Chapter 5

Regulatory Exposure

eToro runs a leveraged-derivatives and crypto business across roughly ten regulators, and both product families are under active scrutiny: an ongoing ASIC suit, a settled SEC crypto matter, CySEC inquiries, and CFD pull-outs in Spain and Belgium. Yet the financial damage booked to date is small — a $10.3 million legal provision against $216 million of net income and $1.28 billion of net cash. The live question is not a fine but whether a forced product or geography restriction shrinks the Net Contribution base.

A licensed business, in every sense

eToro is not lightly regulated; it is heavily and redundantly regulated. The group operates fifteen significant subsidiaries incorporated across the British Virgin Islands, Cyprus, Israel, the United Kingdom, the United States, Australia, Malta, Gibraltar, the UAE, the Seychelles and Singapore, each answering to its own supervisor [1]. Management describes the resulting landscape as "extensive, complex, overlapping and constantly changing," and notes plainly that regulators have imposed restrictions on its licenses before and could "impos[e] a total ban on certain activities, including … a ban on cryptoasset transactions, or contracts for difference, as has occurred in certain jurisdictions in the past" [2].

Two product families draw that scrutiny. The first is complex leveraged products — contracts for difference (CFDs) — on which the EEA, the U.K. and Australia require target-market, appropriateness and suitability assessments and have "imposed prohibitions or restrictions." The second is cryptoassets, now governed in the EEA by MiCA (in full effect since December 30, 2024), by a new U.K. regime, by an ASIC crypto-licensing proposal, and in the U.S. by the GENIUS Act (stablecoins, signed July 18, 2025) and the pending CLARITY Act, which "could require [eToro] to become separately regulated by the CFTC" [3].

Those two families are not a side pocket. In 2025, crypto was 29% of eToro's trading commissions, and commodities and currencies — offered to most retail users only as CFDs — were another 25%; equities, part of which are also traded as CFDs, made up the remaining 46% [4].

Source: FY2025 20-F, Composition of Commission from Trading Activities by Asset Class [5]. Commodities and currencies are offered to most retail users as CFDs; crypto is predominantly traded as the underlying asset.

The leverage lever reaches beyond trading spreads. eToro's Net Interest Contribution — $217 million, the largest single component of Net Contribution after equities/commodities/currencies [6] — is generated in part "by charging a fee on margin positions that remain open overnight," i.e. directly on leveraged CFD balances, and in part on interest earned on segregated user cash [7]. A CFD restriction would therefore touch two of the five Net Contribution components, not one — including part of the base a durable-earnings read leans on (Financials and Estimates).

What has actually come due

The scrutiny is not hypothetical; several matters have already resolved or are live. The record so far is one settled U.S. crypto action, one contested Australian CFD suit, a European inquiry, and two voluntary CFD withdrawals.

Sources: FY2025 20-F, Note 18 Commitments and Contingent Liabilities [8]; Risk Factors [9]; ASIC Proceedings [10].

The U.S. matter is the cleanest to read because it is closed. On September 12, 2024, eToro USA LLC settled with the SEC, paid a $1.5 million civil penalty, and limited its U.S. crypto offering to spot Bitcoin, Bitcoin Cash and Ether; management states it "timely paid the penalty and has fully complied," and has "since expanded its cryptoassets offering" without breaching the undertaking [11]. That arc — restricted at the tightest point of the 2024 U.S. enforcement posture, then widened again under a friendlier 2025 regime — is a fair illustration that crypto-regulatory risk runs in both directions.

The Australian matter is the open one. ASIC commenced civil proceedings in August 2023 against eToro AUS Capital Ltd. over its target-market determination for CFDs; the regulator is "seeking … pecuniary penalties as the court determines to be appropriate," and eToro flags that an adverse outcome could invite a class action and give other regulators — CySEC among them — a template to rely on [12]. eToro has already restricted CFDs in Spain and Belgium in response to local regulator positions [13] — evidence that product withdrawals happen, and that the business has absorbed them without visible disruption.

The cost booked is immaterial; the sizing is asymmetric

For a reader whose first test is whether a company can go to zero, the dollar figures settle that question quickly. Against all of the above, eToro carried a total legal provision of just $10.3 million at December 31, 2025 (up from $6.3 million a year earlier), inclusive of the $1.5 million already paid to the SEC [14]. That is under 5% of 2025 net income and a rounding error against the balance sheet.

Sources: legal provisions and SEC penalty — FY2025 20-F, Note 18 [15]; liquidity ($1,073M cash + $203M short-term investments, no financial debt) — Consolidated Statement of Financial Position [16]; net income as reported.

eToro's own conclusion is consistent with the arithmetic: management believes "the resolution of all such pending matters will not, either individually or in the aggregate, have a material adverse effect" [17]. A skeptic should hold that against the fact that the ASIC penalty is genuinely undetermined and that eToro would say this either way — but even a penalty an order of magnitude above the current provision would be absorbed by a single year's free cash flow. The solvency tail this reader watches for is not where the regulatory risk lives.

One adjacent exposure deserves a mention precisely because it is large in gross terms and nil in booked terms: eToro custodies $4.3 billion of user cryptoassets off its balance sheet and records no contingent liability, judging the risk of a security failure "remote" [18]. It is not a profit-and-loss item today, but it is the kind of low-probability, high-severity event — a hack, a custody lapse — that a fine table does not capture.

The lever that matters is the model, not the fine

The regulatory risk that could actually move the investment case is a structural one: a rule change that forces eToro to restrict, restructure or withdraw a product or a market, shrinking the Net Contribution base rather than denting a single year's earnings. The precedents already exist in miniature — the Spain and Belgium CFD withdrawals, the 2024 U.S. crypto-scope cut — and the mechanism is spelled out: regulators "may … impos[e] new licensing requirements, or impos[e] a total ban on … contracts for difference" [19].

Two features make this hard to size and worth watching. First, eToro does not disclose Net Contribution by geography or by CFD-versus-underlying: management states it "does not report or analyse income on a customer or country level," so the exact revenue at stake in any one jurisdiction or product is not in the filings [20]. What is known is directional: eToro's brand and user base are concentrated in the U.K., Europe, the UAE and Australia — the same jurisdictions running the tightest CFD regimes — and roughly a quarter of trading commissions come from CFD-only commodities and currencies [21]. The exposure is real; its precise magnitude is not disclosed.

Second, regulation touches the capital stack as well as the product menu. eToro is subject to ESMA capital rules for CFD providers and to MiCA's harmonized capital requirements for crypto-asset service providers, and warns that these "may affect [its] ability to distribute profits and/or restrict expansion," with failure risking "immediate suspension" of activities [22]. For a company already retaining all earnings and paying no dividend, and holding $1.28 billion of liquidity against a business that consumes little capital, this is a constraint the balance sheet currently swamps — but it is the reason the net-cash position is a working buffer, not idle cash. The same regulatory logic sits behind the 9.99% ownership cap that limits any single holder, and behind eToro's reliance on EU passporting arrangements it may one day have to convert into locally licensed entities [23] (Control and Alignment).

What would change the read

On the evidence, the regulatory overhang is the classic case of a market fearing one part of a book: the fear is legitimate at the product level, but the fine-and-solvency risk is small and quantified, while the model risk is real, structural and — because of the disclosure gap — unquantifiable from the outside. The read that fits the facts is that regulation caps eToro's addressable market and adds a permanent compliance cost, but is unlikely to break the company; the main risk to that read is a landmark CFD ruling that other regulators copy.

Three developments would move it, each falsifiable in the filings or the docket:

An adverse ASIC judgment with a penalty materially above the $10.3 million provision, or a follow-on class action — visible in the contingent-liabilities note and the Australian court record.

A CFD tightening in the EEA or U.K. — a leverage cut, a marketing ban, or a forced local-licensing reorganization of the Cyprus passporting hub — which would hit the commodities/currencies commission line and part of net interest.

A reversal of the friendlier 2025 U.S. crypto stance (GENIUS/CLARITY), or new CFTC registration and capital demands, which would raise cost and could re-narrow the U.S. crypto menu that has only just widened.

Absent one of those, the numbers say the regulatory book is an expense and a ceiling, not a threat to the going concern.