Safety
Free MT5 Expert Advisors: Where They Come From, What Can Go Wrong and How to Check One Before You Run It
By Benjamin Lee · Updated · 8 min read
Free MT5 Expert Advisor is one of the most searched phrases in the trading software niche, and one of the most dangerous to click on. Some free EAs are genuine: open-source code shared by developers, demo versions, or tools given away by a broker. Others are pirated copies of paid products, modified to steal data, or bait to push you toward a specific broker. This guide explains where legitimate free EAs come from, what can go wrong, and how to inspect and test a file before it touches a real account.
Key takeaways
- Legitimate free EAs exist, mainly as open-source code, official demo versions and broker tools.
- A cracked or leaked paid EA is the highest-risk download. It can carry malware and breaks the developer's licence.
- Never tick Allow DLL imports for a file you cannot vouch for. A DLL can run any code on your computer.
- Prefer source code you can read and compile yourself in MetaEditor over a closed .ex5 file from a stranger.
- Free is not the same as cheap. Paid products pay for a manual, support, updates and a seller who is accountable.
Where legitimate free EAs come from
| Source | What you get | Main risk |
|---|---|---|
| MQL5 Code Base | Free source code shared by community members, which you can read, compile and change | Quality varies widely. Code can be buggy or unprofitable, and the author gives no promises. |
| MQL5 Market free products and demos | Free listings and demo versions that you can run in the Strategy Tester | A demo may be limited. A free listing may be a lead for a paid upgrade. |
| Your broker | Tools or EAs offered to clients, such as trade managers or risk calculators | May tie you to the broker, and may not suit your strategy. |
| Open-source repositories | Code on a public repository where you can read the history | Check who maintains it, when it was last updated and what the licence says. |
| Developer giveaways | A trial or simplified version of a paid EA | Read the conditions. It may expire or be restricted to a demo account. |
The common thread in the safe sources is that you can see who published the file, where it came from, and often what is inside it. The unsafe sources are the ones with no author, no history and a link in a video description or a messaging group promising a paid EA for nothing.
What can go wrong
- Malware through a DLL. An EA that asks for Allow DLL imports can load a library that runs any code on your computer, including code that reads files or sends data out. Most honest EAs do not need it.
- A cracked paid EA. A leaked or modified copy of a commercial product may have been altered, and you cannot tell what was added. Using it also breaks the developer's licence.
- Hidden risk logic. A free EA may use a martingale or no stop loss to make a backtest look strong. You see a profit chart and discover the risk later.
- Broker bait. Some free EAs only work, or work properly, on a particular broker where the author earns a commission.
- Time limits and kill switches. A file may stop working on a date or after a number of trades and then ask for payment.
- No support and no updates. If the broker changes symbols or the platform updates, you are on your own.
How to check a free EA before running it
Step 1: Identify the source and the author
Look for a named author, a profile with history, and a page where others have used it. A file with no author and no history is a reason to stop.
Step 2: Prefer the source code (.mq5)
Open the file in MetaEditor, read the inputs and the order logic, and compile it yourself with F7. If you cannot read code, ask someone who can, or choose a product with a manual instead.
Step 3: Search the code for dangerous calls
Look for #import lines (DLLs), WebRequest calls to unknown addresses, file operations outside the terminal's data folder, and anything that reads account details.
Step 4: Keep DLL imports and WebRequest off
In Tools, Options, Expert Advisors, leave Allow DLL imports unticked. Add a WebRequest address only if the documentation names it and you trust it.
Step 5: Run it in isolation first
Use a separate Windows user or a virtual machine, with a demo account on a separate terminal install. Do not run an unknown file on the computer that holds your banking or email sessions.
Step 6: Scan the file
Run your antivirus on the download. It does not prove safety, but it catches known bad files.
Step 7: Backtest and forward test
Run the Strategy Tester on real ticks, then a demo account for several weeks. Read the trade log for strategy features you did not expect, such as increasing lot sizes.
Free versus paid: what the price actually covers
A well-made paid EA usually comes with things a free file does not: a manual and a setfile, a stated version, a way to ask questions, and updates when the platform or the symbol conventions change. The seller has a name and a reputation to protect, and a refund policy you can read. A very low price is not a warning on its own, but a price of nothing for a product that normally costs money is.
That cuts both ways. A paid listing needs the same checks. Ask who built it, what the licence allows, what updates you get and what happens if you are not satisfied. Our EA buying checklist, the guide to buying a cheap MQL5 Expert Advisor safely and the comparison of lifetime, subscription and rental licences cover those questions.
Red flags in a free download
If a free EA passes these checks, treat it like any other: understand the strategy, test it, and risk only a small amount until it has proved itself over a long enough period. Our scam guide lists what to look for in the claims, and how to install an EA on MT5 shows the setup safely.
What to look for when you read the source code
You do not need to be a programmer to scan an .mq5 file for the riskiest items. Open it in MetaEditor, press Ctrl+F and search for the words in the table. Finding one is not proof of bad intent, but each deserves an explanation in the documentation.
| Search for | What it means | What to do |
|---|---|---|
| #import | The program loads an external library, usually a DLL | Do not run it unless the author explains why and you trust the library |
| WebRequest | The EA contacts a web address | Check the address. Allow only the one documented |
| FileOpen or FileWrite | The EA reads or writes files | Check that it stays inside the terminal's data folder and that the files hold only settings or logs |
| Martingale, multiplier, LotFactor | Lot size grows after a loss | Read the cap on the lot size and the number of steps |
| StopLoss = 0 or sl = 0 | Orders may be sent without a stop | Find out what else closes a losing trade |
| SendNotification, SendMail | The EA sends messages out | Check what it sends and where |
| AccountInfoString, AccountInfoInteger | The EA reads account details | Common for display, but check whether the values are sent anywhere |
Why many free EAs disappoint, even the honest ones
A free EA that is honest can still be a poor fit. Many are simple examples written to show how the language works, with no risk management, no filter for spread or news, and no testing on a range of conditions. The author owes you nothing, so there is no manual to explain the inputs and nobody to ask when it stops opening trades after a platform update. That is the real cost of free: your time, and the risk you carry for not knowing what the code does.
If you want to learn how EAs work, free code is a fine teacher, run on demo. If you want an EA that trades a real account with documented behaviour, compare it with a paid product on the same terms, using the same tests, and decide on the evidence.
Sources and further reading
- MetaTrader 5 Help: Expert Advisors and Custom IndicatorsHow Expert Advisors and custom indicators work in the terminal.
- MQL5 ReferenceThe language documentation for writing Expert Advisors, indicators and scripts.
- CFTC Customer Advisory: AI Won't Turn Trading Bots into Money MachinesA US regulator's warning about trading-bot claims of unrealistically high returns.
- MQL5 Articles: How to purchase a trading robot from the MetaTrader Market and to install it?The steps MetaQuotes documents for buying and installing a Market product.
Frequently asked questions
Are free MT5 Expert Advisors safe?
Some are, such as open-source code and official demo versions, but the category is risky. Cracked paid EAs and files from unknown sources can carry malware or hidden risk logic. Read the source, keep DLL imports off, and test on demo in isolation.
Where can I download a free EA legally?
The MQL5 Code Base shares free source code, the MQL5 Market lists free products and demos, and brokers or developers sometimes offer trials. Always check the licence and the author.
Is it illegal to use a cracked EA?
Using a leaked or cracked copy of a paid product breaks the developer's licence and can infringe copyright, depending on your country. It is also the riskiest kind of download for malware.
What does Allow DLL imports do?
It lets an EA load external Windows libraries, which can run code outside MetaTrader. Leave it off unless the EA's documentation requires it and you fully trust the source.
Can a free EA be profitable?
Some may behave well in testing, but no EA can promise profit. Judge a free EA exactly as you would a paid one: backtest on real ticks, forward test on demo, and watch the drawdown.
Can I trust a free EA from YouTube or Telegram?
Treat it with caution. If there is no named author, no source code and no history, you cannot know what the file does. Run nothing from an unknown source on a live computer or account, and keep DLL imports switched off.
Expert Advisors in these styles
Apply the checks above to any of these before you buy: read the manual, run your own backtest, and start on demo.
Keep reading
- Buying guideEA Buying Checklist: 15 Questions to Ask Before You Pay15 questions to ask before buying an MT5 Expert Advisor: who built it, licence terms, backtest proof, risk logic, support and refunds, with a printable checklist.
- VerificationHow to Verify an EA Track Record: Myfxbook and MQL5How to read an EA track record on Myfxbook or MQL5 Signals: what verification proves, the numbers to check, fake-record tricks, and a 12-point checklist.
- EA basicsHow to Install and Run an EA on MT5Install an Expert Advisor on MetaTrader 5, load a setfile, set safe risk limits, and run it on a VPS. A practical walkthrough with a pre-live checklist.
- Pillar guideMT5 Expert Advisors: The Complete Guide for BeginnersEverything about MetaTrader 5 Expert Advisors in one place: how they work, strategy types, risk, backtesting, buying safely, gold, EURUSD, prop firms and Europe.