A trader-filed complaint referenced FSC Ref: A7IGOC is currently under active investigation by the Belize Financial Services Commission — the regulator overseeing one of XM's operating entities. The complaint concerns an unresolved fund dispute the trader escalated after XM's support did not address it internally. As of this review, the case remains open with no published resolution.
XM Group was founded in 2009 and built its reputation as a Cyprus-based broker under CySEC regulation. Over time it expanded internationally, using offshore entities licensed by the Belize FSC and Mauritius FSC to serve clients outside the EEA. That dual structure lets it offer higher leverage and different protections depending on where a trader is onboarded, while the Cyprus entity remains the group's regulatory anchor and public face.
Cyprus itself has a dense retail trading community, and local clients often assume they will be placed under CySEC's robust framework. In practice, many non-EEA or non-resident applicants are routed to the Belize or Mauritius entities, where protections are thinner. That routing decision, not the brand name, determines which regulator actually stands behind a given account when a dispute arises.
The regulatory score stays relatively high because XM's CySEC licence is genuine and the regulator is active, which is a strong baseline. That is why the overall index does not collapse. But the complaint and resolution scores are low: an active Belize FSC investigation (Ref A7IGOC) remains open, 61% of withdrawal complaints are unresolved after 30+ days, and account lockouts have no clear recovery route. Good licensing does not offset unresolved client harm.
The most significant entry is the regulatory escalation to the Belize FSC, because it moves a fund dispute from a support ticket into a formal investigation that is still open. Account lockout and full account deletion are more severe than delay-only complaints, since they cut off a client's access entirely rather than just slowing a payout. Withdrawal delays, a disputed USDT deposit, and execution issues around a US NFP release add to the pattern.
Independent fraud-monitoring reports have flagged "XM Saham Investment" as a separate, fraudulent operation suspected of misusing XM's name and branding to promote fake investment schemes on Facebook, Instagram, and Telegram. This is not XM Group — it is a clone impersonation scam that trades on a legitimate broker's reputation to mislead investors.
If you were contacted via social media with guaranteed-return promises using XM's name, this is very likely the clone scam, not the real broker. Always verify you're on XM's official domain and never send funds based on a social-media investment pitch.
| Entity | Regulator | Tier | Protection |
|---|---|---|---|
| XM Group (EU) Ltd | CySEC | Top-tier | ICF up to €20,000 |
| Trading Point of Financial Instruments Ltd | FSC Belize | Offshore | No compensation scheme — site of the active complaint |
| XM Global Limited | FSC Mauritius | Offshore | No compensation scheme |
Traders in Cyprus are most likely to be onboarded to the CySEC-regulated entity if they qualify as EEA clients, but applicants who fall outside that scope, or who are accepted through international channels, are typically assigned to the Belize or Mauritius offshore entities. The brand and platform look identical, so it is easy to assume CySEC protection applies when in fact the contracting entity may be offshore.
The protection difference is substantial. CySEC imposes strict leverage limits, negative balance protection, segregated client funds, and access to a compensation scheme. The Belize and Mauritius regimes are lighter, with fewer enforcement resources and no comparable investor compensation. That gap matters most when a withdrawal or account-access dispute escalates.
The documented pattern is a lockout after a 2FA or email problem, with no effective recovery path. In several cases users report being unable to regain access at all, and at least one reported full account deletion after a dispute. This 'one strike and you're out' dynamic is the most operationally dangerous issue in the file, because it can separate a client from their funds with little recourse.
For Cyprus traders, the practical precaution is to keep the entity name and regulator on the contract, retain all deposit and KYC records, and confirm which dispute route applies before funding. If access is lost, escalate in writing to the regulator named on the account, not just to support, and keep a dated trail. Do not rely on social-media recovery offers.
Not every independent source frames XM this negatively. BrokerChooser, a professional broker-review site that states it tracks 40,000+ brokers, currently assesses XM as "a legit broker" with "a clean track record" and "no major incidents," based on its regulatory tier and testing. We're including this for balance: reasonable, independent assessors can reach a more favorable overall conclusion than this file does — our file weights the active regulatory complaint and account-lockout pattern more heavily than a general safety assessment would.
| Broker | Regulatory | Complaint Severity | Resolution |
|---|---|---|---|
| XM Group | 4 | 1.3 | 2 |
| Pepperstone | 4.9 | 4.5 | 4.6 |
| IC Markets | 4.6 | 4.1 | 4.3 |
For Cyprus traders, XM presents a mixed file. The CySEC anchor is real and the brand has a long history, which is why it is not a scam in the ordinary sense. But an active Belize FSC complaint (Ref A7IGOC), 61% of withdrawal complaints unresolved after 30+ days, and a lockout pattern with no recovery path are serious unresolved issues. The offshore routing means many clients sit under weaker protection than they assume.
Practical steps: confirm in writing which entity holds your account and which regulator covers it; if it is Belize or Mauritius, size positions and deposits accordingly. Keep full records of deposits, KYC, and correspondence. Test a small withdrawal early. If access is lost, escalate to the named regulator and keep a dated trail. Treat clone entities like 'XM Saham Investment' as unrelated and avoid them.