Broker KNF regulation — Polish financial supervision 2026

Most people opening a forex account in Poland assume that "KNF regulation" is a badge a broker either has or does not. The reality is more interesting. The Polish Financial Supervision Authority supervises Polish brokerage houses directly, but thanks to the MiFID II European passport a broker licensed in Cyprus, Ireland or Germany can legally serve a Polish client with no separate KNF authorisation. Here I explain what supervision actually means, how to verify a licence in five minutes, and where the zone begins in which you lose protection.

What KNF is and what it actually supervises

KNF, the Komisja Nadzoru Finansowego, was created under the Act of 21 July 2006 and began operating on 19 September 2006. It absorbed the powers of the earlier Securities and Exchange Commission and the supervisor of insurance and pension funds, and from 2008 also banking supervision. Today one authority watches over banks, insurers, investment funds and — the part that matters to a trader — the brokerage houses that offer forex and CFDs in Poland.

That distinction is the key. KNF does not "certify strategies" or guarantee you will make money. It grants authorisation to conduct brokerage activity, monitors solvency, checks that clients are treated fairly, and can impose penalties or withdraw a licence. For a Polish client the advantage of home supervision is practical: proceedings in Polish, Polish jurisdiction in a dispute, and a familiar body to complain to. Polish brokerage houses under KNF supervision include XTB and the BOSSA brokerage house.

The European passport — why a broker without a KNF licence can still be legal

The most common misconception runs like this: "if a broker has no KNF licence, it is illegal in Poland." Not necessarily. The EU MiFID II directive establishes a single-passport principle — a firm licensed by one member state's regulator can provide services across the Union after notifying the local authority. In practice a broker licensed by Cyprus's CySEC, the Irish regulator or Germany's BaFin can legally serve a Polish client, even though the KNF register lists it only as a notified entity rather than a brokerage house holding a Polish authorisation.

What does that mean for safety? The rules are largely shared, because MiFID II and the ESMA product intervention apply uniformly across the Union — leverage caps, negative balance protection and best execution are the same regardless of the country of licence. What differs is the first line of supervision and the compensation scheme the broker belongs to. So comparing a local broker with a foreign one comes down not to "legal or not" but to "which regulator and which guarantee fund stands behind my money." A broker from outside the Union — Vanuatu, Saint Vincent or the Seychelles — is not covered by the European passport at all. The phenomenon of holding multiple licences in different countries simultaneously has its own logic, explained in the article on why a broker holds 5 licences in 5 countries.

Leverage caps and CFD rules for retail

Since 1 August 2018 the whole Union has applied hard leverage caps for retail clients, introduced by ESMA and maintained by national authorities, KNF among them. This is not a broker's whim — it is law. For a major currency pair the maximum retail leverage is 30:1, for non-major pairs, gold and major indices 20:1, for other commodities and non-major indices 10:1, for individual equities 5:1, and for cryptocurrencies 2:1. The mechanism of the 1:30 leverage cap is the heart of retail protection.

On top of that sit three pillars working in the background on every position: a margin close-out rule at account level (position close-out at 50% of required margin), negative balance protection (a retail client cannot lose more than they deposited), and a standardised risk warning stating the percentage of that broker's clients who lose money. If a broker offers a Polish client 1:500 leverage on a retail account, that signals it sits outside this framework — usually on an exotic offshore licence.

"Analysis of NCAs shows that 74-89% of retail accounts typically lose money on their investments, with average losses per client ranging from EUR 1,600 to EUR 29,000." — European Securities and Markets Authority (ESMA), product intervention announcement, 2018

Protecting your money: segregation and the compensation scheme

Two things protect your capital when a broker runs into trouble. The first is fund segregation: a licensed firm holds client money in separate accounts, ring-fenced from its own assets, so it does not enter the broker's bankruptcy estate. The second is a guarantee scheme — for a Polish brokerage house, the Compensation Scheme run by the Central Securities Depository of Poland (KDPW). It pays 100% of funds up to the zloty equivalent of EUR 3,000, and 90% above that, capped at EUR 22,000 per client. Importantly, the cap applies to cash — securities you bought are recorded in your name and, as a rule, returned in full.

It helps to know the proportions. The Polish EUR 22,000 cap is modest next to the UK's FSCS (GBP 85,000) or the US SIPC (USD 500,000), but it is still a real cushion, and segregation itself often matters more than the fund. For a more detailed account of what happens to your money when a broker fails, I have a dedicated article. A broker under a CySEC licence belongs instead to the Cypriot ICF with a EUR 20,000 cap — I covered the details of CySEC regulation in the EU separately. Whatever the country, the principle is the same: a licensed broker does not mix your money with its own, while an offshore broker usually offers neither guarantee.

How to verify a broker's licence in five minutes

Verification is simpler than it looks, and it is worth doing before you deposit a single zloty. Step by step it goes like this:

1. Find, in the broker's website footer, the legal entity name, the licence number and the supervisory authority (e.g. "regulated by CySEC, licence no. …").
2. For a Polish brokerage house, check the entry in the KNF register of investment firms — by company name, not by the trading brand.
3. For a broker from another EU country, verify the licence in the relevant authority's register (CySEC, BaFin, the Irish regulator) and check the notification in Poland.
4. Scan the KNF public warnings list — if the entity appears there, you stop at this step.
5. Compare the name and licence number on the broker's site with what the register shows. Clones impersonating licensed firms are a common fraud scenario.

KNF publishes the register of investment firms and the public warnings list on its own site. For a structured walk-through, the forexmechanics.com guide to regulations and licence verification takes you through these checks with concrete examples.

Red flags of an unlicensed broker

Fraudsters rarely look like fraudsters, so it pays to stick to objective signals. The loudest warnings repeat year after year: leverage of 1:500 or more on a retail account (contrary to the ESMA caps), no clearly named supervisor or licence number, a registered office in an offshore jurisdiction, promises of guaranteed profit, an "account manager" pushing for ever-larger deposits, and withdrawal problems that suddenly demand extra fees or taxes. Any one of these should raise a flag; several at once make a scam almost certain. I break this down in the guide on how to spot a scam broker.

One note that saves money: the label "international broker" or a logo with an EU flag is not proof of regulation. What counts is a specific authority, a specific licence number and a register entry you can check yourself. Marketing can look professional even at a firm that vanishes tomorrow with its website and client deposits.

What to do before your first deposit

Before you transfer money, run a short checklist that separates a safe broker from a risky one. First, establish the supervisor and licence number, then verify both in an official register — KNF for a Polish brokerage house, the relevant EU authority for a broker on a MiFID II passport. Second, check that the leverage offered on a retail account fits within the ESMA caps and that the broker applies negative balance protection; if it advertises 1:500 for retail, walk away. Third, find out which compensation scheme it belongs to and whether it declares segregation of client funds. Fourth, scan the KNF public warnings list and compare the footer details with the register to rule out a clone. Pass all four and you have a solid foundation; fail even one and you should look further. The mechanics of the European passport, where all of this begins, are explained in the piece on MiFID II regulation.