Desk audit TBR-A-2026-006

XTB

Independent desk audit of a retail broker, from public sources.

Last updated First published

Current. Valid to 8 October 2027.

TBR DESK AUDIT · PUBLIC SOURCES · AA 75/100

Very strong

Desk audit. TBR carried out this audit on its own initiative, using public sources only. No firm paid for it. No accounts were opened or tested, so Execution & Pricing and Operational Resilience were not assessed and do not count towards the grade. XTB may respond, and any response is published in full. How desk audits are scored. See Verified audits, which our trading experts test hands-on.

Summary

XTB is listed on the Warsaw Stock Exchange and holds licences in Poland, the UK and Cyprus, with an offshore entity in Belize. Its grade is held back by a PLN 20 million fine from Poland’s regulator, upheld in August 2026, for failings in how it assessed clients and described the risks of CFDs. Brazil’s CVM also has an open sanctions case against its Belize company, XTB International Limited.

Grade
AA
Score
75/100
Fieldwork
7 Oct 2026 to 8 Oct 2026
Findings
1 high4 medium4 strength

Scorecard

PillarWeightScoreGrade
Regulation & Licensing19%80AAA
Corporate Structure & Ownership14%90AAA
Client Money & Payouts19%78AA
Execution & Pricingn/aNot assessed: requires live testing
Conduct & Disclosure14%50BBB
Operational Resiliencen/aNot assessed: requires live testing
People & Community5%70AA
Overall71%75AA

The overall score is the weighted average of the assessed pillars, with their weights scaled back up to 100.

This grade summarises the evidence we reviewed up to 10 October 2026. It is not a guarantee of the firm's safety or future conduct, and changes after that date are not reflected. Nothing here is financial or legal advice.

Findings

Licences verified

Each licence was checked directly against the regulator's public register on the date shown.

EntityRegulatorLicenceCheckedResult
XTB LtdCySEC169/128 Oct 2026ConfirmedLicensed 18 April 2012; approved domain www.xtb.com/cy.

Notes and sources

Evidence and scope

Scope

Desk audit of the group’s client-facing entities, using public sources only: regulator registers and announcements, court and stock-exchange filings, and the firm’s own published documents, as available on 8 October 2026. No accounts were opened, nothing was tested live, and the firm was not asked for evidence.

Limitations

Absence of a public enforcement record is not evidence of good conduct. FCA and KNF authorisation details are taken from the firm’s disclosures; those registers could not be queried directly for this audit. We did not establish whether XTB has challenged the KNF’s final decision of 28 August 2026 in court, or whether the CVM has decided on XTB International’s settlement proposal. The share of clients served through the Belize entity could not be measured from public sources.

Evidence reviewed

  • CySEC register entry, XTB Ltd
  • KNF announcements on the 2026 fine, the request for reconsideration and the final decision
  • AMF Enforcement Committee news release, 10 November 2021
  • CVM open data on sanctions proceedings, October 2026
  • KNF announcement on the Supreme Administrative Court’s ruling of 28 February 2023
  • XTB regulatory and legal disclosures
  • XTB ESG site

Version history

  1. Report published.
  2. Methodology update, applied to all desk audits: the lowest scoring bands for Regulation, Structure, Client Money and Conduct are now set out in more detail. No change to this audit’s score or grade.
  3. Conduct updated after a search of the CVM’s sanctions data: Brazil’s open sanctions case against XTB International Limited, opened on 3 June 2025, has been added. Conduct moved from 55 to 50 and the score from 76 to 75; the grade is unchanged at AA.

Request a re-audit

Staff of XTB can ask us to reopen this audit, for example after correcting a finding or completing remediation. Requests must come from a company email address, and you can attach evidence.

Request a re-audit