Indicative quotes
SMI......SMI 5J...performanceSMI YTD...since JanuaryDay high......Day low......Volume SMI...sharesSMI......SMI 5J...performanceSMI YTD...since JanuaryDay high......Day low......Volume SMI...shares

Indicative quotes: SMI ..., change ..., SIX close on ... at 17:31 Zurich.

Independent Swiss market guides
Prop firms and CFD platforms: risk checklist
Analysis

Prop firms and CFD platforms: risk checklist

How prop trading firms and CFD platforms should map their model, marketing, client money, risk controls and investor-protection responsibilities.

Laurent Duplat
14 min read

Short answer: A prop firm, a CFD broker and a simulated trading programme are not automatically the same business. The right analysis depends on who provides the capital, whether customers deposit money, whether orders reach a market, which entity contracts with the customer, how the firm is marketed and which country rules apply. Before scaling acquisition, map the model, separate simulated performance from client investment and test every public claim for clarity.

Prop trading has become a popular search topic because it combines markets, evaluation programmes, technology and performance narratives. It also creates confusion. Some firms trade their own capital. Some sell an evaluation service. Some connect customers to a separate broker. Some offer simulated accounts, while others provide access to leveraged products that may fall within a regulated investment framework.

This article is a neutral due-diligence guide for prop firms, brokers, trading technology companies, insurers and partners considering work in this sector. It does not classify a particular business and it is not legal advice. A firm must analyse its own terms, customer journey, money flow, execution model and jurisdiction.

First question: what does the customer actually buy?

The public label is not enough. Write the customer journey from the first advertisement to the final outcome.

Model elementQuestions to answerWhy it matters
EvaluationIs the customer tested against rules or trading with real capital?A simulated assessment is different from a brokerage account
CapitalWhose money is at risk?Capital source affects the economic model and disclosures
OrdersDo customer orders reach a venue or broker?Execution claims must match the real workflow
DepositsCan customers fund an investment account?Client-money handling creates different questions from an evaluation
PayoutsWhat is paid, to whom and after which event?Marketing must not imply guaranteed income
CounterpartyWhich entity signs the agreement?The brand and the legal entity may differ

The point is not to make every firm look complicated. It is to make the explanation accurate. A customer should know whether the account is simulated, whether the firm is risking its own capital, whether the customer is paying for an assessment and whether any separate broker relationship exists.

Prop firm, broker and CFD platform are different labels

Proprietary trading firm

A proprietary trading firm generally uses its own capital and internal risk rules. But the label alone does not answer whether a particular customer programme is a service, a financial product, a simulated environment or part of a wider structure. The terms and actual operations matter.

Evaluation or challenge programme

An evaluation programme may give a customer access to a simulated account and test rule-following, risk limits and consistency. Its public pages should explain the simulation clearly. A performance screen must not be presented as proof that a customer has traded real market orders if that is not what happened.

CFD broker

A CFD broker offers a different product model. ESMA has described CFDs as complex leveraged products with significant investor-protection concerns for retail customers. Its materials explain why product intervention and risk warnings were introduced at European level. Read the ESMA FAQ on CFD measures.

Trading technology provider

A technology company may supply an evaluation dashboard, risk engine, trading terminal, market data or connectivity. Its role should be separated from the role of the firm that contracts with customers, accepts money or gives investment advice. A technology provider should not publish a claim that belongs to a broker or prop firm without approval.

The money-flow test

The fastest way to expose confusion is to draw the money flow. Start with the customer’s payment and follow it through the business.

Ask:

  • Does the customer pay for an evaluation or deposit investment capital?
  • Who receives the money?
  • Is the money held in a separate account or used as operating revenue?
  • Can the customer withdraw it?
  • Who pays a performance distribution?
  • Which entity bears trading losses?
  • Is a broker or payment provider involved?
  • Are refunds, disputes and chargebacks handled by the same entity?

The public explanation should follow this flow. If a customer pays for an evaluation but reads a page that suggests an investment account, the firm has a communication problem even if the internal team understands the distinction.

Risk disclosures must describe the real risk

Risk disclosure is not a grey box at the bottom of the website. It should answer the questions a reasonable customer has before taking action.

For a simulated programme, explain:

  • that the environment is simulated when it is simulated;
  • which market data and execution assumptions are used;
  • whether slippage, spreads or liquidity are modelled;
  • how the rules can end an evaluation;
  • what a performance result does and does not prove;
  • whether a payout is discretionary or rule-based;
  • how conflicts are handled;
  • which entity provides the service.

For a CFD platform, explain the product, leverage, margin, liquidation, counterparty, pricing, execution and client-category rules with the appropriate jurisdictional review. ESMA’s product-intervention material identifies leverage and retail-investor harm as central concerns in the CFD analysis. See the ESMA product-intervention background.

Do not copy a CFD risk warning into a simulated prop-firm page if the customer is not trading CFDs. Do not use a simulated result as a substitute for a product risk explanation.

Marketing claims that create avoidable risk

Trading businesses often grow through affiliates, social content, influencers and comparison pages. The most damaging errors are usually simple wording errors.

Avoid or qualify claims such as:

  • guaranteed income;
  • easy access to professional capital;
  • no-risk trading;
  • instant approval;
  • unlimited payouts;
  • proven profitability;
  • the same conditions as a live broker;
  • regulated, when the exact entity or activity has not been verified;
  • protected, when the relevant protection has not been defined.

Show the conditions next to the claim, not in a distant footer. If a result is simulated, say so close to the result. If a statement applies only to a country, show that country. If an affiliate relationship exists, disclose it in a way a reader can understand.

The firm should keep an approved-claims register. For each claim, record the owner, source, target audience, jurisdiction, date reviewed and required qualifier. The register should cover landing pages, emails, affiliate scripts, videos and social posts, not only the main website.

Risk management for prop programmes

The risk engine is part of the product. A firm should document how it handles:

  • maximum loss and daily loss rules;
  • open-position exposure;
  • correlated instruments;
  • news and market-event restrictions;
  • overnight and weekend risk;
  • data outages;
  • abnormal price prints;
  • platform latency;
  • copy trading or account mirroring;
  • abuse detection;
  • rule changes during an active evaluation.

The rulebook must be understandable before the customer starts. A firm should not rely on discretionary enforcement of an unclear rule after a customer reaches a payout stage. If a rule needs human interpretation, publish examples and create an appeals route.

Operational incidents should have a clear process. If the data feed fails, the firm should record the time, affected accounts, decision, communication and remedy. Deleting a customer’s history without an explanation destroys trust and makes later complaints harder to resolve.

Broker and liquidity-provider relationships

A prop firm that uses a broker, liquidity provider or execution technology should document the relationship accurately.

The due-diligence file should identify:

  • the contracting entity;
  • execution and pricing responsibilities;
  • market-data source;
  • client-money responsibilities, if any;
  • complaint route;
  • service levels;
  • incident notification;
  • termination and data portability;
  • marketing permissions;
  • country restrictions.

If a broker is named on a public page, confirm that the relationship and description are current. Do not imply that the broker guarantees a prop firm’s evaluation, payout or simulated result. Do not use a regulated partner’s logo as if it certifies the whole business model.

Insurance and risk-transfer questions

Prop firms, brokers and technology suppliers may need to discuss professional indemnity, cyber, directors’ and officers’ liability, crime, errors in execution, data breach and business interruption with an insurer or broker. The exact cover depends on the business model and policy wording.

The article does not recommend a policy or promise that a specific risk is insured. It gives an insurer a better starting point for underwriting questions:

  • Is the activity simulated or live?
  • Are retail customers involved?
  • Are customer funds accepted?
  • Which jurisdictions are served?
  • What controls prevent unauthorised trading?
  • How are payouts calculated?
  • What evidence is retained after an incident?
  • Which technology providers are critical?
  • How are affiliates monitored?

This is also a useful bridge to the future insurance-distribution cluster on Stock-Market.ch. The site should distinguish educational content from regulated advice and avoid presenting a lead form as an insurance recommendation.

DORA and third-party resilience for trading platforms

Trading firms increasingly depend on identity, cloud, market data, payment, execution and analytics providers. For entities in the European regulatory perimeter, DORA provides a framework for ICT risk, incident reporting, testing and third-party arrangements. The European Banking Authority’s DORA overview is a primary starting point.

A Swiss or international prop firm should not claim that DORA automatically applies to it. It should instead identify the entity and services in scope, then use the framework as an input to its resilience review where appropriate.

At a practical level, the technology file should contain:

  • critical service inventory;
  • recovery priorities;
  • backup and restore evidence;
  • incident contacts;
  • vendor concentration review;
  • access-control review;
  • change-management history;
  • customer-communication templates;
  • post-incident lessons.

A neutral due-diligence checklist for partners

Before a bank, broker, insurer, payment provider or technology company partners with a prop firm or trading platform, it should ask:

  1. What exactly does the customer buy?
  2. Is the account simulated or live?
  3. Who supplies and controls capital?
  4. Does any entity receive client investment money?
  5. Which entity signs the customer contract?
  6. Which countries and customer categories are accepted?
  7. How are rules and payouts communicated?
  8. What happens during a platform or data outage?
  9. Who investigates complaints and appeals?
  10. How are affiliates and influencers controlled?
  11. Which legal and regulatory analysis supports the claims?
  12. Which insurance and cyber controls are in place?

If the partner cannot answer these questions, a commercial integration should pause until the model and public communication are clearer.

A model-change process for growing firms

A prop firm or trading platform can move into a different risk category without changing its logo. Adding a new country, retail product, broker connection, payment route or marketing partner may change the underlying analysis. Create a model-change form before the commercial team announces the feature.

The form should identify:

  • the new service and customer type;
  • the new entity or partner involved;
  • whether real money, simulated money or customer assets are involved;
  • whether an order reaches a market or remains simulated;
  • the countries and languages affected;
  • the new claims proposed for public communication;
  • the technology and incident dependencies;
  • the compliance and legal review owner;
  • the launch tests and rollback plan.

Do not let a feature launch begin with a social post. The public post should be the last step after the model, terms, risk explanation and customer support route are ready.

Evidence for payouts and performance claims

Performance language is especially sensitive because a screenshot can look more definitive than it is. A responsible firm should retain the source record behind each public performance statement.

For a simulated result, keep:

  • the account type;
  • the period observed;
  • the rules applied;
  • the data and execution assumptions;
  • the fact that the result is simulated;
  • the selection method if a case is presented;
  • the limitations and exclusions;
  • the approval record for the wording.

Avoid selecting only exceptional outcomes while presenting them as typical. If the firm publishes a case, explain what the case demonstrates and what it cannot prove. A payout example does not prove that every customer will achieve the same result. A profitable month does not prove that the model is suitable for every trader.

Affiliate and influencer controls

Affiliate acquisition can create a gap between the approved website and the promise a prospect actually sees. The firm should maintain a list of partners, approved assets, target countries, prohibited wording, review dates and takedown contacts.

Monitor the pages and videos that produce the most traffic, not just the pages that the firm owns. A partner who says “guaranteed capital” or “no risk” can create a serious customer-expectation problem even if the firm’s own landing page is careful.

The control should include:

  • pre-approval of claims;
  • country and audience restrictions;
  • a disclosure of the commercial relationship;
  • a complaint route for affiliate-generated customers;
  • periodic sample reviews;
  • a rapid correction and removal process;
  • records of warnings and repeated breaches.

This is also relevant to insurers and banks considering a partnership. They need to understand how a trading platform controls the entire acquisition chain, not only its own homepage.

Operational resilience on a trading day

Trading systems can fail at the moment customers are most active. Write a playbook for a market-data interruption, execution outage, authentication failure, payment delay and risk-engine error.

The playbook should specify:

  1. who can declare an incident;
  2. which accounts or services are affected;
  3. what trading actions are paused;
  4. how evidence is preserved;
  5. how customers are informed;
  6. how losses or rule breaches are reviewed;
  7. who approves a remedy;
  8. how the post-incident report is shared with partners.

For an institution in the European DORA perimeter, ICT risk and third-party arrangements need a formal review. The EBA’s DORA material is a primary reference. Other firms should still consider the same practical questions even when they need a separate jurisdictional analysis.

Questions a bank, broker or insurer will ask

A partner will usually want to understand more than the number of users. Be ready to explain:

  • how many customer categories exist;
  • which countries are accepted;
  • whether customers hold assets or pay for a service;
  • which entity handles complaints;
  • how rule changes are communicated;
  • how a suspected abuse case is investigated;
  • how personal data is shared;
  • how a vendor outage affects customers;
  • which public claims are approved;
  • what evidence supports performance statements.

The strongest answer is a short, current responsibility matrix. The weakest answer is a collection of brand claims with no entity, owner or source.

A safer content structure for prop firms

The website can be organised around reader questions:

What is the programme? Explain the evaluation or trading service in plain language.

Who is the counterparty? Identify the entity and relationship.

Is it simulated or live? State the answer before showing performance or rules.

What can end the account? Explain loss, conduct, technical and eligibility rules.

What happens during an incident? Give the communication and review route.

What is not promised? Avoid converting a risk disclosure into a vague legal footer.

This structure can support search visibility while helping a bank, broker or insurer assess the model. It also reduces the temptation to build an acquisition page around a single exceptional result.

Internal audit sample

Once a quarter, select a sample of customer journeys from advertisement to payout or closure. Compare the advertisement, landing page, terms, dashboard, support messages and final decision. Look for contradictions:

  • a simulated account described as live;
  • a restricted country shown in a generic advertisement;
  • a rule visible only after payment;
  • a payout condition absent from the comparison page;
  • a broker relationship implied but not explained;
  • an incident handled differently from the published policy.

Record the finding, risk, owner, correction and completion evidence. This audit is valuable content for a partner conversation because it demonstrates that the firm tests the real customer experience, not only its internal policy.

Frequently asked questions

Is a prop firm automatically a broker?

No. A prop firm may trade its own capital, operate an evaluation programme or use a separate broker. The answer depends on the actual customer relationship, money flow and execution model.

Are simulated results the same as live trading results?

No. Simulation assumptions, data, liquidity, slippage and rules can differ from live execution. A public page should explain what the result represents and should not present it as proof of live performance.

Do CFD rules apply to every prop firm?

Not automatically. A firm must analyse its own activity and jurisdiction. CFD-specific investor-protection rules should not be copied onto a different model without checking whether the product and customer relationship match.

What should an insurer ask a prop firm?

The insurer should ask about customer funds, jurisdictions, technology dependence, marketing controls, payout rules, complaints, incident response and the distinction between simulated and live trading.

Can a broker partnership make a prop firm regulated?

No. A relationship with a regulated broker does not automatically regulate the entire prop-firm business. Each entity and activity must be described separately.

Conclusion

Prop firms and CFD platforms can explain their models clearly if they start with the customer journey and money flow. The most trustworthy firms separate simulated performance from live execution, describe the legal entity, state the real risks, control affiliate marketing and maintain evidence for operational decisions. That clarity makes the business easier for customers, brokers, banks, insurers and technology partners to assess.

For the broader context, read the Swiss FinTech market-entry checklist, the digital onboarding checklist and the financial platforms pillar.