AI trading in Europe: EU rules, national regulators and where we start

ESMA maintains EU-wide registers and publishes investor warnings, but it does not authorise retail brokers. Authorisation sits with the national competent authority in the firm’s home state; each publishes its own public register.

Practically, that means two lookups: find the home-state authorisation on the national register, then confirm the firm has notified or passported into your country. A firm that cannot tell you its home regulator and authorisation number is not a firm you need to research further.

MiFID is the framework governing investment firms and investor protection: client categorisation, appropriateness and suitability tests, best execution, and disclosure. When a platform asks about your experience before letting you trade a complex product, that is this framework at work.

MiCA is the EU framework for crypto-asset markets and service providers, bringing crypto firms into an authorisation regime with its own registers. An AI platform offering crypto services in the EU should be able to tell you which authorisation it relies on, and where it is recorded.

Neither framework guarantees a good outcome. Both give you a place to check, which is the point.

The EU applies retail CFD restrictions — leverage limits by asset class, margin-close-out rules, negative-balance protection and standardised risk warnings including the loss percentage. Several national regulators have added their own measures on top.

When an offer to an EU resident exceeds those retail limits, the firm is either treating you as a professional client or operating outside the perimeter. Both change your protections materially, and neither is usually explained clearly in the marketing.

Ireland is where we start in the EU: English-first, a well-known national supervisor in the Central Bank of Ireland, and a large population of investment firms authorised there and passporting across the bloc.

For Irish readers the practical routine is: identify the entity, search the Central Bank’s register of authorised firms, check the Central Bank’s unauthorised-firm alerts, and confirm whether the Financial Services and Pensions Ombudsman route is open to you.

The Netherlands combines very high English fluency with an unusually direct supervisory culture. The AFM maintains public registers and publishes warnings about unlicensed providers, and Dutch rules on aggressive investment marketing are strict.

Dutch readers should check the AFM register for the entity, and treat bonus offers, guaranteed-return language and pressure selling as immediate disqualifiers rather than negotiating points.

The Nordic markets are English-comfortable, digitally mature and heavily targeted by cross-border investment fraud, which makes verification habits especially valuable there. Each country has its own supervisor: Finansinspektionen in Sweden, Finanstilsynet in Denmark and in Norway, and Finanssivalvonta in Finland.

All publish registers and warning lists in a form English-speaking readers can navigate. The layered check is the same: home-state authorisation, passport into your country, then the local warning list.

Germany and Austria are large, serious markets supervised by BaFin and the FMA respectively. We have deliberately not published market pages for them, because a useful page for a German-speaking reader must be written in German by someone who understands the local product and tax framing.

A machine-translated English page would be thin, would compete with better local resources and would not deserve to rank. We would rather say that plainly than publish it. These markets stay in our taxonomy as prepared-but-not-launched until a proper German localisation exists.