Passporting

What passporting means

Passporting is a mechanism in European Union financial law that lets a firm authorised in one European Economic Area (EEA) country offer its regulated services in other member states without applying for a separate licence in each. The firm is licensed once by its home regulator, and that licence is treated as valid across the bloc. The name comes from the idea that the authorisation travels with the firm, like a passport.

The EEA is made up of the EU member states plus Iceland, Liechtenstein and Norway. Passporting rights come from EU directives, most importantly MiFID II for investment firms such as brokers, but also separate directives for banks, insurers and payment institutions. For a retail trader, the practical result is that a broker based in one EEA country can legitimately accept clients from many others.

Passporting matters most to online brokers because their clients are spread across borders. A single licensed entity can serve customers in dozens of countries, which is why a small number of EEA regulators supervise a very large share of the brokers marketed to European retail clients.

How it works

A passport is not automatic. The firm must first hold a full authorisation from its home state regulator. It then notifies that regulator that it wants to use the passport, and says which host countries it will serve and whether it will do so in one of two ways.

1. Freedom to provide services: the firm serves clients in the host country from its home base, with no physical presence there. Most online brokers work this way.
2. Freedom of establishment: the firm opens a branch in the host country. The branch is still supervised mainly by the home regulator, but the host authority has a say on certain local conduct matters.

The home regulator passes the notification to the host regulator, and after a short procedural period the firm may begin. The key principle is home-state supervision: the regulator that granted the licence is responsible for the firm's capital, systems and general conduct. Host states keep some powers over local marketing rules and consumer protection, and they can act if a passported firm breaks local rules.

Passporting also carries obligations. Rules such as client money segregation, best execution, suitability or appropriateness checks and product intervention measures come from EU-level law, so a passported firm follows a common baseline wherever it sells.

A worked example

Imagine, purely for illustration, a hypothetical broker called Northwind Markets that is authorised by the regulator in Cyprus. It wants to accept clients in Germany, Spain and Italy.

1. Northwind holds one home-state licence covering investment services and CFD products.
2. It sends a notification to its home regulator naming Germany, Spain and Italy and stating that it will serve clients from Cyprus without branches.
3. The home regulator forwards the notice to the three host regulators.
4. After the notification period, Northwind may onboard clients in those countries.

A client in Madrid opening an account is therefore dealing with a Cyprus-licensed firm, protected under the rules and any compensation scheme of Cyprus, not Spain. If Northwind wanted to serve clients in a country outside the EEA, for example Australia, the passport would not help: it would need a separate licence or exemption there.

Why it matters

For traders, passporting decides which regulator and which compensation scheme stand behind an account. The regulator named in the account agreement is normally the home regulator, even if the broker's website is in your language and advertises locally.

It also explains why product rules look similar across Europe. Leverage limits, risk warnings and negative balance protection for retail clients tend to follow the same EU baseline, applied through national regulators.

Brexit changed the picture. UK firms lost automatic passporting rights into the EEA at the end of the transition period, and EEA firms lost the matching rights into the UK. Many UK-based groups responded by setting up or expanding an authorised entity inside the EEA, and EEA brokers that want UK clients now need their own permissions from the UK regulator.

How to use it in practice

• Find the legal entity name in the broker's terms and conditions, not just the brand name on the homepage.
• Look up that entity on the home regulator's public register and confirm the authorisation covers the services you want.
• Check the register entry for a passport or cross-border services listing that includes your country.
• Confirm which compensation scheme applies, since it follows the home state.
• Note which entity will hold your account if the broker has several, for example separate EEA, UK and offshore entities.
• Keep a copy of the legal entity details with your account records.

Common mistakes and misconceptions

• Assuming the local regulator protects you. Under a passport the home regulator leads; the host regulator has limited powers.
• Believing passporting means identical protection everywhere. Compensation limits and enforcement style differ by home state.
• Thinking UK firms can still passport. After Brexit that automatic right ended.
• Treating a passport as proof of quality. It shows the firm is authorised, not that it is well run.
• Forgetting that Switzerland is not in the EEA, so Swiss firms do not hold an EU passport.
• Mixing up entities. A group may be passported through one company while your account sits in another.

Risks and limitations

A passport can be withdrawn or restricted if the home regulator takes action. Cross-border enforcement can be slow, and a dispute with a firm in another country may be harder to pursue than one with a local firm. Complaint routes, ombudsman access and compensation limits depend on the home state, and rules continue to change as EU legislation is revised. This article is general education, not legal advice.

How Brokeli looks at it

In our broker research we record the legal entity, its home regulator and the countries where it is allowed to serve clients, and we keep these facts in the published research snapshot. We do not treat a passport as a quality score; it simply tells you which regulator and compensation arrangements apply to your country. Availability by country is shown separately so the data stays consistent across reviews and comparisons.