Featured On
A trader-filed complaint referenced FSC Ref: A7IGOC is currently under active investigation by the Belize Financial Services Commission — the regulator overseeing one of XM's operating entities. The complaint concerns an unresolved fund dispute the trader escalated after XM's support did not address it internally. As of this review, the case remains open with no published resolution.
XM Group launched in 2009 and grew into a global forex/CFD brand. Its main regulated entity sits under CySEC in Cyprus, a top-tier authority. For many non-EU clients it routes business through offshore arms regulated by the FSC Belize and FSC Mauritius. That structure is common among large brokers, but it means the protections a client receives depend heavily on which entity holds the account, not on the XM brand itself.
Zimbabwean traders are typically onboarded to XM's offshore entity rather than the CySEC-regulated one, because the EU entity generally does not accept clients from outside its licensed jurisdictions. Local users often fund accounts via USD card payments, mobile money or crypto transfers, since Zimbabwe's domestic payment rails remain fragmented. That routing offshore is standard practice, but it places Zimbabwean clients under a weaker regulator than CySEC.
The regulatory score stays comparatively high (4.0/5) because XM's CySEC licence is real and actively supervised. The score is marked down only for the active Belize FSC complaint. Complaint volume and severity (1.3/5) and resolution reliability (2.0/5) are low because 61% of withdrawal complaints remain unresolved after 30+ days, and the documented lockout pattern shows users losing access with no recovery route. The gap between the two scores captures the core tension: a legitimate licence, but weak complaint outcomes.
The most significant entry in the ledger is the regulatory escalation — a formal, unresolved complaint (FSC Ref A7IGOC) now under active investigation by the Belize FSC. That is a step beyond routine user grumbling. Account lockouts and at least one reported full account deletion are more severe than simple withdrawal delays, because they remove the client's ability to access funds or records at all. Withdrawal delays, a disputed USDT deposit and disputed NFP execution issues round out a pattern of operational failures rather than proven theft.
Independent fraud-monitoring reports have flagged "XM Saham Investment" as a separate, fraudulent operation suspected of misusing XM's name and branding to promote fake investment schemes on Facebook, Instagram, and Telegram. This is not XM Group — it is a clone impersonation scam that trades on a legitimate broker's reputation to mislead investors.
If you were contacted via social media with guaranteed-return promises using XM's name, this is very likely the clone scam, not the real broker. Always verify you're on XM's official domain and never send funds based on a social-media investment pitch.
| Entity | Regulator | Tier | Protection |
|---|---|---|---|
| XM Group (EU) Ltd | CySEC | Top-tier | ICF up to €20,000 |
| Trading Point of Financial Instruments Ltd | FSC Belize | Offshore | No compensation scheme — site of the active complaint |
| XM Global Limited | FSC Mauritius | Offshore | No compensation scheme |
Zimbabwean clients are most often assigned to XM's offshore entity, not the CySEC-regulated European one. That means the account is governed by the FSC Belize or FSC Mauritius framework, which offers lighter supervision, less robust dispute resolution and no EU-level investor compensation scheme. The brand is the same, but the legal counterparty and the regulator standing behind it are different.
The protection gap matters. Under CySEC, clients benefit from stricter capital, reporting and complaint-handling rules, plus access to an investor compensation fund. Under the offshore entities, those safeguards are weaker or absent. A Zimbabwean trader should confirm in writing which entity holds the account before depositing, because that determines what recourse exists if something goes wrong.
The documented pattern is that account-access lockouts follow 2FA or email problems, and users report no working recovery path — described as "one strike and you're out." At least one user reported a full account deletion after a dispute. For a Zimbabwean trader relying on a single email address and phone number for 2FA, that is a real operational risk, especially where local network or email access can be intermittent.
Traders should keep independent records: screenshots of balances, trade history, deposit confirmations and all support correspondence, stored offline. Use an email account with strong recovery options and a phone number you control long-term. If locked out, escalate in writing to the entity's compliance contact and, where relevant, to the offshore regulator. Do not rely on a single recovery channel.
Not every independent source frames XM this negatively. BrokerChooser, a professional broker-review site that states it tracks 40,000+ brokers, currently assesses XM as "a legit broker" with "a clean track record" and "no major incidents," based on its regulatory tier and testing. We're including this for balance: reasonable, independent assessors can reach a more favorable overall conclusion than this file does — our file weights the active regulatory complaint and account-lockout pattern more heavily than a general safety assessment would.
| Broker | Regulatory | Complaint Severity | Resolution |
|---|---|---|---|
| XM Group | 4 | 1.3 | 2 |
| Pepperstone | 4.9 | 4.5 | 4.6 |
| IC Markets | 4.6 | 4.1 | 4.3 |
For Zimbabwean traders, the file reads as a legitimate but operationally risky broker. XM is genuinely licensed under CySEC and independently assessed as legit, so the scam label does not fit. But the active Belize FSC complaint (Ref A7IGOC), the 61% unresolved withdrawal rate after 30+ days, and the lockout-with-no-recovery pattern are material concerns. Zimbabwe's own regulator, SECZ, does not oversee XM, so local recourse is limited. The risk is concentrated in access and withdrawals, not in proven theft of client funds.
Practical steps: verify which entity holds your account before funding, prefer the CySEC-regulated entity if you qualify, and start with a small test deposit and withdrawal. Keep offline records of every transaction and support message. Avoid the unrelated "XM Saham Investment" clone on social media. Treat any 2FA or email change cautiously, and if access is lost, escalate in writing to both the entity and its offshore regulator without delay.