France’s AMF Blacklist Exposes Brand Risk for Forex Operators

TL;DR: France’s combined AMF/ACPR blacklists hit 3,522 entries and are tracking toward a record 483 additions in 2026. Crypto clones now outpace forex fakes, and the AMF’s own name leads all impersonation counts at 190 entries. For licensed brokers and operators in this market, brand protection is now a line item, not a legal afterthought.

A Blacklist Becomes a Data Record

The Autorité des Marchés Financiers (AMF) and the Autorité de Contrôle Prudentiel et de Résolution (ACPR) jointly maintain six warning lists covering unauthorized investment websites and cloned firms operating in France. As of September 11, 2026, those six lists carry a combined 3,522 entries, each timestamped from the date of addition. That timestamp history goes back to 2010, which means the combined file is now one of the longest running enforcement data sets in European retail finance.

Between January 1 and September 11, 2026, the lists absorbed 336 new entries. Annualized, that projects to roughly 483 additions for the full year, ahead of 2024’s 434, which was itself the busiest year on record. The pace signals that enforcement volume is rising, but the composition matters more than the headline count. Nine out of ten new entries fall into categories that were not regulatory priorities a decade ago. The problem is shifting faster than most compliance teams are tracking it.

For operators working on forex client acquisition in France or passporting in from another EU jurisdiction, the practical read is this: the blacklist is not primarily a record of competitors being shut down. It is increasingly a record of your own brand being weaponized.

Crypto Overtook Forex and Has Not Looked Back

The composition shift inside the blacklist is one of the clearest signals in the data. Crypto entries, covering both spot and derivatives, overtook forex additions in 2024 and have maintained the lead since. Over the past three years, crypto names hit 108, 100, and 97 respectively. Forex additions in the same period: 51, 57, and 51. The forex list has been essentially flat for four years.

Compare that with binary options, where the trajectory ran the other direction. The binary options file holds 341 entries and has not received a single new addition since July 6, 2020. That date sits four years after France banned electronic advertising for the product and after ESMA capped retail leverage across the EU. The enforcement record simply stopped. The product was effectively killed by a combination of advertising prohibition and leverage restriction.

Crypto is now occupying that enforcement space. The EU’s MiCA regime has cut the number of authorized crypto firms by roughly 80% from pre-regulation counts, and the AMF had authorized just 35 providers as of September 10. The blacklist shows what is happening outside that authorized gate: unauthorized operators are flooding in to serve demand that legitimate platforms are restricted from reaching through standard digital channels. Operators managing crypto acquisition campaigns in France need to treat blacklist monitoring as a compliance function, not an optional brand exercise.

The Most Impersonated Brand Is the Regulator Itself

Of the 1,741 entries in the largest of the six lists, 1,566 are flagged as impersonation of an authorized firm. The single most impersonated name is not a broker or an asset manager. It is the AMF itself, appearing 190 times, with 65 entries added in 2025 and 40 more in the first nine months of 2026 alone. Fake regulator emails, cloned domains, and recovery-room operators using official letterhead collectively generate more blacklist entries than any commercial brand.

Commercial brands follow in a ranking that mirrors French acquisition spend. FM Intelligence counted 20 addresses impersonating Amundi, 10 for DEGIRO, seven for Trade Republic, six for Scalable Capital, and four for Revolut. XTB, Binance, Kraken, and SwissBorg each appear one to three times. The pattern is direct: the brands that spent the most on French market acquisition are the brands that show up most in the impersonation file. In a market where 1.6 million residents opened their first investment account in the three years to end-2025, the demand is real and the fraud infrastructure has followed it.

The attack surface has also shifted channel. Email addresses made up 5% of blacklist entries in 2020. By 2022 that share had risen to 50%. In 2026 it sits at 30%, meaning regulators are increasingly flagging inboxes rather than websites. A cloned domain is now less common than a cloned sender identity.

What This Means for Forex and iGaming Operators

France’s advertising restrictions on leveraged products are among the most restrictive in the EU. The Sapin II law bars electronic promotional communications for any contract where the client can lose more than the initial outlay. The consumer code extends that prohibition to sponsorship, with fines reaching EUR 100,000 (approximately $113,000) per violation. The leveraged trading pool in France has dropped below 30,000 active traders.

The structural problem this creates for licensed operators: you cannot run standard search or social acquisition campaigns while an unlicensed clone of your brand can. Both the AMF and ACPR direct savers to the REGAFI register ahead of the blacklists, and both agencies note explicitly that the lists are not exhaustive. That means the regulatory infrastructure is reactive, not predictive.

For any firm entering France, brand-monitoring costs now belong in the compliance budget alongside legal fees and passporting costs. A full channel and brand audit before market entry is not overhead, it is risk management. The same dynamic applies to iGaming operators with French licensing, where player acquisition restrictions and brand cloning risks run on a parallel track. Firms managing iGaming player acquisition in restricted EU markets face structurally identical impersonation exposure.

Operators relying on paid media management in the French market need to build brand term monitoring into their media strategy from day one. Cloned brands do not just damage trust, they consume search intent that a licensed operator cannot bid on under Sapin II, making every impersonation entry a direct traffic loss.

The Binary Options Lesson and What Comes Next

The binary options file is the cleanest natural experiment in the data set. France banned advertising in 2016. ESMA capped leverage shortly after. The blacklist stopped receiving new entries in July 2020. The product did not disappear, but the enforcement footprint of unauthorized binary options sites essentially reached zero. The demand migrated to crypto.

MiCA is running a version of the same playbook now. Authorized provider counts are down 80% across the EU. Blacklist entries for crypto unauthorized sites are running at roughly double the forex rate. If the MiCA regime tightens further, as ESMA has indicated it may for certain derivative structures, the crypto enforcement pattern could follow the binary options curve: a surge in blacklist additions followed by a plateau once demand migrates to whatever product structure the next gap in regulation allows.

For operators doing scenario planning, that means watching the AMF blacklist composition quarterly, not just the headline entry count. The category breakdown tells you where the next acquisition battle will be fought. Firms using precision audience targeting in restricted markets already know that compliance constraints and audience behavior are inseparable. The blacklist data confirms that the brands most visible in a market are also the most impersonated, which makes acquisition spend and brand protection spend two sides of the same line item.

Operators entering France or expanding EU coverage should also consider how AI-powered lead qualification tools can help triage inbound traffic and flag impersonation-driven inquiries before they enter the sales funnel, since cloned domains and spoofed inboxes increasingly route confused prospects into competitor pipelines.

Originally reported by Finance Magnates Forex, September 2026.