BotIndex
Compare
GUIDE · 8 MIN READ

Are trading bots legal? What the rules actually say in the US, UK and EU

BotIndex editorial team · Updated 11 Nov 2026 · Editorial policy

SHORT ANSWER

In most countries, using a trading bot on your own account is legal. The limits come from elsewhere: the platform must be allowed to serve your country, the bot must not manipulate the market (spoofing, wash trading), the exchange's terms still apply, and retail derivatives rules can block leverage. This is general information, not legal advice.

For a retail trader running automation on their own account, the answer is usually yes. No major regulator we checked bans software from placing your orders. Exchanges even build bots into their apps: Bybit, Pionex, Bitget and OKX all offer free grid and DCA bots, and Bitvavo, which has none of its own, says users can connect third-party bots through API keys (Bitvavo review).

So “are trading bots legal” is the wrong question on its own. The useful questions are these four:

  1. Is the platform allowed to serve someone in your country?
  2. Does what the bot does count as market abuse?
  3. Do the exchange’s own terms allow it?
  4. Do retail derivatives rules limit the products the bot trades?

This guide is general information, not legal advice. Rules change and depend on where you live and what you trade. If real money or a business depends on the answer, ask a lawyer licensed where you live.

If you are new to bots, start with what a crypto trading bot is or what algorithmic trading is.

1. The platform must be allowed to serve you

This is where most people actually run into trouble. A bot is only as legal as the account it runs on, and many exchanges exclude whole countries in their terms of service. Opening an account by misstating where you live breaks those terms, and the exchange can freeze or close the account.

From the availability data on our reviews:

  • United States. Bybit, Pionex, Bitget, KuCoin, MEXC, HTX and Bitvavo are closed to US residents, and so are the Telegram bots Maestro and Trojan. OKX serves the US through OKX US, which offers spot trading and buy/sell/convert services (OKX review). Kraken does not serve residents of some states, including Maine and New York (Kraken review).
  • United Kingdom. Bybit, Pionex, Gate, MEXC and HTX are closed to UK residents. Bybit’s notice says it “will no longer accept new registrations from UK residents” (Bybit review).
  • EU countries. Bitget’s terms exclude Germany and France, and Pionex’s exclude France and the Netherlands (Bitget review, Pionex review). Bot platforms can be affected too: Coinrule’s terms exclude customers in any EU member state (Coinrule review).

Third-party bot platforms such as 3Commas or Cryptohopper connect to an exchange account, so the exchange’s country rules still decide what you can use. Cryptohopper notes that for US users “not all exchanges are available in every state” (Cryptohopper review), and HaasOnline says some features may not be available to US persons. Check your own country page on our countries hub before you sign up anywhere.

2. Market-abuse rules apply to what the bot does

Automation does not change what counts as manipulation. If a bot places orders that would be illegal for a human, they are illegal for the bot’s owner too.

Spoofing. In the US, the Dodd-Frank Act made spoofing, described by the CFTC as “bidding or offering with intent to cancel before execution,” a prohibited practice. The first case under that ban, in 2013, was against an algorithm. The CFTC said Panther Energy Trading and Michael Coscia used “a computer algorithm that was designed to unlawfully place and quickly cancel orders” in futures markets, and ordered them to pay $2.8 million and stop trading on CFTC-registered markets for a year (CFTC release 6649-13).

Wash trading and pump-and-dump. In October 2024 the SEC charged three firms calling themselves market makers and nine people. It alleged they used trading bots for “self-trading (commonly referred to as ‘wash trading’)” to create fake volume in crypto assets, and that the algorithms at times generated “quadrillions of transactions” (SEC press release 2024-166). The aim, according to the SEC, was to lure investors into buying.

UK and EU. UK MAR prohibits insider dealing, unlawful disclosure of inside information and market manipulation, but its scope is financial instruments on UK or EU trading venues (FCA, UK MAR). In the EU, crypto-assets have their own market-abuse rules in Title VI of MiCA (Articles 86 to 92). ESMA’s 2025 guidelines tell national regulators how to detect insider dealing and market manipulation involving crypto-assets (ESMA MiCA market-abuse guidelines).

An ordinary grid or DCA bot placing real orders it means to fill is nowhere near any of this. The risk comes from custom code that floods the book with orders it plans to cancel, trades between your own accounts, or joins coordinated “pump” groups. See our pump-and-dump section in the scams guide for how those schemes work.

3. Exchange terms can restrict bots and API use

Even where the law is fine, the exchange sets house rules, and breaking them is the realistic way to get banned for using a trading bot.

Kraken’s Exchange Trading Rules are a clear example. They prohibit “any activity that amounts to market abuse and or manipulation on the exchange,” naming wash trading, layering and spoofing. They also say API access is subject to rate limits to protect against malicious use and order book manipulation, and that Kraken may cancel orders or stop a client from trading (Kraken Exchange Trading Rules).

In practice this means:

  • Use the exchange’s official API or its built-in bots, not scraped web sessions or unofficial tools.
  • Stay within rate limits. A buggy bot that sends thousands of requests can be throttled or blocked.
  • Read the API and trading rules of each exchange you connect, especially before running anything high-frequency.
  • Keep your API keys locked down. Our API key safety guide covers permissions and IP whitelists.

4. Retail derivatives rules limit leverage

Many exchange bots can trade futures. In our data, futures grid or martingale bots go up to 50x leverage on Bybit and Gate, 100x on OKX and Pionex, 125x on KuCoin and 150x on Bitget. Whether you can legally use those depends on where you live.

United Kingdom. The FCA banned “the sale, marketing and distribution to all retail consumers” of crypto derivatives (CFDs, options and futures) and crypto exchange traded notes. The ban took effect on 6 January 2021 (FCA). You can see it in exchange terms: Kraken says “retail clients living in the United Kingdom cannot trade derivatives,” and Crypto.com lists the UK among locations restricted from derivatives (Crypto.com review).

European Union. In 2018 ESMA agreed limits on CFDs for retail clients, from 30:1 on major currency pairs down to “2:1 for cryptocurrencies,” together with margin close-out and negative balance protection per account (ESMA). Those were temporary EU measures under MiFIR, so check your national regulator for the rules in force now. Exchanges serving the EU also run separate entities with narrower menus: Bybit EU is authorised in Austria as a crypto-asset service provider under MiCA, and OKX lists a separate EEA bot menu.

United States. Most offshore exchanges with high-leverage bots exclude US residents outright, as the list above shows. For more on leveraged bots and their risks, see best futures trading bots.

Per-country summary

The table uses only the availability data in our reviews and the regulator pages cited above. “Restricted” means the platform serves the country with limits, such as fewer products or a separate local entity. Many bot platforms are listed as “unverified” in our data because their terms do not name countries, so they are not counted here.

Country Closed in our data Restricted in our data Derivatives note from sources above
United States Bybit, Pionex, Bitget, KuCoin, MEXC, HTX, Bitvavo, Maestro, Trojan OKX (OKX US, spot), Kraken (not in some states), Gate, Crypto.com, Cryptohopper, HaasOnline Spoofing is banned under Dodd-Frank (CFTC)
United Kingdom Bybit, Pionex, Gate, MEXC, HTX OKX (spot only), Kraken (no derivatives), Crypto.com (no derivatives) FCA retail crypto-derivatives ban since 6 Jan 2021
Germany Bitget, Coinrule, HTX, Trojan Bybit (Bybit EU), OKX, KuCoin, Gate, Crypto.com ESMA 2018: 2:1 on crypto CFDs; MiCA Title VI market abuse
France Pionex, Bitget, Coinrule, MEXC, HTX, Trojan Bybit (Bybit EU), OKX, KuCoin, Gate, Crypto.com Same EU rules as Germany
Netherlands Pionex, Coinrule, MEXC, HTX, Trojan Bybit (Bybit EU), OKX, KuCoin, Gate, Crypto.com Same EU rules as Germany
Canada Bybit, Pionex, Bitget, OKX, Gate, MEXC, Bitvavo, Maestro KuCoin, Kraken, Crypto.com Not covered by sources in this guide
Singapore Bybit, Pionex, Bitget, KuCoin, Gate, MEXC, HTX, Bitvavo OKX, Crypto.com Not covered by sources in this guide
Australia Bitvavo OKX, Gate, Kraken, Crypto.com Not covered by sources in this guide

Statuses change when exchanges update their terms. Each country page links the exact clause we used, and each review shows the date we checked it.

Most retail bot users never come close to a legal problem. These are the situations where the risk becomes real:

  • Using a platform your country is excluded from, including through a VPN or false address. The usual result is a frozen account.
  • Running custom code that manipulates prices: placing and canceling large orders to move the book, trading with yourself, or joining coordinated pump groups.
  • Trading derivatives you are not allowed to buy as a retail client, such as crypto futures in the UK.
  • Managing other people’s money or selling a bot as a service. Pooling funds or trading for others can bring licensing rules into play. The CFTC’s biggest bot case, Mirror Trading International, was a pooled “bot” scheme, covered in our trading bot scams guide.

Taxes are a separate question: in many countries, every bot trade can count as a taxable disposal. Check your tax authority’s guidance or ask a tax professional.

For how we collect and date the availability data used here, see our methodology.

FAQ

Are crypto trading bots legal in the US?

Using automation on your own account is not itself banned, but many crypto platforms do not serve US residents. In our data Bybit, Pionex, Bitget, KuCoin and MEXC exclude the US in their terms, and OKX US offers spot trading and conversions only. Market-manipulation rules, such as the ban on spoofing the CFTC enforced against an algorithmic trader in 2013, apply whether a person or a bot places the orders.

Is using a trading bot legal in the UK?

Running a bot is not prohibited, but the FCA has banned the sale of crypto derivatives such as futures and CFDs to retail consumers since 6 January 2021. That is why Kraken says UK retail clients cannot trade derivatives and OKX says UK users can typically only access spot. Several exchanges, including Bybit, Pionex, Gate, MEXC and HTX, are closed to UK residents in our data.

Can I get banned from an exchange for using a bot?

Not for using an approved API or the exchange's own bots, but you can be restricted for what the bot does. Kraken's trading rules name wash trading, layering and spoofing as market abuse and let Kraken cancel orders or stop a client from trading. Exchanges also enforce API rate limits, so a badly built bot that floods the API can be cut off.

Is algorithmic trading legal for retail traders?

Yes, algorithmic trading is a normal part of modern markets and retail traders can use it. What is illegal is the intent or effect: placing orders you plan to cancel to mislead others, trading with yourself to fake volume, or trading on inside information. Regulators judge the conduct, not whether code placed the order.

Do I need a license to run a trading bot?

Generally not for trading your own money. Licensing questions arise when you manage other people's money, pool funds or sell signals or bots as a business, which can bring investment-adviser, commodity-pool or similar rules into play. If you plan to do that, talk to a lawyer in your country.

Sources

Not financial advice. Trading bots do not remove market risk.