The European Securities and Markets Authority (ESMA) has made conflicts of interest at investment firms the subject of its 2026 Common Supervisory Action (CSA), pulling Contract-for-Difference (CFD) brokers into coordinated, on-site inspection across all 27 member states — while the chairman of ESMA’s own risk standing committee says retail proprietary trading, a near-identical retail leverage product, does not rank among the Authority’s immediate priorities.

The CSA 2026 runs throughout this year and targets staff compensation practices, digital platform design, and revenue incentives that may cut against client interests. In Cyprus — home to firms serving roughly 3.6 million of the 10.5 million retail clients trading across EU borders — the Cyprus Securities and Exchange Commission (CySEC) is executing it through on-site visits and desk-based reviews. On July 2, 2026, the same regulator’s chairman told Cyprus Mail that ESMA is “not currently engaged in any substantive discussions regarding retail prop trading.” This analysis sets out what the CSA actually requires, how four jurisdictions now diverge, and why the gap between the two products is the clearest arbitrage opening in EU retail trading.

Key facts

• CSA 2026 scope: conflicts of interest across EU-regulated investment firms, focused on compensation, digital platform design and revenue incentives, coordinated by ESMA across all national competent authorities, as reported by Finance Magnates.
• Cyprus exposure: CySEC-regulated firms serve approximately 3.6 million of the 10.5 million retail clients trading across EU borders — close to one-third of the cross-border retail market.
• Complaint trend: complaints against Cyprus-based brokers rose 46% in 2024.
• CySEC enforcement, 2025: €2.3 million in administrative fines and settlements, of which €1.3 million fell on Cyprus Investment Firms; €7.3 million in total sanctions across 2023–2025; more than 170 corrective measures; four licences suspended or revoked (CySEC enforcement summary via Cyprus Mail).
• Prop-trading attrition: roughly 100 prop firms ceased operations between early 2024 and late 2025, about 14% of the market (Cyprus Mail, July 2, 2026).
• Largest CFD penalty on record: A$300.2 million ordered by the Federal Court of Australia against Union Standard International Group and two former authorised representatives (ASIC media release 26-117MR).
• Retail leverage baseline: 30:1 on major currency pairs across the EU, UK and Australia; 20:1 on minors under the Australian Securities and Investments Commission (ASIC) regime.

Methodology and sources

This analysis is built on regulator statements and primary enforcement documents published between January 2026 and July 23, 2026, with the ASIC penalty judgment and CySEC’s 2025 enforcement summary as the anchor documents. Jurisdictional scope is the EU (ESMA and CySEC as the implementing national competent authority), the UK (Financial Conduct Authority), Australia (ASIC) and the US (Commodity Futures Trading Commission). Quotes are reproduced verbatim from published interviews and regulator communications and are attributed to named individuals with their titles at the time of speaking. Two caveats apply. First, ESMA has not published a standalone CSA 2026 methodology document naming CFD brokers as a discrete cohort; the CFD focus is evidenced through national implementation, principally CySEC’s. Second, CySEC’s 2025 enforcement figures are aggregate — the regulator did not name individual firms or itemise penalties, so firm-level comparison is not possible from the public record.

What the Common Supervisory Action actually requires

A Common Supervisory Action is not a rule. It is a coordinated supervisory exercise in which ESMA sets a common scope and methodology and every national competent authority applies it to its own regulated population in the same year, then feeds results back for an EU-wide report. That design matters: it produces comparable findings across 27 supervisors, and it converts a diffuse concern into a documented evidence base that later becomes rulemaking. The 2018 product-intervention measures that fixed retail leverage at 30:1 followed exactly this pattern.

The 2026 CSA on conflicts of interest asks three operational questions of every in-scope firm. First, whether staff compensation and bonus structures influence which products are recommended to retail clients — the inducement problem the Markets in Financial Instruments Directive (MiFID II) already addresses in principle but which supervisors have found difficult to evidence — the same policy logic that drove the EU’s payment-for-order-flow ban to its June 30 cliff. Second, whether digital platform design steers users toward unsuitable products, which extends the analysis from what a firm pays its salespeople to what its interface nudges clients to do. Third, how firms manage the structural tension between revenue targets and investor outcomes. For a CFD broker, all three questions land on the same commercial fact: the firm’s revenue rises with client trading volume and, on principal-model books, with client losses. That is not an allegation of misconduct. It is the conflict the CSA exists to document.

CySEC is applying this through both on-site inspections and desk-based reviews. The on-site element is the significant one. Desk-based review tests documentation; an on-site visit tests whether the documented policy matches the incentive structure actually operating on the sales floor. Firms whose conflicts-of-interest policy is a compliance artefact rather than a live control should expect that distinction to surface.

How four jurisdictions now compare

Jurisdiction / Regulator	Effective date	Scope	Key requirement	Penalty / sanction
EU (ESMA + national CAs, e.g. CySEC)	CSA runs through 2026	MiFID II investment firms, incl. CFD brokers	Conflicts of interest: compensation, platform design, revenue incentives; on-site and desk review	National regimes; CySEC imposed €2.3m in fines and settlements in 2025, four licences suspended or revoked
UK (FCA)	Permanent CFD rules in force	CFD providers to UK retail clients	30:1 leverage cap, negative balance protection, standardised risk warnings, financial promotions regime	Final Notice penalties and permission variation; unlimited civil fines
Australia (ASIC)	Judgment 2026; conduct 2018–2020	CFD issuers and authorised representatives	30:1 majors / 20:1 minors; prohibition on unconscionable conduct	A$300.2m total: A$156.7m Union Standard, A$114.1m Maxi EFX Global AU, A$29.4m BrightAU Capital
US (CFTC)	Long-standing	Retail forex; CFDs on equities effectively unavailable to retail	50:1 majors; registration as Retail Foreign Exchange Dealer required	Civil monetary penalties, disgorgement, registration revocation

Sources: ASIC media release 26-117MR; CySEC 2025 enforcement summary; FCA CFD rules; CFTC retail forex regime. Last updated: July 23, 2026.

The divergence is no longer primarily about leverage. The EU, UK and Australia have converged on the same 30:1 retail ceiling, negative balance protection and standardised risk warnings, so the headline consumer-protection numbers are close to identical. What now separates these regimes is supervisory posture. Australia has moved to litigated outcomes with penalties large enough to be existential, securing A$300.2 million in a single CFD matter. The EU is running a documentation-and-inspection exercise whose output is a report. The UK relies on its financial promotions and authorisation gateway to filter firms before they reach clients. A broker choosing where to base an EU-facing operation is therefore no longer arbitraging the leverage cap — it is arbitraging the probability and severity of enforcement, which is a much wider spread than 30:1 versus 20:1. The same fragmentation already shows up in execution obligations, where best-execution rules split the EU, UK and US despite a shared MiFID II inheritance.

“To the best of my knowledge, ESMA is not currently engaged in any substantive discussions regarding retail prop trading. While the topic may be monitored as part of broader market developments, it does not appear to rank among the Authority’s immediate priorities, given the relatively limited size of the sector.”

— Dr George Theocharides, Chairman, Cyprus Securities and Exchange Commission, and Chair of ESMA’s Risk Standing Committee (Cyprus Mail, July 2, 2026)

The significance of that statement is its source. Theocharides does not merely regulate the EU’s largest concentration of retail brokers; he chairs the ESMA committee whose job is to identify emerging risk. A year earlier he had described retail prop trading as being “on the radar.” ESMA declined to comment when approached. Our earlier analysis of how prop trading regulation is diverging as the CFTC acts and ESMA waits anticipated the direction; this is the first on-record confirmation of the reasoning behind the wait.

Enforcement context: what a litigated CFD case actually costs

The contrast with Australia is instructive because it is quantified. In ASIC’s case over Union Standard International Group Pty Ltd, the Federal Court ordered total penalties of A$300.2 million for systemic unconscionable conduct and related contraventions between 2018 and 2020. Justice Wigney apportioned A$156.7 million against Union Standard itself, A$114.1 million against Maxi EFX Global AU Pty Ltd, trading as EuropeFX, and A$29.4 million against BrightAU Capital Pty Ltd, trading as TradeFred — the latter two being former authorised representatives of Union Standard. Customers of EuropeFX and TradeFred lost more than A$83 million. ASIC published the outcome as media release 26-117MR, and ASIC Chair Sarah Court described the penalties as the highest ever secured in connection with an ASIC matter.

Two features make this precedent rather than an outlier. First, the authorised-representative structure did not insulate the principal: Union Standard bore the largest single penalty for conduct executed through firms operating under its licence. Any EU broker running an appointed-representative or tied-agent model should read that allocation carefully. Second, the cause of action was unconscionable conduct — a conduct standard, not a technical breach of a leverage cap. Every jurisdiction in the table above has an equivalent conduct standard available. Australia is simply the one currently using it at scale, with CFDs accounting for roughly a third of ASIC’s record A$830 million in financial-year 2026 penalties. Against that, CySEC’s €2.3 million across an entire year of enforcement, spread over more than 170 corrective measures and four licence actions, describes a supervisor correcting behaviour rather than punishing it.

What this means for brokers, CASPs, fund managers and compliance teams

For CFD brokers and their compliance functions, the CSA is a document-production event with a deadline attached to it. The three inspection themes map to artefacts that either exist or do not: a conflicts-of-interest register that names the revenue-versus-client tension explicitly rather than in the abstract; remuneration policy documentation showing how sales incentives are decoupled from client trading outcomes; and — the newest requirement — evidence that digital platform design has been assessed for steering effects. That last item is where most firms are weakest, because interface design has historically sat with product and growth teams, not compliance. Firms should expect to be asked who signed off the default leverage setting, the position-size presets and the notification cadence, and on what basis.

For introducing brokers and tied agents, the Union Standard apportionment is the operative warning: a licence lent to a third party transmits liability back to the principal. Distribution agreements written before 2024 should be re-papered to reflect that.

For Crypto-Asset Service Providers (CASPs) authorised under the Markets in Crypto-Assets Regulation (MiCA), the CSA’s conflicts methodology is a preview. Firms that came through the MiCA authorisation cliff now sit inside the same supervisory apparatus, and there is no reason the platform-design limb will stop at CFDs.

For prop firms, the operational read is uncomfortable in a different way. Being outside the priority list is not the same as being outside scope. It means the sector is presently supervised by consumer-protection and advertising law rather than by MiFID II — a weaker regime, but also an unstable one, since it can be changed without a rulemaking process.

“A truly effective Single Market must be built on a level playing field.”

— Dr George Theocharides, Chairman, Cyprus Securities and Exchange Commission (Finance Magnates, June 11, 2026)

ESMA President Verena Ross has put the same problem more bluntly, describing the EU as “a fragmented landscape with up to 27 different supervisory approaches.” Both were speaking in support of centralising supervision at EU level — a proposal Theocharides endorsed only in part, which is unsurprising given that centralisation would relocate authority over roughly a third of the EU’s cross-border retail brokers away from Nicosia.

What is next

Three things to watch. The CSA 2026 concludes with an EU-wide findings report; on the precedent of previous Common Supervisory Actions, that report is the document that determines whether conflicts of interest at CFD brokers becomes a rulemaking track or stays supervisory. Firms should assume anything they disclose during 2026 inspections may be aggregated into that evidence base.

Second, the centralisation debate. If supervision of cross-border retail firms moves toward ESMA, the enforcement-probability arbitrage described above narrows sharply, and Cyprus’s position as a broker hub changes materially. Theocharides’s partial endorsement is the tell that this is contested rather than settled.

Third, prop trading. The sector has already lost roughly 100 firms — about 14% of the market — between early 2024 and late 2025 without regulatory intervention, which is precisely the argument for not prioritising it: a market consolidating on its own generates fewer complaints. The risk to that reasoning is that attrition concentrates client money in fewer, larger unregulated firms. If a large prop firm fails disorderly in the EU, the “relatively limited size of the sector” justification does not survive it, and the response would arrive as emergency product intervention rather than considered rulemaking. The US has taken the opposite path, as our coverage of how regulators are closing in on retail prop trading sets out, and the transatlantic divergence widens with every month ESMA waits.

FAQ

What is a Common Supervisory Action?

It is a coordinated supervisory exercise, not a rule. ESMA sets a common scope and methodology, and each national competent authority applies it to its own regulated firms in the same year, reporting results back for an EU-wide analysis. The output is a findings report that frequently becomes the evidence base for later rulemaking — the route that produced the EU’s 30:1 retail leverage cap.

Does the CSA 2026 change any rules for CFD brokers?

No. It changes what supervisors look at and how systematically they look. The underlying obligations sit in MiFID II and existing national implementations. The practical change is that conflicts-of-interest documentation, remuneration structures and platform-design decisions will be examined on-site in a coordinated way across member states during 2026.

Why is retail prop trading treated differently from CFDs?

Because prop firms generally do not take client deposits for trading or execute client orders — participants pay an evaluation fee and trade the firm’s simulated capital. That structure sits outside MiFID II’s investment-services perimeter. Theocharides also cited “the relatively limited size of the sector” as a reason it does not rank among ESMA’s immediate priorities.

What was the Union Standard penalty for?

Systemic unconscionable conduct and related contraventions between 2018 and 2020. The Federal Court of Australia ordered A$300.2 million in total: A$156.7 million against Union Standard, A$114.1 million against Maxi EFX Global AU (EuropeFX) and A$29.4 million against BrightAU Capital (TradeFred). Customers of the two representatives lost more than A$83 million.

Does an authorised-representative structure limit a broker’s liability?

The Union Standard outcome suggests not. The principal licence holder received the single largest penalty for conduct carried out by firms operating under its licence. EU firms using tied agents or appointed representatives should review whether their distribution agreements and oversight arrangements would withstand the same analysis.

How much retail leverage is permitted across these jurisdictions?

The EU, UK and Australia all cap retail forex leverage at 30:1 on major currency pairs, with ASIC applying 20:1 to minors. The US CFTC permits 50:1 on majors but effectively closes retail access to equity CFDs. All three of the EU, UK and Australian regimes also mandate negative balance protection and standardised risk warnings.

This article is informational analysis only and does not constitute legal, regulatory, tax, or investment advice. Regulatory frameworks change frequently and interpretation depends on facts and circumstances; primary documents and official regulator guidance always supersede summaries. Firms should consult qualified legal counsel and their relevant supervisory authority before taking any action based on the analysis above.