On August 4, 2026, the FMA warned against offers from Hextryx Storm (hextryxstorm.digital): According to the authority's findings, the provider offers portfolio management without being authorized to do so. What that means and what steps those affected should consider.
The management of customer assets was advertised on the website hextryxstorm.digital under the name “Hextryx Storm”. The Austrian Financial Market Authority (FMA) published a warning about this in August 2026. This article explains what the authority found, why portfolio management in particular is strictly regulated and what those affected can do now.
What the FMA has published
On August 4, 2026, the FMA warned about offers from “Hextryx Storm” (hextryxstorm.digital). According to the authorities' findings, the provider offers portfolio management without having the necessary authorization in Austria.
Why portfolio management requires permission
When it comes to portfolio management, the customer lets the provider decide how their money is invested. This is a particularly sensitive area: the provider has other people's assets and makes investment decisions with wide discretion. In Germany, Austria and Switzerland, this activity is therefore only permitted with the permission of the respective supervisory authority, combined with requirements for equity capital, organization, reliability of those responsible and separation of customer funds.
If such permission is missing, the very protective mechanisms that investors rely on are lost: There is no supervision over the safekeeping of funds, no audit of the people involved and generally no investor compensation.
What those affected can do now
- Do not make any further deposits or make any advance payments for alleged withdrawals.
- Secure documents: management contract or agreement, payment receipts, account statements, portfolio or account overviews, chat histories and emails.
- Inform your own bank or card issuer and have chargeback options checked.
- File a criminal complaint and report the matter to the responsible supervisory authority.
- Change access data to your own accounts and wallets if the provider had access to them.
Legal options
Anyone who has handed over assets to a provider without permission may have claims for repayment and damages against those responsible; the lack of permission can play an important role. Since those responsible are often intangible, we also examine claims against the holders of the recipient accounts, the payment service providers and crypto exchanges involved and, in certain situations, against our own bank. Which claims exist and are economically enforceable depends on the individual case.
Conclusion
There has been a warning from the FMA regarding unauthorized portfolio management for Hextryx Storm since August 4, 2026. Anyone who has entrusted money to this provider should stop further payments, secure documents and have their options checked.
Sources
Frequently asked questions
With investment advice, you receive recommendations and make decisions for yourself. With portfolio management, the provider decides on your behalf how to invest your assets. Both require permission; Portfolio management is subject to particularly strict requirements due to the broad discretion.
Values displayed in a provider's customer account without permission cannot be verified. Whether systems have actually been purchased can only be assessed on the basis of verifiable evidence. Do not make any further payments to “unlock” supposed winnings.
