OANDA Japan Accelerates MT4 Retirement, Citing Security Breaches and Legacy Vulnerabilities
OANDA Securities has accelerated the retirement of MetaTrader 4 (MT4) service in Japan, moving the platform’s termination date forward by two weeks to November 14, 2026.
The broker has explicitly cited recent security breaches and mounting cyber risks within external VPS environments as the catalyst for the timeline change, which was first announced in March.
London’s trading industry is coming home!
External Risks and Platform Support Concerns
The decision follows unauthorised access involving Onamae.com Desktop Cloud, a virtual private server (VPS) operated by GMO Internet Group used by retail traders to host MT4 and MT5.
Up to 26,739 servers may have been exposed, forcing major brokerages, such as OANDA, to issue urgent security alerts, implement transaction restrictions on affected accounts, and advise clients to change their passwords and enable two-factor authentication
In its notice to clients, OANDA said it had become difficult to continue meeting current security requirements on MT4, citing the platform’s age and the cessation of official support and system maintenance by MetaQuotes for the platform.
Migration to MT5 and Alternative Platforms
For customers holding positions on the MT4 Tokyo server, remaining positions and balances are scheduled to transfer automatically into MT5 Standard Plan accounts over November 14–15.
Customers are asked to create an MT5 account in advance, although OANDA says it will create one if necessary; balance-only customers are asked to move funds before shutdown, with a transfer fallback for remaining balances.
NY-server customers can continue trading through fxTrade or TradingView after MT4 access ends.
Separately, OANDA warns that MT4 EAs, indicators and templates cannot be used on MT5, meaning the account transfer does not automatically reproduce a customer’s trading setup.
OANDA Japan also made Google Authenticator OTP-based MFA mandatory for MT5 login from October 31, following an October 29 announcement linked to the hosting-service incident. The broker nevertheless says customers using external VPS services must secure those environments themselves because its security measures do not extend to the third-party servers
This article was written by Adonis Adoni at www.financemagnates.com.
