Most broker due diligence focuses on regulation, spreads and platform quality. All important, and covered in our broker due diligence guide. But there is a second layer that gets far less attention: how safe your account is once it is open, and how reliably you can get your money out. This article is a practical checklist for retail traders. It is general information, not a recommendation of any broker.
Part 1: Protect the login
Trading accounts are a target because they hold money and can be emptied quickly. Basic hygiene prevents most problems.
- Unique password. Never reuse a password from another site. Use a password manager and a long random passphrase.
- Two-factor authentication. Enable it on the broker portal and on your email. An authenticator app is generally safer than SMS, since phone numbers can be hijacked through SIM-swap fraud.
- Secure your email first. Email is the recovery path for almost everything. If an attacker controls it, they can reset your broker password.
- Beware of phishing. Fake broker login pages and "urgent security" messages are common. Type the address yourself or use a bookmark; do not click links in unexpected messages.
- Separate trading and investor passwords. On MetaTrader-style platforms, the investor (read-only) password allows viewing without trading. Share that one if you ever need to show your account to a mentor or analyst, never the main password.
Part 2: Understand how your money is held
Ask and verify, in writing where possible, whether client funds are held in segregated accounts at a separate bank, which entity holds your contract, and what investor protection or compensation scheme applies in your jurisdiction. Rules differ widely. In Canada, brokers and dealers are regulated provincially and through national self-regulatory organisations, and protection arrangements vary by product, so check the specific entity and what it actually covers rather than relying on marketing phrases such as "your funds are safe." Be careful with entities registered offshore that market to Canadians; the protections you assume may not apply.
Part 3: Test withdrawals early
The single most informative test of a broker is how it treats withdrawals. Do this before you have significant money on the platform:
- Deposit a small amount.
- Request a withdrawal back to the original source after a few small trades.
- Record how long it takes, what fees apply, what documents are requested and whether the amounts match.
Note the stated processing times, any minimum withdrawal amounts and whether the broker requires withdrawals to go back to the funding method used. Delays, repeated document requests or unexplained fees are warning signs. Searching for complaint patterns about withdrawals, in several independent places, is also useful, while remembering that reviews can be manipulated in both directions.
Part 4: Read the account terms that matter
Before depositing, read these sections of the client agreement:
- Negative balance policy. Does the broker absorb losses beyond your deposit? See margin calls and stop-outs.
- Execution policy. How are orders routed, and what is the policy on requotes and slippage? Compare with market maker versus ECN.
- Inactivity and dormant account fees. Some brokers charge monthly after a period without trading.
- Bonuses. Deposit bonuses often carry trading volume conditions that restrict withdrawals. Many experienced traders refuse them for that reason.
- Dispute process. Which ombudsman or regulator handles complaints?
Part 5: Limit your exposure
Even a well-regulated broker can fail or freeze accounts. Practical steps:
- Keep only the capital you need to trade as margin on the platform. Withdraw profits on a regular schedule instead of letting them accumulate.
- Do not put your whole risk capital with one firm if the amount is large.
- Keep records: statements, trade confirmations, deposit and withdrawal receipts. They matter for taxes too; see Canadian forex traders tax basics.
Part 6: Recognise common red flags
- Pressure to deposit more, or calls from "account managers" you never requested.
- Promises of guaranteed or unusually high returns.
- Requests for remote access to your computer.
- Signal sellers or "managed account" offers that ask you to move money to a third party.
- A regulator register entry that does not match the company name, address or website.
An illustrative scenario
A trader opens an account at a broker advertising a generous deposit bonus. After a profitable month she tries to withdraw and discovers the bonus terms require a very large traded volume before any withdrawal is allowed. The bonus clause was in the agreement, but she never read it. Had she tested a small withdrawal first and read the terms, the problem would have shown up while the stakes were still low. The case is illustrative, not a real account.
A one-page checklist
- Password manager and unique password set.
- Two-factor enabled on broker and email.
- Regulator entry verified independently.
- Segregation and compensation terms read.
- Small deposit and test withdrawal completed.
- Bonus, inactivity and negative balance terms understood.
- Regular withdrawal schedule set.
Takeaway
Account security and withdrawal reliability are part of risk management, not an afterthought. A few hours of checks before funding can prevent losses that no trading skill can recover. This article is educational only and does not endorse any broker.