App store takedown highlights security flaws in world’s most popular Forex trading platform

On Friday 23^rd September 2022, Apple quietly removed MT4 and MT5, two of the world’s most popular trading platforms, from its App Store. While the abrupt takedown has gone mostly unnoticed, it has created a furore in the Forex trading community and has reignited long-held concerns over fundamental security flaws.

First developed in 2003, MetaTrader 4 (MT4) provided individuals (retail traders is the industry term) with an institutional-grade Forex trading platform. Fast and relatively easy to use, MT4 also allowed traders to build, buy and install trading algorithms, allowing for fully automated trading. Even better, by licencing the platform with Forex brokers, MetaQuotes – the developers of MT4 – could also supply the platform free of charge.

As retail Forex trading has grown over the last 20 years, MT4 has solidified its position as the world’s number one trading platform. MetaQuotes released a newer version – imaginatively called MT5 – in 2010 and spent a lot of time and energy trying to get brokers and traders to adopt it – with limited success.

As the smartphone revolution took off, MetaQuotes provided mobile apps for both MT4 and MT5 – also free of charge – allowing people to keep an eye on the Forex market and trade on the move.

According to the latest figures, MT4 is still responsible for 75% of trade volume and MT4 and MT5 are used by 80% of retail traders. With an estimated 10 million traders worldwide, that’s some 8 million people. Most Forex brokers will provide support for one or both platforms and their mobile apps. Many retail traders no longer bother with a trading workstation and instead rely solely on their mobile phones.

The Russia/Ukraine Angle

So, it came as a shock to many when Apple, suddenly and without comment, removed the two trading platforms from its app store. Traders with the apps already installed won’t lose them from their device, but the apps will no longer receive updates and – given Apple’s notorious security restrictions – will stop functioning once the lack of updates deems them a security risk. In fact, there is anecdotal evidence of the apps beginning to fail already.

Speculation abounded as to why the two apps have been removed. Currently, both are still available on the Google Play Store for Android devices and other trading platforms seem unaffected. Many commentators immediately linked the takedown to western sanctions on Russia following the invasion of Ukraine. MetaQuotes, while now based in Cyprus, was founded by a Russian citizen and observers wondered aloud whether MetaQuotes had somehow been involved in sanctions-busting.

But this version of events was quickly scotched by MetaQuotes themselves, with a representative quoted as saying: “We do not believe that Apple’s actions are linked in any way with the Western sanctions on Russia.”

The only reason Apple gave MetaQuotes for the takedown was that the apps do not comply with the App Store Review Guidelines. But MT4 and MT5 have been on the app store for 10 years now, so what has changed?

Apple’s Quiet Commitment to Security

Once the non-compliance aspect was raised, people quickly turned their attention to a recent Forbes article titled How One Man Lost $1 Million To A Crypto ‘Super Scam’ Called Pig Butchering. Published on September 9^th (two weeks before MT4 and MT5 were pulled from the app store) the article details how an altered version of the MT5 trading platform was used to defraud a victim in a complex trading scam. While the story itself is heart-breaking, two sentences in particular stand out:

“Cy [the victim] told Forbes that because he downloaded MetaTrader on the App Store, he presumed it was legitimate.”

and

“Apple spokesperson Adam Dema told Forbes the company is investigating complaints about MetaTrader and will take additional action to protect App Store users if necessary.”

Apple’s ruthless commitment to the privacy and security of its userbase is well-documented. Equally well documented is Apple’s ruthless commitment to control over the apps available in its App Store.

In one fell swoop, the Forbes article has shown that MetaQuotes’ trading apps break both of these inviolable tenets of Apple’s business philosophy.

MetaTrader’s Manipulation Problem

The Forbes story and Apple’s subsequent takedown has brought to a head a long-standing issue with MT4 and MT5 trading platforms: When MetaQuotes hands out MT4 and MT5 licences to brokers, it also hands over control of the trading platforms’ code base. Licensees can alter the trading platform significantly by installing custom plug-ins (as the scammers did in the “Pig Butchering” scam) or engage in price manipulation (as JP Markets was accused of by the FSCA in 2021).

It has long been known in the Forex trading community that using MT4 with an unregulated broker is like playing Russian roulette with your money. Without any regulatory oversight, a broker can easily manipulate price data and spreads, turning winning trades into losing ones. While this is not an issue with well-regulated brokers, many beginner traders are caught out by scams using manipulated versions of the MT4 and MT5 trading platforms.

A Turning Point or a Bump in the Road?

Many iPhone traders are now left with a difficult decision. Apple is not known for compromise and likely the MT4 and MT5 apps will soon become non-functional on iOS devices. iPhone traders can switch to an Android device – possibly an expensive waste of time if Google Play decides to follow suit. Or they can switch to desktop-only trading – less of a solution and more of a handicap.

Perhaps the most suitable solution is a change of trading platform. The most commonly used trading platform after MT4 and MT5 is cTrader. In development since 2012, cTrader is different from the MetaTrader platforms in that its code base is maintained by its developers, a company called Spotware.  And while there are only a few brokers which offer cTrader, plug-ins like the one used in the Forbes story cannot be installed and price manipulation is impossible. It’s not a surprise then, that cTrader is still available on the app store. It’s also worth pointing out that some brokers offer their own trading platforms in the iOS store, though these are usually aimed at beginners and lack much of the automation capabilities found in MT4, MT5 and cTrader.

So, are we on the cusp of a major change? Will traders begin a transition en masse away from MetaTrader and its security flaws? Will MetaQuotes attempt to rebuild MT4 and MT5 from the ground up? To do so would appease Apple but would fundamentally alter its business model and potentially alienate the many brokers it counts as customers. Or is this just a bump in the road? Will the Forex trading community find a way around Apple’s takedown? Will they continue to ignore MT4 and MT5’s security failings? Time will tell.