Transparency
Platform readiness
What runs for real today, what an administrator handles by hand, and what doesn't exist yet. Last checked 7 October 2026.
- Sign-in and sessionsLive
Real accounts with email and password. Your sign-in is kept in this browser's storage, not in a secure cookie, so a script injected into the page could read it.
- Two-factor sign-inNot available
Not built yet. No code is ever requested or checked.
- Balances and ledgerLive
Every balance comes from a permanent record of entries. Browsers cannot write to it; only server code changes it.
- DepositsLive
You send to an address Forexo publishes and enter the transaction ID. BTC, LTC, DOGE, ETH and ERC-20, BNB and BEP-20, and USDT on TRC-20 are checked on-chain automatically and credited once, for the amount actually received. SOL, XRP, ADA and DOT are still checked and credited by an administrator by hand.
- WithdrawalsManual review
You can only submit a request, and the funds are held while it waits. An administrator approves or rejects it and cannot approve their own. It is marked sent only after they send it from a wallet outside this app and enter the transaction ID. A fixed network fee per network is shown before you submit and booked to Forexo's fee account on approval.
- Spot ordersNot available
Orders fill against Forexo's own recorded stock at the live market price. There is no order book between users. Market orders are rejected if Forexo's stock can't cover them; limit orders fill when the live price reaches them, checked when your account refreshes (about every 30 seconds while open).
- SwapLive
Forexo is the counterparty. The rate comes from live market prices on the server plus a spread set by the platform, and settles in the ledger. A swap is refused if Forexo's recorded inventory can't cover it.
- RewardsManual review
There are no yield products. You get a referral link, and swap-spread discounts by fee tier. Referral rewards are paid by an administrator by hand, never automatically.
- Notification emailsNot available
Deposit, withdrawal and security events create in-app notifications, which follow your notification settings. Emails from forexo.pro are not sent yet because the sending domain hasn't been set up.
- Admin role checksLive
Admin status is checked on the server against stored roles, never in the browser.
- Admin audit logLive
Sensitive admin actions are recorded on the server, can't be edited, and can be exported.
- Sign-in history and devicesNot available
Only your current session is shown. Forexo doesn't list other devices, because it doesn't track them yet.