Everyone watches the bot, the strategy, the returns. Almost nobody looks at where their money actually sits. And that's exactly where it goes wrong. A broker is the custodian of your capital. If it collapses or won't pay out, none of the rest matters.

Short answer first. A safe broker keeps your money in a segregated client account and lets you look up its licence number on the regulator's own site, not just on its own badge. Everything a broker says about itself is marketing until you've verified it independently.

Verify the licence at the regulator, not at the broker

Every broker puts a seal on its site. "Regulated by ASIC", with a neat number next to it. The problem: that image proves nothing. Anyone can put a logo and a number on a page.

The only real check is the regulator's public register. For an Australian licence you go to asic.gov.au and search the Professional Registers by company name or AFSL number. For Cyprus you do the same in the CySEC register, for the UK in the FCA register. Enter the name and see whether everything matches exactly: the right entity, the right country, an active status.

Watch this trap, because fraudsters really use it. Some fake brokers clone the name and licence number of an existing, properly regulated firm. On their own site it looks real. That's why you always check the number yourself on the regulator's site, and never through a link the broker hands you. That link can point to a lookalike page.

Segregated funds and negative balance protection are two things

These two terms get thrown together, but they protect you from completely different dangers. Understand the difference, because it matters.

Segregated client money means the broker keeps your deposit separate from its own operating capital, usually in a dedicated account at a third-party bank. If the company goes bust, your money isn't part of the bankruptcy estate. This protects you against the broker collapsing.

Negative balance protection is something else. It ensures your account can't fall below zero. If an extreme move causes a loss larger than your deposit, the broker absorbs the difference. Your maximum loss is then your deposited money, no more. This protects you from your own trading loss in a flash crash. In the EU this has been mandatory for retail since August 2018.

A good broker has both. If one is missing, you know exactly which risk you're unprotected against.

Which regulators actually count?

Not every "regulator" is equal. The heavyweights are ASIC in Australia, the FCA in the UK, and CySEC in Cyprus for brokers active inside the EU. They set hard requirements on capital, reporting and the protection of client money.

You'll also often see licences from small offshore islands. They sound official, but in practice the oversight amounts to little. A broker that's only offshore-regulated, while offering you 1:500 at the same time, hands you two signals at once. How that high leverage ties in with weak oversight is in our piece on what leverage is safe for a trading bot.

The withdrawal test: the real proof

All the paper checks are useful, but there's one test that beats them all. Can you get your money out? Depositing is smooth at every broker, because that's what they earn from. The truth only surfaces at withdrawal.

So make a small withdrawal early, well before serious money is on the account. Deposit a small amount, don't trade with it, and request it straight back out. If it lands within a few days on the same account you deposited from, good. If a game of extra documents, new "verification" and delay begins, you know enough before it hurts.

Easy to deposit, hard to withdraw. That's the clearest alarm there is. Test the exit before you need it.

Red flags in one place

A few signals you shouldn't ignore when they cluster. One of them can be coincidence. More than one together is a pattern.

Red flag Why it alarms
Offshore licence only A tiny island as regulator means barely any real oversight of your money.
Leverage of 1:500 or higher Far above the EU cap of 1:30. Often bait, not a benefit.
Shifting withdrawal rules Minimums that rise and documents demanded only at withdrawal are a delay tactic.
Bonus with a trading requirement A bonus you can only withdraw after trading a multiple of your deposit locks you in.
Guaranteed returns Nobody can guarantee profit. Whoever promises it is lying about the foundation.

That last one, guaranteed returns, is also the heart of how you spot a fake bot. The overlap is large, because the same people often sell both. More on that in our piece on how to spot a trading bot scam.

Why your own account and password change everything

There's a simple setup that shrinks most of these risks: your money in a broker account in your own name, with your own password. Not on an internal platform balance someone else can reach.

That's why we deliberately do it this way. You open an account in your own name yourself, you deposit yourself, you connect the bot, and then you change your password. The bot can trade, but it can't withdraw. The broker we work with sits under ASIC supervision and keeps client money segregated. That isn't a detail, it's exactly the kind of protection this whole piece is about. How that setup compares to copy trading is in copy trading versus a trading bot.

So how do I know if my broker can be trusted?

Check the licence number yourself at the regulator. Confirm your money is segregated and that there's negative balance protection. Make a small withdrawal before you commit seriously. And run down the red flags: offshore-only, absurd leverage, withdrawal games, bonus traps, guaranteed profit.

Sounds like a lot of work. It costs you ten minutes, and it's the cheapest insurance you'll ever buy. The money you save is the money you'd otherwise have lost to a broker that looked perfectly fine on paper.

Prefer trading with a broker that's properly supervised?

You open an account in your own name at an ASIC-regulated broker, connect the bot and change your password. You keep control and your money stays segregated. Stop whenever you want.

Start with the bot