Is XMTORO a Scam?

When we at FXCanary sit down to judge whether a broker is safe, we do not rely on marketing pages or a slick website. We start with the hard, verifiable facts: the regulator on file, the licence number, the country of registration, the age of the firm, and any red flags that emerge from public records. For XMTORO, our records show a company called XMTORO AUS Capital Limited, registered in Australia, with a single ASIC licence on file — licence no 491139, under a Market Making (MM) authorisation. That is the foundation of our assessment.

But a licence alone is never enough. We cross-check the licence against the public register, we look at the firm's history, and we weigh the practical realities of trading with that entity. XMTORO is a very young company — founded on 29 September 2024, which makes it roughly 22 months old at the time of writing.

Our records also flag that there is no verifiable website or social-media presence tied to the official domain, xmtoro.com. That combination — a brand-new firm, a licence that may or may not be active, and no visible footprint — is precisely the kind of profile that demands caution. Our Scam Risk Score for XMTORO is 47 out of 100, which we classify as 'Guarded'.

The single most important fact in XMTORO's favour is the ASIC licence on file. ASIC, the Australian Securities and Investments Commission, is one of the most respected financial regulators in the world. A genuine ASIC licence brings with it a serious compliance regime: client money must be held in segregated accounts, the firm must meet capital adequacy requirements, and it must submit to ongoing supervision. For an Australian retail client, that is meaningful protection. ASIC also enforces strict conduct rules, and in recent years it has moved to restrict the leverage and product offerings available to retail traders — measures that reduce the risk of catastrophic losses.

However, we must be precise about what our records show. The licence number 491139 is listed on file, but the status field is blank — we do not have confirmation that it is currently active or that it covers the services XMTORO appears to offer. A licence that is suspended, cancelled, or that does not cover the actual business being conducted is worth far less than a clean, active authorisation.

We also note that ASIC does not operate a compensation scheme for retail investors in the way that, say, the UK's FSCS does. If an ASIC-licensed firm collapses, clients are not automatically reimbursed by a government-backed fund. Segregation of client funds is the primary safeguard, and that only works if the firm actually complies.

In our assessment, the most concerning element of XMTORO's profile is not the licence — it is the absence of any verifiable digital footprint. Our records state plainly: 'No verifiable website or social-media presence.' For a broker that claims to operate under the official domain xmtoro.com, that is a serious anomaly. A legitimate broker, even a small one, typically has a functioning website, some form of client-facing support, and at least a trace of activity on professional networks. The fact that we cannot verify the website raises the possibility that the domain is dormant, unreachable, or that the entity behind it is not actively operating in a transparent way.

This absence matters for two reasons. First, it makes independent verification nearly impossible. We cannot test the trading platform, check the spreads, or read the terms and conditions if the website does not load.

Second, it is a classic hallmark of a shell operation or a broker that is not genuinely committed to serving clients. A trader who cannot access the broker's own site cannot deposit funds, cannot read the risk warnings, and cannot reach support. In FXCanary's experience, that is not the profile of a broker we would recommend anyone trust with real money.

Our records show zero clone or impersonator sites for XMTORO — that is, we have not found other domains pretending to be this broker. That is a small positive, because clone fraud is rampant in the forex industry. Scammers routinely copy the name, logo, and website of a legitimate broker to steal deposits from unsuspecting traders. The fact that we have not identified such clones for XMTORO suggests that, at least so far, the name has not been widely targeted. But that could change quickly, especially if the broker gains visibility.

However, the absence of clones cuts both ways. A broker with no clones and no verifiable website may simply be too obscure to be worth cloning. The more pressing risk is that XMTORO itself could be mistaken for a different entity.

Our web search results returned references to a 'XMTORO' that was blacklisted by CONSOB, the Italian regulator, in September 2024, and by Spanish authorities in December 2024, for offering financial services illegally. Those actions were taken against an entity using the xmtoro.com domain — the same domain we have on file. We must be careful here: our records do not confirm that the blacklisted entity is the same legal person as XMTORO AUS Capital Limited.

But the coincidence is striking, and it is exactly the kind of ambiguity that a cautious trader must resolve before depositing a single cent.

Our web search results include a specific warning from the Italian Companies and Exchange Commission (CONSOB). On 25 September 2024, CONSOB ordered the black-out of Xmtoro's website because it was offering financial services illegally in Italy. A similar warning appears from Spanish authorities in December 2024, listing 'XMTORO, XMTORO ASSET MANAGEMENT LIMITED (XMTORO AM)' at the domain https://xmtoro.com. These are serious regulatory actions — they mean that at least one authority has determined that the entity behind that domain was not authorised to provide services in its jurisdiction.

We must be scrupulously factual here: our known facts do not explicitly state that XMTORO AUS Capital Limited is the same entity that CONSOB or the Spanish regulator blacklisted. The legal name on our file is XMTORO AUS Capital Limited, while the Spanish warning refers to 'XMTORO ASSET MANAGEMENT LIMITED (XMTORO AM)'. Those are different legal names.

It is possible that the blacklisted entity is a separate company that simply used the same domain, or that the Australian entity is the parent and the offshore entity is a related but distinct firm. Either way, the existence of these warnings is a material fact that any trader must weigh. In FXCanary's assessment, a broker whose domain has been blacklisted by two European regulators — even if the legal entity is not perfectly matched — carries a significantly elevated risk profile.

XMTORO has no independent user reviews on our platform or, as far as we can determine, anywhere else. That is not a neutral fact — it is a warning sign. Established brokers, even small ones, accumulate reviews over time: traders post about their experiences with deposits, withdrawals, spreads, and customer support. The complete absence of such feedback suggests that either the broker has very few clients, or that those clients have not been able to share their experiences. Both possibilities point to a firm that is not yet operating at a meaningful scale.

For a trader, the lack of reviews is a practical problem. You cannot learn from others' mistakes or successes. You cannot gauge whether withdrawals are processed promptly, whether the platform is stable, or whether support actually answers.

In the absence of independent verification, the only information you have is the broker's own marketing — and our records show that even that is thin. We cannot find a verifiable website, so we cannot even read the broker's claims. This is a case where the absence of information is itself the most important piece of information.

If, despite these warnings, you are still considering XMTORO, we urge you to take a series of concrete steps before committing any funds. First, verify the ASIC licence directly on the official ASIC register. Do not take our word for it, and do not trust the broker's own website. Search for 'XMTORO AUS Capital Limited' and licence number 491139, and check that the licence is active and that the services offered match the licence scope. If the licence is not found, or if the status is anything other than current, walk away.

Second, test the website xmtoro.com yourself. If it does not load, or if it redirects to a different domain, that is a deal-breaker. If it does load, read the terms and conditions, the risk disclosure, and the privacy policy.

Look for a physical address that matches the registered office — Level 3, 60 Castlereagh Street, Sydney NSW 2000, Australia — and check whether the firm discloses its legal entity name consistently. Third, start with a minimal deposit, if you must trade at all. Never deposit money you cannot afford to lose, and be prepared for the possibility that withdrawals may be difficult or impossible.

Finally, consider whether the regulatory warnings from CONSOB and Spanish authorities apply to the entity you are dealing with. If there is any doubt, the prudent choice is to avoid the broker entirely.

In FXCanary's assessment, XMTORO is a broker that fails the basic tests of transparency and verifiability. It has an ASIC licence on file, which is a positive, but the licence status is unconfirmed, the company is only about 22 months old, and there is no verifiable website or social-media presence. The regulatory warnings from European authorities, even if they may relate to a different legal entity, cast a long shadow over the domain. The absence of independent reviews means there is no track record to assess.

Our Scam Risk Score of 47 out of 100 — 'Guarded' — reflects this mix of a credible regulator on paper and a deeply concerning lack of operational evidence. We cannot call XMTORO a confirmed scam, because we do not have proof of fraud. But we can say, with confidence, that the risk of trading with this broker is far higher than with a well-established, fully verified firm. For most traders, the prudent course is to avoid XMTORO until it demonstrates a genuine, verifiable presence — a working website, active licensing, and a history of satisfied clients. Until then, we would treat any deposit as high-risk capital that may never be recovered.