Is XM a Scam?

At FXCanary, we analyse broker safety through a multi-layered lens: regulatory standing, user experience data, corporate transparency, and operational anomalies. Our proprietary Scam Risk Score distills these into a single, actionable figure, ranging from 0 (low risk) to 100 (high risk).

For XM, the score stands at 27 out of 100 – a ‘Guarded’ rating. This is not alarmist, but it signals that serious concerns exist which traders must acknowledge before trusting this broker with their capital.

The score is built from concrete evidence: six regulatory licences, 0 recorded employees, 50 identified clone or impersonator sites, and a deeply troubling pattern of 78 withdrawal-related complaints, set against a backdrop of overwhelmingly negative user reviews on Trustpilot (2.3/5). We do not rely on rumour; every data point is cross‑checked against public registries, industry databases, and real user testimony.

XM operates through multiple entities, each regulated by a different authority. This is a common structure, but it introduces complexity – and potential risk – because the protections you receive depend entirely on which entity holds your account.

The CySEC licence (120/10) in Cyprus offers the strongest safety net for EU traders: mandatory client fund segregation, negative balance protection, and membership of the Investor Compensation Fund (CIF) covering up to €20,000. The UK branch, TRADING.COM MARKETS UK LIMITED, is also authorised by the FCA, but notably, our records show 0 employees – a glaring red flag that suggests this entity may be a dormant shell.

The ASIC licence (443670) in Australia once carried robust protections, but since ASIC’s 2021 intervention order, retail clients under this licence may face lower leverage and fewer safeguards than before. The DFSA (F003484) in the UAE and the FSCA (49976) in South Africa provide credible oversight, but compensation schemes in these jurisdictions are either limited or untested.

Then there are the offshore licences: the FSC in Belize (8557558) and the CMA in Kenya (233). These are widely regarded as weaker regulators, offering little to no meaningful client protection. If XM places you under one of these entities – often done for non‑EEA clients – your funds may not be segregated, and you may have no recourse in a dispute.

Our investigation confirms that XM’s multi‑licence model allows it to serve clients globally, but it also enables regulatory arbitrage. Traders must actively check which legal entity they are contracting with, because the difference between Cyprus and Belize is the difference between strong protection and near‑zero protection.

A staggering 50 clone or impersonator sites have been identified in relation to XM. This is not a trivial number; it indicates that scammers actively exploit the brand’s name to defraud unsuspecting traders.

Clone sites mimic the genuine broker’s website, often using a very similar URL or logo, and may even display stolen regulatory credentials. If a trader accidentally deposits money with a clone, recovery is almost impossible. The genuine XM group has warned about such scams on its official site, but the sheer volume of impersonation remains a serious reputational and safety hazard.

Our advice is unequivocal: always type the broker’s URL manually, never click on ads or email links, and verify the regulatory registration number directly on the regulator’s public register. The genuine XM entities are listed in the provided data, and any deviation should be treated as a scam.

User reviews form a critical pillar of our safety analysis. Across 3,146 Trustpilot reviews, XM scores just 2.3 out of 5, and the overwhelming majority of complaints centre on withdrawals. Of the 79 withdrawal‑specific mentions we isolated, 74 are negative.

These are not abstract grievances; they describe concrete, often alarming experiences. One trader reports depositing money and making a profit, only to be told they were ‘not eligible to withdraw profits using cryptocurrency’ and must first meet an arbitrary trading volume threshold. Another claims their withdrawal request was rejected, their account terminated, and additional documentation demanded – after they had already provided everything asked.

We see repeated patterns: accounts blocked immediately following profit‑taking, unexplained requests for additional KYC documents when a withdrawal is attempted, and funds frozen for months with no support. One user states: ‘from last 7,8 month I try & retry withdrow my payment from xm acount.. but I not received any solution from back office’. Such delays are indefensible in a market where legitimate brokers process withdrawals within 24–48 hours.

There are a handful of positive reports – some traders cite withdrawals processed in minutes – but these are drowned out by the volume of distress. Our analysis suggests that while small, early withdrawals may succeed, problems escalate sharply when a trader attempts to withdraw larger sums or profits.

A consistent theme in the negative reviews is the weaponisation of KYC (Know Your Customer) procedures. Brokers have a legal duty to verify identities, but XM appears – based on user testimony – to use this requirement as a tool to delay or deny withdrawals.

Multiple reviews describe submitting the requested documents, only to be told they need further verification after initiating a withdrawal. One trader writes: ‘I submitted all necessary documents and still unable to withdraw. It was a very terrible experience.’ Another had their account terminated after providing compliance documents.

This pattern is a major safety red flag. In our experience, genuine brokers do not spring last‑minute document requests when a client merely wants their own money back. The combination of winning a dispute with a profit (or a bonus) and then facing KYC hurdles is especially troubling, and it aligns with the 52 negative mentions we recorded under Account & KYC.

Every broker presents a mix of risk signals. For XM, the red flags are numerous and concrete: a dormant UK entity with zero employees, heavy reliance on offshore licences, 50 impersonator clones, 0‑positive‑vs‑62‑negative scam‑concern mentions, and a Trustpilot rating of 2.3. The withdrawal‑related complaints are not isolated; they form a clear, repeated narrative of frustration and alleged obstruction.

On the green flag side, XM does hold several respected licences – CySEC, ASIC, DFSA, FSCA – and some users genuinely praise quick deposits and occasional fast withdrawals. The broker also offers a wide range of instruments and low minimum deposits, which appeals to retail traders.

However, these positives do not outweigh the systemic risks. Our Scam Risk Score of 27 reflects this imbalance: XM is not a confirmed scam, but it operates with enough ambiguity, user complaints, and structural opacity to place it in a high‑vigilance category.

If you decide to proceed with XM despite the warnings, you must take active steps to mitigate your exposure.

First, determine which legal entity will hold your account. Avoid the Belize‑ and Kenya‑regulated entities if at all possible; insist on the CySEC‑regulated entity if you are an EU resident. Check that the entity’s registration number matches the regulator’s public database, and be absolutely certain you are on the genuine website, not a clone.

Second, approach bonuses with extreme caution. Many negative reviews mention account blocking after claiming a bonus or making profits from a no‑deposit bonus. If a broker’s terms allow it to retroactively disqualify your profits for ‘bonus manipulation’, your money is at risk.

Third, document everything: screenshots of all communications, deposit and withdrawal requests, and account statements. Withdraw profits frequently and in small amounts rather than letting a large balance accumulate. If you encounter delays or sudden document demands, escalate to the regulator in writing immediately.

Finally, consider whether the risk is acceptable for your trading style. Our role is not to tell you where to trade, but to ensure you do so with full knowledge of the dangers. For XM, that knowledge includes a significant probability of withdrawal friction, account freezes, and jurisdictional ambiguity. In our assessment, traders seeking a dependable, low‑friction broker would be wise to explore alternatives with cleaner user‑feedback profiles and more transparent corporate structures.