About ESMA

A clearer way to read financial company information.

ESMA centralises the key information a user needs before engaging with a financial company. The register brings together identity details, regulatory status, declared activities, authorisations, warnings and available history in a structured format.

The purpose is to make checks faster and more reliable: users can search a company name, registration number or domain, open the profile, review the precise scope of permissions and keep a downloadable record when needed.

The interface is designed for careful reading. It separates what is known, what is limited, what is unauthorised and what requires further review, so a profile can be understood without relying on vague labels or marketing claims.

What ESMA helps users check

A financial company can use several names, websites and commercial descriptions. ESMA is organised to help users compare those claims with the information recorded in the register.

General information

Company records group identification data, registration details, country, address, website and regulator in a single profile.

Regulatory status

The status area summarises whether the company is authorised, limited, unauthorised or missing sufficient information.

Authorisations

Authorisations are listed with the activity, jurisdiction, current status and relevant start or end dates where available.

Warnings and history

Warning notices and update history help users understand risk signals and changes made to the company record over time.

Status guidance

Understanding the status shown

An overall status provides a first indication, but it must always be read together with the activity, territory, dates and warnings recorded in the profile.

Authorised

The register records an active permission. Users must still confirm that the exact service and territory appear in the authorisation details.

Restricted authorisation

The firm may operate only within defined limits. Restrictions, permitted activities and relevant dates should be reviewed before proceeding.

Not authorised

The register does not show permission for the activity concerned. Do not assume that company registration alone permits regulated financial services.

Insufficient information

The available record cannot support a clear conclusion. Additional verification should be completed before sharing information or transferring funds.

Due diligence

A practical verification process

A reliable check compares several details rather than relying on a logo, a familiar name or a single status label. Complete these steps before engaging with a firm.

Match the legal identity

Compare the legal name, trading name and registration number with contracts, emails and the website used by the firm.

Confirm contact details

Use the address and website recorded in the profile. A familiar company name paired with different contact details may indicate a clone firm.

Check the exact activity

Confirm that the service being offered is listed as active for the relevant jurisdiction and has not expired or been restricted.

Review warnings and history

Read active notices and recent changes. A warning can relate to a website, trading name or activity rather than every part of a company record.

When something looks wrong

Act early when details do not match

Unexpected contact, guaranteed returns, copied company details, remote-access requests and payments to personal accounts are important warning signs. A polished website or professional document does not prove that a firm is authorised.

Stop the conversation if you are pressured to act immediately.
Do not send money, identity documents, card details or online banking credentials.
Save emails, messages, agreements, payment instructions and screenshots.
Contact your bank promptly if a payment has already been made.
Use the reporting form to provide the firm name, website and circumstances.

How a record moves through the register

Structured records and controlled updates make company information easier to review, compare and trace over time.

01
Record creation
A company profile is created around a unique registration reference and its core identity information.
02
Structured review
Status, activities, jurisdictions, dates and warnings are organised into separate fields for consistent comparison.
03
Controlled updates
Authorised managers can amend records, while material actions are retained in the change history.
04
Public consultation
Users can search, compare, review and export the available information for their own verification records.

Transparency Index

The Transparency Index measures the completeness of the information available in a profile. It considers populated identity fields, the declared status, documented authorisations, directors and active warnings.

The index is an information-quality indicator only. It is not a credit score, a regulatory decision, an endorsement, an investment rating or a recommendation to use a company. A high score does not remove the need to verify the exact service offered.

Users should treat missing fields as a reason to carry out additional checks, not as proof of wrongdoing. The profile and its underlying sections remain the primary source for understanding each record.

Verification checklist

Four checks before relying on a firm

The register encourages users to verify identity, permissions and risk signals before responding to a financial offer, signing documents or transferring funds.

01
Legal identity, trading name and registration number
02
Country, address, website and competent authority
03
Regulatory status and scope of permitted activities
04
Warnings, restrictions, historic changes and profile completeness

Clear status labels

Each company profile uses a visible status label so users can quickly distinguish authorised, limited, unauthorised and incomplete records.

Activity-by-activity reading

Authorisation is presented by activity and territory because a company may be permitted for one service while restricted for another.

Warning visibility

Warnings are placed close to the company record and can also be searched separately by name, jurisdiction, activity type and publication date.

Traceable updates

Administrative changes are recorded so the register keeps a clear operational history for statuses, authorisations and warnings.

How information should be read

A profile is a starting point for due diligence. Users should compare the legal name, registration number and website with the company that contacted them, then review whether the exact activity being offered appears in the authorisation table.

A company may appear in the register while still being restricted for a specific activity. The authorisation table therefore matters as much as the overall status label, especially for services such as investment advice, portfolio management, order execution or crypto-asset activities.

If a profile contains a warning, incomplete information or a mismatch with the contact details used by a person or website, users should stop and use the reporting form before taking further action.