Finjuris supports clients in obtaining CySEC Investment Firm authorisation, a MiFID II license that provides a regulated gateway into the European market and enables firms to operate under a harmonised EU regulatory framework.
Cyprus is the premier EU jurisdiction for forex and CFD brokerages. A Cyprus Investment Firm (CIF) authorised by CySEC operates under MiFID II and can passport its services across the entire European Economic Area without separate licenses in each country.
This is a true Tier-1 European authorisation — more demanding than offshore alternatives, and far more valuable where you need regulatory standing, bank acceptance and access to wealthier regulated markets. Finjuris manages the full pathway, structured to the current 2026 framework.
The “Cyprus forex license” is, in law, authorisation as a Cyprus Investment Firm (CIF) granted by the Cyprus Securities and Exchange Commission (CySEC) under the Investment Services and Activities and Regulated Markets Law (which transposes MiFID II). A CIF may provide a defined set of investment services and activities — including dealing in, executing and arranging transactions in financial instruments such as forex, CFDs and other derivatives — and is supervised on an ongoing basis by CySEC.
Once authorised, a CIF can offer its licensed services throughout the EEA under freedom of services or establishment, without obtaining a separate license in each member state. That single feature is why Cyprus is the jurisdiction of choice for brokers targeting European clients.
Serve clients across all EEA states from one authorisation — no need for separate national licenses or local offices.
A CySEC license carries prestige comparable to UK or other major European regimes, and is readily recognised by banks, liquidity providers and institutional partners.
Robust investor protection, client-money segregation and conduct standards that give your brand genuine trust.
Eligible retail clients are covered up to EUR 20,000 in the event of firm default, strengthening your client proposition.
A 15% corporate rate (from 2026) plus a strong holding and IP regime and an extensive treaty network.
A deep pool of multilingual financial-services professionals and a mature brokerage ecosystem.
A Cyprus Investment Firm (CIF) authorisation is a fully regulated EU financial services license governed by MiFID II, requiring applicants to demonstrate adequate capital resources, effective governance, operational substance, and robust compliance controls.
Modern CIF applications are assessed not only on legal structure and financial resources, but also on the firm's ability to demonstrate real economic activity, effective risk management, and long-term operational sustainability. As regulatory expectations continue to evolve, governance standards, compliance frameworks, and substance requirements have become central pillars of the authorisation process.
Digital Operational Resilience Act — mandatory for all CySEC-regulated firms since January 2025, requiring a documented ICT-resilience framework and rapid incident reporting.
In force since June 2021, this sets the current initial-capital tiers and ongoing own-funds (K-factor) requirements.
Under the IFR/IFD regime, the initial-capital requirement depends on the investment services you provide. The three statutory tiers below are the current 2026 figures. Note that the statutory minimum is a floor: CySEC will require additional own funds based on your business plan and the IFR K-factor methodology.
| Tier | Initial Capital | Scope of Services |
|---|---|---|
| Class 3 (Limited) | EUR 75,000 | Reception and transmission of orders, execution of orders, portfolio management and/or investment advice — WITHOUT holding client money or financial instruments. |
| Class 2 (Standard / STP) | EUR 150,000 | The above services WHERE the firm holds client money or financial instruments. |
| Class 1 (Full / Market Maker) | EUR 750,000 | All MiFID services including dealing on own account and underwriting / placement on a firm-commitment basis. |
Initial capital must be paid up in cash and deposited in a Cypriot/EU credit institution, where it is ring-fenced until authorisation is granted. Ongoing own funds typically exceed the floor — most retail brokers hold materially more to absorb market-stress events.
Depending on the class and permissions granted, a CIF can:
CySEC assesses the firm, its capital, its people and its systems in depth. The core requirements:
| Requirement | Specification | Why It Matters |
|---|---|---|
| Cyprus Company | A Cyprus-incorporated limited company that will hold the CIF authorisation. | The licensed legal entity. |
| Real Local Office & Substance | A genuine, staffed office in Cyprus — CySEC applies an economic-reality / 'desk test'. | Letterbox structures are rejected; substance is mandatory. |
| Initial Capital | EUR 75,000 / 150,000 / 750,000 by class, paid up and ring-fenced in an EU credit institution until authorisation. | A statutory floor; CySEC requires more based on the business plan and K-factors. |
| Board of Directors | At least two executive and two non-executive directors, the majority resident in Cyprus, all fit-and-proper. | Governance and accountability sit with the board. |
| Key Function Holders | Compliance Officer, Risk Manager, Internal Auditor and an AML Compliance Officer (MLRO), with appropriate independence. | CySEC must approve competent control functions. |
| Governance & Manuals | Operations, compliance, risk-management, AML/CFT, internal-control and remuneration manuals, plus an organisational chart. | Demonstrates a properly controlled firm. |
| DORA / ICT Resilience | A documented ICT and operational-resilience framework with incident-reporting procedures. | Mandatory for all CySEC firms since January 2025. |
| Client Protection | Segregation of client funds, client categorisation (retail/professional), and Investor Compensation Fund membership. | Core MiFID II investor-protection obligations. |
| Business Plan & Projections | A detailed programme of operations and three-year financial projections. | The basis on which CySEC sets capital and assesses viability. |
| Due-Diligence Pack | Notarised passports, proof of address, CVs, finance qualifications, clean criminal and bankruptcy certificates and personal questionnaires for directors and significant shareholders. | Fit-and-proper verification of all controllers. |
MiFID II sets a six-month assessment clock that runs from a complete application; in practice, allowing for incorporation, preparation and CySEC requests for information, the realistic end-to-end timeline is around six to twelve months. Finjuris manages all four phases.
Timelines are practical estimates for a complete, responsive application; the MiFID II clock only starts once CySEC deems the file complete, and is not a guarantee.
| Tax / Item | Rate | Notes |
|---|---|---|
| Corporate Income Tax | 15% | From 1 January 2026 (previously 12.5%), aligned with OECD Pillar Two. |
| Dividend Income / Gains on Securities | Often Exempt | Qualifying dividends and profits from the disposal of securities are frequently exempt, subject to conditions. |
| Withholding Tax on Outbound Dividends | 0% | No withholding tax on dividends paid to non-resident shareholders (anti-abuse rules apply). |
| IP Box (Qualifying IP Income) | ~2.5–3% effective | An 80% deduction on qualifying IP profit applied to the 15% rate. |
| Treaty Network | 65+ treaties | An extensive double-taxation treaty network supporting cross-border structuring. |
Following the 2026 tax reform, Cyprus levies a 15% corporate income tax rate (raised from 12.5% on 1 January 2026 to align with the OECD Pillar Two global minimum). Despite the increase, Cyprus remains one of the most competitive EU jurisdictions, retaining its key exemptions and incentives. Many sources — including the competitor pages — still quote the old 12.5% figure.
The 2026 reform also abolished the deemed-dividend-distribution rules for profits earned from 2026, extended tax-loss carry-forward to seven years, and reduced the dividend Special Defence Contribution for domiciled individuals. Finjuris structures your CIF so the position is both efficient and fully compliant with the current regime.
This is general information, not tax advice. Outcomes depend on your specific facts and the rules in force at the time; obtain tailored advice before relying on any figure.
A CySEC license is the most demanding authorisation in this set — and the one where getting it wrong is most expensive. Underprepared applications stall for months; undercapitalised ones fail. Finjuris manages the full pathway to the current standard.
Incorporation, substance, capital, the full manual suite, fit-and-proper filings, CySEC liaison and EEA passporting — as one coordinated workstream.
We apply the 2026 framework — IFR/IFD capital tiers, DORA, MiCA-adjacent rules and the 15% tax rate — not the outdated figures still circulating online.
We build genuine economic substance from the outset, so the firm withstands CySEC's economic-reality test and bank scrutiny.
We help you weigh Cyprus against offshore options — and structure the two together where a phased EU entry makes sense.
Legal structuring, AML and data-protection compliance, taxation guidance and litigation support as your business grows.
Tell us about your business objectives, and our regulatory specialists will help determine the most suitable CIF license category, corporate structure, and implementation roadmap for your brokerage. From initial planning through to EU market entry, Finjuris provides a single point of contact to guide you through CySEC authorisation, prudential requirements, governance obligations, and evolving regulatory frameworks, ensuring your business is structured for long-term compliance and growth.
