Investigation
ACY Securities
- Industry
- Forex Brokerage
- Label
- Shell Network
- Jurisdiction
- Australia
- Regulator
- ASIC
- Status
- Active
- Tagged
- ACY CapitalSynergy FX
ⓘ Weighted Risk Indicators
ACY Securities: Forensic Investigation into Data Exposure, Profit Cancellation Allegations & Regulatory Posture
2011 – 2025
14 years of operations reviewed
Australia, Vanuatu, St. Vincent
Plus international client base
HIGH
Operational, data security & conduct risk
Online CFD & Forex Broker
Retail derivatives provider
Core Focus Areas
Snapshot Summary
ACY Securities is an Australian-headquartered online derivatives broker operating under ASIC AFSL authorisation, with offshore licences servicing non-Australian clients. Open-source intelligence reveals a 60GB unsecured database leak exposing customer records, recurring trader complaints alleging cancellation of profits and unilateral trade voiding, and adverse media warning of unethical conduct. The aggregate evidence indicates elevated counterparty, data-protection and conduct risk, partially offset by formal regulatory licensing in Australia.
Executive Summary
ACY Securities Pty Ltd is an Australian online broker offering contracts-for-difference (CFD) and foreign-exchange products to retail and professional clients globally. While the firm holds an Australian Financial Services Licence (AFSL) issued by ASIC, OSINT reveals a pattern of material adverse signals — most notably a publicly reported 60GB unsecured database exposure, a sustained corpus of trader allegations claiming cancellation of profits and unilateral trade voiding, and warning notices from broker-watchdog platforms. The combination of these factors elevates ACY Securities to a HIGH overall risk rating for prospective clients, counterparties and partners conducting enhanced due diligence.
HIGH RISK: HIGH RISK — Confirmed data breach exposure, sustained adverse trader complaints alleging profit cancellation, and warning signals from broker watchdog platforms collectively warrant enhanced due diligence and caution.
Key Findings
All metrics derive from open-source intelligence (OSINT) and publicly accessible publications. No confidential or non-public records were used in compiling this report.
Sources Reviewed
8+
Independent OSINT, media and trader-community sources
Jurisdictions Mapped
4
Australia, Vanuatu, St. Vincent & client jurisdictions
Corporate Entities
3
Australian and offshore licensed affiliates
Identity & Background
Identity verified through multiple independent sources.
ACY Securities Pty Ltd is an Australian-incorporated online derivatives broker offering CFDs across forex, indices, commodities, shares and cryptocurrencies. The firm markets itself as an MT4/MT5 broker with ECN-style execution and competitive spreads, targeting both Australian and international retail traders.
Headquartered in Sydney, Australia, ACY operates under an Australian Financial Services Licence issued by the Australian Securities and Investments Commission (ASIC). Concurrently, the brand operates through offshore-licensed affiliates (publicly identified as covering Vanuatu and other lighter-touch regimes) to service clients in jurisdictions where ACY's Australian licence does not extend.
The firm has been operationally active since the early 2010s, building a multi-region client base. Its profile has been amplified by aggressive online marketing, IB (Introducing Broker) partnerships, and presence on broker-comparison portals such as WikiFX and Forex Peace Army — venues which have also surfaced significant adverse content.
Entity Snapshot
Public Profile Indicators
Corporate Structure
Corporate entity mapping reveals the full extent of affiliated structures, nominee arrangements, and jurisdictional layering.
Public-source mapping indicates ACY Securities operates a typical hybrid broker structure: an ASIC-regulated Australian operating entity serves as the regulatory anchor, while one or more offshore-licensed affiliates onboard international clients under more permissive regimes. This architecture preserves access to global retail flow while concentrating regulatory accountability in a single jurisdiction.
Node Types
Edge Types
Beneficial Ownership
Beneficial ownership analysis identifies the ultimate controlling parties behind the corporate structure.
Public registry information identifies ACY Securities Pty Ltd as a privately held Australian company. Detailed ultimate beneficial ownership (UBO) chains, including any holding companies in offshore jurisdictions, are not fully transparent in open sources and would require ASIC company-extract retrieval and KYC-grade enquiry to confirm. The diagram below reflects the visible public layers; deeper UBO layers remain a documented gap.
Beneficial Ownership Chain
Click any entity to inspect · Collapse layers with the arrow
Private Shareholder(s)
🏳️ Undisclosed
Group Holding (Inferred)
🏳️ Undisclosed
ACY Securities Pty Ltd
🇦🇺 Australia
ACY Offshore Affiliate
🇻🇺 Vanuatu
All information derived from publicly available OSINT sources. Allegations remain unproven unless legally established.
Ownership Summary
Jurisdictional Operations
Geographic mapping of corporate activity, regulatory exposure, and legal proceedings across jurisdictions.
ACY Securities maintains a clearly identifiable Australian regulatory footprint while distributing client onboarding across offshore jurisdictions to capture flow from regions where ASIC authorisation does not apply or where local rules restrict CFD marketing.
Legal & Regulatory Exposure
The following proceedings, regulatory actions, and legal exposures have been identified through public records, court filings, and regulatory databases.
OSINT does not surface confirmed enforcement actions or court judgments against ACY Securities at the time of writing. However, the firm faces meaningful exposure across data-protection, conduct-of-business and dispute-handling vectors arising from publicly documented incidents and complaints.
60GB Unsecured Database Exposure
Australia · 2020
Cybersecurity researchers reported a publicly accessible Elasticsearch database containing approximately 60GB of ACY-related customer data, including PII and trading-related fields. Coverage by iZOOlogic and Heimdal Security raised potential exposure under the Australian Privacy Act and Notifiable Data Breaches scheme.
Outcome
No public regulatory penalty disclosed in OSINT; reputational impact and notification obligations apply.
Profit-Cancellation Trader Disputes
Multi-jurisdictional · 2022-2025
Multiple traders have publicly complained on Forex Peace Army and similar platforms that ACY cancelled or reversed profitable trades, citing alleged abusive trading or technical clauses. Threads span multiple pages and individual complainants.
Outcome
Disputes generally appear to remain unresolved or settled privately; no class action surfaced in OSINT.
WikiFX Cautionary News Entries
International · 2025
WikiFX has published news items referencing ACY Securities in cautionary contexts, contributing to elevated risk scoring on broker-monitoring platforms.
Outcome
Negative sentiment indicator; not a formal regulatory action.
Total Proceedings
3
Active, pending & resolved
Active / Ongoing
3
Requiring immediate attention
Jurisdictions
3
Distinct legal jurisdictions
Adverse Media
Adverse media screening and narrative analysis surfaces patterns of negative coverage, reputational risk, and coordinated PR activity.
Adverse media coverage clusters around two distinct themes: (1) the 2020 unsecured-database incident reported by independent cybersecurity outlets, and (2) ongoing conduct complaints from retail traders surfacing on broker-review and social-media platforms.
Australian Trading Firm ACY Securities Exposed Users Data
iZOOlogic reported that an unsecured database belonging to ACY Securities had exposed customer information, raising serious questions about the firm's data-security posture.
Source: iZOOlogic
60GB of User Data Exposed by Australian Trading Company
Heimdal Security reported that approximately 60GB of user data was exposed via an unsecured database attributed to ACY Securities, characterising the incident as a significant lapse in cybersecurity hygiene.
Source: Heimdal Security
ACY Securities Cancelling Profits — Unethical Broker, Avoid
A Forex Peace Army community thread, extending across multiple pages, documents allegations that ACY cancelled trader profits, characterising the firm as 'unethical' and warning traders to avoid the broker.
Source: Forex Peace Army
WikiFX Cautionary News on ACY Securities
WikiFX news entries have published cautionary information regarding ACY Securities, reinforcing negative-sentiment signals across the broker-monitoring ecosystem.
Source: WikiFX
Social-Media Broker Warnings
Public LinkedIn posts using hashtags such as #acyscam, #forexbrokerwarning and #brokeralert have circulated warnings about the broker, indicating organised reputational backlash.
Source: LinkedIn
ACY Securities Review (Aggregate Complaints)
The Forex Peace Army aggregate review page collates ratings and complaints, providing a longitudinal sentiment signal that trends negative across multiple categories.
Source: Forex Peace Army
Adverse Narratives
6
Negative media items identified
Positive / PR
0
Favourable / managed narratives
Reputation Engineering
Temporal correlation between investigative reports and coordinated suppression or PR whitewashing campaigns.
Claims vs Reality
Each public claim has been assessed against available evidence.
The 2020 incident represents a material failure of basic database access controls at a regulated financial-services entity.
Approximately 60GB of user data publicly accessible via misconfigured database.
Independent confirmation of the exposure by a second cybersecurity outlet.
The volume and persistence of profit-cancellation complaints across years suggests a recurring pattern rather than isolated incidents.
Trader-community thread titled 'ACY Securities Cancelling Profits — Unethical Broker, Avoid' spans multiple pages of complaints.
Marketing communications often imply uniform ASIC-grade protection while operationally segmenting clients by jurisdiction.
Industry-standard hybrid licensing structure noted across watchdog coverage.
Reputation should be assessed in the round across complaint corpora and watchdog alerts, not selectively curated reviews.
LinkedIn warning posts widely shared under broker-warning hashtags.
All allegations remain unproven unless legally established.
Timeline of Key Events
Chronological mapping of significant events, milestones, and adverse developments.
ACY Securities Founded
ACY Securities Pty Ltd commences operations as an Australian-licensed CFD and forex broker.
ACY Securities Founded
ACY Securities Pty Ltd commences operations as an Australian-licensed CFD and forex broker.
International Expansion via IB Networks
ACY expands global reach through Introducing Broker partnerships across Asia, the Middle East and Latin America.
International Expansion via IB Networks
ACY expands global reach through Introducing Broker partnerships across Asia, the Middle East and Latin America.
60GB Database Exposure Reported
Cybersecurity outlets iZOOlogic and Heimdal Security report an unsecured database leaking ACY customer data.
60GB Database Exposure Reported
Cybersecurity outlets iZOOlogic and Heimdal Security report an unsecured database leaking ACY customer data.
Profit-Cancellation Complaint Cluster
Forex Peace Army threads accumulate trader allegations that ACY cancels or reverses profitable trades.
Profit-Cancellation Complaint Cluster
Forex Peace Army threads accumulate trader allegations that ACY cancels or reverses profitable trades.
WikiFX Cautionary News
WikiFX publishes news entries referencing ACY Securities in cautionary contexts.
WikiFX Cautionary News
WikiFX publishes news entries referencing ACY Securities in cautionary contexts.
Social-Media Warnings Circulate
Public LinkedIn posts tagged #acyscam and #brokeralert amplify broker-warning narratives.
Social-Media Warnings Circulate
Public LinkedIn posts tagged #acyscam and #brokeralert amplify broker-warning narratives.
Risk Analysis Matrix
Structured risk assessment across key exposure categories, rated by likelihood and impact.
Risk Assessment Framework
Risk assessments based on publicly available OSINT sources. Click any category for detailed evidence.
Red Flags
High-priority behavioural and structural patterns warranting immediate attention.
Confirmed 60GB Data Exposure
criticalUnsecured database containing customer PII publicly accessible.
Independent cybersecurity outlets confirmed the existence of a misconfigured database leaking approximately 60GB of ACY customer information, including names, contact details and trading-related data.
Profit-Cancellation Allegations
criticalMulti-year community complaints alleging cancellation of trader profits.
Forex Peace Army threads spanning multiple pages document allegations from numerous traders that ACY voided or reversed profitable trades citing abusive-trading or technical clauses.
Offshore Licensing for International Clients
highNon-AU clients onboarded under lighter-touch offshore regimes.
While the Australian entity is ASIC-licensed, international clients are reportedly serviced through an offshore affiliate, materially weakening regulatory recourse for affected traders.
WikiFX Cautionary Coverage
highNegative entries on a major broker-monitoring platform.
WikiFX has published news items flagging ACY Securities in cautionary contexts, contributing to risk-elevated sentiment in broker due-diligence channels.
Organised Social-Media Warnings
highPublic LinkedIn posts tagged #acyscam and #brokeralert.
Public posts on LinkedIn under broker-warning hashtags indicate organised retail backlash and amplification of grievances.
Limited UBO Transparency
highUltimate beneficial ownership not fully disclosed in OSINT.
Open sources do not provide a full UBO chain. Enhanced KYC and registry-extract retrieval are required to confirm beneficial ownership down to natural persons.
Marketing vs Reality Gap
highPromotional claims of strong protection contradicted by evidence.
Brand messaging emphasising tier-one regulation and security is contradicted by the documented data exposure and conduct-related complaints.
Conclusion
The following conclusions are drawn solely from publicly available information and do not constitute legal advice.
ACY Securities Pty Ltd is a genuinely ASIC-licensed Australian broker, but open-source intelligence reveals material risks that merit significant due-diligence weight. The 2020 60GB unsecured-database exposure is a documented, independently corroborated data-security failure inconsistent with the standards expected of a regulated financial-services firm. In parallel, sustained trader complaints alleging cancellation of profits — concentrated on Forex Peace Army and amplified through LinkedIn and WikiFX — point to recurring conduct concerns. The hybrid Australian-plus-offshore licensing model further reduces regulatory recourse for the firm's largely international client base. Cumulatively, these findings support a HIGH overall risk rating. Counterparties, partners and prospective clients should require enhanced due diligence, contractual data-security warranties, jurisdiction-of-licence clarity, and dispute-resolution protections before engaging.
Information Gaps & Unknowns
Disclaimer: This report is compiled exclusively from publicly available open-source intelligence (OSINT) as of the date of publication. It does not constitute legal, financial or investment advice. Allegations referenced from third-party sources remain allegations unless otherwise judicially determined. Readers are encouraged to independently verify key facts and seek professional counsel before acting on the information contained herein.
Sources & References
All sources have been reviewed and categorised. Verified sources have been cross-referenced against at least two independent records.
All information is derived from publicly available OSINT sources. This report does not assert wrongdoing. All allegations remain unproven unless legally established.
Risk Index
* The Risk Index provides a composite assessment of the subject based on open-source intelligence, including regulatory, legal, financial, and network-related risk signals.
VERDICT: The claims cluster around three primary risk categories: data protection and privacy compliance failures, cybersecurity governance weaknesses in a regulated financial services context, and downstream identity/AML exposure stemming from mishandled customer documentation. Collectively, these reflect a pattern of operational and regulatory risk consistent with public reporting on the referenced incident.
Risk Score
Index
Based on reviewed reviews & documented sources
High Risk
Allegedly linked to a data exposure incident involving user records associated with an Australian securities trading firm.
8/10High Risk
Reported to have left a database accessible without adequate authentication controls, raising data protection concerns.
8/10High Risk
Under scrutiny for potential non-compliance with Australian Privacy Principles in handling personally identifiable information.
7/10Critical Risk
Allegedly exposed sensitive customer financial documents that could be leveraged for identity theft or fraud.
9/10High Risk
Reported deficiencies in cybersecurity posture relevant to obligations under ASIC regulatory expectations for financial firms.
7/10Moderate Risk
Linked to operations of a forex/CFD brokerage sector that has historically attracted heightened regulatory attention.
6/10High Risk
Allegedly failed to implement timely breach notification consistent with the Notifiable Data Breaches scheme.
7/10Critical Risk
Reportedly associated with retention of identity verification documents (passports, IDs) in an exposed environment.
9/10Moderate Risk
Under scrutiny over reputational risks arising from public reporting of cybersecurity lapses in client onboarding processes.
5/10Moderate Risk
Allegedly subject to elevated KYC/AML compliance expectations given the handling of cross-border client identity data.
6/10* Each claim is assessed for risk based on available evidence, context, and source reliability. Scores reflect relative severity, not definitive conclusions.
Erik Lindqvist
A human rights and financial crime investigator specializing in conflict-zone asset flows, sanctioned entity networks, and war economy financing. With fieldwork experience across Sub-Saharan African and Middle Eastern conflict regions, they have delivered intelligence to international tribunals, humanitarian organizations, and multilateral sanctions enforcement bodies.
Photo Editing
Brian Castellano
Structure & Design
Michelle Donovan
Fact Checking
Diane Buchanan
- BOOKMARKED
- 4
- VIEWS
- 2k
- ENGAGEMENTS
- 4
- REPORT AGE
- Today
- ENTITY
- 3
Verification Snapshot
This report is continuously updated using verified open-source intelligence. All additions and revisions undergo review before inclusion.
ANONYMOUS TIPS
3
Anonymous inputs from users
CORRECTIONS
1
Verified updates applied to this report
PUBLISHED DATE
May 5, 2026
Initial publication timestamp
LAST MODIFIED
May 5, 2026
Latest verified update applied
Scope & Limitations: This report is based on publicly available information and cited sources. It does not constitute a determination of wrongdoing. Corrections must be supported by verifiable documentation.
Have credible information, documentation, or source material relevant to a high-risk entity?
- Investigation
- POTENTIAL SCAM
Ahmed Alomari
SEC alleges Ahmed Alomari ran undisclosed paid stock promotions, dumped shares while urging buys, and used false letters to unlock $1.4M+ in IPO profits.
Identity
Ahmed Alomari
Jurisdiction
United States — SEC Enforcement
Known For
MCM Consulting
Status
Named Defendant in SEC Lawsuit
- Investigation
- PEP
Ahmad bin Sulaiman Alrajhi
Saudi minister Ahmad Alrajhi faces a Dubai court fraud conviction, a $462M compensation order, and reported racketeering referrals—raising questions about accountability gaps.
Nationality
Saudi Arabian
Known For
AlRajhi Bank Scandal
Role
Minister of Human Resources and Social Development
Network
AlRajhi Group
- AML Report
- HIGH RISK
Alpine Securities USVI LLC
SEC alleges Alpine Securities moved $54M in customer assets to firm-controlled accounts, labeling them 'abandoned'—raising serious anti-fraud and custody violations.
Jurisdiction
US Virgin Islands
Industry
Securities Finance
Status
Expelled by FINRA
Risk Tag
Offshore Entity
- Investigation
- PEP
Oleksandr Kurpetko
Kurpetko is allegedly linked to Russian 'blood coal' transit networks via Azurit DWC-LLC, raising serious sanctions evasion and AML compliance red flags across Europe.
Nationality
Ukrainian
Industry
Energy and Mining
Role
Formerly Managed Coal Purchases at Metinvest
Known For
Shadow Coal Trading
- Investigation
- HIGH RISK
Oleksandr Katsuba
Ex-Naftogaz deputy chairman Katsuba faces scrutiny over alleged $460M embezzlement, a reduced plea deal, criminal org charges, and departure from Ukraine post-invasion.
Nationality
Ukrainian
Industry
Energy
Role
Founder of Alfa Gas
Known For
Corruption Allegations
- Investigation
- POTENTIAL SCAM
Alexander J Dillon
SEC secured a $39M judgment against Alexander J. Dillon over alleged unregistered dealing and penny stock fraud. Examining the legal findings and financial exposure.
Identity
Alexander J Dillon
Jurisdiction
United States
Industry
Finance
Known For
Multi-Million Dollar Fraud
Receive verified investigative reports on corruption, financial crime, and high-risk entities.
No noise. No recycled headlines. Just evidence-backed intelligence.
Get early access to investigations, source documents, and risk intelligence briefings.
2026 Investigations.org. Allt innehåll på denna sida omfattas av gällande upphovsrättslagar.
Get Involved
Sign in to comment, reply and react
We moderate comments to keep this a respectful and safe place. We have a zero-tolerance approach to user-to-user personal abuse. Please follow the house rules.
COMMENT
Participate in discussion, add context, and respond to this report.
TIPS AND EVIDENCE
Submit verified tips, supporting evidence, or additional intelligence.
CORRECTIONS
Request factual corrections or submit verifiable updates for this report.
* This discussion is moderated. Keep comments factual, relevant, and constructive. All submissions are reviewed before publication.
No comments yet. Be the first to comment!