Is Royal CM Limited a Scam?

At FXCanary, we judge a broker’s safety not by its marketing claims but by the hard facts we can independently verify. For Royal CM Limited, the known facts are starkly minimal: a single regulatory licence from Vanuatu, a country of incorporation in the same offshore jurisdiction, and a corporate birthdate of late December 2022. These building blocks form the foundation of our 40/100 Guarded Scam Risk Score — a rating that signals serious caution.

Our methodology assigns weight to the quality and enforceability of regulation, the transparency of corporate structure, the length of the track record, and the degree of independent user feedback. Royal CM Limited has an as-yet-unproven track record and is regulated solely by a body that offers only light-touch oversight. That combination is enough to keep our analysts guarded.

To be clear: a Guarded score does not mean we label the broker a scam. It means the safety net that protects traders is thin, and the evidence available today leaves too many questions unanswered. In the sections that follow, we unpack what this means for anyone considering depositing money with Royal CM Limited.

The Vanuatu Financial Services Commission (VFSC) has issued a Financial Dealers Licence to Royal CM Limited. A VFSC licence allows a company to deal in securities and offer forex and CFD brokerage services, but it comes with a regulatory philosophy closer to registration than to substantive ongoing supervision.

In our review, we cross-checked the licence against the public register and confirmed it is Active. However, VFSC does not impose the stringent capital adequacy, transaction reporting, or conduct-of-business rules that top-tier regulators require. The licence is a stamp that the company is incorporated and has met initial paperwork requirements — it is not a seal of safety.

For traders, this means the broker operates with far less external scrutiny than one regulated by a body like the FCA, ASIC or CySEC. The VFSC’s enforcement track record is limited, and recourse for wronged clients is difficult to obtain. Our research found no dedicated investor compensation fund in Vanuatu, so if the broker becomes insolvent, client funds may simply vanish.

The website oneroyal.com presents OneRoyal as a globally regulated brand with licences from ASIC (Australia), CySEC (Cyprus), VFSC (Vanuatu), and the FSA (St. Vincent and the Grenadines). But these licences are held by different legal entities — not by Royal CM Limited. The Australian entity is Royal Financial Trading Pty Ltd, the Cypriot entity is Royal Financial Trading (Cy) Ltd, and the SVG entity is a separate international business company.

Royal CM Limited is the VFSC-regulated vehicle, incorporated in Vanuatu in 2022. When a client opens an account through oneroyal.com, the terms and conditions will specify which entity is the counterparty. Notably, the protections of an ASIC or CySEC licence — including EU-style negative balance protection and access to the Financial Ombudsman or Investor Compensation Fund — do not automatically extend to clients of the Vanuatu entity.

This multi‑entity structure is common in the industry, but it creates a safety paradox: the headline regulatory badge may belong to a completely different company, while your own trading account sits under a lighter regulatory regime. In FXCanary’s assessment, this is a critical detail that every prospective client must verify.

Royal CM Limited, under its VFSC licence, is required to keep client funds segregated from its own operational capital. Our review confirmed that the broker’s website claims segregated client funds are held in top-tier banks. While segregation is an important baseline, it is not foolproof — especially when oversight is remote. Without robust audit requirements, we cannot independently confirm that the segregation is properly maintained at all times.

Compensation schemes, like those in the UK or Cyprus, simply do not exist in Vanuatu. If Royal CM Limited faces financial difficulties, there is no scheme to reimburse lost deposits. The risk shifts entirely onto the client.

Negative balance protection is another area where regulation matters. The broker’s Classic Account page lists negative balance protection as a feature, but this is a contractual promise, not a regulatory requirement. In practice, enforcement depends on the broker’s solvency and willingness to honour that term. Without a strong regulatory backstop, a black-swan market event could leave traders with debts if the firm cannot absorb the loss.

Vanuatu has become a popular domicile for forex brokers because of its low-cost, fast-track licensing and minimal ongoing obligations. For a trader, that means the regulator is often too under-resourced or geographically distant to intervene effectively in disputes. The VFSC does not have a strong history of disciplining licensees or compensating consumers.

This “offshore gap” means that even well-intentioned brokers operate with far fewer external checks. Our checks of industry databases reveal that unresolved client complaints about the wider OneRoyal group do exist, though they mainly concern entities other than Royal CM Limited. Nevertheless, the same management and operational model underpin the Vanuatu arm. Weak governance in one jurisdiction can bleed into another.

Traders should also note that Vanuatu’s legal system offers limited and expensive avenues for civil recovery. Pursuing a claim across borders against a small island-state company is impractical for most retail clients. The Guarded score reflects this combination of thin regulation and difficult legal recourse.

Royal CM Limited trades under the OneRoyal brand, which is well-known across multiple jurisdictions. This brand strength, however, attracts clone firms — scammers that pose as the legitimate broker to steal deposits. We have seen no independent evidence that Royal CM Limited itself is a clone, but the risk is that fraudsters may set up look-alike websites or use similar names.

Traders must verify they are on the genuine oneroyal.com domain and check the entity in the account opening documents. For Vanuatu clients, the relevant entity is Royal CM Limited. If another entity name appears, or if you are directed to a different domain, you may be dealing with a clone.

In our safety analysis, we always recommend verifying the domain’s registration date and using the regulator’s online register to match the company name and licence number. For Royal CM Limited, the VFSC public register is the only authoritative source — and we confirmed the licence is active. But with such a light regulatory footprint, the onus is almost entirely on the trader to avoid impersonation scams.

If you decide to proceed with Royal CM Limited despite the Guarded score, there are concrete steps to limit your exposure. First, open a demo account and interact with the support team before depositing a cent. Assess whether the service feels professional and transparent. Second, start with the smallest possible deposit that allows you to test the withdrawal process — many broker problems surface when clients try to take money out.

Third, download all account documentation, including the client agreement and the terms that specify which entity is your counterparty. File these away; they will be critical if a dispute arises. Fourth, never deposit more than you can afford to lose entirely. The absence of a compensation scheme means risk management is entirely in your hands.

Finally, monitor the broker’s behaviour over time. Look for red flags such as changes in ownership, frequent licence changes, or an increase in public complaints. In an unsecured regulatory environment, early warning signs are often the only protection traders have.

Royal CM Limited’s regulatory profile is, in a word, sparse. A single VFSC licence from a jurisdiction with limited oversight, a corporate shelf life of just over a year, and a parent group that funnels clients into various regulatory tiers — these facts place the burden squarely on the trader. Our 40/100 Guarded score is not an allegation of fraud, but it is a warning that the firm’s safety features are largely unproven and that recourse is scarce.

We cannot point to a decade of audited accounts or a local ombudsman because they do not exist for this entity. The OneRoyal brand’s longer history rests on other companies; Royal CM Limited itself is a young, lightly-regulated operation. For risk‑averse traders, the safer path is to choose a broker overseen by a top‑tier regulator with a compensation fund.

For those who trade with Royal CM Limited nonetheless, vigilance and minimal exposure are essential. In the world of forex, regulation is the seatbelt — and Vanuatu’s belt is frayed. Until Royal CM Limited builds a track record of accountability and transparency, our Guarded assessment stands.