XTB Introduces Emergency Account Lock Feature to Strengthen Client Security

XTB has introduced a new security feature designed to give investors immediate control if they suspect unauthorized access to their accounts. The Warsaw-listed brokerage announced Tuesday that its investment app now includes an emergency “kill switch” allowing clients to instantly freeze all financial activity with a single tap.

Once activated, the feature blocks trading across all instruments, stops withdrawals from every currency account, and disables all eWallet transactions. According to the company, the account can only be restored after the user resets their password and completes a facial recognition verification to confirm their identity.

“Digital and cybersecurity threats are rising fast, and still, too many people feel powerless when something looks wrong,” said Omar Arnaout, CEO of XTB. “We wanted to give our clients a way to take back control in seconds.”

Security Feature Follows High-Profile Account Breach Allegation

The rollout comes after heightened scrutiny of XTB’s security measures following a widely discussed case last year in Poland. A local investor claimed that hackers drained approximately 150,000 Polish zlotys (around $38,000) from their account through a series of rapid trades on illiquid securities.

Instead of withdrawing funds directly, the alleged attacker executed thousands of trades designed to gradually erode the portfolio’s value. The incident quickly spread across Polish financial forums and eventually attracted national media attention.

In response, XTB introduced stricter security protocols, including making two-factor authentication mandatory for all users. The broker also pledged to compensate customers who lost funds due to cyberattacks, though it maintained that the financial impact would be minimal.

According to company data, cyber incidents affected roughly 0.017% of XTB’s clients, and each compromised account had been operating without two-factor authentication enabled at the time of the attack.

How the Emergency Lock Works

The new feature is designed to provide a rapid response option if a user detects suspicious activity, such as an unfamiliar login attempt or unexpected transaction.

By pressing the emergency lock button, clients immediately disable:

• All trading activity
• Withdrawals from currency accounts
• eWallet transactions and transfers

To regain access, users must reset their account password and verify their identity through facial recognition. XTB says this process ensures that only the legitimate account holder can reactivate the account, even if an attacker still has temporary access to the device.

Security Gains Importance as XTB Expands Its Financial Services

The new safeguard also reflects the broker’s broader shift toward becoming a multi-service financial platform rather than focusing solely on CFD trading.

XTB has been expanding its ecosystem with services such as multi-currency accounts, payment cards, and eWallet functionality. At the same time, the company has signaled plans to introduce spot cryptocurrency trading in order to reduce its reliance on CFD revenue, which currently accounts for the majority of its income.

As more financial services become integrated into a single app, protecting account-level access becomes increasingly critical.

Wider Industry Debate on Broker Security

The security incident involving XTB also reignited debate across the retail trading industry over whether protective measures like two-factor authentication should be mandatory.

At the time, several major trading platforms—including Robinhood—still allowed clients to enable 2FA voluntarily rather than requiring it by default, raising concerns among cybersecurity specialists.

Today, XTB operates under regulatory oversight from authorities including the Financial Conduct Authority in the United Kingdom, Cyprus Securities and Exchange Commission in Cyprus, and Poland’s Polish Financial Supervision Authority.

The broker currently serves more than 2.1 million clients through 17 global offices. As the company continues expanding into new regions—including markets such as Indonesia—security features like the new emergency account lock may become increasingly important in maintaining user trust.

Related read: XTB has also been expanding its product lineup in Europe. In our article “XTB Introduces Stock Options Trading via Its Cyprus-Regulated Entity,” we explore how the broker launched options trading through its Cyprus Securities and Exchange Commission-regulated arm, giving clients access to exchange-traded options as part of its broader push beyond traditional CFD products.