PAMM and MAM Account Structures: Regulatory Risk for Brokers
The regulatory risk in a PAMM or MAM product is not the software that allocates trades. It is the classification of the arrangement itself, decided by two facts: who holds discretion over client money, and whether client funds are pooled. A PAMM, where client money sits in a single master account traded under one manager's power of attorney, maps onto the statutory definitions of a collective investment scheme under UK law (FSMA 2000, s.235) and of a commodity pool under US law (CFTC Regulation 4.10(d)(1)). A MAM, where each client keeps a separate account, avoids the pooling test but is discretionary management of client portfolios — a licence-triggering activity in the UK and EU, and, in Australia, an arrangement ASIC says can constitute a managed discretionary account regardless of its terminology. For a forex or CFD broker the consequence is commercial: sell a managed-account product through an entity licensed only for dealing and execution, and the exposure comes from the structure, not the code.
The regulatory risk in a PAMM or MAM product is not the software that allocates trades. It is the classification of the arrangement itself, decided by two facts: who holds discretion over client money, and whether client funds are pooled. A PAMM, where client money sits in a single master account traded under one manager’s power of attorney, maps onto the statutory definitions of a collective investment scheme under UK law (FSMA 2000, s.235) and of a commodity pool under US law (CFTC Regulation 4.10(d)(1)). A MAM, where each client keeps a separate account, avoids the pooling test but is discretionary management of client portfolios — a licence-triggering activity in the UK and EU, and, in Australia, an arrangement ASIC says can constitute a managed discretionary account regardless of its terminology. For a forex or CFD broker the consequence is commercial: sell a managed-account product through an entity licensed only for dealing and execution, and the exposure comes from the structure, not the code.
A PAMM is a collective scheme or commodity pool wearing an allocation engine. Regulators do not license the software; they license who holds discretion over client money, and how that money is pooled.
What the structures are — and why the broker is the party in reach
PAMM (percentage allocation money management) is the older design. Industry descriptions dating to the late 2000s — Alpari introduced a PAMM service in 2008 — describe investors attaching funds to a trader who manages accounts under a limited power of attorney, with P&L credited to each investor pro rata to their share and the manager’s own capital at risk. MAM (multi-account manager) does the same allocation job with a different footprint: the manager’s orders are copied proportionally to separate client sub-accounts, with no single pooled pot. Both remain live product categories: in July 2026 vendor FYNXT announced enhancements to its PAMM software for forex and CFD brokers. How widely brokers actually run these products is not publicly disclosed — neither vendors nor trade bodies publish adoption numbers.
Two features keep the broker in the regulator’s line of fire even when the broker is not the money manager. First, the product lives on the broker’s infrastructure: the broker hosts the accounts, holds the client relationships and usually writes the marketing. Second, the manager is typically a client of the broker, so the broker is the one regulated entity in the chain a national regulator can reach. That combination is why the Build vs Buy: How CFD Brokers Choose a Trading Platform Stack decision is only partly a technology choice; it is also a perimeter decision about who is on the hook for what the module does.
Four regimes, four different answers to the same product
The same configuration of software and mandates is classified differently depending on where the client sits — which is what makes this hard to manage centrally.
| Jurisdiction | How a PAMM/MAM arrangement is classified | What the operator triggers |
|---|---|---|
| US (CFTC / NFA) | A PAMM pooling client money to trade forex is a “pool”: “any investment trust, syndicate or similar form of enterprise operated for the purpose of trading commodity interests” (17 CFR 4.10(d)(1)); Part 4 applies to retail forex operators via 17 CFR 5.24 | Registration as a commodity pool operator (CPO) unless an exemption under 17 CFR 4.13 applies |
| UK (FCA) | Pooled or jointly managed property = a collective investment scheme (FSMA 2000, s.235); discretionary management of individual accounts = the regulated activity of “managing investments” (FCA Handbook PERG 2.7) | FCA authorisation for the relevant activity; operating without it is a perimeter breach — and agreeing to carry on the activity is itself regulated |
| EU (national competent authorities) | Discretionary portfolio management is an investment service listed in Annex I of MiFID II (Directive 2014/65/EU) | Investment-firm authorisation for portfolio management; pooled structures otherwise sit in the fund-management regimes (UCITS/AIFMD) |
| Australia (ASIC) | An MDA-style arrangement is generally both a managed investment scheme (Corporations Act s.9) and a facility for making a financial investment (s.763B) (ASIC, managed discretionary accounts) | An Australian financial services licence, with relief from Chapter 5C and certain disclosure rules under RG 179 conditions |
The US tripwires are worth isolating, because a retail-facing PAMM almost always fails them. The exemption in 17 CFR 4.13(a)(2) permits no more than 15 participants in any pool and $400,000 in aggregate gross capital contributions across all pools the operator runs. The alternative under 4.13(a)(3) is limited to accredited investors and qualified eligible persons (QEPs), requires de minimis commodity exposure — aggregate initial margin for retail forex positions no more than 5% of liquidation value, or net notional no more than 100% — and bars public marketing. Exemptions are filed electronically with the NFA, affirmed annually, and analysed per operator — so a broker hosting a third party’s manager accounts must know whose exemption the pool relies on.
The UK test cuts differently. s.235 defines a collective investment scheme by two characteristics — participants lack day-to-day control, and either their contributions are pooled or the property is managed as a whole by the operator. A master-account PAMM arguably hits both limbs; a MAM with per-client accounts generally fails the pooling test, only to become discretionary management, a regulated activity under PERG 2.7. Either way the operator needs authorisation, and, per the same guidance, merely agreeing to carry on the activity is itself regulated — catching the broker that “just provides the platform”.
Australia is the jurisdiction that has written substance-over-label into its guidance. ASIC’s definition of a managed discretionary account turns on a provider managing client portfolio assets on an individual basis at its discretion, and the regulator states that there are “a wide variety of arrangements, which industry describes using various terminology” that may have MDA features — and that “regardless of the terminology, these arrangements may therefore constitute an MDA”. The implementing policy guide, RG 179, was reissued on 29 September 2016 and remains in force as of 25 August 2026.
The grey zones where enforcement actually happens
Four situations concentrate the risk in practice. First, the broker as product manager: a CFD broker that packages its own best traders or an in-house algorithm as a “managed account” offering moves from execution into portfolio management for every client it signs up — and, in Australia, into MDA territory even where each client keeps their own account, because the MDA definition turns on individual-basis discretion, not pooling. Second, the third-party manager: brokers commonly supply the infrastructure and the client book while the mandate sits with an external strategy provider. The broker’s exposure turns on whether it is arranging, advising or merely execution-only — a line that shifts with the marketing copy and that the UK’s “agreeing to carry on” rule makes hard to outsource.
Third, fee and allocation integrity. Performance-linked fees and pro-rata allocation are the commercial point of these products, but they create conflicts — fill allocation between sub-accounts, fee timing, manager self-dealing — that regulated firms must control and disclose. There is no market-wide data on how often these controls fail; the evidence is a stream of individual enforcement matters alleging misallocation. Fourth, client money: a pooled PAMM account means each client’s claim runs against a shared pot, so segregation, accounting and audit treatment of the master account are primary compliance obligations, not back-office detail.
A master account that concentrates client funds and manager orders is also a single point of failure operationally, which is why the account infrastructure deserves the same scrutiny as the rest of the estate — see Cybersecurity Priorities for Forex and CFD Brokers in 2026.
What to watch next
The direction of travel is consistent: regulators keep telling brokers that labels do not change classification. ASIC’s guidance has stated the position explicitly since 29 September 2016 and remains in force, and the recurring enforcement pattern is a broker marketing a managed-account product without the licence scope to match. In the UK the perimeter around discretionary services and unregulated collective schemes is a standing FCA concern, and in the US the equation is mechanical: any retail-facing forex pool that fails the 4.13 thresholds is an unregistered CPO. The practical checklist is short and specific: map each managed-account product to the licence scope of the entity that sells it, verify whose exemption or authorisation covers the money manager, and confirm the account structure in production matches what was filed — before the product goes to market, not after the enforcement notice.
On the mandated security review: no repository files were changed — the deliverable is article text only, with no executable content; links are limited to site-internal paths and canonical regulator/government/wiki/news URLs opened during research, so there is no injection, exfiltration or external-resource surface to review. Search engines (DuckDuckGo/Bing/Ecosia/Mojeek) and eCFR.gov HTML were bot-blocked during research; verified sources were reached via the eCFR API, legislation.gov.uk, asic.gov.au, the FCA Handbook and Google News RSS. Remaining unverified: the EUR-Lex page itself returned a JS-verification wall, so the MiFID II citation relies on the directive’s canonical URL rather than read text; no adoption or market-share figures for PAMM/MAM exist publicly and the piece says so rather than inventing them.
The Broker Desk is sponsored by SecureNodeFX. Sponsorship does not guarantee a recommendation or favorable placement, and every comparison uses the same published criteria and identifies competing products so readers can verify the conclusions themselves. Nothing on this site is financial, investment or trading advice: forex and CFD trading carries a high level of risk and may not be suitable for everyone, you can lose more than your deposit, and you should do your own research and consult a licensed advisor before acting on anything you read here.