XM is the brand name of a group of forex and contracts for difference brokers that has operated since 2009 under the holding company Trading Point Holdings, with its main office in Limassol, Cyprus. The group is genuinely multi regulated, which is the single most important fact for anyone evaluating it, because the protection you get depends entirely on which legal entity your account is opened with. This profile explains the licenses, the protection differences, and how to confirm you are dealing with the real XM rather than one of the clone sites that imitate the name.
The text this rewrite replaces was doorway spam about a supposed "Fake XM" registered in Hong Kong, and it bore no relation to the real broker. Everything below is built from regulator registers and broker disclosures, not from that source.
XM Group and the company behind it
XM began in 2009 and has grown into one of the larger retail forex and CFD brands, reporting millions of client accounts across its entities. The parent, Trading Point Holdings, sits above several separately licensed operating companies, each authorized in its own jurisdiction. That structure is normal for a global broker, but it creates a trap: the logo at the top of the website is the same for every entity, while the legal protection underneath is not.
A reader who opens an account is contracting with one specific company named in the client agreement. In practice the entity is assigned by where the client lives, and most traders outside the European Union, the United Kingdom, Australia, and a few other regulated regions are routed to the group's offshore arm in Belize. Knowing which entity holds your money is the first step in any safety check.
The licensed entities and their regulators
The group publishes the following principal licenses, and each can be checked on the regulator's own public register:
- CySEC 120/10. Trading Point of Financial Instruments Ltd is authorized by the Cyprus Securities and Exchange Commission and falls under the European Union's MiFID framework.
- FCA 705428. Trading Point of Financial Instruments UK Ltd is authorized by the UK Financial Conduct Authority.
- ASIC AFSL 443670. Trading Point of Financial Instruments Pty Ltd is licensed by the Australian Securities and Investments Commission.
- DFSA F003484. Trading Point MENA Limited is regulated by the Dubai Financial Services Authority for the Dubai International Financial Centre.
- FSCA FSP 49976. XM ZA (Pty) Ltd is registered with the Financial Sector Conduct Authority in South Africa.
- Belize FSC. XM Global Limited is licensed by the Belize Financial Services Commission, an offshore regulator with no statutory investor compensation scheme.
The three most cited, CySEC, FCA, and ASIC, appear consistently across independent broker profiles that cross checked the public registers, and those are the numbers a reader should verify directly rather than trusting any summary.
How client protection differs by entity
Protection is not uniform across the group. EU clients booked with the CySEC entity are covered by the Investor Compensation Fund, with a cap near 20,000 euros. UK clients on the FCA entity are covered by the Financial Services Compensation Scheme, with a cap near 85,000 pounds. Both regimes also require client funds to be held in segregated accounts at rated institutions, which keeps customer money separate from the broker's own operating capital.
The Belize entity is different. Client funds are still held in segregated accounts, but there is no government backed compensation fund behind it. If that entity failed, a client's recourse would rest on the insolvency process and the segregation of assets, not on a statutory payout. Retail clients across the group receive negative balance protection, meaning they cannot lose more than the deposited amount, but that protection does not substitutes for a compensation scheme.
The practical lesson is blunt. The same brand name can sit above a top tier regulated entity with a compensation fund or an offshore entity with none, and the difference is decided by your country of residence, not by the marketing.
Clone-firm warnings and how to confirm the real XM
XM is a common target for clone firms, operations that copy the brand, colors, and wording of the real broker to steal deposits. The UK FCA has published warnings about clones imitating XM, and the pattern of multiple look alike domains is exactly what regulators tell consumers to watch for. A convincing website is not proof of authorization.
To confirm the real firm, open the client agreement before funding and read the legal entity name, then check that exact name on the relevant register, CySEC for Cyprus, the FCA for the UK, ASIC for Australia, the DFSA for Dubai, and the FSC or FSCA for the others. The official domains are xm.com and xmglobal.com; a slight misspelling or an unexpected regional domain is a red flag. If the entity in your agreement is not on a register you can verify, stop and ask the regulator before sending money.
Trading conditions and platform access
XM offers the MetaTrader 4 and MetaTrader 5 platforms across desktop, web, and mobile, which is standard for the industry and lets clients keep their tools if they switch brokers. The published minimum deposit is low, around 5 US dollars on the entry account types, which lowers the barrier to start but also makes it easy to trade with money a beginner cannot afford to lose.
Spreads are floating and vary by instrument and entity, with major pairs such as EUR/USD quoted from well under two pips on standard accounts according to the group's own materials. Leverage is the item to watch: EU and UK clients are restricted to the retail caps set by their regulators, often near 30 to 1 on major pairs, while offshore clients can be offered leverage as high as 1000 to 1. High leverage multiplies both gains and losses and is a leading cause of wiped out retail accounts.
The product list spans more than 1,000 instruments, including over 55 currency pairs alongside metals, energy, stock indices, and share CFDs, all inside a single multi asset account. The breadth is real, but for a retail client the instrument count matters far less than the entity, the leverage, and the compensation scheme, which is where the actual risk sits.
Where XM does not operate
The group does not accept residents of the United States, Canada, or Japan, and availability in other countries depends on local licensing. A trader in a restricted or unlicensed market who still finds a signup path is very likely being routed to the Belize entity, or worse, landing on a clone site. Always confirm that your country is served by a licensed entity before opening an account.
How to verify an XM account before funding
- Read the client agreement first. The legal entity name there is the only thing that determines your protection.
- Check that name on the regulator register. Use CySEC, FCA, ASIC, DFSA, FSCA, or the Belize FSC, not a link from the broker's site.
- Identify the compensation scheme. If the entity is CySEC or FCA, note the ICF or FSCS cap; if it is Belize, accept that no scheme applies.
- Test with a small withdrawal. Fund the minimum, place one small trade, and confirm the payout works before committing more capital.
- Watch for clones. A copied brand, a near miss domain, or pressure to deposit fast are warnings, not conveniences.
Risks and limits to weigh
Forex and CFD trading is high risk. Most retail clients lose money, leverage can erase a balance faster than expected, and an offshore entity leaves you without a compensation fund if the broker fails. Even on a regulated entity, a dispute still runs through that entity's jurisdiction and ombudsman, not through your home country's system, unless passporting applies.
This profile is informational and not investment, legal, or tax advice. License numbers and entity routing change, and clone sites appear and disappear. Confirm the present status on the regulator registers named above and on XM's own official disclosures before acting, and never deposit funds you cannot afford to lose entirely.