Signs of a Real vs Fake Broker
The licence test first
Before anything else, answer one question: which legal entity would take your money, and does a regulator list it? A platform that cannot survive that question does not need a second test.
Fakes are structurally anonymous. That is not an accident of sloppy web design — an operation planning to keep your deposit cannot afford to name a company that a regulator could act against.
The four-step check
- Find the entity. Look in the footer, the terms and the account agreement, not the marketing copy. You want a company name, a country of registration and, ideally, a registered address.
- Find the licence number. A real firm publishes one. "Regulated" with no number and no authority named is a marketing word.
- Search the regulator, not the site. Open the regulator's own public register and search the entity name there. Never trust a licence badge or a screenshot on the broker's page — those are trivial to fake.
- Check your own country. A licence in one jurisdiction says nothing about authorisation in yours. Search your national register and any warning or alert list it publishes.
What each outcome means
- Entity found, licence live, in your jurisdiction: the strongest position available.
- Entity found and licensed elsewhere, not authorised locally: real firm, no domestic recourse. A genuine limitation, not proof of fraud.
- Entity named but absent from any register: stop. Naming a company that does not appear anywhere is a common fake tactic.
- No entity named at all: the clearest fake signal there is.
Details on why the licensing jurisdiction matters so much are on the CySEC-versus-offshore page.
Name the entity, find the number, verify it in the regulator register rather than on the broker site, then check your own country — a fake fails at least one of those four steps every time.
How money is handled
Watch what the platform does with a deposit rather than what it says about safety: where the money goes, whose name is on the receiving account, and whether payouts follow a stated rule or somebody's mood.
Money handling separates the categories faster than any other signal, because the rules a regulated firm must follow are the exact rules a fake cannot afford to follow.
| Signal | Real broker | Fake operation |
|---|---|---|
| Where deposits go | Corporate accounts in the firm's name, through published payment methods | A personal account, a wallet address, or a contact in a chat app |
| Client money | Held segregated at a credit institution, separate from firm funds where the regulator requires it | Pooled with operating money, or simply spent |
| Withdrawal rules | Stated policy: verification first, funds generally returning by the route that funded the account | Rules invented on the spot, changing whenever you ask for money |
| Fees to withdraw | Published in the terms, if any | A surprise "tax", "release fee" or "commission" demanded before payout |
| Losses | Retail negative balance protection under EU rules; you cannot be pushed into debt | Debts invented to justify demanding more money |
The single decisive test
If anyone asks you to send money outside the platform, or to pay a fee to release your own funds, the operation is fraudulent. There is no legitimate version of that request, and it does not matter which brand name is on the screen. That one rule stops the overwhelming majority of losses in this sector.
Where honest friction gets mistaken for theft
Real brokers do delay payouts, and it produces real anger. Identity verification has to be complete before funds move, and money generally returns by the route it arrived. Those rules are dull, documented and applied to everyone — unlike a fake, which invents a new obstacle every time you get close to your money. The KYC explainer covers the process.
Real brokers move money by published rules and never ask you to pay to be paid; fakes route deposits to individuals and manufacture a fresh obstacle each time you request a withdrawal.
Transparency and communication
Specificity is the tell. Genuine firms publish things that constrain them — risk warnings, entity names, product limitations — while fakes publish only things that persuade you.
Read any two broker sites side by side and the difference is not design quality. It is whether the text ever says something inconvenient.
What real disclosure looks like
- Risk warnings that mean it. A statement that trading leveraged products carries a high risk of losing money, placed where you will see it rather than buried.
- Named limitations. Which countries are excluded, which instruments are unavailable to retail clients, which entity serves which region.
- Rules that cost the firm something. No cash deposit bonuses for EU retail clients, because inducements are banned — a real firm states this even though a promised bonus would convert better.
- Support that answers procedure questions. Ask which entity your account sits with and what the withdrawal policy is. A real support desk answers plainly; a fake deflects, or pivots to encouraging a deposit.
The communication red flags
- Anyone contacting you first — by call, message, email or a social invitation.
- Guaranteed returns, "risk-free" trades, or a claimed success rate. Always fraud, from any brand.
- An "account manager" who trades on your behalf or tells you what to trade in exchange for a bigger deposit.
- Deadline pressure: a bonus that expires today, a slot that closes tonight, a price that will not last.
- Testimonials and screenshots as the primary evidence of legitimacy, in place of an entity and a licence number.
A firm that will not tell you which company you are contracting with has already answered the only question that mattered.
Trust the disclosures that constrain the firm rather than the ones that flatter it — and treat unsolicited contact, guaranteed returns and deadline pressure as fraud regardless of the brand attached.
Warning signs of a fake
Clones are the modern shape of this problem: a familiar brand name, a domain one character off, an app from a link, and a friendly person handling your deposit personally.
The most damaging frauds in this sector no longer invent a broker. They borrow a real one, which is why "I was scammed by a well-known platform" stories so often describe something the licensed firm never touched.
The clone checklist
- Check the exact domain spelling, character by character, including the extension. Reach any platform by typing the address yourself, never through an ad, a message or a search result you did not read carefully.
- Install apps from official stores only, and check the developer name. A link to an installer file is a fraud signal by itself.
- Distrust promo codes and bonus pages. EU retail clients cannot receive cash deposit bonuses, so a page offering one is bait — the pattern is on the bonus-scams page.
- Never accept help from a "manager" who found you, in any channel, however knowledgeable they sound.
- Treat recovery services as fraud. Anyone offering to retrieve money you have lost, for a fee, is running a second scam on the victims of the first.
A fuller catalogue of impersonation tactics aimed at this brand is on the clone-sites page.
Modern fakes wear a real brand, so the defensive habits are mechanical: type the domain, use official stores, ignore promo codes and managers, and never pay a fee to release your own money.
Applying the signs to IQ Option
Run the four tests against this operator and the identification questions come back clean, while the questions about protection and product risk come back mixed — which is the whole honest answer.
Here is the checklist applied, with the caveats attached rather than removed.
| Test | Result |
|---|---|
| Named legal entity | IQ Option Europe Ltd, a Cyprus Investment Firm registered in Limassol |
| Licence in a public register | CySEC licence 247/14, issued 30 July 2014 — check current status yourself |
| Client money rules | Segregation, negative balance protection and Investor Compensation Fund eligibility, for accounts with the CySEC entity only |
| Disclosure quality | Product limitations and the EU bonus ban are stated; risk warnings are required under ESMA rules |
| Regulatory history | CySEC settlement, decision dated 15 April 2019 and published 21 May 2019, reported at EUR 450,000; an earlier fine reported at EUR 180,000 in 2016 |
| Local authorisation | Absent in several markets — reported CVM stop orders in Brazil, an RBI Alert List appearance in India, no Thai or Colombian authorisation, not available in the US |
What passing these tests does and does not tell you
It tells you this is a real, identifiable, supervised business rather than an anonymous operation — which is exactly what the identification tests are for. It does not tell you that trading here is safe, that your withdrawal will be smooth, or that the protections apply to your account. Clients outside the EEA are typically onboarded by a non-EU entity that carries none of the CySEC protections, so read which company your own agreement names before depositing.
Trading CFDs and leveraged products carries a high risk of losing money. Regulatory and company details were checked against public regulator records on 3 September 2026; confirm current terms on the operator's own site. The full reasoning is on the verdict page, and the accusation-by-accusation working is in the red-flags checklist.
This operator passes the tests that identify a real broker and still carries real limitations — treat a clean identification result as permission to do more due diligence, not less.
Frequently asked questions
What is the fastest way to spot a fake broker?
Look for the legal entity name and licence number, then search that entity in the regulator's own public register rather than trusting any badge on the site. A platform that names no company, or names one that appears in no register, has failed the only test that cannot be faked. The second-fastest check is where deposits go: any request to pay an individual or a wallet is fraud.
Does a licence guarantee my money is safe?
No. A licence means the firm is supervised and must follow rules on client money segregation, negative balance protection and disclosure. It does not protect you from losing trades, and compensation schemes pay out only when a firm fails and cannot return client assets — never for trading losses or a disputed withdrawal. Licensing answers whether the business is real, not whether the product is safe.
Is IQ Option a real broker by these tests?
On the identification tests, yes. There is a named entity, IQ Option Europe Ltd, a Cyprus Investment Firm holding CySEC licence 247/14, listed in a public register, with published regulator decisions in its history. Those are documents a fake cannot produce. The limitations are separate and real: protections attach to the EU entity only, and the firm is not locally authorised in several markets including Brazil, Thailand, Colombia and India.
How do I know I am on the genuine website?
Type the domain by hand and read it character by character, including the extension, rather than arriving through an advertisement, a message or a promo link. Install mobile apps only from the official stores and check the developer name. Treat any page offering a deposit bonus code as a clone or affiliate-bait signal, since EU retail clients cannot receive cash deposit bonuses at all.
Someone offered to recover money I lost. Is that legitimate?
No. Recovery services that charge a fee to retrieve lost funds are a second fraud aimed at people already hurt by the first one, and they frequently pose as lawyers, regulators or investigators. No genuine authority asks for a payment to return your money. If you have lost funds, report it to your national regulator and your bank or payment provider instead.