What regulation covers and what it does not

What a licence is granted over 

The document is narrower than the word suggests. A regulator does not authorise a website, a brand, a platform or a group of companies. It authorises one legal person, incorporated in a stated place, with a registered office and named directors, to carry on a list of activities. The list carries the meaning: dealing as principal, arranging deals for other people, holding client money and managing investments are separate permissions with separate requirements attached, and a firm can hold some of them and not others. Business carried on outside the permission granted is not a technicality. It is unauthorised business, and it is among the few failures that end a licence rather than producing a fine.

That is why the distinction between an entity and a brand matters. A group can run several brands from one authorised entity, or one brand through several entities in different countries, each holding a different permission under a different regulator. The entity named in the client agreement is the one a client contracts with, and its authorisation is the only one governing that relationship.

Authorisation is granted once and then tested continuously. Before a permission is issued, a regulator examines the business plan, the capital behind it, the systems, the client money arrangements, the compliance function, and the fitness and propriety of the people who will run the firm. Afterwards it receives periodic reports and audited accounts, must be notified of material changes, and can inspect, restrict, suspend or withdraw what it granted. A licence is a present-tense condition rather than a historical achievement.

The conditions attached to holding one 

Regimes differ in their detail and are consistent in their shape. Most of what a securities regulator requires of a firm dealing with retail clients falls into a small number of standing obligations.

• Capital held continuously. A firm holds its own funds above a level calculated by formula, tested at all times rather than at a year end. The buffer belongs to the firm and exists so that an orderly wind down is possible without reaching for money that is not the firm's.
• Fitness of the people. Directors and holders of controlled functions are assessed on competence, honesty and financial soundness, are recorded individually by the regulator, and cannot be replaced quietly.
• Client money handling. Money received from clients is held under prescribed arrangements, reconciled on a stated cycle and kept apart from the firm's own funds. What that separation achieves is the subject of the next lesson.
• Records. Every order, communication and complaint is retained for a stated period, in a form a supervisor can ask for and read. That obligation is what makes every other obligation testable after the fact.
• Disclosure before dealing. Costs, charges, the nature of the instrument and the firm's conflicts of interest are disclosed in advance in a prescribed form, so the information exists before a decision rather than in an explanation afterwards.
• Complaints and reporting. A documented complaints procedure with defined response times and an escalation route sits alongside periodic reporting, external audit, and a duty to notify the regulator of matters it would reasonably expect notice of.

Each of those is an evidential obligation rather than an aspiration, and supervision proceeds almost entirely by asking for the evidence. The capital condition is the one most often misread, because a requirement is a level rather than a pot: it is recalculated as the firm's own numbers change, and a firm sitting below it is in breach at that moment, whatever its intentions.

The last row is the point of the block. The level follows the firm's cost base and its permitted activities rather than how the firm is doing, so a bad period erodes the headroom without lowering the bar. A firm that falls below its requirement conventionally notifies its regulator at once, and the response is usually a restriction on taking new business. None of that money is client money, and none of it is a fund available to compensate a client for a loss on a position.

Conduct obligations bind process, not outcome 

Conduct rules govern what a firm does. They do not govern what a market does, and no rulebook has purported to. A regulator can require that orders are handled to a documented policy, that the policy is applied consistently, and that the results are monitored and the monitoring evidenced. It cannot require that a price moves in a particular direction after an order is filled.

Best execution is the clearest case. The obligation is to take all sufficient steps to obtain the best result for clients on a consistent basis, having regard to price, cost, speed, likelihood of execution and settlement, and size. It is assessed across a population of orders against a published policy, which makes it a process standard rather than a promise about any individual order. A fill that turns out to have been worse than one obtainable elsewhere is not by itself a breach. A policy that was not followed, or was never monitored, is.

Disclosure works the same way. Once the information has been given in the prescribed form at the prescribed time, the obligation is discharged. The rule ensures the information exists. It makes no claim that the resulting decision is a sound one, because it has no view of the decision. Reading a conduct obligation as a warranty of outcome converts every one of them into a promise no regulator made and no firm gave.

What execution only means for the service received 

A permission describes a service, and the service most retail brokers are authorised to provide is execution only. The firm receives an instruction and executes or transmits it. It expresses no opinion on the instrument, makes no recommendation, and performs no assessment of whether a position fits the circumstances of the person placing it. That is not a gap in the service. It is the service, defined that way in the permission.

Three consequences follow, all of them structural rather than editorial. Nothing published by such a firm, on its website, in its research or in a course like this one, is a personal recommendation, because issuing one is a different regulated activity requiring a different permission. No suitability assessment is performed, so whether an instrument fits an individual is never asked and never answered. And responsibility for each instruction sits with the person who gave it, since nobody at the firm formed a view on it beforehand.

Several regimes sit an appropriateness test in front of complex products. It asks about knowledge and experience, so that a firm can judge whether a client understands the nature of the instrument, and it is not a suitability assessment, which considers financial situation and objectives and is required only where advice or portfolio management is being provided. A negative result conventionally produces a warning rather than a refusal. That design is deliberate and it is contested, which the last section returns to.

The risks no licence removes 

Everything above describes what a licence adds. What it does not touch is a shorter list, and a more important one.

• Market risk. Prices move against positions. No obligation in any rulebook addresses that, and none is intended to.
• Execution risk. Gapping markets, orders filled at a level worse than the one specified, and instructions that cannot be completed at all remain possible under any execution policy.
• Counterparty standing. A contract for difference is bilateral, so the firm that wrote it owes the difference whenever it settles in the client's favour, and its financial condition is part of what the holder carries.
• Technology and connectivity. Platforms, data feeds and connections fail. Rules require arrangements for continuity and for handling the consequences; they do not prevent the interruption.
• The decisions themselves. Which instrument, which direction, which size and when sit outside an execution only permission entirely, and no supervisory regime reviews them.

Held together, those two lists give the accurate reading of the word regulated. It is a floor under a firm's conduct, enforced by a supervisor with the power to take the permission away. It is not a ceiling on what a market can do to a position, and a firm suggesting otherwise would be breaching the rules requiring it to communicate in a way that is fair, clear and not misleading.

Verifying an authorisation independently 

Every claim a firm makes about its own status is checkable, and the direction the check runs in is what makes it worth anything. A logo, a licence number printed in a footer and a link labelled as the regulator's register are all content the firm controls. The register is not. The check therefore runs from the regulator back to the firm.

1. The legal entity name is located first, in the client agreement, the terms of business or the site footer, since the brand on a homepage is frequently not the name of the company that would be the counterparty.
2. The regulator's own website is reached independently, by typing its address or searching for the authority by name, rather than by following a link published by the firm being checked.
3. The entity name is searched on the public register held there. An exact match matters: a similar name, a different suffix, or a name registered in another jurisdiction is a different company.
4. The entry is read rather than merely found: permitted activities compared with the business actually being offered, status checked as current rather than lapsed or restricted, and any conditions on the permission noted.
5. The licence number, the registered address and any trading names carried on the register are compared with the ones the firm publishes.

Two failure patterns account for most of what that sequence catches. In the first, no entry exists and the claim of authorisation was untrue. In the second, the entry is genuine but belongs to a company with no connection to the website citing it, an arrangement regulators publish warnings about under the name of clone firms. The second is harder to spot precisely because the number checks out, which is why the address, the trading names and the permitted activities are compared rather than the number alone.

The details that check requires are stated on this site rather than left to be discovered. The legal entity is Yal Group Inc.. Yal Group Inc. is duly incorporated and registered in Saint Lucia under company registration number 2026-00484. The licence number is 2026-00484, and the registered office is Ground Floor, Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia

Where practitioners disagree 

The first argument is about whether disclosure works. One tradition holds that a properly informed client making a free decision is the correct object of the rules, and that the state's role ends at ensuring the information is complete, comparable and given in time. The other holds that documents are not read and that risk warnings are habituated to, so only product intervention changes behaviour: caps, restrictions on how products are marketed, or prohibitions for retail clients. Regulators follow both, and several jurisdictions have moved from the first toward the second in leveraged retail products.

The second concerns the appropriateness test. Its defenders argue it is the least paternalistic instrument that still creates a record, establishing what a client was told and when. Its critics answer that a test which can be attempted repeatedly, whose failure produces a warning rather than a refusal, and which is administered by the firm that earns revenue when the client proceeds, is a formality with the appearance of a safeguard. Both describe the same mechanism accurately, and what separates them is a view about what a test is for.

The third is about the word regulated itself. Regimes differ substantially in capital requirements, in client money rules, in what may be offered to retail clients and in how actively they supervise, so one word covers arrangements that are not equivalent. One position holds that the word is close to meaningless in marketing, and that only the specific regime, entity and permission tell a reader anything. The other holds that the floor a licence establishes, an identified entity, a supervisor able to remove the permission and a complaints route outside the firm, is a material difference from its absence. Ranking regimes against one another is not something this page can usefully do.