GMO’s ¥5,000 offer is not the answer to customers’ trading losses

How much will GMO repay customers whose trading accounts were manipulated—and when will the money arrive? Its promise of ¥5,000, about US$32, does not answer either question. That is a goodwill payment for users of Onamae.com Desktop Cloud, including people who lost no money. Compensation for qualifying losses from unauthorized trading is a separate commitment, with crucial assessment rules and payment dates still unestablished. ¹⁸

That distinction is the heart of GMO’s response to unauthorized access at the service. A flat payment recognizes disruption and worry; reimbursement must address what happened to an individual customer’s money. Confusing the two makes the offer look like a ¥5,000 ceiling on losses, which the available terms do not support. It also obscures the harder task ahead: turning a public promise into a remedy customers can actually use. ^{4 18}

The compensation notices were issued on October 24, 2026. GMO Internet Group chief executive Masatoshi Kumagai publicized the response in a blog the following day—not the first announcement of the policy. Reuters, reporting in the South China Morning Post, quoted his description of the payment as “an initial gesture of good faith.” ITmedia’s account of the blog says he rejected treating it as closure. ^{22 2 1 4}

The affected service is Onamae.com Desktop Cloud, a virtual private server: a remotely hosted computer that customers use to run automated foreign-exchange trading tools. It is operated by GMO Internet, the listed subsidiary with stock code 4784. It is not interchangeable with every brokerage or foreign-exchange business in the group. ^{18 12}

Japanese reporting describes the ¥5,000 offer as covering current users of Desktop Cloud, regardless of financial harm. That does not automatically make customers of other GMO trading businesses eligible. The exact eligibility cutoff remains unestablished, so even this simpler payment still needs a precise definition of who qualifies. ^{18 25}

The second promise concerns actual qualifying losses from unauthorized transactions connected to the intrusion. ITmedia reports that refunds already provided by the trading venue will be deducted when calculating that compensation. That is not the same as saying the ¥5,000 goodwill payment will be deducted: its treatment as an offset has not been established. ¹⁸

Nor do the available official provisions establish the complete evidence requirements, how GMO will determine that a transaction resulted from this intrusion, any compensation cap, the full exclusions, or a definitive claims process and deadline. A promise to compensate unauthorized trading cannot safely be read as unconditional reimbursement of every trading loss. Market losses, unauthorized transactions and missed opportunities are different things; the operative rules must explain which losses qualify. ^{28 22}

There is one concrete deadline. Users were promised an email by October 30 explaining how to receive the goodwill payment and when it would be paid. That is a deadline for instructions, not a promise that cash will reach an account that day. No actual payment date has been established for either the goodwill money or trading-loss reimbursement. ¹⁸

The incident chronology begins before the compensation announcement. An October 23 disclosure records the discovery of unauthorized programs in some customers’ server environments on October 20. That establishes a discovery date—not when the intrusion began, how long it lasted or how widely it reached. ²⁴

Unauthorized operations involving customers’ trading accounts were reported, but that does not establish that every account linked to Desktop Cloud was compromised—or that the group’s brokerage systems themselves were breached. GMO Gaika said on October 23 that it had received reports involving tools running on Desktop Cloud while saying it had not confirmed related unauthorized operations in its own customers’ accounts. Its October 26 notice maintained that narrower position. ^{34 5}

The immediate protective instructions were more specific than the remaining reimbursement mechanics. GMO’s October 23 alert told customers to urgently change passwords for trading accounts and trading tools, terminate logged-in sessions, and make the changes from a different device, giving a smartphone as an example. ³³

GMO Gaika also urged customers to check passkey settings and review trading and order histories, open positions and account balances. It said external automated trading tools and programs were prohibited on its service. Those are dated safeguards and platform rules, not proof that the intrusion has been contained. The available notices do not establish whether Desktop Cloud access has been suspended or restored, trading disabled, or withdrawals restricted. ^{34 33}

The precise entry point, attacker identity and full extent of the intrusion remain unresolved. So do the figures needed to measure its financial scale: there is no verified total for compromised accounts, customers with qualifying losses, aggregate damage or the compensation bill. Counting everyone eligible for the goodwill payment would not produce a victim count, because that population expressly includes users without losses. ^{24 22 18}

Investors have already registered concern. Shares in the listed parent, GMO Internet Group—code 9449, not the Desktop Cloud operator’s 4784—closed on October 26 at ¥3,179, down ¥590, or approximately 16%. Nikkei’s earlier report, as of 9:50 a.m. Tokyo time, recorded an intramorning low of ¥3,351, down ¥418 or 11.09%. The closing figure supersedes the morning snapshot as the session’s final result; it does not contradict it. ^{12 13}

Reuters attributed selling to uncertainty over the earnings impact of goodwill payments and unauthorized-trading compensation. Nikkei’s closing report likewise described investor concern about expanding losses. That is a documented explanation of market anxiety, not proof that compensation alone caused every trade. The underlying exposure remains unquantified. ^{15 13}

For customers, the next useful development is not another broad reassurance. It is a clear account of eligibility, evidence, calculation and payment timing. October 30 is the next named test, but only for the promised goodwill-payment guidance. Until the separate reimbursement rules and dates are clear, GMO has made an important commitment without yet giving affected traders a complete answer about recovering their money. ^{18 28}