How Prop Firms Detect Algorithmic Trading in 2026: The Rulebook Explained

The retail prop trading industry is a different beast in 2026 than it was in 2023. Roughly 80 to 100 firms have closed since February 2024, MetaQuotes has rewritten the rules of platform access, the CFTC's case against My Forex Funds collapsed under sanctions against the regulator itself, and the surviving firms have built materially more sophisticated detection systems for algorithmic and copy-trading rule breaches. For an MQL5 developer or a serious retail algo trader, the question is no longer "can I run my EA on a funded account?" — most well-run firms now allow EAs explicitly. The real question is which firms allow what, how their detection systems actually work, and how to disclose automation properly so a payout request does not turn into an audit you cannot pass.

This is the defensive, compliance-side article for prop firm bot detection 2026. A note on freshness: prop firm rules change frequently — sometimes monthly. Every claim here is current as of the cited date. Verify the live TOS of any firm before paying for an evaluation.

1. The 2024–2026 Reckoning: How We Got Here

Between February 2024 and late 2025, an estimated 80–100 proprietary trading firms ceased operations — roughly one in seven of all prop firms. The trigger was not a market move. It was a single technology vendor making a single decision.

On 2 February 2024, MetaQuotes terminated True Forex Funds' MT4 and MT5 licences without warning. Over the following weeks, it systematically revoked access from dozens of prop firms, citing grey-label licence abuse, US regulatory exposure, and the fact that most prop firms ran trader activity entirely on demo servers — generating zero licensing revenue for MetaQuotes itself. Brokers grey-labelling MT5 to prop firms (BlackBull Markets, Eightcap and others) were forced to terminate prop-firm clients immediately or lose their own MetaQuotes licences. Eightcap announced it would cease all prop firm services by 29 February 2024.

MetaQuotes' market share among prop firms collapsed from ~48% to ~24% within nine months, while Match-Trader saw a 290% increase in server clients and now powers 60% of the top ten prop firms. New prop firms can no longer obtain MT5 without holding a regulated forex broker licence and demonstrating a corporate bank account with a brick-and-mortar bank — effectively closing the easy entry path that had let the industry grow 1,264% between December 2015 and April 2024 to an estimated $20 billion in market size.

Layered on top of the MetaQuotes crackdown was the CFTC's action against My Forex Funds (Traders Global Group Inc.), filed in August 2023, which alleged $310 million in fraud against more than 135,000 customers. That case ultimately collapsed: a Special Master found that CFTC enforcement staff had made false statements to the court about a CAD $31.5 million transfer that turned out to be legitimate tax payments to Canada Revenue Agency. The court issued sanctions against the CFTC, ordered the agency to pay MFF's legal costs, and at least four CFTC staff were placed on administrative leave.

What survived this two-year crucible was a smaller, more cautious, more compliance-conscious industry. The surviving firms have hardened their detection stacks, tightened their TOS, and — counterintuitively — generally become more welcoming of properly disclosed algorithmic trading, because the rule violations that cause payout disputes are not "this trader used an EA" but "this trader ran an undisclosed third-party copier across forty accounts."

2. What Modern Prop Firm TOS Actually Prohibit

The phrase "prop firms ban EAs" is, in 2026, almost entirely wrong. Most major firms allow Expert Advisors but specifically prohibit a narrow set of strategies and behaviours that EAs frequently exhibit. Understanding which is which is the whole game.

2.1 FTMO — explicit EA permission, narrow prohibitions

FTMO is the clearest case. As of 2026 the firm's published rules state: "There are no restrictions on trading strategies as long as risk management protocols are followed," with Expert Advisors permitted on MT4, MT5 and cTrader. No pre-approval is required. No source code submission. The prohibitions are specific:

• High-frequency trading that opens and closes dozens of trades per minute — anything faster than a human could realistically execute is flagged.
• Latency arbitrage — exploiting price feed delays between brokers.
• Tick scalping systems that depend on being faster than the price update.
• Server overload — more than 2,000 server requests per day per account from automated systems counts as a Forbidden Trading Practice.
• Identical third-party EAs across multiple accounts breaching the $400,000 per-strategy capital cap.

News trading is permitted in the Challenge phase but is subject to a two-minute window restriction either side of high-impact releases (NFP, CPI, FOMC) on funded accounts. FTMO holds discretionary authority to determine that behaviour qualifies as a Forbidden Trading Practice even if it is not explicitly listed — a clause traders should read carefully.

2.2 FundedNext — EAs on MetaTrader only, strict uniqueness

FundedNext explicitly permits Expert Advisors on MT4 and MT5 — but not on cTrader or Match-Trader. The firm charges an additional EA usage fee and imposes a strict ruleset: strategy must be customised to the trader's own style; no duplicate strategies across accounts; maximum allocation of $300,000 per strategy; no switching between manual and EA mid-challenge; no external copy trading; HFT prohibited; grid and tick scalping restricted; cross-account hedging banned; VPN/VPS sharing forbidden between accounts.

FundedNext's "consistent method" rule means a trader must use the same approach during the Challenge and on the funded account — a rule that catches many traders who pass the eval manually and then deploy an EA on the funded account.

2.3 E8 Markets — "one strategy per user" enforcement

E8 states: "We limit one strategy per user, so if we see multiple users utilize the same EA, it may lead to the termination of your account." The practical effect is that third-party EAs purchased and run by hundreds of traders simultaneously will eventually trigger correlation-based detection across E8's user base.

2.4 SFX Funded — narrowest EA permission

SFX represents the strictest of the EA-permitting firms. Trade/risk manager EAs are allowed, self-developed EAs are allowed, all other third-party EAs are prohibited under copy trading rules. Specifically prohibited: market rollover scalping, news scalping, and EAs for which the trader does not own the source code. Violation results in denial of progression, permanent breach, and platform ban.

2.5 Topstep and Apex — the US futures side

The US futures prop world operates on a different platform stack (Rithmic, Tradovate, NinjaTrader, TopstepX) and rulebook — a shift we covered in depth in the great migration from forex to futures prop firms. Topstep (since January 2026): 90/10 profit split from the first payout, day-trading only with positions flat by 3:10 PM CT, and from July 2025 all new Trading Combines must use the proprietary TopstepX platform. Apex Trader Funding (Apex 4.0, March 2026): one-step evaluation, EOD trailing drawdown default, up to 20 funded accounts simultaneously, 50% Consistency Rule, 5-day minimum trading rule, and a ban on overnight trading from 1 March 2026.

3. Firm Comparison Table

4. The Detection Stack: How Prop Firms Actually Catch Violations

4.1 Layer 1 — Order Metadata

MetaTrader 4 and 5 record extensive metadata on every order. The prop firm's risk team sees all of it via server administration tools. The most directly diagnostic fields:

• magic number: An integer set by the EA at order placement. Default for manually placed orders is 0. A non-zero magic on an account claiming manual execution is a primary red flag.
• comment field: Trade copiers leave tags such as "LTC" (Local Trade Copier), "FX Blue Copier", "Duplikium", "Social Trader Tools". Firms maintain dictionaries of these tags.
• expert_id field (MT5): Identifies the originating expert advisor process.
• Order source flag: The MT5 server log differentiates orders submitted via the manual terminal, an EA's OrderSend call, or the MT5 API. The flag is server-side and cannot be modified by the client.
• Execution timing precision: Manual entries cluster around round seconds with variable sub-second jitter. Automated entries are typically precise to single-digit milliseconds.

4.2 Layer 2 — Statistical Timing Fingerprinting

Even if order metadata is sanitised, behavioural timing patterns leak the automation. Risk teams run inter-trade interval distribution analysis, reaction-time tests (humans cannot react in under ~250 ms; sub-150 ms reactions across many trades indicate automation), hour-of-day activity heatmaps, and Z-score analysis across accounts.

4.3 Layer 3 — Cross-Account Correlation

The biggest single change in detection sophistication between 2023 and 2026 is cross-account analysis. Firms now operate platform-level monitoring that compares trading behaviour across the entire user base.

• Timestamp deltas: Two accounts placing the same trade on the same symbol within a few milliseconds with identical lot sizes is the canonical copy-trading signature. Systems flag any matched-pair execution under 250 milliseconds.
• Identical lot-size ratios: If every follower account maintains exactly 2.5× the master's position size regardless of instrument volatility, the mathematical consistency itself is the evidence.
• Sequence pattern matching: Even with introduced timing delays and varied multipliers, the sequence of trades — symbol, direction, broad timing window, hold duration — produces matchable signatures.
• Shared third-party EA fingerprints: When fifteen users at E8 Markets all run the same commercial EA, their trade sequences become statistically indistinguishable. This is precisely what E8's "one strategy per user" rule targets.

A concrete example circulated in industry write-ups: two accounts placing 1.00 lot EUR/USD trades with SL 20 pips and TP 40 pips, within 0.1 seconds of each other, repeated over 20 trades. That pattern is mathematically incompatible with independent trading.

4.4 Layer 4 — IP, Device and VPS Fingerprinting

Every login to the trader dashboard, MT5 terminal and payout request is recorded with the originating IP. Most firms permit no more than three distinct IPs per day. Datacentre IP ranges (AWS, Google Cloud, DigitalOcean, ForexVPS, Beeks, BeeksFX) are publicly enumerable; VPS usage is not prohibited by most firms but is a risk signal that increases monitoring weight. Device fingerprinting via user-agent, screen resolution, OS, fonts and rendering characteristics is difficult to spoof consistently.

4.5 Layer 5 — Manual Review at Withdrawal

The detection stack culminates at the payout request. Withdrawals are the firm's monetary exposure point and trigger the most thorough review. Reviewers examine the full trade history with all metadata visible, login and IP geolocation history, any automated flags raised earlier, the trader's stated strategy versus actual execution patterns, and KYC against payout routing. This is where rule violations detected weeks earlier — but not immediately enforced — get acted on.

5. Detection Methods Ranked by Enforcement Frequency

The takeaway is consistent: trying to defeat the detection stack is a losing proposition once you reach withdrawal review, because the audit pulls from server-side data the trader has no ability to modify. The rational play is firm selection and disclosure.

6. Firms That Welcome EAs Versus Firms That Do Not

FTMO sits at the top by virtue of operational longevity, the OANDA acquisition (announced January 2025) backed by a $250M credit line from Czech banks led by UniCredit, and explicit, well-documented EA permission. FTMO reported $329M in revenue in 2024 (53% YoY growth) with $62.5M net profit — financially the most robust firm in the category.

FundedNext allows EAs with the EA fee, $300K-per-strategy cap and "no switching" rule. The Dubai base puts it outside both US CFTC reach and direct EU MiFID jurisdiction. The5%ers, MyFundedFX, Funded Trading Plus, Hola Prime, Goat Funded Trader and Maven Trading all explicitly permit EAs with conditions. Goat markets itself specifically to MT5 algorithmic traders.

Topstep and Apex are the EA-friendly options on the futures side, with the caveat that the platform stack is different and rules now exclude overnight holding at both firms from March 2026. See our companion piece on why forex traders are migrating to futures prop firms for the full breakdown.

The firms that prohibited EAs outright largely did not survive 2024 — True Forex Funds, SurgeTrader, and approximately 80 others closed during the MetaQuotes crisis. Of the survivors, almost none operate a blanket EA prohibition. If you are evaluating a strategy across asset classes, our market-specific guides cover forex, indices, commodities, crypto and stocks on MT5.

7. Legitimate Disclosure: The Compliance-Side Playbook

The single most underused tool in retail prop trading is proactive disclosure. Firms that explicitly welcome EAs have public-facing processes for exactly this; firms that do not are still generally more lenient with a trader who asked first than with one who got caught.

1. Before purchasing, read the EA section of the TOS in full and email compliance:"I plan to run an EA — strategy type [e.g. mean-reversion EURUSD M15], typical trade frequency [2–5 per day], typical SL/TP [25 / 50 pips], hedging/grid logic, sole user. Please confirm this is compatible." Save the reply.
2. During the evaluation, set the EA's magic number consistently and use the comment field to identify your strategy in a non-deceptive way (e.g. MR_EURUSD_v3). Do not strip or randomise metadata to look manual when you are not — this is precisely the behaviour that converts a rule-following EA user into a fraud-flagged account at withdrawal review.
3. At the funded stage, maintain the same strategy and execution method you used during the Challenge. FundedNext's "consistent method" rule catches traders who pass manually then deploy automation.
4. Keep records: a written strategy description, backtest results, risk parameters and any correspondence with the firm. At withdrawal time these become the audit trail.
5. Single environment: dedicated VPS or device, dedicated residential IP if possible, no shared logins, no account sharing.

8. What Happens When It Goes Wrong

• Profit forfeiture: Firms reserve the right under TOS to void payouts on rule violations. Challenge fees are non-refundable.
• Account termination: Permanent breach with no refund.
• Cross-firm blacklisting: Some firms share KYC and behavioural data through informal industry channels. The same passport at four different firms with similar flags propagates quickly.
• Civil exposure: In the UK and EU, knowingly entering an evaluation agreement intending to violate material terms to extract payment can engage fraud by false representation under Section 2 of the Fraud Act 2006. The FCA in 2024 launched criminal prosecutions of nine individuals linked to illegal forex schemes, trials scheduled for 2027.
• Tax exposure: Payouts received and later clawed back create awkward tax-year reporting problems.

9. The Regulatory Picture: FCA, MiFID & EU AI Act

UK FCA: The FCA's January 2024 AI Update confirms existing rules (Consumer Duty, SM&CR, SYSC, operational resilience) apply to any firm offering financial services in or from the UK. The August 2024 launch of criminal prosecution against forex influencers signals enforcement willingness.

Czech National Bank: First EU regulator to publicly state prop trading "may be subject to MiFID" depending on business model. ESMA is conducting preliminary inspections of funded trader firms. Italy's Consob, Belgium's FSMA, Spain's CNMV have all issued public warnings specifically about prop trading firms in 2024–2025.

EU AI Act: Entered force 1 August 2024. High-risk AI obligations take effect 2 August 2026, with penalties reaching €35M or 7% of global turnover. Evaluation algorithms, risk management systems and automated trading strategies are likely to be classified as high-risk AI — mandating transparency (Article 13), record-keeping (Article 12) and human oversight (Article 14).

The most regulation-resilient firms in 2026 are those with a regulated brokerage parent, transparent payout records, and EA policies that are explicitly published rather than discretionary.

10. Where the Detection Arms Race Is Heading

• ML-based behavioural classifiers trained on labelled bot vs manual datasets, using features including mouse-movement patterns in the dashboard, time-on-page distributions and support-ticket linguistics.
• Platform-level integrations (Match-Trader, TradeLocker, DXtrade) where the prop firm has more direct telemetry control than under the older grey-labelled MT5 model.
• More explicit EA-friendly positioning — counterintuitively, the same firms hardening detection are being more transparent about what they permit. Expect more to follow FTMO's lead.
• EU AI Act tightening in August 2026 will force EU-facing firms to formalise their detection systems' decision-making and provide trader-side transparency.
• Platform fragmentation: MetaTrader's 48% → 24% share collapse is unlikely to reverse. A strategy locked to MT5 is now usable at a meaningfully smaller subset of firms.

11. Conclusion: Selection, Disclosure, Documentation

Most major prop firms allow Expert Advisors. The firms that did not allow EAs largely either restructured or did not survive 2024. The detection stack is mature enough that attempting to defeat it is not a viable strategy — the withdrawal audit uses server-side data the trader cannot modify, and the consequences of a flag at that point are profit forfeiture, account termination and potential cross-firm blacklisting.

The strategy that does work is unglamorous: read the actual TOS of three to five candidate firms, select the one whose published rules genuinely accommodate your strategy, disclose your use of automation in writing to compliance before purchasing the evaluation, keep metadata clean and consistent, run on a dedicated environment with a single IP range, maintain the same approach from Challenge through funded stage, and keep documentation as your audit trail.

For the foreseeable future the durable edge is not technical evasion. It is firm selection plus legitimate disclosure plus operational hygiene — and a working understanding of which firms have rule frameworks, regulatory standing and payout records that justify the evaluation fee.

Related reading: The great migration: forex to futures prop firms · Autonomous AI agents for MT5 · How to develop a trading strategy · How to backtest on MT5.

Frequently Asked Questions