Risk scorecard
Each area is scored 0 (clean) to 10 (worst). Higher means more risk.
Regulation
10/10 · CriticalNo licence in any jurisdiction, and a regulator's warning naming the exact domain as not belonging to an authorised entity.
Identity & transparency
9/10 · CriticalNo legal entity disclosed, registration hidden behind a privacy service, and the operation traded under the registered name of a different licensed company.
Withdrawals & conduct
4/10 · ModerateOne unverifiable loss report on one platform, discounted because it promotes a fund-recovery service. No credible pattern established either way.
Reputation
7/10 · HighA regulator warning naming the domain, plus bottom-of-scale ratings from independent scanning services, against an almost non-existent community footprint.
Website claims
8/10 · CriticalPresented as an established trading operation under a licensed firm's name, and as Luxembourg based, with no authorisation and no company traceable in either country.
Operational history
9/10 · CriticalDomain created 27 November 2025 and already withdrawn from the DNS by August 2026. Under a year of life, with no datable company behind it.
Who they are
A quick desk file on the company behind the brand.
- Brand: HARINDALE, operating at harindale.trade.
- Legal entity: None disclosed and none identifiable. The domain registration is shielded behind a privacy service.
- Registered: No company registration could be traced to this operation. It was attributed to Luxembourg, but the CSSF register of authorised entities holds no company whose name begins with Harin.
- Website: harindale.trade, with a client area at client.harindale.trade. Neither resolves today.
- Only licence: None. CySEC states the website does not belong to an authorised entity.
- Offers: A WordPress marketing site carrying TradingView market widgets, with a portal offering account registration and login.
- Not accepted: No restricted-country policy was published.
- Age claim: None we can evidence. The domain was registered on 27 November 2025 and the site had gone dark by August 2026.
Regulation
Who really oversees this broker, and what each licence is worth to you.
Proof of regulation on an official register: No
We could not confirm this broker on any genuine regulator’s register.
No licence claims on record.
Why we reached this verdict
How the evidence adds up.
Two findings from the Cyprus regulator settle this, and they come from two separate records rather than one document repeated.
- A regulator named the exact address. CySEC's notice of 8 April 2026 lists harindale.trade among websites that, in its words, do not belong to an entity which has been granted an authorization for the provision of investment services. A warning that names the domain itself, rather than a similar brand, leaves no room for mistaken identity.
- The name belongs to somebody else. Harindale Ltd is a real Cypriot Investment Firm, licensed by CySEC under number 301/16 since 27 April 2016, company number 346662, based in Limassol and trading as M4Markets. CySEC's approved-domain list records a single website for that firm, www.m4markets.eu, and the firm's own legal pages name the same one address. harindale.trade is not among them. Using the registered name of a licensed investment firm to take client sign-ups is the core of an impersonation scam, not a paperwork slip.
- No licence anywhere else. The operation was placed in Luxembourg. A search of the CSSF register returns no result for Harindale, and none for the shorter string Harin, so no Luxembourg authorisation of that name exists.
- It was new, and it is already gone. The domain was registered on 27 November 2025 through a registrar with the registrant details shielded. An independent capture of the live site on 18 April 2026 records a trading front end with a client portal for registration and login. The registry record was last changed on 19 August 2026 and the domain now carries the status client hold, which removes it from the DNS. A deposit-taking site with a nine-month life is the shape of a short-cycle operation, not a business.
- What we did not find matters too. There is no credible pattern of customer loss reports. Trustpilot holds a single one-star entry, and it promotes a named fund-recovery service, which is the standard bait pattern of a recovery scam, so we give it no weight. The verdict here rests on the regulator's record, not on complaints.
We assess the risk of fraud as high. Readers should note the distinction the whole report turns on: the licensed firm legally named Harindale Ltd, at m4markets.eu, is a separate and authorised company, and appears to be the party whose identity was borrowed.
Evidence ledger
Every finding, with its source and how strongly it points.
E1CySEC's warning notice of 8 April 2026 states that harindale.trade does not belong to an entity which has been granted authorisation for the provision of investment services, under Article 5 of Law 87(I)/2017. The notice names the exact domain.
E2The CySEC register of Cypriot Investment Firms records Harindale Ltd, licence 301/16, authorised since 27 April 2016, company number 346662, at Spyrou Kyprianou 78, Limassol, trading as M4Markets and formerly ICC Intercertus Capital Ltd. The name used by the warned website is the registered name of this separate, authorised company.
E3CySEC's published list of approved domains records a single website for Harindale Ltd, www.m4markets.eu. harindale.trade does not appear on it, so it is not a website covered by that firm's licence.
E4The registry record shows harindale.trade was created on 27 November 2025 through NameSilo with the registrant name, organisation and contact details redacted, running on Cloudflare nameservers. The record last changed on 19 August 2026 and the domain now carries the status client hold, which removes it from the DNS.
E5A search of the CSSF register of entities authorised or registered in Luxembourg returns no result for Harindale, and no result for the shorter string Harin, so no Luxembourg-authorised firm of that name exists.
E6An independent capture of the live site on 18 April 2026 records a WordPress trading site titled HARINDALE, carrying TradingView market widgets and linking to a client portal at client.harindale.trade with account registration and login pages. This was a deposit-taking front end, not a brochure page.
E7The licensed firm's own legal pages name Harindale Ltd and CySEC licence 301/16, give m4markets.eu as its website, and state that M4Markets is a trade name of the ORYX group. There is no reference to harindale.trade, which removes the group-domain explanation.
E8The domain returns no DNS answer, so visitors are served nothing. This matches the client hold status on the registry record.
E9Independent website-scoring services place the domain at the bottom of their scale and record a phishing report against it, citing the young registration and hidden ownership.
E10Trustpilot holds one review of harindale.trade, a single one-star entry of 22 May 2026 describing a locked account and money lost. It also promotes a named fund-recovery service, which is the standard bait pattern of a recovery scam, so we do not treat it as a reliable account. Trustpilot marks the site as closed.
E11No credible customer complaint pattern exists. There is no discussion on Reddit, no forum thread and no scam-tracker entry naming this domain, and no enforcement action against any named operator. Nobody has been shown to have lost money, and the verdict does not rest on complaints.
The other side
The strongest case in this broker’s favour.
We looked hard for the innocent reading before reaching this verdict, and some of it holds up.
- A regional or overflow domain of the real firm? This was the strongest candidate, because a licensed group can run several addresses. It fails on the register: CySEC records one approved website for Harindale Ltd, www.m4markets.eu, and the firm's own legal pages give the same single address with no reference to harindale.trade.
- A regulator getting it wrong, or a register lagging? Warning lists can misfire, so we did not take the notice on trust. We searched the Cyprus register and the Luxembourg register independently and arrived at the same answer.
- Planted accusations? Competitors do post fake scam reports, so we screened the one negative review rather than counting it. It fails the screen, and we discount it. That cuts in the site's favour, and we have applied it.
- No proven victims. We found no verified loss, no forum thread, no tracker entry and no enforcement action against any named operator. Nobody has been shown to have lost money here, and we do not claim otherwise.
- Nobody can deposit now. The site is off the internet, so the immediate risk to new customers has already passed.
None of this reaches the finding. Unauthorised solicitation under a licensed firm's name is established by the regulator's own records, whether or not a victim has come forward.
What would change this
What we would need to see to revise the verdict.
This verdict is falsifiable. Any one of the following would force us to reopen it.
- CySEC withdrawing or correcting its notice of 8 April 2026, or confirming the listing of harindale.trade was an error.
- CySEC adding harindale.trade to the approved domains recorded for Harindale Ltd, licence 301/16, which would make it a licensed firm's website rather than an outside one.
- Documentation from Harindale Ltd or the ORYX group showing the site was operated by, or on behalf of, the authorised entity.
- An authorisation in any credible jurisdiction naming the operator of harindale.trade, together with a register entry recording that domain.
- Evidence that the operation was something other than a brokerage, for example a pure education or software service that never held client money.
Check it yourself
Official registers and warning lists. Verify every claim first-hand.
CySEC warning notice, 8 April 2026
The regulator's own notice naming harindale.trade as a site that is not authorised.
CySEC warnings, full list
Where CySEC publishes its warnings about unregulated entities.
CySEC register entry for Harindale Ltd, licence 301/16
The authorised Cypriot firm of that name, which is a different company from the warned website.
CySEC list of approved domains
Shows the one website approved for Harindale Ltd, www.m4markets.eu.
CSSF register search for Harindale
Luxembourg's register of authorised entities, returning no match.
Frequently asked questions
Quick answers about this broker’s safety.
Is Harindale a scam?
Yes, in our assessment the website harindale.trade is a scam. Cyprus's financial regulator warned on 8 April 2026 that the site does not belong to any firm authorised to provide investment services, and it took client registrations while holding no licence in any jurisdiction we could find. It also used the registered name of a genuine licensed Cypriot investment firm.
Is Harindale a fraud?
No court or regulator has made a finding of fraud against the operators of harindale.trade, and we do not make that accusation ourselves. What is on the public record is a regulator's statement that the site was not authorised, and our own finding that it traded under another licensed company's name. On that basis we assess the risk of fraud as high.
Is harindale.trade regulated?
No. CySEC stated in its notice of 8 April 2026 that the website does not belong to an entity authorised under Article 5 of Law 87(I)/2017. We also searched the Luxembourg register, where the operation was said to be based, and found no entity of that name.
Is harindale.trade the same company as Harindale Ltd or M4Markets?
No, and this is the most important point in the report. Harindale Ltd is a real Cypriot Investment Firm licensed by CySEC under number 301/16 since 2016, trading as M4Markets, and its only approved website is www.m4markets.eu. The warned site at harindale.trade is a separate operation that used that company's name.
Can I still withdraw money from harindale.trade?
There is no working site to withdraw from. The domain has been removed from the DNS by its registrar and no longer loads. If you have a balance showing, treat it as unrecoverable through the platform itself and go to your bank or card issuer instead.
Who owns harindale.trade?
We could not establish that. The domain was registered on 27 November 2025 with the registrant details hidden behind a privacy service, no legal entity was disclosed on the site, and no company registration could be traced to the operation.
How old was Harindale?
Under a year. The domain was created on 27 November 2025 and the site was captured operating in April 2026. By August 2026 the registrar had placed the domain on hold. No corporate entity behind it could be dated, because none was ever identified.
Why does the website not load?
The domain carries the registry status client hold, applied around 19 August 2026, which removes it from the DNS entirely. That status is normally set by the registrar rather than the owner, and it commonly follows an abuse complaint.
Was Harindale licensed in Luxembourg?
No. The operation was associated with Luxembourg, but the CSSF register of authorised and registered entities returns no result for Harindale, and no result even for the shorter string Harin. There is no Luxembourg authorisation of that name.
What should I do if I deposited money?
Contact your bank or card issuer immediately and ask about a chargeback, because these routes have deadlines. Report the matter to CySEC, to your own national financial regulator and to the police. Keep every receipt, statement and message.
Someone offered to recover my funds for a fee. Should I pay?
No. Paying an upfront fee to a recovery service is one of the most common ways victims lose money a second time. The only review posted about this site promotes exactly that kind of service, which is a recognised bait pattern. Deal with your bank and the authorities instead.
How can I check a broker myself before depositing?
Find the licence number on the broker's site, then look it up on the regulator's own register rather than on any link the broker gives you. Check that the register lists the exact website you are on, since several regulators publish approved domains, and check the regulator's warning list for the domain. If the name matches a licensed firm but the website does not, walk away.
What we recommend
The practical takeaway from everything above.
Treat this address as unsafe and do not send it money. It no longer loads, but the same operators commonly reappear under a new name.
- Do not deposit, and do not act on any email, call or message that claims to continue a Harindale account.
- If you already paid, contact your bank or card issuer straight away and ask about a chargeback. Card and transfer routes have time limits, so speed matters.
- Report it to CySEC and to the financial regulator in your own country, and to your national police or cybercrime unit. Keep transfer receipts, account statements and message history.
- Ignore anyone who offers to get your money back for an upfront fee. The single review of this site carries exactly that kind of pitch. Paying a recovery service is how many people lose a second time.
- If you thought you were dealing with M4Markets, check the real firm at m4markets.eu and confirm it against CySEC's register before doing anything further. Harindale Ltd, licence 301/16, is an authorised firm and is not the operator of the site described here.
This is an independent assessment of risk, not a legal ruling. Scores and verdicts follow the Wikilix broker-safety methodology and can change as new evidence appears. Review scores are treated with caution when a broker’s reviews look manipulated. Last reviewed September 9, 2026. If any detail here is out of date or incorrect, or you represent this broker, please contact us.