OANDA Japan brings forward MT4 shutdown after VPS security incident

Trading platform screens on a workstation, illustrating OANDA Japan's planned MT4 shutdown
Photo by AlphaTradeZone on Pexels

OANDA Securities has brought forward the end of its MetaTrader 4 (MT4) service in Japan by two weeks, setting 14 November 2026 as the final day. The broker said security concerns around third-party virtual private servers contributed to the revised schedule, which it first disclosed in March.

VPS incident raises security pressure

The trigger was unauthorised access to Onamae.com Desktop Cloud, a VPS service run by GMO Internet Group. Retail traders had used the service to run MT4 and MT5 remotely. The incident may have put as many as 26,739 servers at risk. OANDA and other brokerages responded with client security alerts, account-level transaction limits, and advice to reset passwords and switch on two-factor authentication.

OANDA has told customers it can no longer readily meet current security requirements on MT4. It pointed to the platform's age and MetaQuotes ending official support and system maintenance. The broker also warned that clients are responsible for protecting VPS environments run by external providers; OANDA's own safeguards do not cover those machines.

Tokyo accounts move to MT5

For clients on the MT4 Tokyo server, OANDA plans to move open trades and account funds automatically into MT5 Standard Plan accounts over 14 and 15 November. Customers should open an MT5 account ahead of the change, although OANDA says it will arrange one where needed. Customers with funds but no positions are asked to transfer their money before the service closes; a later transfer option will remain for funds left behind.

Once MT4 access ends, clients on the NY server can use fxTrade or TradingView to continue trading. But the migration will not bring across a customer's existing setup: expert advisers (EAs), indicators and templates made for MT4 do not work on MT5, OANDA says. Finance Magnates first reported the revised shutdown and the security concerns behind it.

OANDA made Google Authenticator one-time-password multi-factor authentication compulsory for MT5 logins from 31 October. The broker announced the requirement on 29 October in connection with the VPS incident.

The integration question

For trading operations teams, the account move and the platform migration are separate tasks. They will need to establish which clients depend on MT4-specific EAs, indicators or templates, and determine how those setups will be replaced or rebuilt on MT5. The broker's notice does not specify how customer configurations will be migrated.

Operators should also check how the transfer handles open trades, funds and clients who have not created an MT5 account, then confirm those outcomes with OANDA. For clients using third-party VPS hosting, the practical questions are who will secure the server, how access will be reviewed, and whether the new MT5 login requirement is configured before the deadline.

Teams should confirm which clients are on the Tokyo server and which are on the NY server, since the stated migration and post-shutdown options differ. They should also check that clients understand the transfer does not recreate their MT4 trading setup, and establish how any funds remaining after shutdown can be moved. The notice does not give further details about those operational steps.