Are trading bots legal?On your own account, yes. For other people, only with a licence.
No country we checked bans software that places orders for you. What regulators control is three other things: whose money the bot trades, how its orders behave in the market, and who sells it to the public. Nothing we found in the US, UK, EU, Canada, Australia or Singapore bans a bot on your own account. India has allowed it for retail investors since 2025, but only through a broker, with an exchange-approved algo ID once a bot passes 10 orders per second. Running a bot on clients’ money is portfolio management and needs a licence almost everywhere. Spoofing and wash trading are illegal whether a person or a program places the orders. Below: the rules country by country, the exchanges’ own terms, the market-abuse traps and the tax. This is not legal advice, and the rules change often.
Reviewed November 6, 2026 · figures from our live data
The short answer
Your own account: no rule we found in the US, UK, EU, Canada, Australia or Singapore bans a bot. In India retail algos must run through a broker’s API and, above 10 orders per second, be registered with the exchange.
Other people’s money: a bot that trades for clients is portfolio management. That needs a licence from the FCA, SEC or a state, a MiCA/MiFID licence in the EU, a CMS licence from MAS, an AFS licence from ASIC or registration in Canada.
Market abuse: spoofing, layering and wash trading are banned for bots exactly as for people. A UK trader who used an automated layering program on US futures was ordered to pay more than $38 million in 2016.
Tax: in the US, UK, Canada and India a crypto-to-crypto swap counts as a disposal, and so does a sale. A bot that trades all day creates hundreds of taxable events. India taxes crypto gains at a flat 30% with 1% TDS.
tokens an agent’s own wallet can hold in our data today
issuers
stated yield range across 315 with a rate
What is legal almost everywhere, and what is not
There is no special law for trading bots. Existing rules apply to whoever runs one, and they are similar from country to country.
- 1
Your own money: generally no licence
Licences attach to services for others. In the EU, MiCA defines portfolio management as managing portfolios “in accordance with mandates given by clients”, and a bot that trades only its owner’s money has no clients. The UK FCA notes that retail participants running automated crypto trading are “not authorised persons”.
- 2
Other people’s money: a licence
Letting your bot trade for friends, followers or paying users turns it into portfolio management or advice. Regulators treat automation the same as a human manager. BaFin says it makes no difference whether a provider uses automated processes.
- 3
How the orders behave
Orders that give a false picture of supply, demand or price are market manipulation, whoever or whatever sends them. Bots are where spoofing, layering and wash trading happen most easily, so this is the rule they break most often.
- 4
Whether the exchange allows it
An exchange’s terms are a contract, not a law, but they decide whether your bot may connect at all. Kraken explicitly welcomes trading bots; Coinbase says API keys are only for your own account. Breaking the terms can get the account closed.
- 5
Selling “bot” schemes is where the law bites
Most enforcement against “trading bots” targets schemes that collect money and promise returns: Mirror Trading International in the US, the 2022 “robot trading” cases in Indonesia, the fake AI bots ASIC takes down in Australia. Buying software and running it on your own account is a different thing.
United States and Canada
Neither country bans automated trading on your own account. Licensing starts when you trade or advise for others.
- 1
US: robots follow the same adviser rulesUS only
In the US, a service that runs an automated strategy for clients is investment advice. The SEC says robo-advisers are typically registered with the SEC or state securities authorities and “must comply with the securities laws” that apply to registered advisers, even though their services are automated.
- 2
US: CFTC rules apply in full with AIUS only
In the US, the CFTC reminded registered firms on 5 December 2024 that their duties under the Commodity Exchange Act apply when they use AI. In January 2024 it warned the public that “AI technology can’t predict the future” and that promises of high or guaranteed returns from bots are red flags.
- 3
US: the pattern day trader rule is goneUS only
In the US, FINRA removed the pattern day trader rule and its $25,000 minimum equity from Rule 4210, effective 4 June 2026 (SEC approval 14 April 2026). A new intraday margin standard replaces it; brokers may phase it in until 20 October 2027, so your broker may still apply the old limit for a while.
- 4
Canada: registration when it is a business
In Ontario, anyone in the business of trading in or advising on securities must register under the Securities Act, which the OSC calls the “business trigger”. A bot that manages other people’s accounts falls under it; your own trading does not make you a dealer.
- 5
Canada: use a registered crypto platform
The OSC lists the crypto platforms registered to serve Ontario investors, among them Coinbase Canada, Kraken (Payward Canada), Crypto.com, Wealthsimple, Shakepay and Newton (list updated 27 October 2026). A bot connected to an unregistered offshore platform runs outside that protection.
United Kingdom, the EU and Germany
Europe draws the line at clients’ money and at direct access to trading venues.
- 1
UK: automatic copy trading is portfolio management
The FCA classes copy trading as portfolio management where “no manual input is clear from the account holder”; with MiFID instruments it needs FCA portfolio management authorisation. If the client must act before each trade, the FCA says it is not portfolio management.
- 2
UK: crypto bots under review
In its May 2025 discussion paper the FCA wrote that bot providers report up to 1 million users and that retail participants running automated crypto trading are not authorised persons. It is considering “a more pragmatic approach” rather than applying professional algo rules to them.
- 3
EU: own money, no licence; clients, a licenceEU only
In the EU, MiCA licenses portfolio management of crypto-assets “in accordance with mandates given by clients”. A bot on your own funds needs none; running it on clients’ funds requires a MiCA licence (crypto) or a MiFID II licence (securities). MiFID II’s algorithmic-trading duties in Article 17 bind investment firms, not private people.
- 4
Germany: automation changes nothing for BaFinGermany only
In Germany, BaFin says automated portfolio management needs a licence under § 32 KWG and that it plays “no role” whether a provider uses automated processes. Offering signal following or social trading usually requires a licence too.
- 5
Germany: own-account trading in special casesGermany only
In Germany, trading for your own account needs a BaFin licence only in special cases: as a member or participant of an organised market or MTF, with direct electronic access to a trading venue, or for high-frequency algorithmic trading as a participant of a domestic venue, even without serving anyone else.
India: SEBI’s retail algo framework
India is the only large market with a dedicated rulebook for retail bots. It covers stocks and derivatives on Indian exchanges, not crypto.
- 1
Legal, through your broker
SEBI’s circular of 4 February 2025 lets retail investors use algos via broker APIs. The broker is the principal and any algo provider acts as its agent; brokers may only deal with algo providers empanelled with the exchanges.
- 2
Every algo order is tagged
All algo orders through a broker’s API carry a unique identifier from the exchange. Brokers need exchange approval for each algo and for every change to it, and exchanges keep a kill switch for orders from a given algo ID.
- 3
Self-built bots: the 10 orders per second line
An algo you code yourself must be registered with the exchange through your broker only once it crosses an order-per-second threshold. According to broker Zerodha’s summary of NSE’s May 2025 circular, that line is 10 orders per second per segment per exchange. A registered self-built algo may be used for your family: spouse, dependent children and dependent parents, not for others.
- 4
No open APIs, a static IP, 2FA
Brokers may not offer open APIs. Access works only with a client-specific API key and a static IP whitelisted by the broker, OAuth authentication and two-factor authentication.
- 5
Black-box algos need a research analyst
SEBI splits algos into white box (logic disclosed and replicable) and black box. A provider of black-box algos must register as a research analyst and keep a research report for each one, and register a new algo whenever the logic changes.
- 6
In force for all brokers since 1 April 2026
The start date of 1 August 2025 was pushed to 1 October 2025. Brokers not ready followed a glide path; those missing it could not onboard new retail API algo clients from 5 January 2026. Since 1 April 2026 the framework applies to all brokers.
Australia, Singapore, Indonesia and Brazil
Here the regulators’ main concern is people selling bots and managing money, not individuals automating their own trades.
- 1
Australia: a licence to deal for clients
ASIC says anyone running a financial services business generally needs an Australian financial services (AFS) licence; buying or selling shares for a client is dealing. ASIC also warns that scammers claim their bots use AI to generate passive income and that “it is very unlikely that these trading bots exist”. It removed 11,964 phishing and investment scam websites in 2025.
- 2
Singapore: a CMS licence to manage money
MAS requires a capital markets services licence to conduct fund management, with class exemptions such as managing assets for related family members. For crypto, licensed providers may not offer retail customers incentives to trade, financing, margin or leverage (measures announced on 23 November 2023, in force in phases from mid-2024).
- 3
Indonesia: the 2022 robot-trading crackdown
Indonesia’s investment alert task force (Satgas Waspada Investasi) halted 19 unlicensed robot-trading entities between January and March 2022. By 30 March 2022 Bappebti had blocked 336 robot-trading offers, including Net89. CNN Indonesia reported they were sold member-get-member with promises of 1% a day and were suspected of paying profits out of other members’ money.
- 4
Indonesia: crypto now under OJK
Crypto supervision has moved from Bappebti to OJK. On 19 December 2025 OJK published a whitelist of licensed crypto traders and told the public to trade only through them. OJK cites 5 to 10 years in prison and fines of up to Rp1 trillion for breaking licensing rules under the financial sector law (UU P2SK).
- 5
Brazil: algorithms under the adviser rules
In Brazil, investment advice may only be given by people or firms authorised by the CVM. Article 17 of CVM Resolution 19 (25 February 2021) says advice using automated systems or algorithms follows the same rules, and the source code must be available for CVM inspection in uncompiled form.
Exchange terms and market abuse
Most bot owners never meet a regulator. They meet the exchange’s rulebook and, if the bot misbehaves, the market-abuse law.
- 1
Exchanges allow bots, on their terms
Kraken says customers are welcome to use trading bots on its markets but gives no profit guarantee and recommends no third-party bot. Its API is rate-limited “to protect against malicious usage and order book manipulation”; higher limits need Kraken’s approval.
- 2
Keys are for your own account
Coinbase says API key authentication should only be used to access your own account, so running other people’s accounts with your keys breaks the terms. Binance gives keys without an IP restriction read access only; withdrawal permission requires one.
- 3
Spoofing and layering by algorithmUS only
In the US, the CFTC found that UK-based trader Navinder Sarao used an automated “dynamic layering program” that placed large E-mini S&P orders and kept modifying them so they would not fill. On the day of the 6 May 2010 Flash Crash it modified orders more than 81,000 times. In November 2016 a court ordered him to pay about $38.6 million.
- 4
Placing and cancelling orders countsEU only
In the EU, MiCA Article 91 covers placing, cancelling and modifying orders that give a false signal about supply, demand or price, that make genuine orders harder to identify, or that disrupt the platform. It applies to any person, on or off a trading platform.
- 5
Wash trading is banned on the platforms too
Kraken’s trading rules prohibit market abuse and manipulation with wash trading, layering and spoofing as examples. A bot that trades with itself to create volume breaks the exchange’s rules even where no regulator is watching.
- 6
UK penalties
In the UK, market manipulation is a civil offence under UK MAR with unlimited fines. Criminal market manipulation under the Financial Services Act 2012 can bring up to 10 years in prison.
Tax: every trade can count
A bot does not change the tax rules, but it multiplies the number of events. Keep its trade log.
- 1
United StatesUS only
In the US, the IRS says exchanging virtual currency for another virtual currency produces a capital gain or loss, and so does selling it for dollars. Each swap the bot makes is reportable.
- 2
United Kingdom
HMRC treats it as a disposal when you put token A into a transaction and receive token B. Moving tokens between your own wallets is not a disposal.
- 3
GermanyGermany only
In Germany, gains on crypto held for one year or less are taxable under § 23 EStG. Total private sale gains below €1,000 a year stay tax-free.
- 4
India: 30% and 1% TDS
India taxes income from transferring virtual digital assets at 30%, allows no deduction except the cost of acquisition, and does not let losses be set off against other income. A 1% TDS applies to payments for transfers above a threshold. By 20 March 2023 TDS under section 194S had reached Rs 157.9 crore for the year.
- 5
Canada: business income if you trade a lot
The CRA treats trading one crypto for another as a disposition. Frequent trading and short holding periods point to business income, which is fully taxable; otherwise half of a capital gain is included in income.
The 12 highest stated yields
Yields as stated by the issuer or read on chain, with the date they were checked on each token page. Not a recommendation.
| Token | Issuer | Yield | Minimum |
|---|---|---|---|
| Orca DEX — SOL / NEAR liquidity pool on Solana | Orca DEX (protocol) | 97.07% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Orca DEX — SOL / HYPE liquidity pool on Solana | Orca DEX (protocol) | 72.71% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Aerodrome Slipstream — WETH / USDC liquidity pool (CL50 - 0.025%) on Base | Aerodrome Slipstream (protocol) | 70.56% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Uniswap V3 — USDC / WETH liquidity pool (0.3%) on OP Mainnet | Uniswap V3 (protocol) | 65.07% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Raydium AMM — COINX / USDC liquidity pool (Concentrated - 0.8%) on Solana | Raydium AMM (protocol) | 62.77% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Uniswap V3 — WETH / USDC liquidity pool (0.3%) on Base | Uniswap V3 (protocol) | 60.6% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Raydium AMM — WSOL / ZEREBRO liquidity pool (Standard - 0.25%) on Solana | Raydium AMM (protocol) | 55.73% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Uniswap V4 — UNI / USDC liquidity pool (0.30%) on Ethereum | Uniswap V4 (protocol) | 54.47% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Uniswap V3 — WETH / USDT liquidity pool (0.3%) on Ethereum | Uniswap V3 (protocol) | 53.67% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Orca DEX — SOL / USDC liquidity pool on Solana | Orca DEX (protocol) | 52.86% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Uniswap V3 — CLANKER / WETH liquidity pool (1%) on Base | Uniswap V3 (protocol) | 51.88% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
| Uniswap V4 — ETH / USDT liquidity pool (0.30%) on Ethereum | Uniswap V4 (protocol) | 50.78% (30-day average of trading fees, DefiLlama 2026-11-12) | None |
Questions
Are trading bots legal?+
In the countries covered here, no rule we found bans a bot on your own account. You need a licence once the bot trades other people’s money, and spoofing or wash trading by a bot is illegal market manipulation. India also requires retail algos to run through a broker. This is not legal advice; the rules change often.
Is a trading bot legal in India?+
Yes, for stocks and derivatives, through a broker under SEBI’s 4 February 2025 framework, which applies to all brokers since 1 April 2026. Algo orders carry an exchange ID, access needs a static IP and 2FA, and a self-built bot must be registered once it passes the order-per-second threshold (10 per second at NSE). Crypto is outside SEBI’s framework but taxed at 30% with 1% TDS.
Are trading bots legal in the US?US only+
In the US, yes on your own account. A bot service for clients needs investment-adviser registration with the SEC or a state, and futures services fall under CFTC registration rules. The pattern day trader rule and its $25,000 minimum were removed from 4 June 2026, though brokers may phase in the change until October 2027.
Are AI trading bots legal in the UK?+
Yes for your own account. Copy trading that executes automatically for clients counts as portfolio management and needs FCA authorisation. The FCA lists unauthorised “AI trading bot” sellers, such as “Ai Trader Bot” (June 2025), on its warning list.
Is robot trading legal in Indonesia?+
The 2022 cases were against unlicensed sellers that took members’ money with promised returns, not against software as such. Satgas Waspada Investasi halted 19 robot-trading entities in early 2022, and Bappebti blocked 336 offers. For crypto, trade only through platforms on OJK’s whitelist (December 2025).
Can I run my bot for friends or family?+
For family, sometimes: India allows a registered self-built algo for spouse, dependent children and dependent parents, and Singapore exempts managing assets for related family members. For friends or paying users it is portfolio management in almost every country and needs a licence.
- Are trading bots legit? How to tell a tool from a scam →
- Can AI agents trade on their own? →
- Build your own AI trading agent: step-by-step tutorial →
- MiCA explained →
- Crypto taxes in 41 countries →
- Buying crypto country by country →
- SEBI — Safer participation of retail investors in algorithmic trading (4 Feb 2025)
- SEBI — Circular PDF (4 Feb 2025)
- SEBI — Extension of timeline (30 Sep 2025)
- Zerodha — Overview of NSE’s retail algo circular (10 orders per second)
- PIB — Union Budget 2022: taxation of virtual digital assets
- PIB — TDS on virtual digital assets, FY 2022-23 (28 Mar 2023)
- SEC / Investor.gov — Investor Bulletin: Robo-Advisers
- CFTC — Staff advisory on AI (Dec 2024)
- CFTC — AI won’t turn trading bots into money machines (Jan 2024)
- CFTC — Sarao ordered to pay more than $38 million (Nov 2016)
- FINRA — Regulatory Notice 26-10 (pattern day trader rule removed)
- IRS — Virtual currency FAQ
- OSC — Getting registered
- OSC — Crypto businesses (registered platforms)
- CRA — Reporting income from crypto-asset transactions
- FCA — Copy trading
- FCA — DP25/1 Regulating cryptoasset activities (May 2025)
- FCA — Market abuse
- FCA — Warning: Ai Trader Bot
- HMRC — CRYPTO22100
- ESMA — MiCA Art. 3 definitions
- ESMA — MiCA Art. 86 market abuse scope
- ESMA — MiCA Art. 91 market manipulation
- ESMA — MiFID II Art. 17 algorithmic trading
- BaFin — Automated advice and trading systems
- BaFin — Own-account dealing
- § 23 EStG
- ASIC — Check if you need an AFS licence
- ASIC — 26-063MR AI-powered investment scams
- ASIC — 25-171MR Online investment scams
- MAS — Fund management licensing
- MAS — Regulatory measures for digital payment token services (Nov 2023)
- OJK — SWI halts 21 entities incl. robot trading (17 Feb 2022)
- OJK — SWI: 19 robot-trading entities halted (13 Apr 2022)
- OJK — Whitelist of licensed crypto traders (19 Dec 2025)
- CNN Indonesia — Bappebti on robot-trading schemes (30 Mar 2022)
- CVM — Resolução CVM 19 (consolidated)
- CVM — Consultores de valores mobiliários
- Kraken — Does Kraken allow trading bots?
- Kraken — Exchange trading rules
- Coinbase — API key authentication
- Binance — How to create API keys
This guide explains how these products work and is not investment advice or an offer of any security. Who may buy a product is set by its issuer; check the offering documents before investing.