Every scam in retail trading works the same way at the root: it separates the decision to deposit from the ability to withdraw. Everything else — the platform, the bonus, the account manager, the profit screenshot — is packaging around that single asymmetry.
This is not a list of warning signs. It is a map of the seven structures that account for most retail losses to fraud in 2026, and a routine that takes about 20 minutes and catches six of the seven before you fund anything.
Research note, 10 November 2026. Structure descriptions are drawn from regulator enforcement notices and public warning lists, not from any single case. Individual broker findings are not asserted here; the verification steps are.
Structure 1: The Clone Firm
The most common and the most effective, because it uses a real licence.
A clone takes a genuine licence number from a legitimate broker — AFSL, CySEC, FCA reference — publishes it on a professional-looking site, and operates a domain one character away from the original. The licence is real. The entity in front of you is not the entity that holds it.
Why the obvious check fails: searching the number returns a valid record, so most people stop there. The register entry proves a licence exists; it does not prove that the website you are reading belongs to the licensee.
The check that works: on the register, read the licensed entity name and the permitted domains where published, then compare against (a) the domain in your address bar and (b) the legal entity named in the client agreement, which you should request and read before funding. If the agreement names a company in a different jurisdiction than the licence quoted on the homepage, you are looking at two different businesses.
Structure 2: The Fake Regulator
Cheaper to build than a clone and, remarkably, still effective.
A fictional authority — usually with an authoritative-sounding acronym and a crest — issues a “licence” and publishes a verification page where your broker appears in good standing. The whole apparatus is owned by the operation. Sometimes a real regulator’s name is used with a plausible but nonexistent department.
The check that works: never verify a licence through a link on the broker’s own site. Type the regulator’s domain manually, or reach it from a page you already trust. The list of authorities that actually supervise retail CFD brokers is short and known: ASIC in Australia, FCA in the UK, CySEC in Cyprus, FSA in Japan, MAS in Singapore, FINMA in Switzerland, BaFin in Germany, FSCA in South Africa. Anything outside that list needs a reason, not a certificate.
Structure 3: The Withdrawal Fee Trap
The mechanism that turns a fake account into revenue.
The account performs beautifully. Then a withdrawal request meets a fee that was never mentioned: a “tax”, a “liquidity release fee”, an “anti-money-laundering deposit”, an “international transfer charge”. Each payment is framed as the last one required. Some operations make the second payment look procedural by issuing a document.
The check that works: a regulated broker deducts its costs from the balance — swap, commission, currency conversion — and every deduction appears in the statement. It does not ask you to send money in order to receive money. If a payment is demanded separately, by crypto transfer or to an account in a name that is not the broker’s, treat the account as lost and stop sending.
This is also why the first withdrawal should be small and early. It costs nothing to test and it converts a hypothetical into evidence.
Structure 4: The Signal Group That Owns the Other Side
Sold as education, structured as a counterparty.
A paid group delivers calls. Early calls win — sometimes because the operator is running a pump, sometimes because the group is large enough that a subset of members can be made to look right. The monetisation arrives later: a “proprietary” broker the group insists on, where spreads, slippage and stop-out rules are set by the same people selling the signals.
The structural problem: when the educator, the execution venue and the counterparty are one entity, the conflict is not theoretical. The venue earns most when clients trade often and lose slowly.
The check that works: any recommendation of a specific broker by someone selling signals or a course should be treated as advertising. Ask what the referral arrangement is. A regulated introducer will say so; an unregulated one will call the question hostile.
Structure 5: The Fraudulent App
A real mobile app, a real chart, a fake market.
The app displays prices, accepts deposits, shows a growing balance and a working withdraw button. The prices may be synthetic. The balance is a database field. The withdrawal either fails silently or triggers Structure 3.
Two variants dominate: a cloned build of a legitimate trading app distributed outside official stores, and a purpose-built app for a “managed account” scheme where you never place a trade at all.
The check that works: install only from the official App Store or Play Store listing linked from the broker’s verified domain, never from a link in a message. And ask the question that no fake app survives: which regulated entity executes my orders, and where is my money held? A real broker answers with an entity name, a licence number and a segregated account. A fake app answers with a screenshot.
Structure 6: The Managed Account and the Prop-Firm Illusion
Two different products, one shared failure mode: you cannot see the execution.
In a managed account, someone trades on your behalf. In a modern prop-firm structure, you pay a fee for an evaluation, then trade a simulated account with profit-split promises. Neither is fraudulent by definition — both are legitimate industries with real operators — but both concentrate risk in a place you cannot audit.
The failure mode is identical: the rules are applied by the party that benefits from ruling against you, and the payout decision is discretionary. That is acceptable if the terms are written, published and consistent. It is fatal if the payout rules change after you pass.
The check that works: read the payout clause before paying the fee, and prefer operators whose rules are published in a document you can keep. For managed accounts, ask for the licensing of the entity actually trading and for segregated custody of client funds. A manager who cannot name a regulator is running an unlicensed collective investment scheme.
Structure 7: The Romance and Recovery Double Tap
The highest average loss per victim, and the only structure that routinely involves a second scam.
Stage one is a relationship — usually months of it — that ends in a “favourite platform” where the victim deposits. Stage two arrives after the loss: a “recovery specialist”, often claiming a regulator’s authority or a blockchain forensics firm, offers to retrieve the funds for an upfront fee.
The recovery scam is nearly always run by the same organisation, working the same victim list. Regulators do not charge victims to recover money, and no legitimate firm can guarantee recovery.
The check that works: no unsolicited contact about an investment or a recovery is legitimate. Verify any claimed regulator by calling the number published on the regulator’s own site, not the number in the message.
The Five-Step Routine
Run this before funding. It takes about 20 minutes and it does not require expertise.
- Open the regulator register manually. Type the domain; do not click through from the broker. For Australia, that is the ASIC professional register. Search the licence number, then read the entity name and status.
- Match three names. The licensee on the register, the entity on the client agreement, and the company receiving your deposit must be the same legal person. Two out of three is a fail.
- Read the withdrawal section of the client agreement. Look for conditions attached to withdrawal: minimum volume, minimum balance, bonus lock-in, verification requirements. If withdrawal conditions are not written down, that is the answer.
- Test with the minimum, then withdraw a portion. Do it in week one, before you build a balance. Payment details must match the account holder name.
- Check the entity against your leverage. If the marketing promises 30:1 under ASIC but your account is onboarded to an offshore entity at 500:1, the safety net you read about does not apply to you. Decide whether you accept that before depositing, not after.
Two structural protections are worth understanding in advance because they determine what a bad week costs: retail leverage caps, which limit how large a position the account can carry, and negative balance protection, which stops a gap from turning into a debt. Both are properties of the entity, not of the brand. Our regulation comparison covers how ASIC, FCA and CySEC differ, and the negative balance protection guide explains what the protection actually covers.
Where UZFX Sits
UZFX is an ASIC-regulated broker (AFSL 001291473) with a standard account, no commission, a USD 10 minimum deposit and 100+ CFD instruments across forex, metals, energy, indices, crypto and share CFDs. Execution runs on a proprietary stack — Web Terminal, H5 mobile, iOS, Android, Windows and Mac — with no MT4 or MT5, so there is no third-party bridge between the order and the venue.
Two things about that structure matter for this article. First, the licence is verifiable in one step and the licensed entity is the entity you fund, which is exactly what the routine above tests. Second, a spread-only standard account has one cost line, so a statement is easy to reconcile: if a charge appears that is not spread or swap, it should not be there.
A USD 10 minimum also makes step 4 cheap to run. The point of a small first deposit is not the amount; it is that the withdrawal path gets tested while the account is small enough that a failure costs almost nothing.
FAQ
How do I know whether a licence number on a broker website is real? Because the number can be real while the entity using it is not. Match the licensed entity name and the exact domain on the regulator’s register against the site you are on and the company named in your client agreement. That comparison, not the search result, is the test.
What is the fastest test of whether a broker is legitimate? One small withdrawal, early, before you build a balance. A regulated broker processes it and payment details match the account holder. A scam introduces a new condition — a tax, a fee, a minimum volume — at exactly that moment.
Is an offshore licence a red flag by itself? Not by itself: it is legal in most jurisdictions. But it removes retail leverage caps, negative balance protection and compensation schemes. The risk is the mismatch — offshore contract sold behind onshore marketing.
A broker is asking for a tax payment before releasing my money. Is that normal? No. Regulated brokers deduct costs from the balance and show them in the statement; they never require a separate payment to release funds. A demand for a crypto transfer or a payment to a personal account is the strongest fraud signal in retail trading.
How does UZFX make verification easy? One verifiable AFSL (001291473) held by the entity you fund, a spread-only standard account so statements reconcile to one cost line, a USD 10 minimum that makes an early withdrawal test cheap, and 100+ instruments on its own platform stack with no third-party bridge.
Final Verdict
Fraud in retail trading is not a technology problem. It is an identity problem: the licence is real, the website looks real, the app works, and the entity in front of you is not the one being described.
The defence is procedural, not intuitive. Verify at the source, match three names, read the withdrawal clause, and test the exit with a small amount before the balance is large enough to matter. Twenty minutes of routine replaces the entire category of losses that no amount of chart skill can recover.
Risk Disclaimer
Trading CFDs and leveraged foreign exchange carries a high level of risk and can result in the loss of all invested capital. CFDs are complex instruments and, because of leverage, losses can exceed deposits on accounts without negative balance protection. This page is general information about fraud structures and verification practice; it does not take into account your objectives, financial situation or needs, is not investment advice, and does not assert misconduct by any named or unnamed firm. Past performance is not indicative of future results. Seek independent advice if necessary.
Last reviewed: 10 November 2026 by the MarketCFD editorial team. Regulator register links and licence numbers should be re-verified at the time of use.
Related reading: broker comparison 2026, UZFX review, how to verify a broker licence.