When an investor has a problem with a broker, crypto platform, bank or investment company, the first instinct is often to contact “the European regulator.” In practice, Europe does not have one universal complaints office that investigates every disputed withdrawal or recovers money for individual investors.
The correct authority depends on three factors:
- where the financial company is legally established;
- which regulator allegedly authorised it;
- whether the investor wants to report misconduct, resolve an individual dispute or report an unauthorised business.
That distinction matters. A supervisory regulator may use a report as intelligence, investigate regulatory breaches or issue a public warning. An ombudsman or alternative dispute-resolution body may examine an individual claim. Police and financial-crime authorities deal with suspected criminal conduct.
Below, I explain how the European system works and where investors can submit information in 2026.
Who Regulates Financial Companies in Europe?
Financial supervision in Europe operates on two levels.
European bodies such as the European Securities and Markets Authority, the European Banking Authority and the European Insurance and Occupational Pensions Authority coordinate regulation and supervisory standards. Individual consumer complaints, however, are usually handled by national authorities, ombudsmen or dispute-resolution bodies.
ESMA explicitly directs investors with complaints about financial firms to the relevant national regulator. ESMA generally handles complaints concerning failures by national competent authorities to apply European Union law, rather than ordinary disputes between an investor and a broker.
The European Banking Authority follows a similar model. It recommends that consumers first contact the financial institution, submit a formal complaint and, if the response is unsatisfactory, approach the relevant national authority or ombudsman. The EBA does not normally resolve individual complaints against banks or financial institutions itself.
Complaint, Regulatory Report or Compensation Claim?
These terms are often used interchangeably, but they mean different things.
Individual complaint
An individual complaint concerns a personal dispute, such as:
- a withdrawal that has not been processed;
- an account that has been restricted;
- an investment order executed incorrectly;
- fees that were not properly disclosed;
- unsuitable investment advice;
- disputed transactions;
- misleading information about a financial product.
These cases usually begin with the company’s internal complaints department. If the dispute is not resolved, the investor may approach an ombudsman or approved alternative dispute-resolution body.
Regulatory report
A regulatory report tells a supervisor about possible misconduct, such as:
- a company offering regulated services without authorisation;
- misuse of a regulated company’s name;
- a cloned broker website;
- misleading advertising;
- unauthorised investment solicitation;
- repeated withdrawal complaints;
- potentially unlawful sales practices;
- suspicious use of a regulator’s licence number.
A regulator may use the information for supervision or enforcement, but it may not provide a detailed response or obtain compensation for the reporting investor.
Criminal report
Suspected fraud, identity theft, unauthorised transfers and deliberate misappropriation may also need to be reported to the police or national fraud-reporting authority. A financial regulator is not a substitute for a criminal complaint.
The Standard Complaint Process
Although national procedures differ, the usual European complaint process follows four stages.
Step 1: Complain to the financial company
Send a formal written complaint to the company’s official complaints department. Include:
- your full name and account number;
- the legal name of the company;
- the website and platform address;
- a clear chronology;
- transaction dates and amounts;
- copies of withdrawal requests;
- correspondence with support;
- the resolution you are requesting.
The EBA advises consumers to approach the institution first and support the complaint with relevant documents.
Step 2: Wait for the formal response
The company should acknowledge the complaint and provide a written decision within the applicable national or sectoral deadline.
Do not rely only on conversations with an account manager. Ask for a final written response from the company’s official complaints department.
Step 3: Contact the regulator or ombudsman
If the company rejects the complaint, fails to answer or provides an inadequate response, send the case to the appropriate national regulator or financial ombudsman.
The regulator and the ombudsman perform different functions. A regulator supervises compliance. An ombudsman focuses on resolving a dispute between a consumer and a financial business.
Step 4: Consider police, court or payment-provider action
Where criminal conduct is suspected, report it to the police. Investors may also need to contact their bank, card issuer, payment service or crypto exchange quickly, particularly where a recent transfer may still be traceable.
ESMA: European Securities and Markets Authority
ESMA covers securities markets and coordinates national securities regulators across the EU and EEA.
What ESMA accepts
ESMA provides channels for:
- complaints alleging that a national competent authority has breached or failed to apply EU law;
- whistleblowing reports concerning actual or potential breaches in areas within ESMA’s competence;
- complaints concerning certain entities directly supervised by ESMA, such as credit-rating agencies.
ESMA does not normally resolve a private withdrawal dispute with an ordinary broker. Its power in breach-of-Union-law cases is directed at national regulators.
ESMA contact information
General enquiries: info@esma.europa.eu
Telephone: +33 1 58 36 43 21
Location: Paris, France
ESMA states that its reception is available Monday to Friday from 08:30 to 18:00 Central European Time.
For a complaint about a broker or investment firm, investors should use ESMA’s directory of national competent authorities and the public registers of authorised firms.
EBA: European Banking Authority
The EBA covers banking, payments, consumer credit and related financial services at the European level.
What the EBA accepts
The EBA may consider allegations that a national competent authority has failed to apply relevant EU law. It does not act as an ombudsman for ordinary disputes between a bank and its customer.
For a complaint against a bank, payment institution, lender or credit provider, the EBA recommends:
- contacting the institution;
- submitting a formal complaint;
- contacting the national authority or ombudsman.
The EBA maintains a country-by-country list of national authorities responsible for financial consumer protection.
FIN-NET: Cross-Border Financial Complaints
FIN-NET is not a regulator. It is a network of national out-of-court dispute-resolution bodies specialising in financial services.
It can be particularly useful where:
- the consumer lives in an EU country, Iceland, Liechtenstein or Norway;
- the financial company is established in another EEA country;
- the dispute concerns a financial product or service;
- the consumer wants an out-of-court resolution.
FIN-NET helps consumers locate the appropriate dispute-resolution organisation for cross-border financial complaints.
FIN-NET itself does not contact consumers to investigate cases, request payments or collect financial information. The actual case is handled by a national member body.
United Kingdom: Financial Conduct Authority
Although the United Kingdom is no longer part of the EU, the FCA remains one of Europe’s most frequently referenced financial regulators.
What the FCA accepts
The FCA accepts reports involving financial services it regulates, including concerns about:
- investments;
- pensions;
- loans and credit;
- insurance;
- claims-management services;
- unauthorised financial firms;
- clone firms;
- suspicious financial promotions.
The FCA does not investigate every type of consumer scam. Its reporting scope is limited to financial services within its remit.
FCA contact information
Consumer telephone: 0800 111 6768
Consumers outside the UK should use the international contact options listed on the FCA contact page.
The FCA advises consumers who have paid money or disclosed personal information to notify their bank immediately. Where the issue falls outside FCA regulation or money has been lost to fraud, the FCA directs consumers to the UK’s national fraud-reporting service.
Individual compensation complaints
The FCA does not decide individual compensation disputes. Consumers normally complain to the firm first and may then approach the Financial Ombudsman Service.
Germany: BaFin
BaFin supervises banks, insurers, investment firms and other regulated financial businesses in Germany.
What BaFin accepts
BaFin provides complaint forms for:
- supervised financial companies;
- potentially unauthorised financial businesses;
- banks and payment institutions;
- insurers;
- investment and securities services.
BaFin-supervised companies must operate a complaints function and examine complaints objectively and appropriately.
A complaint to BaFin can assist supervision, but it does not automatically replace court proceedings or an individual dispute-resolution procedure.
BaFin contact information
Consumer helpline within Germany: 0800 2 100 500
From abroad: +49 228 299 70 299
BaFin states that its telephone staff provide general information; detailed complaints should be submitted through the appropriate written or online procedure.
France: Autorité des Marchés Financiers
The AMF supervises French financial markets, investment intermediaries and securities-related activities.
What the AMF Ombudsman accepts
The AMF Ombudsman may examine individual disputes involving:
- marketing of financial products;
- portfolio and asset management;
- transmission or execution of stock-market orders;
- securities accounts;
- personal equity plans;
- disputes with financial intermediaries or issuers.
The Ombudsman does not handle ordinary banking products, taxation or life-insurance disputes. It also does not intervene where court proceedings are already underway.
How to apply
Before requesting mediation, the investor must first complain in writing to the financial intermediary. If no answer is received within two months, or the response is unsatisfactory, the investor may apply to the AMF Ombudsman.
AMF mediation is free. The Ombudsman issues recommendations but cannot impose a binding decision on the parties.
Spain: Comisión Nacional del Mercado de Valores
The CNMV supervises Spanish securities markets and investment-service providers.
What the CNMV accepts
The CNMV Complaints Service handles investor complaints involving:
- investment firms;
- banks when providing investment services;
- investment-fund managers;
- investment companies;
- collective-investment schemes.
Investors may complain when they believe their rights or interests have been harmed by an entity providing investment services.
CNMV contact information
Investor assistance telephone: 900 535 015
Madrid: C/ Edison, 4, 28006 Madrid
Barcelona: C/ Bolivia 56, 4th Floor, 08018 Barcelona
The CNMV also accepts electronic enquiries and provides official registers for checking companies.
Cyprus: Cyprus Securities and Exchange Commission
CySEC is especially relevant because many online investment firms serving European clients have historically been authorised in Cyprus.
Complaints about a Cyprus Investment Firm
CySEC advises investors to complain to the Cyprus Investment Firm first. The firm should issue a unique complaint reference number.
The firm must acknowledge the complaint in writing within five days and normally provide a written response within two months. In more complex cases, the process may extend to a maximum of three months.
If the complaint is rejected or no response arrives within the applicable period, the investor may contact the Financial Ombudsman of Cyprus. CySEC notes that investors should generally approach the Ombudsman within four months of receiving the company’s final response.
Cyprus Financial Ombudsman contacts
Telephone: +357 22 848900
Complaints email: complaints@financialombudsman.gov.cy
General Ombudsman email: fin.ombudsman@financialombudsman.gov.cy
Address: 13 Lord Byron Avenue, 1096 Nicosia, Cyprus
CySEC also provides separate channels for complaints about non-regulated entities, whistleblowing reports and unauthorised domains.
Netherlands: AFM and Kifid
The Netherlands Authority for the Financial Markets receives information about banks, insurers, crypto-asset service providers and other financial institutions. Its consumer complaints guidance distinguishes between complaining to the company, notifying the regulator and pursuing individual dispute resolution.
For an individual dispute, consumers may use Kifid, the Dutch Financial Services Complaints Institute. Kifid accepts online complaints and also provides an English-language complaint form for written submissions. Supporting documents can be uploaded or sent with the complaint.
Italy: CONSOB
CONSOB supervises the Italian securities market and publishes warnings about unauthorised financial websites.
Reports are relevant where a business may be:
- offering investment services without authorisation;
- marketing financial products unlawfully;
- operating a suspicious trading website;
- misusing the identity of a regulated firm;
- providing unauthorised crypto-asset services.
CONSOB maintains a dedicated investor-warning section and publishes measures concerning unauthorised financial and crypto websites.
An investor seeking compensation should distinguish a regulatory report to CONSOB from an individual claim or application to Italy’s financial dispute-resolution system.
What Complaints Do Regulators Commonly Accept?
European financial regulators and ombudsmen commonly receive complaints or reports involving:
Withdrawal and account problems
- withdrawal requests remaining pending;
- unexplained account restrictions;
- refusal to close an investment account;
- disputed liquidation of positions;
- blocked access following a withdrawal request.
Charges and payment demands
- fees not disclosed before investment;
- unexpected account charges;
- requests for a tax, insurance payment or security deposit;
- paid verification requirements;
- additional deposits allegedly required to release funds.
Investment conduct
- unsuitable investment advice;
- misleading risk descriptions;
- unauthorised discretionary trading;
- disputed orders;
- excessive or unexplained trading;
- failure to follow client instructions.
Authorisation concerns
- a company not appearing in the regulator’s register;
- use of another firm’s licence number;
- discrepancies between the registered company and website domain;
- a clone firm;
- unauthorised marketing into a European country.
Communications and advertising
- misleading return claims;
- high-pressure sales calls;
- failure to disclose risks;
- false statements about deposit protection;
- impersonation of a regulator, bank or investment company.
What Regulators Usually Cannot Do
A regulatory complaint does not guarantee that the authority will:
- recover transferred money;
- force an unauthorised offshore website to respond;
- provide personal legal representation;
- resolve a contractual dispute immediately;
- disclose whether an investigation has started;
- compensate the investor;
- reverse a crypto transaction.
Regulators use complaints as supervisory intelligence. Individual redress normally requires the company’s complaints procedure, an ombudsman, an ADR body, a compensation scheme or a court.
What Evidence Should Be Submitted?
A useful complaint should contain verifiable details rather than only a general statement that a platform “does not pay.”
Include:
- the company’s full name;
- every known domain and subdomain;
- the claimed licence number;
- account or client ID;
- dates and amounts of payments;
- payment destination details;
- bank account or cryptocurrency wallet addresses;
- withdrawal requests and their status;
- emails, chat records and telephone numbers;
- screenshots of the account;
- terms and conditions shown when the account was opened;
- details of additional payment demands;
- the company’s final response, if available.
Keep original copies. Do not edit screenshots in a way that removes dates, addresses or transaction references.
Which Regulator Should Receive the Complaint?
Use this order:
- Check the company’s claimed licence.
- Search the official register of the regulator named on the website.
- Confirm that the registered domain, legal entity and contact details match.
- Complain to the company’s official complaints department.
- Send a regulatory report to the authority supervising the company.
- Use the relevant ombudsman or FIN-NET member for an individual dispute.
- Contact police and your payment provider if fraud is suspected.
A company displaying a European licence number is not necessarily connected to the authorised firm. The regulator’s public register should show the correct legal entity and, where available, approved website details.
Frequently Asked Questions
Can I complain directly to ESMA about a broker?
Usually, no. Complaints against an ordinary investment firm should normally be sent to the national regulator responsible for that firm. ESMA primarily deals with European-level supervision and alleged breaches of EU law by national authorities.
Can a regulator return my investment?
A regulator may investigate misconduct or impose sanctions, but it is not normally a debt-collection or fund-recovery service. Individual compensation is more commonly pursued through an ombudsman, ADR body, compensation scheme or court.
Can I report an unlicensed broker?
Yes. National regulators such as the FCA, BaFin, CySEC, CNMV and CONSOB accept information about potentially unauthorised financial activity within their jurisdiction. The report should include the domain, contact details, payment information and advertising materials.
Should I complain to the regulator where I live?
Not always. The primary authority is often the regulator of the country where the company is authorised. A local regulator may still accept a report where the firm actively targeted residents without permission.
What if the company is located outside Europe?
A European authority may still record the report or issue a warning if the company targets European investors. Enforcement and compensation can be more difficult where the operator is offshore or cannot be identified.
Is FIN-NET a regulator?
No. FIN-NET is a network of national financial dispute-resolution organisations. It helps consumers pursue cross-border financial complaints outside court.
Final Assessment
The European complaints system works best when the investor chooses the correct channel.
A regulator receives information about possible breaches and unauthorised activity. An ombudsman examines individual disputes. Police investigate suspected crimes. A bank or payment provider may help trace or challenge a recent transfer.
Submitting the same short message to every authority is less effective than preparing one documented chronology and sending it to the body with the correct jurisdiction. Before filing, identify the legal company, verify the official register and separate the request for individual compensation from the report of wider regulatory misconduct.

Encountered a suspicious broker, scam website or online fraud? Tell us what happened and get a free consultation on possible recovery steps.