Can One Forex Licence Serve Clients Worldwide?

One forex licence can support an international brokerage, but it does not automatically authorise worldwide advertising, account opening or trading services. Assess the permissions of the licensed company separately from the rules of each target market, then carry that analysis through promotion, contracting, execution and payments.

Quick answer

Define the customer country, product, client category and acquisition channel before selecting the entity that can provide the service. An overseas authorisation, an accessible website and an unsolicited enquiry answer different questions. A market without an established access basis should not default to the marketing whitelist.

This is a decision and implementation guide, not an approved-country list or legal advice about a particular customer. For regional licence comparisons, see our separate guide to Asian, Middle Eastern and African clients.

Last verified: 24 September 2026. General information only, not jurisdiction-specific legal advice. Check current local rules, licence conditions and the actual business facts before launch.

Why separate the licence jurisdiction from the customer market?

First identify what the authorised legal entity may do; then establish for whom and through which channels it may do it. A parent, technology company and licensed brokerage remain different entities despite sharing a brand. Permission for one product does not automatically extend to every derivative or customer category.

Dimension	Fact to establish	Insufficient substitute
Licensed entity	The company in the agreement and its valid permissions	A licence image in a group brochure
Product and activity	Product, agency/counterparty role and client-money arrangements	A generic description of forex services
Customer	Relevant location and evidenced retail, professional or other category	Nationality or a self-selected checkbox alone
Acquisition	Advertising, affiliates, sales contact and lead origin	A non-solicitation disclaimer
Local access	Applicable permission, procedure or exemption and its conditions	An operational foreign bank or payment account

The UK FCA’s international-firms guidance states that firms carrying out activities in the UK regulated under the Financial Services and Markets Act need authorisation. Whether a proposed activity falls inside the perimeter, or benefits from an exclusion or exemption, requires separate analysis. Existing foreign regulation is not the answer by itself.

ASIC’s 2019 notice on cross-border OTC derivatives warned that Australian AFS licensees or their agents could breach overseas laws when serving customers elsewhere. This historical notice was rechecked for this article. It illustrates the distinction between home authorisation and foreign access, rather than establishing every country’s current 2026 rules.

The customer journey starts before the first trade

Map who performs each step: the customer’s first exposure to content, the domain visited, the person following up, the onboarding decision, the contracting party, the trading provider and the payment handler. Local analysis may engage with several stages; the server location or registered office is not the whole picture.

• Promotion: geographic targeting, local events, social accounts, keywords and affiliate campaigns.
• Onboarding: location checks, classification evidence, product selection and entity assignment.
• Trading: quoting, receiving orders, execution, counterparty roles and risk retention.
• Money and service: payee, account purpose, refunds, complaints and continuing communications.

A website language or local telephone number can be relevant evidence to investigate, but no single signal should become a mechanical legal test for every country. Equally, using English alone does not prove that a campaign is untargeted.

Can a broker rely on reverse solicitation?

Reverse solicitation is not a general cross-border licence. Article 42 of MiFID II concerns certain services supplied by third-country firms at a client’s own exclusive initiative. Application still requires attention to national rules and facts.

ESMA’s 2021 reminder explains that actual solicitation, promotion or advertising in the EU cannot be converted into client initiative through a contract disclaimer or an online checkbox. Its published Q&A 1865 also distinguishes the current client request from later marketing; one unsolicited contact does not create unlimited future selling rights.

As a practical evidence exercise, retain the original enquiry, acquisition channel, prior campaign or affiliate contact, requested product and response. Do not ask salespeople to invent a client-initiative narrative or obtain declarations that contradict the facts. Records should describe conduct, not manufacture an exemption.

Two scenarios worth testing

Scenario one: a visitor follows an affiliate advertisement targeting their country, then checks an “I contacted you” box. Review the preceding solicitation rather than preserving only the final click.

Scenario two: someone independently asks about a service, and several weeks later receives an automated campaign for another product. Reassess the basis for the new activity before sending it. These are internal-review illustrations, not legal determinations for actual accounts.

Turn legal analysis into a country-access matrix

A simple permitted/prohibited list omits conditions. A more useful record combines country, product, client category, activity and legal entity. Attach the advice date, factual assumptions, owner, implemented system rule and reassessment triggers to each combination.

Internal status	Illustrative meaning	Operational treatment
Specified activity cleared	The defined product, entity, client class and channel have a reviewed basis	Enable only that combination and preserve version history
Conditional, case review needed	A classification or exception condition needs verification	No automatic onboarding; route to the designated reviewer
Not yet assessed	Facts or local analysis are incomplete	Do not default to approval or launch targeted marketing
Not offered or no new business	No applicable route, or the company declines the risk	Stop new activity and separately plan existing-customer treatment

These are suggested project-management statuses, not statutory categories. Distinguish a commercial choice not to enter a country from a legal prohibition on a specific activity. Likewise, heightened country risk and an absolute ban are not interchangeable conclusions.

Documents to prepare

1. A target-market list, product description and expected client categories.
2. Entity permissions, client agreements and group relationship diagrams.
3. Local access analysis stating assumptions, conditions and activities outside its scope.
4. An advertising, affiliate and sales-channel register with approval controls.
5. Customer and money-flow maps from onboarding through refunds.
6. System restrictions, escalation rules, test evidence and a change log.

If the trading role remains unclear, first review A-Book, B-Book and hybrid models. A country matrix cannot reliably resolve permissions when the applicant has not identified the actual counterparty.

One entity, several licensed companies or a local partner?

Structure	When to evaluate it	Limitations and preparation
Single licensed entity	A limited initial market list with a clear basis for the proposed activities	Restricted reach; country-by-country controls still matter
Several licensed group entities	Core markets require different permissions or operating conditions	Separate people, capital, reporting and customer-routing budgets
Local licensed partner	Local law allows the arrangement and both parties’ roles are clear	Check solicitation, contracts, execution and complaints; do not treat it as licence borrowing

Entity assignment should align advertising disclosures, registration screens, contracts, trading accounts and payment instructions. Moving a customer to another group company needs review of the receiving entity’s access, contractual arrangements, notice or consent requirements, data and money handling. Changing a company name in the back office is not a complete transfer process. Our broker company-structure guide explains the underlying roles.

For planning purposes, distinguish genuinely shared infrastructure from shared permissions. Two regulated entities might use a common technology supplier without giving either entity the other’s authorisation. The implementation question is whether the system can preserve each approved client population, disclosure and service boundary.

What should be tested before launch?

The following are practical tests, not certification that a business is lawful. Establish the access rules through appropriate advice, then test whether operations implement them.

• Location conflicts: when address, IP and payment information disagree, is the case escalated rather than released by sales? Collect necessary information proportionately and handle it under applicable privacy requirements.
• Affiliate overreach: can an unapproved campaign be detected, disabled and logged?
• Wrong-entity routing: can a restricted applicant be automatically moved to another group company to evade the original restriction?
• Later changes: do relocation, new products and classification changes trigger reassessment?
• Existing customers: when new business stops, can customers still obtain statements, complain and access lawful refund processes?

Geoblocking is a control, not an exemption. A successful payment is not proof of regulatory access either. Banking and payment-provider reviews of customer countries, products and account purpose must remain consistent with the business design.

Keep test results useful: record the rule version, fictional customer profile, expected outcome, observed outcome and reviewer. For a failed case, identify the configuration or workflow change and repeat the relevant test before enabling the affected combination. This is an operational assurance method, not a regulator-prescribed checklist.

Budget, timing and avoidable failure points

Separate market legal analysis, licensing or other applicable procedures, governance and staffing, system configuration/testing, and banking/payment integration. Not every country requires a new licence, but each expansion introduces facts and controls that need review. Obtain quotations against the actual scope rather than treating one application fee as the cost of a worldwide launch.

Sequence the work through business definition, local assessment, required procedures, implementation and acceptance testing. There is no universal approval or launch deadline. Regulatory steps, third-party delivery and internal decisions can depend on each other. Starting with a small number of commercially important, clearly assessed markets helps reveal gaps between the written rule and the operating system.

Frequent implementation failures include buying advertising before assessing access, allowing unassessed markets by default, reviewing only the main website while ignoring affiliates, unsupported professional-client classifications, and licence disclosures that do not match the contracting party. Another is stopping necessary service to existing customers when the intention was only to stop new business. Pause the relevant new activity and assess remediation; do not erase records or move clients simply to hide a problem.

Frequently asked questions

Can one offshore forex licence cover all overseas customers?

No such assumption is safe. Review each target market, product, client category, acquisition method and contracting entity. Foreign authorisation alone does not establish local market access.

Is an unsolicited website visit automatically reverse solicitation?

No. Prior advertising, affiliate activity and sales contact still need assessment. In the relevant MiFID II context, disclaimers or checkboxes cannot convert actual solicitation into a client’s own exclusive initiative.

Does serving only professional clients remove other licensing requirements?

Not universally. Some regimes distinguish client categories, but classification, activities, notifications and other conditions need separate checks. A customer-selected label is not enough by itself.

Can group companies share one member’s licence?

Do not infer that from a common brand or shareholder. Identify the entity actually supplying the regulated service and its permissions, and define the other companies’ roles and customer disclosures.

Can someone using a VPN simply proceed with onboarding?

A technical workaround is not an access basis. Conflicting location information should prompt a proportionate review of relevant facts under the applicable rules, with a recorded decision rather than reliance on an IP or declaration alone.

Should access be reviewed when a customer moves country?

Yes. Reassess access and service arrangements because the existing contract may not cover activities in the new location. Any restriction on new business or service change should consider local rules, customer communication and orderly treatment.

Should target markets be defined before applying for a licence?

Yes. Define products, customers and acquisition channels, assess the markets, then select entities and permissions. This reduces the risk of obtaining a licence that cannot support the intended core customer base.

Discuss Your Licensing and Business Needs

Tell us what you need and our team will contact you shortly.