XM

Confidence: 4/10 — the lowest-scoring section. The first pass carried a wrong CySEC number, a garbled Belize licence, a Mauritius digit error, a wrong Kenya date, a defunct prudential category and a false "no enforcement" conclusion. All corrected below.

Two corrections worth stating plainly. "855755", circulating widely as a Belize licence, is not a licence — it is a stray registration-format artefact. And Trading.com's own disclosure still describes it as a "Full-scope IFPRU 730K investment firm", a category abolished on 1 January 2022 when IFPR/MIFIDPRU replaced it.

Enforcement actions — disclosed, not omitted

NFA — $50,000, Trading.com Markets Inc (US), 2024. The NFA Business Conduct Committee issued a Complaint 27 February 2024. On 8 May 2024, pursuant to Trading.com's settlement offer, the BCC ordered a $50,000 fine and a cease-and-desist from violating NFA Financial Requirements Sections 11(e), 13(a) and 15, and Compliance Rules 2-36(e) and 2-48(a). Charges: failing to file timely daily and monthly financial reports, failing to comply with Forex Dealer Member internal financial controls, and failure to supervise. BASIC case 24BCC00002. Recent, material, entirely absent from the first research pass.

CySEC — €5,000, 27 May 2013. Against Trading Point of Financial Instruments Ltd, for transgression of Article 18 of the Investment Services, Activities and Regulated Markets Law of 2007 and infringement of Directive DI144-2007-01 — failure to make sufficient provision to protect and indemnify client funds, alongside cited AML irregularities. Small and old, but it contradicts any claim of an unblemished record.

DFSA notice W690/2020 is not enforcement. It is a routine modification/waiver under Article 25 of the Regulatory Law 2004, in force to 30 June 2020. Stated explicitly because the reference surfaces in scraped content where it reads as a sanction.

Clone warnings — against impersonators, not XM. Spain's CNMV has warned on XM-SIGNALS.COM; the Dutch AFM and Australia's ASIC have both alerted on hybridforexmarket.com for impersonating Trading Point of Financial Instruments Pty Ltd.

Open item. A systematic sweep of national unauthorised-firm warning lists (BaFin, CONSOB, CNMV, AMF, FSMA, CVM Brazil, Canadian CSA, SEBI) was not completed in the fact-check budget. We do not claim XM is absent from all such lists — we state we have not finished checking. Separately, FinTelegram assigns an "Orange" compliance rating to the offshore XMTrading/XMGlobal operation.

Confidence: 5/10 — figures through FY2022 accurately quoted from statutory filings, but FY2023 and FY2024 accounts are since filed and not incorporated.

Trading Point Holdings Ltd is private and publishes no audited consolidated statements. The only audited window is the UK subsidiary — a narrow one.

It is tempting to read this as XM having abandoned Tier-1 retail, preserving the FCA and CySEC licences for reputational cover while routing growth offshore. We present that as a hypothesis, not a finding. The data stops at 2022, two further years are on file and unexamined, and the UK company is small beside the Cyprus one. The CySEC entity's audited statements are the material document, and their absence is the largest analytical gap in any public research on this broker.

The group claimed "over 10 million clients" in early 2024 and 15–20 million across 190 countries by 2025–26. These are cumulative registered accounts, self-reported, not audited counts of funded active traders. Revenue per client, acquisition cost and group EBITDA are undisclosed.

Investor compensation — a widely mis-stated figure. CySEC-entity clients are covered by the Cyprus Investor Compensation Fund at the lower of 90% of the covered claim and €20,000 — not a flat €20,000, as most review sites state. Offshore clients have no compensation scheme at all.

Confidence: 6/10 — account terms and execution policy documented in primary filings; several performance claims are marketing.

Around 1,400 instruments: 57 FX pairs, 1,300+ equity CFDs, 60 crypto CFDs, 10+ soft commodities, 5 energy contracts, major indices — on MT4, MT5, WebTrader and proprietary apps.

Execution model. XM's Order Execution Policy confirms the firm acts as Principal — counterparty to client trades — and is the "sole execution venue." This is a B-book market-maker model: disclosed, legal, common, and it means the broker is on the other side of your position.

Claims we do not treat as verified. The "99.35% of orders executed under one second" figure has appeared in XM marketing since the 2016 Usain Bolt campaign and has never been independently tested. GOLD24-7, the weekend gold CFD launched 6 August 2026, is confirmed by press release with Stavri Morti quoted — but the widely-repeated "~10 pip spread, 1:250 leverage" specifications appear in no company release and seem to originate from affiliate sites. Negative Balance Protection is contractual in the EU, UK and Australia; XM states it applies offshore, but this could not be confirmed in the Belize, Seychelles or Mauritius client agreements.

Islamic accounts. Swap-free with no widened spreads or administrative fees per company documentation — genuinely more competitive than peers who claw the cost back through spreads. As across the industry, no external Sharia supervisory board is named.

Beyond cards, wires, Skrill and Neteller, XM's regional payment integration is a genuine competitive strength: PIX, Boleto and PicPay (Brazil), M-Pesa (Kenya), UnionPay, Dragonpay and FasaPay (Asia), plus localised bank transfers.

Gulf-specific rails — mada, KNET, STC Pay — are not documented in XM's corporate disclosures, a notable gap relative to MENA-focused competitors. Withdrawal friction is the dominant complaint theme and is covered in Reputation below.

Confidence: 7/10 — terms sourced from XM's published T&Cs but not confirmed against current 2026 terms per entity.

Bonuses are geo-fenced to the Belize and Seychelles entities and prohibited under CySEC, FCA and ASIC rules on financial inducements. The $30 no-deposit bonus is granted on KYC verification with no funding required.

Terms are restrictive and worth reading before treating the offer as free capital. Bonus funds are never withdrawable — they function only as margin to absorb drawdown. Profits earned on the no-deposit bonus require roughly 50 micro lots (0.5 standard lots) and 5 round-turn trades to unlock. A nullification clause removes active bonuses proportionally the moment any real funds are withdrawn.

These parameters come from XM's own terms documents. Current 2026 terms per entity are not independently confirmed and should be verified before relying on them.

Confidence: 4/10 — the first pass conflated XM's Trustpilot score with a third party's and omitted two major review platforms entirely.

Polarised reviews are typical for CFD brokers; XM's scale amplifies both ends.

The dominant complaint theme is withdrawal and KYC friction, not execution. Traders in emerging markets — India via UPI most frequently — report multi-day to multi-week delays on local gateways and international wires. A distinct recurring pattern involves XM Global withholding balances pending exhaustive AML provenance documentation, particularly for USDT deposits. Users typically read this as bad faith; it is at least equally consistent with the AML obligations attaching to high-risk offshore crypto funding. Either way, communication during these holds is consistently described as poor — a service failure regardless of the compliance rationale.

Positive sentiment clusters around execution quality and platform stability in volatile sessions. The technology side of the business draws materially fewer complaints than the money-movement side.

Awards and sponsorships — one correction that matters

Confidence: 3/10 — the lowest score in the fact-check, caused by a single significant error.

XM's awards come predominantly from Global Forex Awards, Capital Finance International and similar expo programmes — sponsorship-funded commercial events, not independent assessment.

The Chicago Bulls, Legia Warsaw and BSC Young Boys sponsorships frequently attributed to XM are not XM's — they belong to Plus500. Flagged prominently because the misattribution recurs across scraped review sources and would be straightforwardly false if published.

XM's verified brand association is Usain Bolt, a three-year global ambassadorship announced 14 November 2016, running approximately 2016–2019.

Public disclosure here is thin — typical for broker B2B divisions — but the channel is central to how XM actually grows.

The firm operates an extensive Introducing Broker and affiliate programme through the Belize entity, with revenue-sharing and a published Master IB agreement. That agreement forbids partners from bidding on branded keywords, misrepresenting themselves as the XM corporate entity, or hosting promotional material on sexually explicit or discriminatory sites.

The structural risk is enforcement. XM's growth depends on thousands of independent operators running local Telegram, WhatsApp and Facebook channels, and aggressive guaranteed-return marketing by affiliates is a persistent brand and compliance exposure that contractual guardrails alone do not resolve. The 2024 NFA supervision charge sits adjacent to this: supervision failures in one entity invite scrutiny of oversight across a decentralised distribution model.

Consider XM if you:

• Are starting with very small capital — the $5 minimum across four account types is genuinely accessible, not a marketing artefact
• Trade from an emerging market where localised rails (M-Pesa, PIX, UnionPay) materially reduce friction
• Want a swap-free Islamic account without the widened-spread clawback most competitors apply
• Value platform stability and execution consistency over the tightest available spread
• Are onboarding through the CySEC, FCA or ASIC entity, where leverage is capped and compensation applies

Look elsewhere if you:

• Need tight spreads — Ultra Low and Zero are competitive, Standard and Micro are not
• Want audited group financials before committing significant capital; XM publishes none
• Are likely to withdraw via a local gateway or crypto — this is where documented friction concentrates
• Would be onboarded offshore and expect Tier-1 protections; Belize, Seychelles and Mauritius carry no compensation scheme
• Are motivated primarily by the $30 no-deposit bonus — unlock terms are demanding and the nullification clause is aggressive

Editorial standard: This profile draws from two independent research passes — a corporate-intelligence report (Gemini Deep Research, 13 Aug 2026) and a primary-source fact-check (Claude Compass, 14 Aug 2026). Where they disagreed, we published the fact-check. All financial figures are labeled by source; XM publishes no audited consolidated group accounts. All licence numbers are corrected against primary registers. All adverse regulatory actions known to us — including two enforcement fines the first pass missed entirely — are surfaced, not omitted. Per-section confidence scores are Compass's corrected figures.

This profile results from two independent research passes: a corporate-intelligence report (13 Aug 2026) and a primary-source fact-check (14 Aug 2026) that verified licences against the CySEC, FCA, ASIC, DFSA, UAE CMA (then the SCA), CMA Kenya, FSCA, FSC Belize, Seychelles FSA and FSC Mauritius registers, and independently located two enforcement actions the first pass missed.

Corrections applied against the first pass and common third-party sources:

• CySEC licence — 120/10, not "120/108"
• Chicago Bulls / Legia Warsaw / BSC Young Boys — Plus500's sponsorships, not XM's. Removed entirely
• Current US CEO — Theofanis Pantelides (since Dec 2025). Søren Haagensen moved to a non-executive board seat Nov 2025
• Parent registration — HE 322690, not "C322690"
• UK entity incorporated 12 Feb 2015 (Companies House 09436004) — not conflated with the Cyprus holding company's 5 June 2013 incorporation
• Belize "855755" — not a licence number. Removed; reported licences are 000261/397 and 000261/309
• Mauritius — GB23202700, not "GB232027005"
• Kenya CMA licence granted September 2025, not February 2026; entity is TPXM Global Kenya Limited
• ICF coverage — 90% of the covered claim capped at €20,000, not a flat €20,000
• Trustpilot "1.2/5" — Forex Peace Army's own rating, misattributed to XM
• IFPRU 730K flagged as defunct (superseded by MIFIDPRU, 1 Jan 2022)
• DFSA W690/2020 clarified as a routine waiver, not an enforcement action
• NFA and CySEC fines added — the first pass concluded "no disciplinary actions," which is false

We do not accept as verified: the GOLD24-7 "10 pip / 1:250" specifications, the "99.35% of orders under one second" statistic, universal Negative Balance Protection on offshore entities, the UAE CMA register listing, "cannot hold client funds" as a characterisation of the UAE CMA (formerly SCA) Category 5 permission, any purchase price for the xm.com domain, and the identity of the Group Chief Risk Officer.

Open items: FY2023 and FY2024 UK statutory accounts are filed and should be pulled. The CySEC entity's audited statements — far more material than the UK subsidiary — remain unexamined. The national unauthorised-firm warning-list sweep is incomplete.

Last verified: August 2026. Regulatory status, financial figures and product terms change frequently — verify current company disclosures before making trading decisions. This profile is editorial content, not financial advice.