Is XM Legit and Safe in 2026? Regulation Review

XM has been around since 2009 and claims over five million clients, but the broker that serves your country isn't necessarily the one advertising on your Instagram feed. XM operates through four separate legal entities, each with different regulators, different licence numbers, and different protections for your money.

If you're depositing $100 or $1,000, you need to know which entity holds it, whether segregation is mandatory, and what recourse you have if something goes wrong. This review walks through XM's regulatory setup, which licences protect which traders, and where the broker stands on safety in 2026.

Which XM entity you're trading with

XM doesn't operate under a single global licence. The entity that opens your account depends on where you live and which website you signed up through.

XM Global Limited (FSC Belize, licence SD010) serves most of the broker's emerging-market client base: traders in Asia, Africa, and the Middle East who fall outside EU or Australian jurisdiction. Belize's Financial Services Commission is an offshore regulator with lighter capital requirements and no compensation scheme.

Trading Point of Financial Instruments Ltd (CySEC 120/10) is the Cyprus entity serving European clients. CySEC is a European Securities and Markets Authority member, so it enforces 1:30 retail leverage caps, negative-balance protection, and membership in the Investor Compensation Fund (ICF), which covers up to €20,000 per client if the firm fails.

Trading Point of Financial Instruments Pty Ltd (ASIC 443670) handles Australian clients. The Australian Securities and Investments Commission caps retail leverage at 1:30 on major pairs, mandates negative-balance protection, and requires membership in the Australian Financial Complaints Authority scheme, though there's no statutory compensation fund.

Trading Point MENA Limited (DFSA F003484) operates from the Dubai International Financial Centre and serves traders in the UAE and surrounding jurisdictions. The Dubai Financial Services Authority is a well-regarded emerging-market regulator, but it doesn't offer a government-backed compensation scheme.

You can check which entity appears on your account-opening forms and in your client agreement. The regulatory footer on XM's website changes depending on your IP address, which is the first clue to which entity you're being funnelled into.

What each regulator actually requires

Regulation isn't a binary safe-or-not signal. It's a spectrum of capital rules, reporting duties, and client protections that vary sharply across jurisdictions.

CySEC (Cyprus)

CySEC-regulated brokers must hold a minimum of €730,000 in regulatory capital and submit quarterly financial reports. Client funds are segregated in Tier 1 banks, meaning your deposits sit in accounts separate from the firm's operating cash. If XM's Cyprus entity fails, the ICF covers up to €20,000 per claimant.

Retail traders under CySEC face 1:30 leverage on major pairs, 1:20 on minors, and 1:10 on exotics. Negative-balance protection is mandatory, so you can't lose more than your account balance even if a flash crash blows past your stop.

ASIC (Australia)

ASIC imposes similar leverage caps to CySEC and requires segregated client accounts. XM's Australian entity must meet a minimum net tangible asset threshold and file annual audits with a registered auditor. There's no compensation fund, but clients can take disputes to the Australian Financial Complaints Authority, which can award up to AUD 1.08 million if the broker is found at fault and is still solvent.

FSC (Belize)

Belize's FSC has lower capital requirements and no retail leverage caps, which is why the XM Global entity can offer up to 1:1000 leverage to clients in Asia, Africa, and parts of the Middle East. Segregation is stated in XM's terms, but it's not enforced with the same rigour or third-party audits you see under CySEC or ASIC. There's no compensation scheme, so if the entity collapses, you're relying on insolvency proceedings in Belize.

DFSA (Dubai)

The DFSA requires annual audits, segregated client funds, and detailed disclosure of risks. It's one of the stronger emerging-market regulators, but like Belize, it offers no statutory compensation fund. Leverage caps are typically 1:100 to 1:200 for retail clients.

How XM protects client funds

XM states that client deposits are held in segregated accounts with Tier 1 banks. Segregation means your money isn't mixed with the broker's corporate revenue, so if XM defaults on a creditor, those deposits aren't part of the bankruptcy estate.

Under CySEC and ASIC, segregation is a legal requirement backed by regular audits. Under FSC Belize, it's a contractual promise, which is harder to verify without third-party enforcement. XM hasn't published independent audits of its segregated accounts for the Belize entity, so you're taking the broker's word.

XM does not offer negative-balance protection to clients under the Belize entity. If you're trading with 1:500 leverage and a major pair gaps 300 pips against you, the broker reserves the right to chase the deficit. CySEC and ASIC clients are protected from this scenario by regulation.

Trust signals and red flags

XM's Trustpilot score sits at 2.2 out of 5 across 3,201 reviews, which is weak compared to peers like Exness (4.7/5, 30,906 reviews) or FP Markets (4.8/5, 10,280 reviews). Common complaints centre on withdrawal delays, unresponsive support, and requotes during volatile markets.

The broker has operated since 2009 without a major regulatory action or client fund theft, which counts in its favour. It sponsors high-profile sports teams and runs a large affiliate network, which shows it's investing in long-term brand equity rather than a pump-and-dump scheme.

That said, XM's marketing pushes high leverage hard, particularly in emerging markets. Banners promising 1:1000 leverage and $50,000 demo competitions are designed to attract inexperienced traders who don't yet understand position sizing. That's legal under Belize's FSC, but it's a business model built on churn rather than client success.

Comparing XM to safer alternatives

If you're choosing a broker based on regulatory strength and client protections, you'll find better options that still serve the same markets XM targets.

• [Exness](/reviews/exness) is regulated by CySEC, FSCA, and FSA (Seychelles). It offers a $10 minimum deposit, spreads from 0.0 pips on the Zero account, and swap-free Islamic accounts. Exness has a 4.7 Trustpilot rating and strong traction in the UAE, Vietnam, Thailand, the Philippines, Indonesia, Malaysia, Pakistan, and India. The CySEC entity gives you ICF coverage if you're in the EU; other clients trade under FSCA or FSA, which are stronger than Belize's FSC.

• [Vantage](/reviews/vantage) holds licences from ASIC, FCA, CIMA, and VFSC. The $50 minimum deposit is accessible to most emerging-market traders, and spreads start at 0.0 pips on the Raw ECN account. Vantage scores 4.4 on Trustpilot with 14,573 reviews and serves Vietnam, Thailand, the Philippines, Indonesia, Malaysia, Hong Kong, Pakistan, and the UAE with local payment rails.

• [Axi](/reviews/axi) is regulated by FCA, ASIC, DFSA, and FSA (Seychelles). It has a $0 minimum deposit, spreads from 0.0 pips on the Pro account, and swap-free Islamic accounts. Axi's Trustpilot score is 4.1 across 7,523 reviews. It's a strong choice for traders in Vietnam, Thailand, Indonesia, Malaysia, and the UAE who want Tier 1 regulation without a high deposit barrier.

All three brokers offer the same MT4/MT5 platforms XM does, along with swap-free options for Muslim traders. The difference is in regulatory oversight and client sentiment. If safety is your priority, Exness, Vantage, and Axi each offer clearer regulatory paths and stronger compensation schemes than XM's Belize entity.

What happens if XM collapses

Your recourse depends entirely on which entity holds your account.

If you're a CySEC client and XM's Cyprus entity goes bust, the Investor Compensation Fund covers up to €20,000. The claim process takes months, and you'll need to prove your account balance with statements, but the fund is real and has paid out to clients of failed brokers in the past.

If you're an ASIC client, there's no compensation fund, but you can escalate disputes to the Australian Financial Complaints Authority. If the broker is solvent enough to pay an adverse ruling, you can recover up to AUD 1.08 million. If it's insolvent, you're an unsecured creditor.

If you're under the Belize entity, you're relying on Belize's insolvency law and the broker's voluntary segregation. There's no compensation scheme, no ombudsman, and limited legal precedent for retail forex claims in Belize courts. You'd likely wait years for a fraction of your deposit, if anything.

This is why the entity matters more than the brand. XM's marketing is global, but its legal structure is fragmented, and the protections you get vary by two orders of magnitude depending on which company name appears on your contract.

Is XM legit?

Yes, in the sense that it's a licensed broker that processes withdrawals and hasn't been accused of outright fraud. It's been operating for 17 years, holds four regulatory licences, and serves millions of clients without disappearing overnight.

Is it safe? That depends on your definition. If you're in the EU or Australia and you're assigned to the CySEC or ASIC entity, you get strong regulatory oversight, mandatory segregation, and some level of compensation if the firm fails. If you're in Asia, Africa, or the Middle East and you're trading under the Belize entity, you're accepting offshore regulation, no compensation scheme, and high leverage that can wipe your account in minutes.

XM's 2.2 Trustpilot score is a warning sign. Withdrawal delays, requotes, and unresponsive support are recurring themes in recent reviews, and the broker's marketing leans heavily on bonuses and leverage rather than spreads, execution, or transparency. That's not the profile of a broker built for serious traders.

If you're comparing brokers and you value regulation, check whether your country routes you to the CySEC, ASIC, or Belize entity. You can verify this by reading the client agreement and checking the company name and licence number in the footer. If it says XM Global Limited and FSC Belize, you're getting the weakest regulatory setup in XM's group.

For a safer alternative with lower spreads and stronger oversight, compare Exness, Vantage, and Axi side by side on our broker comparison tool. All three serve the same emerging markets XM does, but with better Trustpilot scores, tighter spreads, and clearer regulatory structures.

Practical steps before you deposit

Before you open an XM account, or any account, take these steps to verify what protections you're actually getting.

1. Check the legal entity name in the account-opening terms. Don't assume the entity in the ad is the one holding your money.

2. Look up the licence number on the regulator's public register. CySEC's is searchable at cysec.gov.cy, ASIC's at asic.gov.au, and Belize's FSC maintains a list of active licences on its website.

3. Read the client agreement section on negative-balance protection and compensation. If those clauses are missing or vague, you're not covered.

4. Test a small withdrawal before you deposit serious money. If the broker delays a $50 withdrawal, it'll delay a $5,000 one even longer.

5. Compare spreads and commissions on the account type you'll actually use. XM's Standard account spreads start at 0.6 pips, which is wide compared to raw-spread brokers like Exness or Vantage.

You can find detailed regulatory breakdowns for dozens of brokers in our verification guide and see what happens to your money if a broker fails in our insolvency explainer.

Open a demo account first, test execution during the London or New York session, and read recent Trustpilot reviews sorted by date. If you see a pattern of withdrawal complaints in the last three months, that's a more useful signal than any marketing promise.

Ready to trade?

Compare the top forex brokers side-by-side. spreads, regulation, platforms, deposit methods.