How to check a CySEC licence
Identify the regulated firm
Access CySEC directly and locate its authorised investment-firm records. Compare the full legal name and licence number from your contract. Inspect current status and any relevant restrictions, rather than relying on an old certificate supplied by a salesperson. A regulator logo on a broker page is only a claim.
Check the approved domain
Compare the exact host with CySEC’s approved-domain information and examine warnings. Similar spelling, an extra word or another suffix can point to a different operator. A missing domain requires clarification, not an automatic fraud label. Save the official source and date, and seek clarification independently if records conflict.
Keep entity and territory separate
An approved website relationship does not by itself resolve which group entity opens your account or which services are permitted in your country. Read the onboarding agreement and compare it with the official record. If a salesperson redirects you to an offshore entity, assess that new counterparty independently before accepting its terms.
Capture the relevant official fields
Record the firm’s full name, licence reference, current published status and the location of any permission or restriction information you actually found. Preserve the official page URL and the date of your visit. If a field is absent, write not available in this record rather than filling it from a promotional page. A company registration number and an investment-firm licence reference answer different questions and should not be substituted for one another.
Compare the domain literally
Remove the scheme and path to identify the website host, but retain a copy of the original address. Look for extra letters, hyphens and unfamiliar suffixes. Do not assume that a brand appearing in a domain is sufficient. If the official list uses a different host or leaves the association unclear, contact the firm through an official independently obtained channel and ask specifically about the address you were given.
Document an unresolved check
A useful enquiry identifies the legal name, licence claimed, exact website and the specific mismatch, without sending passwords or full identity documents. Keep the response with your original evidence and check that it answers the domain question rather than merely repeating that a firm is licensed. If a warning names an exact website, preserve that distinction from the genuine firm whose identity may have been copied.