OANDA Japan Accelerates MT4 Retirement, Citing Security Breaches and Legacy Vulnerabilities

Friday, 06/11/2026 | 09:01 GMT by Adonis Adoni
  • The shutdown follows a breach at GMO's Onamae.com VPS, exposing nearly 27,000 servers used by retail traders across several brokers.
  • Clients will be auto-migrated to MT5, where mandatory Google Authenticator MFA is now strictly enforced.
japan
The skyline of Tokyo, Japan

OANDA Securities has accelerated the retirement of MetaTrader 4 (MT4) service in Japan, moving the platform's termination date forward by two weeks to November 14, 2026.

The broker has explicitly cited recent security breaches and mounting cyber risks within external VPS environments as the catalyst for the timeline change, which was first announced in March.

London's trading industry is coming home!

External Risks and Platform Support Concerns

The decision follows unauthorised access involving Onamae.com Desktop Cloud, a virtual private server (VPS) operated by GMO Internet Group used by retail traders to host MT4 and MT5.

Up to 26,739 servers may have been exposed, forcing major brokerages, such as OANDA, to issue urgent security alerts, implement transaction restrictions on affected accounts, and advise clients to change their passwords and enable two-factor authentication

In its notice to clients, OANDA said it had become difficult to continue meeting current security requirements on MT4, citing the platform’s age and the cessation of official support and system maintenance by MetaQuotes for the platform.

Migration to MT5 and Alternative Platforms

For customers holding positions on the MT4 Tokyo server, remaining positions and balances are scheduled to transfer automatically into MT5 Standard Plan accounts over November 14–15.

Customers are asked to create an MT5 account in advance, although OANDA says it will create one if necessary; balance-only customers are asked to move funds before shutdown, with a transfer fallback for remaining balances.

NY-server customers can continue trading through fxTrade or TradingView after MT4 access ends.

Separately, OANDA warns that MT4 EAs, indicators and templates cannot be used on MT5, meaning the account transfer does not automatically reproduce a customer’s trading setup.

OANDA Japan also made Google Authenticator OTP-based MFA mandatory for MT5 login from October 31, following an October 29 announcement linked to the hosting-service incident. The broker nevertheless says customers using external VPS services must secure those environments themselves because its security measures do not extend to the third-party servers

OANDA Securities has accelerated the retirement of MetaTrader 4 (MT4) service in Japan, moving the platform's termination date forward by two weeks to November 14, 2026.

The broker has explicitly cited recent security breaches and mounting cyber risks within external VPS environments as the catalyst for the timeline change, which was first announced in March.

London's trading industry is coming home!

External Risks and Platform Support Concerns

The decision follows unauthorised access involving Onamae.com Desktop Cloud, a virtual private server (VPS) operated by GMO Internet Group used by retail traders to host MT4 and MT5.

Up to 26,739 servers may have been exposed, forcing major brokerages, such as OANDA, to issue urgent security alerts, implement transaction restrictions on affected accounts, and advise clients to change their passwords and enable two-factor authentication

In its notice to clients, OANDA said it had become difficult to continue meeting current security requirements on MT4, citing the platform’s age and the cessation of official support and system maintenance by MetaQuotes for the platform.

Migration to MT5 and Alternative Platforms

For customers holding positions on the MT4 Tokyo server, remaining positions and balances are scheduled to transfer automatically into MT5 Standard Plan accounts over November 14–15.

Customers are asked to create an MT5 account in advance, although OANDA says it will create one if necessary; balance-only customers are asked to move funds before shutdown, with a transfer fallback for remaining balances.

NY-server customers can continue trading through fxTrade or TradingView after MT4 access ends.

Separately, OANDA warns that MT4 EAs, indicators and templates cannot be used on MT5, meaning the account transfer does not automatically reproduce a customer’s trading setup.

OANDA Japan also made Google Authenticator OTP-based MFA mandatory for MT5 login from October 31, following an October 29 announcement linked to the hosting-service incident. The broker nevertheless says customers using external VPS services must secure those environments themselves because its security measures do not extend to the third-party servers

About the Author: Adonis Adoni
Adonis Adoni
  • 146 Articles
  • 4 Followers
About the Author: Adonis Adoni
Adonis Adoni is a News Editor at Finance Magnates, with more than six years of experience covering the financial services industry, technology, and their intersection. His work includes C-suite interviews with leading technology and fintech companies across Europe, the US and Asia, exclusive coverage of M&A activity and capital raising, and data-driven industry reporting, with a strong emphasis on engagement and clear storytelling. Areas of Coverage: Online trading industry news Fintech companies Digital assets and crypto markets Regulatory and compliance developments Executive interviews Education: BA in Law – Nottingham Trent University LLM in Health Law – Nottingham Trent University
  • 146 Articles
  • 4 Followers

More from the Author

Retail FX

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|} !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}