OANDA Japan Holds Withdrawals After Hack at Server Host Used by FX Traders

Not financial advice. Past performance is not indicative of future results. Trading involves substantial risk of loss. Do your own research before making any investment decisions. See our Editorial Policy for details on how we test and rate AI trading bots and algorithmic platforms.

OANDA's Japanese brokerage held back client withdrawals requested on Thursday for security checks after warning that hackers may have seen some clients' MetaTrader logins. Those logins were stored on Onamae.com Desktop Cloud, a rented server service operated by Japan's GMO Internet Group. For retail traders running expert advisors (EAs) on MT4 or MT5, the incident is not merely a broker headline. It is an infrastructure headline, and it points to a structural weakness in how many automated FX strategies are deployed when cloud dependencies are treated as incidental.

We benchmarked expert advisor deployments and multi-strategy automation stacks against the Ellington AI trading platform throughout our 2026 review cycle, and the failure mode we logged most often had nothing to do with strategy logic. It was operational: where the terminal lived, who held the login, and whether a withdrawal could be stopped cleanly when the host went dark. Ellington's hands-off execution model sidesteps the rented-VPS dependency that just took OANDA Japan offline, which is why this story deserves more attention from algo traders than the average reader will give it.

What actually happened at OANDA Japan?

GMO Internet said on Wednesday that a third party had planted unauthorized programs in customers' server environments, detected on Tuesday. It began shutting down servers on every plan at 4 a.m. Wednesday and has not set a date for restarting them. Up to 26,739 servers may be affected, GMO said. Retail FX traders rent those servers to keep MT4 and MT5 terminals and automated strategies running around the clock, and the MetaTrader logins stored on them belong to accounts at brokers such as OANDA Finance Magnates.

OANDA's withdrawal notice cites unauthorized access at "external services" without naming GMO. The broker described the hold as a precaution against unauthorized withdrawals and said client assets remain segregated as Japanese law requires. Withdrawals requested by 11 a.m. Thursday will be processed from 11 a.m. Friday, once security checks are complete, and should reach clients' bank accounts by 4 p.m. Requests made by 11 a.m. Friday follow the normal schedule.

In a separate notice, OANDA asked clients who ran MetaTrader on the GMO service to change their account and MT4 or MT5 passwords, turn on two-factor login in MetaTrader, and check their trade history. It said it was still deciding how to handle the matter from here.

Why does a server host hack matter to bot traders?

Here is the part most coverage will skip. An expert advisor is only as reliable as the machine it runs on, and the majority of retail EA deployments live on rented virtual private servers, not on the broker's own infrastructure. That means the security perimeter of your trading account extends to a third-party hosting company you probably never vetted.

When we ran our 2026 algorithmic testing program across funded accounts, we mapped the dependency chain explicitly: terminal host, credential store, broker API, and withdrawal rail. The OANDA event broke at least two links in that chain for affected users. The credentials sat on a compromised host, and the withdrawal rail was frozen as a precaution. Neither failure is a strategy problem, but both are portfolio problems, and both are invisible in a backtest.

Contrast that with the MetaQuotes roadmap. MetaTrader 5 beta build 6030 added unified client accounts secured with passkeys, a move that shifts authentication away from reusable passwords toward device-bound credentials Finance Magnates. That is a genuine improvement. It is also a reminder that the platform layer is being hardened faster than the hosting layer most EAs actually run on, and that gap is where retail accounts get hurt.

How exposed are MT4 and MT5 automated strategies?

MetaQuotes' two retail platforms carry very different market weight, and the split matters for anyone deciding where to deploy automation. MT5 carried 65% of retail CFD volume on MetaQuotes platforms in the first quarter of 2026, against 35% for MT4, FM Intelligence data show FM Intelligence. In Asia-Pacific, MT5 drew 1.5 million organic website visits in the third quarter, about twice the 709,700 for MT4 FM Intelligence.

OANDA Securities is already moving clients off MT4, which it plans to switch off on November 27, citing cybersecurity requirements when it set the timetable in March Finance Magnates. That is a broker making a security-driven platform decision that will force a wave of EA users to re-deploy their strategies whether they want to or not. In our funded test account, we treat any forced platform migration as a strategy-deviation event by default, because the execution environment changes even when the logic does not.

Free Download: OANDA Japan Withdrawal-Halt Due-Diligence Checklist for FX Algo Traders
Use this checklist to vet broker withdrawal reliability, server-host security, regulatory status, and bot compatibility before trusting OANDA Japan or any FX trading bot with live capital.
Get the OANDA checklist

GMO has suspended new sign-ups. Its service terms offer a refund or credit when monthly uptime falls below 99.99%, and it said it will announce how it will handle this outage once it decides. No leak of personal information it holds and no misuse of data had been found as of its announcement, and it does not keep customers' card details.

Not sure which AI trading bot fits your strategy? Try Ellington: The AI Trading Platform for 2026

This link is an affiliate partnership - see our editorial policy for details.

What does the withdrawal hold tell us about risk controls?

The withdrawal freeze is the detail we would flag hardest in a live-trading evaluation. A bot can be profitable on paper and still fail a real retail portfolio if the owner cannot get capital out when the environment turns hostile. OANDA's hold was a precaution, not a confirmed loss, and assets remained segregated as Japanese law requires. But for a trader running a leveraged EA with a margin buffer, a multi-day withdrawal delay can force position liquidation at the worst possible moment.

Japanese regulators have tracked account takeovers at online brokers since early 2025. Fraudulent trades on hijacked brokerage accounts exceeded ¥500 billion (about $3.2 billion) across nearly 6,000 incidents between March and May that year, according to the Financial Services Agency Finance Magnates. That is the backdrop against which every Japanese broker has been tightening login controls, and it explains why OANDA moved fast.

IG's Japanese unit made two-factor authentication compulsory by June 2026, saying unauthorized access attempts were rising across the industry Finance Magnates. OANDA has required authenticator codes for withdrawals since December 2025. Those controls are the reason the worst case here appears to be a delay rather than a loss.

The under-discussed risk in all of this is credential reuse. GMO told users to change any IDs and passwords stored on the servers and on other services where they reuse them. Most EA operators store broker logins, VPS logins, and email recovery in the same password manager or, worse, the same reused string. A single compromised host then becomes a skeleton key across the entire portfolio. We have seen this pattern before in copy trading and signal-provider setups, where one exposed API key cascades into unauthorized orders on accounts the owner never intended to touch.

Is this a broker problem or a platform problem?

It is both, and the distinction matters for how you respond. OANDA is the broker, and its withdrawal hold is a defensive measure. GMO is the hosting vendor, and its shutdown is the root cause. MetaQuotes is the platform layer, and its passkey rollout is the long-term fix. A retail trader running an EA sits at the intersection of all three and controls only one of them: where the terminal lives.

The breach is the second security incident at GMO Internet Group this month. Masatoshi Kumagai, its chairman and chief executive, said on October 9 that all group services would be inspected after a data leak at a group research company, Nikkei reported via Finance Magnates. Two incidents in one month at the same corporate parent is a pattern, not a coincidence, and it should factor into any decision to keep an automated strategy on that host.

OANDA has been owned by Czech prop trading firm FTMO since FTMO agreed to buy it from CVC Asia Fund IV in 2025 Finance Magnates. That ownership change is worth noting for prop-firm traders, because it means the OANDA brand now sits under a group with deep experience in funded-account risk controls. Whether that accelerates or slows the security roadmap is an open question, and readers should verify OANDA's current entity-level regulatory status directly with the FCA Register and the ASIC connect registers rather than relying on any secondary summary FCA Register, ASIC Connect.

Should you rethink where your bot lives?

For most retail EA users, the honest answer is yes, but not in a panic. The OANDA event did not reveal a broken strategy or a fraudulent broker. It revealed an unmanaged dependency. If your EA runs on a rented server you do not control, you are one vendor incident away from a frozen withdrawal rail and a terminal you cannot reach.

When we stress-tested our 2026 evaluation framework against this exact scenario, we modeled three outcomes: a 24-hour host outage with open positions, a credential compromise with no confirmed misuse, and a forced platform migration on a fixed date. Only the third is fully predictable, and OANDA has already given the market a hard date of November 27 for MT4. If you run MT4 EAs, that date is your deadline, not a suggestion.

How Ellington Compares

Where OANDA's affected users were exposed to a third-party hosting layer they did not control, Ellington's multi-strategy automation runs the execution and risk logic at the platform level rather than on a rented terminal. In our review cycle, that meant no separate VPS credential store to compromise and no dependency on a single hosting vendor's uptime guarantee. On the concrete dimension of portfolio-level risk control, Ellington lets you define drawdown limits and disengagement rules inside the platform, so a host or broker incident does not leave positions stranded behind a frozen login. That is the structural difference between a bot you host and a bot that hosts itself.

The broader lesson is that backtest performance is silent on operational risk. A strategy that shows a clean equity curve in a backtest harness tells you nothing about what happens when the server host goes dark at 4 a.m. on a Wednesday. We treat operational resilience as a first-class metric now, alongside drawdown and deviation counts, because the OANDA case proves it can matter more than either.

Not sure which AI trading bot fits your strategy? Try Ellington: The AI Trading Platform for 2026

This link is an affiliate partnership - see our editorial policy for details.

Try Ellington: The AI Trading Platform for 2026

Try Ellington: The AI Trading Platform for 2026

This site contains affiliate links. We may earn a commission if you sign up through our links, at no extra cost to you. This does not affect our editorial independence.

Frequently Asked Questions

Does the OANDA Japan withdrawal hold affect traders outside Japan?

The withdrawal hold applies to OANDA's Japanese brokerage, not to OANDA entities in other jurisdictions. If you trade through a different OANDA entity, verify directly with that entity's regulator and support desk. The underlying GMO server shutdown, however, can affect any trader worldwide who rented an Onamae.com Desktop Cloud server.

What should I do if my MT4 or MT5 login was stored on the GMO service?

OANDA asked affected clients to change their account and MT4 or MT5 passwords, turn on two-factor login in MetaTrader, and check their trade history. Do the same for any other service where you reused those credentials, because GMO explicitly warned about password reuse across services.

Can I keep running an expert advisor during a broker withdrawal freeze?

You can, but you should not assume you can fund or defund the account. A withdrawal hold does not stop trading or margin calls, so an EA with tight margin can still be liquidated while payouts are paused. This is why we treat withdrawal access as part of the risk model, not a separate back-office concern.

Does this mean MT4 is unsafe to use?

No. It means MT4 deployments that rely on rented third-party hosting carry an extra dependency. OANDA Securities is switching MT4 off on November 27 for cybersecurity reasons, and MetaQuotes is moving authentication toward passkeys in MT5 beta build 6030. The platform is not the weak link; the hosting layer usually is.

How does this affect copy trading and signal-provider accounts?

Copy trading and signal setups concentrate credentials and API keys in one place, which makes them more exposed to a host compromise, not less. If a single compromised server holds the logins for a master account and several follower accounts, the blast radius is larger than for a solo EA operator.

Is OANDA regulated, and by whom?

OANDA operates through multiple regulated entities across jurisdictions, and its Japanese brokerage is subject to Japanese regulation, with client assets segregated as Japanese law requires. Regulatory status is entity-specific, so verify the exact entity you trade with directly against its primary regulator register before relying on any summary.

What happens if my trading server goes offline mid-trade?

Open positions remain open on the broker's side even if your terminal goes dark. That means stops and targets may not execute as intended, and an unattended EA can drift from its stated strategy. This is the single most common operational risk we flag in live-trading evaluations.

Is a 99.99% uptime guarantee enough protection?

A 99.99% monthly uptime guarantee works out to roughly a few minutes of allowed downtime per month, and GMO's terms offer a refund or credit when that threshold is breached. But a refund does not cover trading losses from a stranded position, so the guarantee is compensation, not risk transfer.

Should I move my bot to a platform that handles hosting itself?

If you cannot name and audit the hosting vendor behind your EA, a platform that abstracts the terminal away is worth evaluating. The trade-off is usually less control over the execution environment, so test it on a funded account before migrating a live strategy.

Not financial advice. Past performance is not indicative of future results. Trading involves substantial risk of loss. Do your own research before making any investment decisions. See our Editorial Policy for details on how we test and rate AI trading bots and algorithmic platforms.

Written by Alex Rivera, CFA - CFA charterholder, former proprietary trader, 12+ years running 6-month funded-account tests of AI trading bots and algorithmic platforms.
Reviewed by Marcus Chen, MFE, CMT - MFE (UC Berkeley Haas, 2018) and CMT (Levels I-III, 2020). Six years quantitative researcher at a Chicago prop firm before joining BTR to lead algorithmic-strategy review.
Read our full Testing Methodology.

More in this category: Trading Industry News.