want to withdraw rather than when they open the account, which puts the slowest step in the process directly in front of their money at the least patient moment. Doing it on day one, before the first deposit, converts a crisis into an errand. Our guide to verification and KYC sets out the document categories and the common rejection reasons.
What we do not state, and why
You will not find a minimum deposit figure, a minimum withdrawal figure, a processing time in days, or a fee schedule on this page. Those change per method, per country and per period, and publishing a number we cannot stand behind would be exactly the kind of stale detail that misleads readers. Check the current values in the platform's own cashier and terms before you commit funds.
Deposit safety is mostly about where you clicked
The riskiest moment in the whole custody chain is not the broker holding your balance. It is the deposit itself, because that is the point a clone site or an impersonator can intercept. Lookalike domains, fake mobile apps and promo-code pages impersonating this brand are a documented problem in its search results, and a deposit sent to one of them never enters any segregated account at all. Segregation rules cannot protect money that never reached the licensed firm.
Three habits close that gap almost completely: reach the platform by typing the official domain by hand rather than following an advert or a chat link, check the exact spelling of the domain and the certificate padlock before logging in, and refuse categorically to send funds to a personal bank account, a private wallet address, or anyone describing themselves as your account manager. Those instructions sound obvious written down; they are ignored constantly under time pressure from someone friendly.
If a withdrawal genuinely goes wrong
- Screenshot the request, its status, and your verification state on the same day.
- Raise a written complaint through the firm's formal complaints procedure, not only live chat, and keep the reference.
- Give the firm its stated response window before escalating; skipping this weakens a later complaint.
- If the account is with the CySEC-regulated entity and the response is unsatisfactory, escalate to CySEC and the Cyprus Financial Ombudsman.
- If the account is with a non-EEA entity, identify your realistic route first — it may be the payment provider's dispute process rather than any regulator.
Documented complaints about delay are common across this industry and this brand, and the pattern in public discussion is overwhelmingly about process rather than about deposits vanishing. That distinction is not a defence of slow service; it is the difference between a friction problem you can work through and a custody problem you cannot. Our breakdown of withdrawal complaints separates the two.
Verify before you fund, withdraw to the method you deposited from, and complain in writing through the formal channel — those three habits pre-empt most payout problems.
Steps that lower your personal risk
A short checklist does most of the work: confirm the entity, verify early, fund from your own account, keep your own records, size positions small, and withdraw profits on a schedule rather than a whim.
The short answer: you cannot change the regulatory perimeter, but you control which side of it your account sits on, how much money is exposed at any moment, and whether you have the evidence to make a complaint stick. Those three levers matter more than any broker comparison.
Before you deposit anything
- Confirm the entity. Read the account agreement and find the company name. IQ Option Europe Ltd is the Cyprus Investment Firm holding CySEC licence 247/14; a different name means a different rulebook.
- Check the licence at the source. Open the CySEC public register of Cypriot investment firms and confirm the entity's current status yourself. A licence number quoted on a website is a claim; a register entry is evidence.
- Reach the platform by typing the domain. Search adverts and messaging links are how clone sites collect deposits under this brand's name. Clone sites and phishing covers the tactics in detail.
- Complete verification first. Identity, address and payment-method proof, all approved, before the first deposit lands.
- Fund only from accounts in your own name. No exceptions, and never to a personal account or a wallet address given by a "manager".
While the account is open
- Keep the balance working, not parked. A trading account is not a savings account. Money you are not using is exposed to firm risk for no return; withdrawing it removes that exposure entirely.
- Withdraw on a schedule. Monthly, or after any defined gain. This tests the payout process while the stakes are small, which is far better than discovering a documentation problem when the balance is large.
- Export statements periodically. Deposits, withdrawals, trade history. If you ever need to file a complaint or a compensation claim, this is the evidence.
- Size positions so a loss is survivable. Negative balance protection caps your loss at the account balance, which means the balance itself is your real risk limit. Keep it small enough that losing it changes nothing important.
- Treat leverage upgrades sceptically. Asking to be reclassified as a professional client trades away retail protections, including compensation eligibility, for a bigger position size.
A five-minute safety audit you can repeat
| Check | Where | Pass condition |
|---|---|---|
| Entity on your agreement | Your account documents | Names a company you can find in a regulator register |
| Licence status | CySEC public register | Entry exists and is current |
| Verification state | Platform account area | Approved, not merely submitted |
| Deposit route | Cashier history | All funding from methods in your own name |
| Idle balance | Account balance | Only what your open plan needs |
| Records | Your own files | Statements exported within the last quarter |
The honest summary
Money held with the CySEC-regulated entity sits behind a genuine set of custody and conduct protections that unregulated offshore operators do not offer, backed by a supervisor that publishes decisions when the firm falls short. That is a real advantage and it is why this desk does not describe the brand as a scam. It is also not protection against losing money trading, it does not extend to accounts held outside the EEA, and it does not remove your responsibility to verify the entity and keep records. Trading CFDs and leveraged products carries a high risk of losing money, and the safest balance in any trading account is the smallest one that lets you follow your plan. The full scam-or-legit assessment puts this alongside the rest of the evidence.
Regulatory and company details were checked against public regulator records on 3 September 2026; confirm current terms on the operator's own site before depositing.
Control what you can: the entity, your verification state, the size of the balance and the quality of your records — those decide your real exposure far more than any review score.
Frequently asked questions
Is my money safe with IQ Option?
If your account is with IQ Option Europe Ltd, the Cyprus Investment Firm holding CySEC licence 247/14, your funds fall under EU rules requiring segregated client accounts at credit institutions, negative balance protection, and coverage by the Cyprus Investor Compensation Fund if the firm fails. Those are meaningful custody protections. They do not protect you from trading losses, and they do not apply if a non-EU entity onboarded you, so check the entity named in your account agreement first.
Does the Investor Compensation Fund cover my trading losses?
No. The fund pays out only when a licensed firm fails and cannot return client assets. It does not reimburse losing trades, does not reverse closed positions, and is not an appeal route for a delayed or refused withdrawal. For those, the firm's formal complaints procedure and then CySEC or the Cyprus Financial Ombudsman are the correct channels for clients of the EU entity.
What is the compensation limit per client?
There is a statutory maximum per eligible client, but we do not quote a figure here because caps and eligibility rules are set by the scheme and can change. Check the current maximum on the CySEC and Investor Compensation Fund pages before relying on it. If your balance is large enough that the cap matters, the standard response is to hold less on the platform or spread balances across more than one regulated firm.
What happens to my money if the broker goes bankrupt?
Segregated client money is not treated as an asset available to the firm's general creditors, so an administrator should be able to identify and return client balances. Where the firm cannot return them, eligible retail clients of the CySEC-regulated entity can claim from the Cyprus Investor Compensation Fund up to the statutory cap. Your own exported statements and account agreement are what make a claim straightforward.
Why does my withdrawal have to go back to the card I deposited with?
Anti-money-laundering rules require regulated brokers to return funds to the original payment source where possible, so the platform cannot be used to move value between unrelated accounts. Funds above the deposited amount usually follow an alternative approved route in your own name. A withdrawal to a third party is not permitted regardless of the circumstances, which is why funding from someone else's account creates a problem that support cannot fix.
Are the protections the same outside the European Union?
No, and this is the most important caveat. Segregation, the compensation fund and negative balance protection attach to accounts held with the CySEC-licensed EU entity. Clients outside the EEA are typically onboarded by a non-EU entity that does not carry CySEC protections, even though the website and platform look identical. Read your account agreement to see which company you actually contracted with.