Changes in the XTB regulations. The reason for burglary 2 months ago?

The XTB brokerage house has made changes to the regulations. It contains additional rules for the protection of investment accounts in case of suspected unauthorized access. A series of such broker's hacks took place two months ago.

On September 27, changes in the regulations for the provision of XTB brokerage services will come into force. They focus on the security of investment accounts, introducing additional rules for their protection. The broker will also have the opportunity to temporarily limit the possibility of submitting certain instructions when there is a suspicion of abuse or errors in transactions.

Three new points were introduced in the “Electronic access to the investment account” section:

• In the event of a reasonable suspicion of taking over the login and/or password to the investment account, you should immediately contact the XTB Customer Service Department. XTB has the right to verify your identity in accordance with applicable internal procedures.
• After positive verification of your identity, we will use security measures, including:
  a) logging out of all active user sessions,
  b) immediate blocking of logging in to all accounts related to a given customer,
  c) Updating the customer's contact details and launching the password reset process.
• The access to the investment account is unlocked after the password reset process is successfully completed.

In addition, a fragment of the “optionality” of using two -stage verification was removed from the regulations.

July series of XTB clients accounts

The introduced changes to the regulations respond to problems that XTB struggled at the turn of June and July this year. There was a series of burglaries into the investment accounts of the broker clients. The attackers brought funds out of them by means of transactions carried out on unleasy assets.

In one of the cases described by Bankier.pl, the customer was robbed during a conversation with the XTB consultant, who blocked access to his account only a few minutes after reporting the problem. At that time, the investor watched his losses grow by about 80 thousand. zloty.

All of the clients affected by clients' attacks were connected by the lack of two -stage verification. After a series of incidents, XTB forced it to include it on all accounts. In addition, on August 5, the broker declared that he would compensate for investors with funds lost as a result of cyber criminals.

Apparently now, after the changes already made, aimed at improving security, it is time to adapt the XTB regulations to them.

A huge increase in the number of customers

According to KDPW data, the number of brokerage accounts in XTB has doubled during the year. According to the latest statistics published last week, in August alone the broker was opened 34,495 accounts with access to the Polish stock exchange. The total number of brokerage accounts kept by XTB amounted to 614 962 (increase of 334 963 year until year).

The total number of XTB clients is even higher and at the end of June 2025 a total of over 1.7 million users used the investment platform and the mobile application of the broker. The company expects that their number will exceed 2 million by the end of the year.

Mm

Source: