Is HFM Legit and Safe? Regulation and Fund Safety Checked

By BrokaBoy Research Team · Reviewed 14 October 2026 · Updated 14 October 2026 · 5 min read

HFM (HF Markets) is a legitimate broker group with licensed companies in the UK (FCA), Cyprus (CySEC), South Africa (FSCA), Seychelles (FSA) and Kenya (CMA). Most international clients, however, open accounts with HF Markets (SV) Ltd in St Vincent and the Grenadines, which is registered there but not licensed by a financial regulator. So HFM is not a scam, but how well you are protected depends on the entity named in your client agreement.

HFM logo
HFM
BrokaBoy score 9.7/10Listed min deposit $0Advertised spread 0.0 pipsRegulators FCA, CySEC, DFSA, FSCA, CMA, FSA
Visit HFM

CFDs are high risk. Capital at risk.

Affiliate link - see our Methodology

Key takeaways

  • HFM is a real broker group, not a scam, with several licensed companies
  • The global site is run by HF Markets (SV) Ltd, which has no named financial regulator
  • FCA firm reference 801701 and CySEC licence 183/12 cover UK and EU clients
  • HFM says client money is segregated, insured up to $5 million and covered by negative balance protection
  • Always check the entity on your agreement and the regulator register yourself

The short verdict

HFM is a legitimate, long-running broker group. It started out as HotForex, and its Cyprus licence (CySEC 183/12) dates back to 2012. Today the group runs regulated companies in several countries. "Legit", though, is only half the question. The other half is which HFM company holds your money. That decides which regulator supervises your account, whether a compensation scheme applies, and where you can complain.

If you register through HFM's international website, your counterparty is usually HF Markets (SV) Ltd, a company incorporated in St Vincent and the Grenadines. HFM's own regulation page does not name a financial regulator for it. That's normal for the high-leverage offshore arm of a global broker. It still means your protection depends mostly on HFM's own policies, not on a regulator.

HFM's entities and licences

This is what HFM lists on its regulation page and website footer (checked October 2026):

HFM companyCountryRegulator and licenceWho it typically serves
HF Markets (UK) LtdUnited KingdomFCA, firm reference 801701UK residents
HF Markets (Europe) LtdCyprusCySEC, licence 183/12EU/EEA residents
HF Markets SA (PTY) LtdSouth AfricaFSCA, licence 46632South African business
HF Markets (Seychelles) LtdSeychellesFSA, Securities Dealer Licence SD015International clients
HFM Investments LtdKenyaCMA, licence no. 155Kenyan clients
HF Markets (SV) LtdSt Vincent and the GrenadinesNo financial regulator named (IBC reg. 22747 IBC 2015)Most international clients
HF Markets Fintech Services LtdCyprusNot a broker; payment services for the group—

Two more points from our checks:

  • Kenya: the Capital Markets Authority licensed HFM Investments Ltd in November 2021 as a non-dealing online forex broker. That means it passes orders on rather than acting as market maker. See our CMA regulator page.
  • Dubai: the DFSA public register still shows HF Markets (DIFC) Ltd (reference F004885) as licensed since December 2018, limited to matched-principal dealing. HFM's current regulation page doesn't list this company, though, and the global site says it doesn't accept UAE residents. Don't assume a UAE retail account is available. Ask HFM before you apply.

The "Who it typically serves" column is our reading of how broker groups usually split clients. Your own client agreement is the document that settles it.

What HFM says it does to protect client money

HFM's "Security of Funds" page makes three specific claims:

  1. Segregation. Client money is held apart from company money and can't be used to pay the company's creditors if it fails.
  2. Insurance. HFM says it keeps an insurance programme, with "USD 5 million" in the heading. The page doesn't name the insurer or say how much cover applies to each client, so don't treat it as a personal guarantee of $5 million.
  3. Negative balance protection. If a fast market pushes your account below zero, HFM says it resets the balance to zero. You can lose your deposit but shouldn't owe HFM money. More on how this works in our negative balance protection explainer.

There's one more layer for EU clients. HF Markets (Europe) Ltd is a member of the Cyprus Investor Compensation Fund, which can pay eligible clients if the firm fails and can't return their money. UK clients of an FCA-authorised firm are normally inside the FSCS framework, but confirm eligibility in your UK client documents. Offshore accounts (SV or Seychelles) have no statutory compensation scheme.

How protection differs by entity

ProtectionUK (FCA)EU (CySEC)Seychelles (FSA)St Vincent (SV)
Strong conduct rules and auditsYesYesModerateNot by a financial regulator
Leverage caps for retail clientsYes (1:30 on majors)Yes (1:30 on majors)No retail cap of that kindNo
Bonus offers allowedNoNoPossibleYes (HFM runs promotions)
Compensation schemeFSCS frameworkCyprus ICFNoneNone
Negative balance protectionRequired for retailRequired for retailHFM policyHFM policy

You can see the trade-off. The offshore account gets 1:2000 leverage, promotions and fewer restrictions. You give up a regulator standing behind you. Our regulation tiers guide explains why the gap matters.

Five-minute safety check before you deposit

  1. Open the right website. Type hfm.com yourself rather than clicking ads or social-media links. Regulators regularly warn about clone sites copying well-known brokers, and HF Markets has been cloned before.
  2. Find the entity name. During registration, the client agreement or risk disclosure names the company (for example "HF Markets (SV) Ltd"). Screenshot it.
  3. Check the register yourself. Search the FCA register for 801701, the CySEC list for 183/12, or the FSCA FSP search for 46632. Make sure the website domain on the register matches the one you're using. Our step-by-step guide to verifying broker regulation shows where to click.
  4. Do a small test cycle. Deposit a small amount, place one tiny trade, then withdraw. HFM processes withdrawals 24/7 from the Client Area. Cards can take 2–10 business days, and some e-wallets are quicker. Our HFM withdrawal guide covers the details.
  5. Keep your exposure proportional. With an offshore entity, don't keep more in the account than you need for margin and a sensible buffer.

Red flags that would change our view

Nothing below applied to HFM when we checked. Watch for it with any broker:

  • A licence number that doesn't appear on the regulator's own website, or that links to a different domain.
  • Someone on WhatsApp or Telegram claiming to be an "HFM account manager" who offers to trade for you or asks for your password.
  • Withdrawal requests that are only approved if you pay a "tax" or "release fee" first. That's a classic forex scam pattern, and a real broker deducts any fee from the balance.
  • Pressure to deposit more to "unlock" a bonus or a withdrawal.

Who HFM suits, and who should look elsewhere

Reasonable fit: traders outside the UK and EU who want MetaTrader 4/5, cent and zero-spread accounts, copy trading and high leverage, and who accept offshore protection in return. HFM's minimum deposit is $0 on the Cent and Premium accounts, so you can test it with a small amount.

Look elsewhere if: you want the strongest available protection on a large balance and live outside the UK and EU. A broker that onboards you in your own country under a tier-1 or local regulator may suit better. If you're in South Africa, Kenya or Nigeria, compare our country lists, for example best brokers in South Africa.

HFM logo
HFM
BrokaBoy score 9.7/10Listed min deposit $0Advertised spread 0.0 pipsRegulators FCA, CySEC, DFSA, FSCA, CMA, FSA
Visit HFM

CFDs are high risk. Capital at risk.

Affiliate link - see our Methodology

What we'd do

We'd treat HFM as a credible broker and open an account only after confirming the entity on the agreement. We'd do the small deposit-and-withdraw test before funding fully. On an offshore account we'd keep the balance to what our position sizing actually needs. That reflects the protection model, not any specific concern about HFM.

CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage. Most retail investor accounts lose money when trading CFDs. Consider whether you understand how CFDs work and whether you can afford to take the high risk of losing your money. Full risk disclosure.

Frequently asked questions

Is HFM a scam?

No. HFM is the trading name of the HF Markets group, which holds licences from the FCA in the UK, CySEC in Cyprus, the FSCA in South Africa, the FSA in Seychelles and the CMA in Kenya. The real question is which HFM company you sign with, because international clients usually join HF Markets (SV) Ltd, which is not licensed by a financial regulator.

Is HFM regulated by the FCA?

Yes, HF Markets (UK) Ltd is authorised and regulated by the Financial Conduct Authority under firm reference number 801701. That licence only covers clients onboarded by the UK company. A trader outside the UK who registers on the global site is normally served by a different HFM entity, so the FCA licence does not automatically apply to them.

Which HFM entity will I be with?

It depends on your country of residence and the site you register through. UK residents go to HF Markets (UK) Ltd, EU residents to HF Markets (Europe) Ltd, and most other clients to HF Markets (SV) Ltd. The client agreement and account confirmation emails name the company. If in doubt, ask HFM support in writing before you deposit.

Is my money safe with HFM?

HFM states that client money is kept separate from company money, that it carries an insurance programme with a headline figure of $5 million, and that it resets negative balances to zero. EU clients of HF Markets (Europe) Ltd also fall under the Cyprus Investor Compensation Fund. Offshore accounts do not have a statutory compensation scheme, so keep balances modest.

Does HFM accept clients from the USA or Canada?

No. HFM states that it does not offer services to residents of the USA, Canada, Sudan, Syria, Iran, North Korea, the UAE, Türkiye and some other countries. If you live in one of these places, do not try to register with a different address. You would be breaching the client agreement and could have withdrawals refused.

How long has HFM been operating?

The group traded for years as HotForex before rebranding to HFM, and its CySEC licence number 183/12 dates from 2012. A long track record helps but is not proof of safety on its own. What matters more is whether the licence covering your account is current, which you can confirm on the regulator register.

Sources

Related articles

How to Withdraw from HFM: Methods, Fees and Processing Time

To withdraw from HFM, log in to the Client Area, choose Fund Withdrawal, pick a method you have deposited with, and submit the amount. HFM says it processes withdrawals 24/7 and charges no withdrawal fee. Alternative methods arrive instantly or within 24 hours, while cards and bank transfers take 2 to 10 business days because of the banks involved.

Is Deriv Legit and Safe? Regulation and Fund Safety Checked

Yes, Deriv is a legitimate broker operating since 1999, with licensed entities in Labuan, the BVI, Vanuatu, Mauritius and the Cayman Islands as of October 2026. The catch is that all of these are offshore or mid-tier regulators, so you get less protection than with an FCA, EU or ASIC-regulated broker.

Is FXTM Legit and Safe? Regulation and Fund Safety Checked

FXTM is a legitimate broker run by the Exinity group, licensed in Mauritius (FSC), South Africa (FSCA) and Kenya (CMA), with a promotion-only licence in the UAE. It is not a scam, but since giving up its Cyprus licence in 2024 and closing its UK business in 2026, most clients are served by the offshore Mauritius entity, which offers lighter protection than EU or UK rules did.

Is JustMarkets Legit and Safe? Regulation and Fund Safety Checked

JustMarkets (formerly JustForex) is a legitimate broker group with licences from CySEC, the FSCA, the Seychelles FSA and the Mauritius and BVI FSCs. Most clients outside the EU are onboarded by an offshore subsidiary, which offers negative balance protection but no published compensation scheme.

Is Octa Legit and Safe? Regulation and Fund Safety Checked

Octa (formerly OctaFX) is a real broker group operating since 2011. Its Cyprus company is CySEC-licensed, but most clients outside Europe are served by offshore entities in Comoros, Mauritius or Saint Lucia with far weaker protection. Regulators in the Philippines (SEC), Malaysia (BNM) and India (RBI/ED) have publicly flagged OctaFX as unauthorised in their countries.

Is XM Legit and Safe? Regulation and Fund Safety Checked

XM is a legitimate broker group owned by Trading Point, with authorised entities in Cyprus (CySEC) and Dubai's DIFC (DFSA). Most international clients, however, are onboarded by XM Global Limited under an offshore FSC Belize licence, which offers negative balance protection but no investor compensation scheme.