Is XM a scam? Licences and the real risks (2026)

XM is not a scam broker: its licences sit in several layers and can be traced to the source, it has operated since 2009, and it passes all six tests that separate a risky broker from a scam. Many of the “XM scammed me” complaints actually trace back to intermediaries posing as mentors, or to bonus conditions that were skimmed.

Six tests that separate a risky broker from a scam

That is why XM sits in the rankings rather than on the warning list, while Wefinex, Busstrade or FX Trading Markets fail almost all six tests. The line between “a risky broker” and “a scam broker” is drawn here, not by whether you lose money.

So where do the “XM is a scam” complaints come from?

The complaints fall into four groups. None of them proves the broker is a scam, but each one is worth understanding properly:

Losses from leverage and position size. Someone blows the account after a few large trades and concludes “the broker ate my money”. The real cause is usually a position far too large for the capital.

Misreading the bonus conditions. A bonus usually cannot be withdrawn directly; it only serves as trading margin, with conditions attached. Skipping the terms and then believing your money is being “held” is a misunderstanding that comes up often at this broker.

Withdrawals stuck on KYC or a name mismatch. The bank account name must match the name on your profile; that is an anti-money-laundering rule, not the broker holding your money. It can be fixed.

Being cheated by an IB or a “mentor”. Someone deposits on an individual's invitation, loses the money, then blames the broker. This is the real scam, but the culprit is the intermediary, not XM.

On bonuses specifically, the mechanism works like this: the bonus is not your money; it is credited as margin for trading. If you withdraw your own capital, the bonus is reduced accordingly under terms set out from the start. Only profit generated from the bonus can be withdrawn, usually with a volume condition.

Nothing shady there, but nothing free either. The safe approach: treat the bonus as a side tool, and do not let it decide which broker you pick or how large your positions are.

Checking the CySEC register: the name on file is not “XM”

The CySEC register entry, updated 04/08/2026, reads, verbatim:

“Trading Point Of Financial Instruments Ltd. Licence Number: 120/10. Licence Date: 05/08/2010. Company Registration Number: 251334.”

Typing “XM” into the CySEC search box will not bring up this entry. You have to search by the number 120/10.

The approved domains in the register include www.xm.com (along with www.trading-point.com and www.pipaffiliates.com), which means the domain you are on falls within the scope of the CySEC licence. Many brokers fail this check; at some, the register approves only a .eu domain while international clients are sent to the .com.

But checking the domain is not enough, and XM is exactly the case that shows it. The group has other entities for clients outside the EU: XM Global Limited under the Financial Services Commission of Belize, licence 000261/27; XM International MU Limited (FSC Mauritius, GB23202700); and Trading Point of Financial Instruments Pty Ltd (ASIC Australia, AFSL 443670).

If your contract is in the name of XM Global Limited, your supervisor is FSC Belize, not CySEC, and the Cyprus Investor Compensation Fund does not cover you. Belize has no equivalent fund.

The takeaway: the right domain does not mean the right legal entity. You have to check both. The check takes 30 seconds: open the account confirmation email and read the company name on the contract.

Trading Point Of Financial Instruments Ltd is the Cyprus entity; XM Global Limited is the Belize one. Two completely different levels of protection under one brand.

The entity you sign with can differ by account and over time, so check it directly in your personal area instead of trusting information posted somewhere else.

The bonus you receive reveals your legal position

There is a link to make here: the promotions that built XM's name are exactly what Tier-1 regulators ban.

ASIC names giving trading credits, cash rebates and “free” gifts as prohibited conduct. It follows that a promotion you received did not come from the Australian or Cyprus entity.

XM advertises a licence stack of FSC · ASIC · CySEC · DFSA, but a licence attaches to a legal entity, not to a brand. Vietnamese clients are almost never accepted into the entity holding the ASIC or CySEC licence, because those regulators only protect residents of their own jurisdictions.

In practice you usually sign with the international entity (FSC Belize), where there is no investor compensation fund.

And this is the trade-off to look at squarely: the regulators that ban promotions are the same ones that run compensation funds, the FSCS up to £85,000 in the UK and the ICF up to €20,000 in Cyprus.

You cannot take a bonus and stand under that fund at the same time, because they belong to two different entities. Anyone who picks the bonus has given up the compensation fund, whether they realise it or not.

There is a quick indicator of which entity YOUR account belongs to: if you received a deposit bonus, you are almost certainly not under the Australian or Cyprus entity, because both ban this kind of promotion. Confirm it by typing the company name from your confirmation email into ASIC Connect.

On the Vietnamese side there is nothing more to discuss: the State Bank of Vietnam has not licensed any forex broker, so every dispute is handled outside the country.

Weigh both sides before opening an account

Strengths you can verify: multi-layer licensing, a long history since 2009, a minimum deposit of just 5 USD, a broad library of training material, Vietnamese-language support, and no deposit or withdrawal fees from the broker's side.

The weaknesses are just as clear: spreads on Standard/Micro accounts are wider than at ECN brokers, and you need Ultra Low for tight spreads; the bonus programmes come with conditions that are easy to misread if you skim.

And the 5 USD entry bar cuts both ways: it makes the broker easy to join, but it also pulls in many people without preparation who trade on impulse and blow their accounts. An easy broker to join does not make the market easy to profit from.

Do not trust anyone blindly, including us. Check for yourself: type the official domain by hand instead of clicking ads, look up the licence at the source on the regulator's website, and deposit a small amount and make one test withdrawal before depositing a large sum.

Spotted something inaccurate? Tell us and we will check it and publish a correction.