Scam vs Legit Broker: What the Words Really Mean

Defining a trading scam in concrete terms

A trading scam takes deposits it never intends to return, claims an authorisation it does not hold, or prices trades against an undisclosed internal feed. Each of those leaves a documentary trace you can look for.

The word "scam" does most of its work as an emotion. To be useful on a trust page it has to mean something you can check, so this guide holds it to a definition with observable markers rather than a feeling about an outcome.

The five concrete markers

1. No verifiable entity. There is no named legal company behind the website, or the name given does not appear in any public register. A brand name is not an entity; a company number in a regulator's register is.
2. A fabricated or lapsed licence. The site claims supervision it does not have, quotes a licence number belonging to a different firm, or displays an authorisation that has been withdrawn. This is checkable in minutes and it is where most fake brokers fail.
3. Deposits accepted without any intention of paying out. The tell is not one delayed withdrawal but a pattern of requests that go unanswered after verification is complete and the payment route is valid.
4. Undisclosed pricing against the client. Every broker that quotes its own prices has a conflict of interest. Disclosing it is normal practice; hiding it, or adjusting quotes to close out client positions, is fraud.
5. Funds directed outside the corporate channel. A request to send money to a personal account, a private wallet, or a contact from a messaging app is the single clearest fraud signal in this industry. No licensed firm collects deposits that way.

The social-engineering layer

Most modern trading fraud is not a broken website. It is a person: an "account manager" who promises returns, a recovery agent who offers to retrieve funds already lost for an upfront fee, or a group chat with screenshots of winning trades. These operations frequently borrow the name of a real, licensed broker precisely because that name checks out when you search it. The victim later reports the licensed brand, which is how a regulated firm ends up with fraud reports attached to it that describe events it had no part in. Our guide to clone sites and phishing covers how the impersonation works.

What a scam is not

A firm can be badly run, slow to respond, aggressive in its marketing, or the subject of a regulator's fine without being a scam. Those are supervision problems, and supervision is exactly the mechanism that surfaces and corrects them. The distinguishing feature of a scam is that nobody is supervising it, so nothing ever surfaces at all.

Test the word against markers you can verify — entity, licence, payout pattern, pricing disclosure, payment channel — rather than against how a trade turned out.

What a legitimate broker looks like instead

Legitimate brokers publish a named entity and licence number, segregate client money, belong to a compensation scheme, disclose their pricing model, and accumulate a public record of regulator decisions over time.

The positive profile is easier to check than the negative one, because regulated firms are obliged to make the evidence available. Five things should be findable within a few minutes.

Why an enforcement record can be a good sign

This is counterintuitive enough to be worth stating plainly: a firm with fines against it is a firm someone is watching. Supervisors publish decisions, brokers pay settlements, and the whole exchange becomes part of the public record. An operator with a flawless online reputation and no regulator behind it has not passed a test; it has never taken one. When you compare two brokers and one has a documented compliance history while the other has nothing at all, the second is usually the riskier choice, not the safer one. The CySEC versus offshore comparison works through what that difference is worth.

The protections that come attached

• Segregation. CySEC-regulated investment firms must hold retail client money in segregated accounts at credit institutions, separate from the firm's own funds.
• Compensation for firm failure. Clients of a CySEC-regulated investment firm are covered by the Cyprus Investor Compensation Fund, which pays out only if the firm fails and cannot return client assets.
• Negative balance protection. Retail clients of EU-regulated firms cannot be driven below zero into a debt.
• Product intervention rules. ESMA and CySEC cap retail leverage, require standardised risk warnings, and ban monetary inducements such as deposit bonuses for retail clients.

Note what is absent from that list: any guarantee about profits, and any protection against a trade going wrong. Regulation governs conduct and custody. It does not govern outcomes.

A legitimate broker is one whose entity, licence, custody arrangements and pricing model can all be confirmed from sources it does not control.

Why losing money is not the same as being scammed

Leveraged and short-expiry products produce losses for a large share of retail traders as a normal statistical outcome. A losing account is evidence about the product and the strategy, not about the broker.

This is the hardest section to write without sounding dismissive, so here is the honest framing: losing money hurts, the products are genuinely difficult, and the industry markets them in ways that understate that difficulty. All of that can be true while the conclusion "therefore I was scammed" remains unsupported.

Where the losses actually come from

• The spread and the entry cost. Every position starts slightly behind. On short time horizons that starting deficit is a large fraction of the expected move.
• Short expiries. The shorter the window, the closer the outcome sits to noise, and the more the structural edge decides it.
• Leverage. Amplified exposure means a small adverse move can close a position long before the thesis has a chance to work.
• Behaviour under pressure. Position sizing after a loss, and trading to recover rather than to a plan, does more damage than any spread.

EU regulators require standardised risk warnings on retail CFD marketing precisely because the loss rate is high enough to warrant one. We do not publish a specific percentage here — those figures are firm-specific and period-specific, and a stale one is worse than none — but the rule exists for a reason and you should read it as a warning rather than boilerplate.

How to separate a bad outcome from a bad actor

1. Was the instrument OTC or exchange-traded? OTC pricing comes from the broker's own quote model, so a divergence from an exchange chart is expected rather than suspicious.
2. Were the markets open? OTC instruments are typically the only things tradable at the weekend, and their prices will not match a closed exchange.
3. Does a non-OTC asset track an independent chart during market hours? If it does, the feed is not fabricated. The chart-rigging test sets out the method.
4. Did the account balance ever go negative? Under EU rules it should not, and a debt demand would be a serious red flag.
5. Can you withdraw the remaining balance after completing verification? A firm that pays out what is left is not stealing.

The recovery-scam trap

People who have lost money are the primary target market for a second fraud. Anyone contacting you offering to recover trading losses for a fee, a "tax", or access to your account is running a scam, without exception. Losses cannot be recovered by a private agent, and the only legitimate routes are the firm's own complaints process and, where the firm is authorised, the regulator or the relevant ombudsman scheme.

Trading CFDs and leveraged products carries a high risk of losing money.

Distinguish the product from the provider: high loss rates are a property of leveraged short-term trading, and they say nothing about whether the broker honoured its obligations.

Applying the scam test to IQ Option

Run the five markers against IQ Option and it fails none of them: a named Cyprus entity, a verifiable CySEC licence, mandated segregation and compensation cover, disclosed OTC pricing, and a public enforcement record.

The point of a definition is that it can be applied. Here is the test from the first section, run against the documented facts.

What the test does surface

Three genuine findings survive the exercise, and none of them is fraud. First, the enforcement record: CySEC settled with IQ Option Europe Ltd in a Board decision dated 15 April 2019, published 21 May 2019, for a reported EUR 450,000, covering possible breaches of the Investment Services and Activities and Regulated Markets Law L.144(I)/2007 and the AML Law L.188(I)/2007 — conflict-of-interest safeguards, due diligence and transaction security. An earlier administrative fine reported at EUR 180,000 in 2016 concerned marketing communications. Second, the coverage gap: segregation, the Investor Compensation Fund and negative balance protection apply to the CySEC entity, and clients onboarded outside the EEA are typically handled by a non-EU entity that does not carry them. Third, the jurisdiction problem: the firm has appeared on the Reserve Bank of India's Alert List of entities not authorised to deal in forex under FEMA, and Brazil's CVM has issued stop orders reported in 2020 and 2021.

How to weigh those findings

A settlement is a resolved compliance failure, not a criminal finding and not proof that client money was taken. An alert-list entry means "not licensed in this country", which matters enormously for your recourse and not at all for the question of whether the platform is a fraud. The coverage gap is the finding with the most practical bite: it decides whether you have a supervisor to complain to. Read the licence page for the mechanics and the regulator record for the documents themselves.

IQ Option clears the scam test on every marker, while leaving three real findings — an enforcement history, a non-EEA coverage gap, and unauthorised status in several markets.

Common myths this guide clears up

Four beliefs drive most scam accusations against regulated brokers: that removing binary options was a cover-up, that a fine equals fraud, that alert lists prove theft, and that a demo account is bait.

Each of these has a factual answer, and each of them keeps circulating because the factual answer is duller than the accusation.

Myth 1: they removed binary options because they were caught

Binary options were banned for EU retail clients by ESMA product intervention from 2018, and CySEC-regulated firms may no longer offer them to retail clients in the EEA. Every regulated firm in Europe made the same change at the same time. Digital options, which some platforms still offer where permitted, are a different and regulated instrument. Removing a banned product is compliance, not concealment.

Myth 2: a regulator fine means the firm is a fraud

Regulators fine firms for compliance failures — record-keeping, marketing, due diligence, conflict-of-interest controls. A fraud finding looks entirely different: it names deception, it usually involves criminal or civil proceedings, and it typically ends with authorisation withdrawn. A settlement that leaves the firm licensed and supervised is the system working, not the system failing.

Myth 3: an alert-list entry proves the platform steals money

Alert lists published by bodies such as the Reserve Bank of India and the Monetary Authority of Singapore identify entities not authorised in that jurisdiction. The consequence is about recourse: if something goes wrong, no domestic regulator is standing behind your account. That is a serious consideration and a reason many people should not open an account. It is not a finding of theft.

Myth 4: the free demo is bait designed to make you feel skilled

A refillable practice account with virtual funds is standard across the industry and is genuinely useful for learning an interface. The legitimate differences between demo and live — no real slippage, no emotional stake, no funding constraint — explain nearly all of the performance gap people notice. The demo account guide goes through where the gap is normal and where it would be a real problem.

Myth 5: a big deposit bonus proves the broker is generous

For EU retail clients there are no cash deposit bonuses, because ESMA and CySEC rules ban monetary inducements. Any page offering an "IQ Option bonus code" for a European account is either out of date or, more often, an affiliate trap or clone. The bonus-scam guide shows what those pages are actually selling.

Most scam myths dissolve once you separate regulatory events, product rules and normal trading conditions from deliberate deception.