Is XTB a Scam?

At FXCanary, we evaluate broker safety through a rigorous, evidence-led process that goes beyond surface-level credentials. Our proprietary Scam Risk Score synthesises dozens of data points, including regulatory status, user complaint patterns, impersonator activity, and operational transparency. For XTB, this model returns a score of 20 out of 100, placing it firmly in our ‘Low Risk’ category.

This low-risk assessment reflects XTB’s strong regulatory moorings in two top-tier European jurisdictions, supported by a long operational track record and a generally positive sentiment from a segment of its user base. However, no broker is without fault, and our investigation has uncovered significant friction points—particularly around withdrawals and customer support—that every prospective client should understand before depositing funds. We present this deep-dive so you can make an informed decision, not a leap of faith.

XTB Limited holds four licences, but two are particularly meaningful for retail trader protection: the Financial Conduct Authority (FCA) in the UK (no. 522157) and the Cyprus Securities and Exchange Commission (CySEC) in Cyprus (no. 169/12). Both regulators impose strict capital adequacy, client fund segregation, and negative balance protection rules. Under the FCA, eligible clients benefit from the Financial Services Compensation Scheme (FSCS) up to £85,000 per person. CySEC’s Investor Compensation Fund covers up to €20,000 per claimant.

The remaining licences—from Indonesia’s BAPPEBTI and ICDX—are local market-access approvals that do not offer equivalent investor safeguards. Traders should be mindful of which entity they are contracting with; an account opened under the Indonesian licence, for instance, would not fall under FCA or CySEC protection. In our review of public registers, all four licences appeared active and in good standing, but we caution that the presence of multiple licences can sometimes be used to route clients into less-protected entities.

From a structural standpoint, XTB’s regulatory umbrella is one of the stronger we have seen among brokers that also court high-risk retail traders with leverage up to 1:500. The FCA and CySEC oversight provides a meaningful layer of external discipline, which likely contributes to the firm’s relatively low scam risk score. However, regulatory cover does not immunise traders from operational grievances, as the user record shows.

During our investigation, we identified four clone or impersonator websites masquerading as XTB. Clones are fraudulent entities that copy a legitimate broker’s branding and details to deceive traders into depositing money with criminals. The presence of clones is not uncommon for well-known brokers, particularly those active in multiple regions. It does not imply wrongdoing by the legitimate firm, but it creates a serious hazard for unwary investors.

We advise verifying that you are on the official XTB website before logging in or sending funds. Check the domain name carefully—fraudsters often use subtle misspellings or different top-level domains. When in doubt, navigate to the broker’s site through a known search result or the regulatory register directly. XTB’s FCA licence page, for example, provides a link to the authorised website.

The single most concerning pattern in our analysis of 2,670+ Trustpilot reviews and other public feedback is the volume of withdrawal-related complaints. Out of 31 user comments on the topic, 28 were negative—a staggering imbalance that no trader should ignore. We counted 39 distinct withdrawal-related complaints across multiple platforms, referencing blocked accounts, unexplained delays, and repetitive document requests.

One user wrote, ‘The deposit was almost instant, but the withdrawal was blocked for no good reason! Customer service didn’t help at all and didn’t understand the problem!’ Another bluntly stated, ‘It’s impossible to withdraw your money, with these bunch of scammers.’ While we would not use the term ‘scam’ given the regulatory oversight, these repeated stories suggest a systemic friction in XTB’s disbursement process.

In many regulated environments, extended verification is a byproduct of anti-money-laundering rules, but the frequency and tone of the complaints imply poor communication and sometimes arbitrary enforcement. Some users reported being asked for the same documents repeatedly, and a few claimed that regional managers gave verbal compensation promises that were later ignored. These experiences are red flags for anyone who values liquidity and reliable access to their own funds.

Our assessment yields a mixed picture of a broker that is legitimate in structure but flawed in execution. Green flags include: (1) active regulation by the FCA and CySEC with client fund segregation and negative balance protection; (2) a large, real customer base with many positive reviews about the platform’s ease of use; (3) a low overall scam risk score of 20/100; and (4) transparent operations with publicly available financials and a listed address in Canary Wharf.

On the other hand, red flags must be acknowledged: (1) the stark negativity in withdrawal and support interactions, with 28 out of 31 withdrawal reviews being negative; (2) a Trustpilot score of 3.6 that is dragged down by serious complaints of blocked funds; (3) the presence of four clone websites, which can trap the unwary; and (4) a pattern of bonus promotions leading to disputes, with some users alleging that free stock offers were reneged upon after conditions were met.

We also note that XTB’s recorded employee count is zero. While this likely reflects the UK entity’s reliance on group resources rather than an empty office, it is an unusual statistic that warrants clarification from the broker. For a firm handling client money, complete clarity about operational scale is expected.

If you choose to trade with XTB, several practical steps can help mitigate the risks we have outlined. First and foremost, ensure you are opening an account under the entity regulated by the FCA or CySEC—do not accept a default routing to an offshore licence. This may mean specifying your jurisdiction explicitly during sign-up and verifying the legal entity name in your account agreement.

Before any significant deposit, familiarise yourself with the broker’s withdrawal process and document requirements. Have a certified copy of your ID, a recent utility bill, and bank statements ready. Keep a written record of all communications with support. If a withdrawal is blocked or delayed, escalate formally via the broker’s complaints procedure and, if necessary, to the Financial Ombudsman Service (FOS) in the UK or the Financial Ombudsman in Cyprus. Users have reported success going to the FOS when internal channels failed.

Be especially cautious with promotional offers that require locked-in trading volumes or delayed payouts. Several reviews describe free stock promotions that were withdrawn after the user had deposited. Treat such bonuses as marketing tactics, not as guaranteed benefits. Lastly, always type the broker’s URL directly or use a trusted bookmark; never click on unsolicited links. The clone threat is real, and the onus is on you to verify you are dealing with the authorised firm.