How to verify a Forex broker

Start with the contract
Find the exact legal entity in the account agreement, not just the logo. Record its legal name, country, licence reference and the full website address. If the agreement names a different group company, restart the check for that entity. Screenshots and promotional badges do not establish authorisation.
Compare independent records
Open the authority’s website independently. Compare identity, current status, permissions and contact details. Check the exact domain and warnings; a licence belonging to someone else is not a match. Then establish whether the particular entity and service may serve your country. Keep unresolved points separate from confirmed facts.
Pause when evidence is missing
An unknown result means the evidence is insufficient, not that fraud is proved. Ask the regulator or genuine firm through independently sourced contact details. Do not send money while an important identity or website discrepancy remains unexplained. Authorisation never guarantees profitable trading.
A useful check record
Make one dated note with five headings: legal entity, licence and service, exact domain, official warnings, and open questions. Put the source beside each confirmed fact. If only the entity is matched, say so; do not extend that result to an unconfirmed website. Recheck after a changed contract or payment instruction.
Follow the identity chain
Write down the brand you first encountered, the website where you registered, the company named in the contract and the payment beneficiary. These are four separate observations. Where they differ, ask for a documented explanation of each relationship. A payment processor can legitimately have a different name, but that possibility does not establish that a particular payment instruction is genuine. Confirm it through an independently verified contact before proceeding.
Read a mixed result correctly
Suppose an official record confirms a company’s licence, but the submitted website is not listed in the evidence available to you. Record authorisation as confirmed for that company and the website relationship as unresolved. Do not merge them into a reassuring overall label. Conversely, a missing search result may reflect spelling, stale information, limited coverage or a source outage. Check those explanations before making a public allegation.
Set a recheck trigger
Repeat the relevant checks when you are asked to sign with a new entity, use another domain, change payment recipient or accept a new client category. Keep the old contract and dated evidence so you can see what changed. If identity remains uncertain, use a manual enquiry rather than repeated deposits as a test. A small successful withdrawal does not by itself establish the legitimacy of every later request.