EXFOR Review | Is EXFOR Legit or a Scam? Labuan Regulation, Withdrawal Delays & Offshore Risk

I. Brand Overview and Registration Information

EXFOR (Exfor Limited) is a contract for difference (CFD ) broker registered in Labuan, Malaysia , and claims to be regulated by the Labuan Financial Services Authority (LFSA) with license number MB/22/0089 .
The official website is https://exfor.com , which promotes itself as a "Web3 forex trading platform" with the tagline "Next Generation of Transparent Trading" .

EXFOR claims in its company profile that it has branches in multiple locations, including:

• Labuan (Malaysia) Headquarters — Exfor Limited

• Hong Kong Operations Center — Exfor Technology HK

• Seychelles Service Department — Exfor Global Ltd

However, the official website does not include a clickable LFSA regulatory link or company documents, only listing the regulatory number MB/22/0089 in the footer.
Our domain registration information revealed that exfor.com was registered in April 2022 , and its server is located in Singapore.

Basic Information Table:

II. Regulatory Verification and Legal Validity of Labuan

We found a record for "Exfor Limited" in the LFSA official database (MB/22/0089), but the license type is Money Broking License .
According to LFSA regulations, such licenses only permit the matching of transactions between institutions and do not allow the provision of leverage or margin services directly to retail clients.

In other words, EXFOR's retail operations may exceed the scope of its license.
Furthermore, the LFSA does not require licensed companies to disclose custodian banks or segregated accounts for customer funds.
This means that if the platform's funds run into problems, the regulatory authorities will not bear any liability for compensation.

Comparison of regulatory frameworks:

Therefore, although EXFOR holds a Labuan license, this regulation is only a formality and does not represent substantive investor protection.

III. Account Types and Transaction Conditions

EXFOR offers three account types: Standard, Prime, and VIP , emphasizing "no fees and low spreads" and supporting cryptocurrency deposits.

During testing, we discovered that the WebTrader platform is not a self-developed system, but rather a front-end interface based on a white-label template. Its order execution path points to a Seychelles server, not Labuan.

Problem points:

• No clear liquidity provider (LP) disclosure;

• No custodian bank information provided;

• No third-party audit report;

• The client agreement was signed by "Exfor Global Ltd (Seychelles)", not the Labuan entity.

This means that the legal relationship of the customer's transaction is inconsistent with the regulatory filing information.

IV. Real Account Testing: Deposit and Trading Experience

We registered a live account on October 25, 2025, and deposited $100 USD via USDT (TRC20) for testing.

Actual measurement data:

The MT5 server is "ExforMarkets-Live01", and the node is located in Singapore.
Order execution was generally smooth, but slippage widened to 1.1 pips during the London opening session (16:00–17:00 UTC+8).
In addition, we observed a “dealer intervention” flag in the backend logs, indicating that the platform may be using the B-Book model (internal matching), where the platform itself is the counterparty in a customer's transaction.

V. Withdrawal Testing and Fund Delay

We initiated a withdrawal request (USDT method) on October 27th, for an amount of $50.

The results are as follows:

Customer service claimed that the delay was due to "system security audit," but could not provide transaction hashes or bank statements.
The funds actually originated from a Singapore address, not from a Labuan registered account.

Therefore, it can be concluded that EXFOR's withdrawal operations are handled by an overseas technical team and are unrelated to the regulatory location.

VI. Customer Service Performance and Response Efficiency

We contacted the customer service team via online chat, email, and Telegram.

Throughout the communication process, customer service representatives consistently avoided directly answering questions related to "custodian bank" and "regulatory country".
When we asked if the platform operates in Seychelles, they replied, "We have multiple entities to serve clients globally."
This is a typical example of a vague statement that fails to provide any compliance documentation.

VII. Analysis of the Differences Between Actual Transaction Logs and Execution

During our 48-hour live trading session, we executed 60 trades (EUR/USD, XAU/USD, BTC/USD) and extracted the following data sample from the MT5 server logs:

We found that approximately 22% of transactions triggered the "Dealer Intervention" flag, indicating the possibility of manual intervention or delayed matching in the background.
This model is common on the B-Book platform and is used to control internal risk exposure.

In addition, EXFOR spreads widen to 5–6 pips during news hours (especially when the US CPI is released), far exceeding the 0.2–0.5 pips advertised on its official website.
This means that its pricing system lacks support from real market liquidity.

8. Deposit and withdrawal delays and path verification

During the withdrawal process, we traced the USDT transfer path and found that the blockchain address corresponding to the transaction hash was registered to "Exfor Tech Pte Ltd" (Singapore), not the Labuan entity.
This further confirms that the platform uses overseas wallets for fund transfers.

Key Risks:

1. Unable to verify the custodian bank or regulated account;

2. Withdrawal processing time has significantly increased (average 24–36 hours).

3. Some withdrawal requests require two-factor authentication (non-official KYC window);

4. Lack of blockchain hash credentials or bank transaction records.

We also found similar situations in our complaint channels:
Some customers have complained on BrokersView and FX110 that "withdrawals were rejected after the account had made a profit" or "the funds were delayed for more than three days."

IX. Market Reputation and Public Opinion Tracking

As of October 2025, EXFOR's ratings on several external review websites are as follows:

Feedback from some users:

"The MT5 transaction record does not match the execution time."
"Customer service always says 'system review,' it feels like nobody cares."
"Withdrawals take two days to arrive, and the fees are not fixed."

Although some retail investors commented that the spreads were "low," their overall risk perception was high.

10. Analysis of the authenticity of supervision and legal liability

EXFOR is indeed registered with the LFSA, but its client agreements, fund flows, and servers are located outside the regulatory domain.
This indicates a serious disconnect between the platform's actual operational architecture and its regulatory filing.

Comparison of regulatory legitimacy:

Therefore, if a dispute arises between an investor and the platform, Labuan FSA does not have the right to enforce compensation or arbitration.

XI. Differences in Technology Platform and Execution

EXFOR's WebTrader platform is not independently developed, but rather built upon the White Label Framework .
This means that all transaction data, KYC information, and server access rights are controlled by the parent system.
This will bring the following risks:

• The platform may unilaterally modify prices or historical records;

• There is no independent auditing interface for users to verify transactions;

• If the white-label service is terminated, user data may be lost.

On the MT5 side, we detected the server as "ExforMarkets-Live01", but this node lacks official MetaQuotes certification.
This indicates that the platform uses a non-official, unofficial version.

XII. Comprehensive Scoring Sheet (out of 10)

XIII. Key Risks and Investment Recommendations

Key risks:

1. Labuan's regulatory oversight only has the effect of filing a case.

2. The customer agreement is inconsistent with the regulatory jurisdiction;

3. Withdrawal delayed and without supporting documentation;

4. Funds held in custody flowed overseas;

5. White-label platforms allow for manipulation.

suggestion:

• Long-term or large-scale escrow services are not recommended.

• If testing is required, it is limited to low-value, short-term transactions only;

• Retain transaction logs and transfer vouchers;

• If the dispute remains unresolved, you can file a complaint with the Labuan FSA ( [email protected] ) .

XIV. Conclusion

Although EXFOR claims to be "regulated by Labuan", its actual business structure, servers, and cash flow are all outside the regulatory jurisdiction.
The trading experience suffers from slippage, delays, and human intervention; the withdrawal process is slow and lacks verifiable documentation.
From a compliance perspective, EXFOR is a typical hybrid platform that combines "compliant registration with offshore operations".

In short:

EXFOR is an offshore CFD platform that has formal regulation but lacks substantive protection. It has insufficient transparency in funding and execution, and is considered high-risk.

👉 Visit the BrokerHiveX Exposure section to view the latest offshore regulatory lists, withdrawal delay records, and investor risk cases.