The Bybit AI Subaccount is now live, giving developers and traders across the Middle East and North Africa a dedicated walled environment where automated bots can trade without ever touching the main account’s funds. Bybit joins a wave that swept retail brokers across the first half of 2026, with at least ten platforms wiring AI agents into live client accounts, according to an FM Intelligence study.
What the Bybit AI Subaccount Actually Does
The product works by ring-fencing all bot activity inside a segregated sub-account. Access is API-only, meaning the bot communicates with the exchange through a programmatic interface rather than a user interface, and the client sets the boundaries: leverage caps (the maximum borrowing ratio the bot can apply), maximum capital allocation, and withdrawal limits. Bybit says users keep read-only oversight in real time, so they can watch without the bot being able to act on their behalf outside its box.
The core security promise, that an agent can place orders but cannot reach deposits or withdrawals, is one the retail broker wave already made. ThinkMarkets co-founder Nauman Anees said exactly the same thing when his firm launched its own server for AI agents: the AI ‘cannot access traders’ funds or make deposits or withdrawals,’ but it can place orders. Interactive Brokers routed every agent-generated order through a human-approval tab when it connected Claude to customer accounts on 1 June. Robinhood and eToro both run ring-fenced sub-accounts for agent activity, with eToro’s starting at $200.
Most of these platforms share the same plumbing: the Model Context Protocol (MCP), an open standard that AI company Anthropic released in late 2024. MCP lets a platform expose its trading interface once, then accept whichever AI model a client connects. The FM Intelligence study found Anthropic’s Claude featured in nine of the ten broker launches it tracked.
Bybit’s UAE Foothold and the Singapore Warning
The MENA targeting is grounded in a regulatory position Bybit has spent time building. In October 2025, CoinDesk reported that Bybit secured a Virtual Asset Platform Operator Licence from the UAE’s Securities and Commodities Authority (SCA), becoming the first crypto exchange to receive that full licence from the SCA. The licence covers regulated trading, brokerage, custody, and fiat conversion for both retail and institutional clients in the UAE.
Before that, Bybit had already secured a provisional, non-operational approval from Dubai’s Virtual Assets Regulatory Authority (VARA), covering retail, qualified investor, and institutional users, according to PR Newswire. Bybit describes Dubai as its global headquarters. Regional head Derek Dai said the area ‘is not just participating in the AI revolution; it is actively shaping it.’
The regulatory picture is not uniformly positive. Singapore’s Monetary Authority (MAS) added Bybit to its Investor Alert List alongside Binance and KuCoin. MAS describes the list as covering persons who may have been wrongly perceived as licensed or authorised by MAS; it is non-exhaustive and based on information available at the time of publication. Bybit also pulled back from onboarding new users in Japan.
The wider broker expansion adds further context to the strategic push. Bybit has scrapped commissions and swap fees on stock CFDs (contracts for difference, derivatives that track an asset’s price without requiring ownership) across more than 380 instruments and rolled out 24/5 trading on names including Apple and Tesla. The AI Subaccount slots into that retail-broker-facing expansion.
The Questions the Guardrails Do Not Answer
No regulator has yet written a framework aimed specifically at AI agents trading retail accounts. The Financial Conduct Authority (FCA) flagged AI as a shift it is watching in its horizon scanning, and the Securities and Exchange Commission (SEC) and ESMA have so far relied on existing rules rather than writing new ones. That leaves two questions the marketing language does not resolve: who is liable when a bot misfires, and whether automated strategies are suitable for the retail clients being invited to run them.
For Bybit, the security framing carries particular weight after the exchange lost about $1.5 billion in a cold-wallet breach in 2025. Walled accounts and read-only oversight are the answer it is offering. Whether that answer holds up will become clearer as regulators watch bots, not people, place a growing share of the orders.
