Fake MT5 Apps: How Clone Scams Steal Logins

Risk warning: A fake app that looks like MT5 can steal your login and your balance. This is education, not financial advice. Only install from trusted sources.

Fake MT5 apps exist on app stores, blogs, and Telegram groups, and they are built to collect passwords. The icon looks right, the charts look real, and the login screen asks for your broker credentials. Thieves even add a "withdrawal PIN" field nobody else uses. This article shows how to check an app before you install it.

  • Publisher name matches the broker or MetaQuotes
  • Thousands of downloads and real reviews
  • Account login only inside the app, on the official site
  • A "free bonus" link to a personal wallet
  • Asks for your investor password or withdrawal PIN
  • An unknown APK from Telegram or a blog
Ticks are what a real charting app looks like. Crosses are what thieves need from you. Two crosses on this list mean uninstall the app and change your password.

Demo example — not a signal. Only download MT5 from the app store or the broker's own site.

Why clones exist

The MetaTrader name is trusted, so scammers borrow it. Beginners searching for "MT5 download" meet two kinds of results side by side: the real app and a clone that looks identical. The clone's only product is your login.

Where thieves hide apps

  • Third-party app stores. Some stores approve clones faster than they review them.
  • Telegram and WhatsApp. "Download MT5 from this link" is a classic funnel. See Signal Seller Scams for the same groups.
  • Blogs with "free MT5" posts. The download button hides a tracker or an APK.
  • Broker-name lookalikes. "MT5 XM Pro" is not XM. XM's app comes from XM.

How to check an app

  1. Check the publisher. Real MT5 is published by MetaQuotes — listed as "MetaQuotes Software Corp." on Google Play. A broker app carries the broker's own name.
  2. Read the reviews. Thousands of downloads with real complaints beat a shiny five-star page.
  3. Inspect permissions. A charting app needs storage at most. Microphone or SMS access is a red flag.
  4. Compare the link. The download URL must match the broker's official site. See Download and Set Up MT5 for the correct path.
  5. Skip unknown APKs. An APK file from Telegram is never the safe version.

What a clone asks for

  • Your broker login. That gives access to your trade and withdrawal pages.
  • Your investor password. It lets a stranger watch and move your account.
  • Your wallet PIN. That is not a charting feature. No real trading app asks for it.
  • A "verification fee". The fee is the product. See Forex Recovery Scam for what happens next.

Real apps never ask for a withdrawal PIN or a fee to open. See Protect Your Account.

If you installed one

  1. Uninstall it now. Do not test the login screen once more.
  2. Change the broker password and turn on 2FA. See Protect Your Account.
  3. Scan the phone with a mobile security app and remove anything unknown.
  4. Report if money moved. Contact the broker support, then the police cybercrime unit with screenshots.

Also check family devices. Clones often spread by "help me check this app" text messages.

The safe install path

  1. Open the broker's official site from the Broker Reviews page.
  2. Download MT5 from the store link the broker lists.
  3. Log in with the account from your broker email, never a link from chat.
  4. Test the whole loop on demo first. The app you can log out of safely is the app you can trust.

Bottom line: Install MT5 only from the official store or the broker's site and check the publisher. Treat any app that asks for a wallet PIN as malware.

Cross-links to School: 02.4 Red Flags, 06.3 From Demo to Live.

Frequently Asked Questions

Are there fake MT5 apps?

Yes. Thieves copy the MT5 name, icon, and look, then ask for your broker login or wallet. Real MT5 comes from MetaQuotes or the broker's own download page.

How do I check if an MT5 app is real?

Check the publisher name, downloads, reviews, and the list of permissions. Then compare the download link with the broker's official site. Unknown APKs from Telegram are never safe.

Why would a fake app need my password?

Your broker login lets them trade your balance or withdraw through your account. Your wallet PIN lets them empty the wallet. The app is a key collector.

What if I already installed one?

Uninstall it, change your broker password and enable 2FA, then scan the phone. If money moved, contact the broker support and report to the police cybercrime unit.