"If I run an EA on my account, could it one day run off with my money?" — it's the biggest worry before buying an EA, and it deserves a straight answer. Bottom line first: a legitimate EA cannot steal your money; the real risks are two other things. Here's exactly what an EA can and can't touch.
First: what an EA can and cannot do
An EA (Expert Advisor) is a program running inside your MT4/MT5 terminal. All it can do is place trades in your own account:
- ✅ Can: open, close and modify trades, set stops/targets, scale in or out — all inside your trading account.
- ❌ Cannot: withdraw, transfer, or move money to another account. Deposits and withdrawals happen only through the broker's portal with your own credentials; an EA runs in the trading terminal and never touches the funding rails.
So a licensed EA from a clean source, even if it loses, cannot move your capital out — at worst it loses money in the market, it can't carry it away. That's the first thing to relax about.
So what are the real risks (three, by likelihood)
- 1. The strategy losing / blowing up (most common): the real EA risk isn't theft — it's aggressive logic draining the account, especially no-stop grid/martingale (see are grid & martingale EAs dangerous). For strategy risk, see realistic return expectations and control drawdown.
- 2. Malware inside pirated EAs (the actual "theft"): cracked/nulled builds are the real way money and accounts get stolen — often laced with keyloggers, password stealers, backdoors. They don't "withdraw via the EA"; they steal the passwords on your PC — MT logins, even wallets. This is exactly why we insist on licensed (see why you should never use a pirated EA).
- 3. Handing your account / master password to a "managed" scammer: some ask for your master password (trade + change settings) or even funding details under "managed/signals", then trade recklessly or run off with it. Legit managed/copy services never need your withdrawal rights (see how to spot an EA scam).
Key lesson: investor password vs master password
MT4/MT5 has two passwords — know the difference:
- Master / trading password: can trade and change settings. Use it for your own EA, but never give it to any third party.
- Investor password (read-only): view only — can't trade, can't move money. When someone needs to "see your live account", give only this.
Remember: no password lets anyone withdraw your money through the MT terminal — withdrawals go through the broker portal with your identity check. But the master password lets someone trade your account to zero, so don't hand it out either.
How to use an EA safely (do these and you're largely fine)
- Licensed, clean source only: never cracked/nulled (that's where the malware hides). Every EA here is officially licensed by its author.
- Demo first, then small real money: prove it on demo, then go live with money you can afford to lose (how much: how much capital to start).
- Isolate the account: run the EA on a dedicated account, not mixed with large savings.
- Keep the master password to yourself; share only the investor password to show results.
- Pick verifiable ones: a Myfxbook/MQL5 signal showing real drawdown (how to verify: verify an EA with Myfxbook).
In one line: a licensed EA can't steal your money; what you actually guard against is malware in pirated builds and scammers asking for your password. For the safe path, pick an officially licensed, Myfxbook-verifiable EA from the store and set it up per the points above.
Risk note: this is a safety explainer, not investment advice. EA trading carries market risk and can lose money; use only licensed software and money you can afford to lose, and keep your account passwords secure.