List of UK currency exchanges that are not secure by default

By Stephen Kellett
15 December, 2017

This is one of several posts of the topic of security of websites. Inspired by my initial post on the security of UK banks.

The reason for splitting this data into multiple posts is to make it more manageable. So that data on one institution is not mixed with

data on another type of institution.

The following key is used for the secure status:

Yes The site is secure, loaded via https
Invalid The site loads via https, but the security certificate is invalid and thus the site is
Partial The site loads via https, but loads some parts of the page without https. The site is
No The site is loaded via http, not via https.
Fixed The site is loaded via https, but at the time of first writing it was loaded via
?? We could not find a website to evaluate.

We tested 67 currency exchanges. We found 11 currency exchanges that did not have a secure home page (not https or did have https with an invalid security certificate). That is 16% of UK currency exchanges have security vulnerabilities

Some of the websites shown below no longer have active links. For those websites we have listed the URL but removed the non-working link.

Currency Exchange Secure Home Page
#1 Currency Yes
Ace-FX Yes
American Express Yes
Asda Travel Money Yes
Barclays Bureau de change Yes
Barrhead Travel Yes
Best Exchange No
Best Foreign Exchange Yes
BFC Exchange Yes
Central FX No
City Forex Yes
Change Group Yes
Compare Holiday Money Yes
Covent Garden FX Yes
Currencies for you Yes
Currency converter Yes
Currency matters Yes
Currency solutions Yes
Currency UK Yes
Euro Change Yes
Danske Bank Yes
Debenhams No
Elavon Yes
Exchange Rates Yes
First Choice Yes
First Rate Yes
Fourex No
Global Exchange Yes
Money Yes
H & T Group Yes
Halifax Travel Money Yes
Hargreaves Lansdowne No
HiFX Yes
HSBC Expat Yes
HSBC Travel Money Yes
Internation Currency Exchange Yes
Kanoo Foreign Exchange Yes
KBR Foreign Exchange Yes
M & S Currency Exchange Yes
Money Corp Yes
Money Saving Expert Yes
Natwest International No
Northwest Money Exchange No
Post Office Money Yes
Reuters Yes
Ruislip Currency No
Saga Travel Money Yes
Sainsbury’s Bank Travel Money Yes
Santander Travel Money Yes
Senil Cash & Go Yes
Smart Currency Business Yes
Smart Currency Exchange Yes
Sterling Yes
Tesco Travel Money No
The Currency Club Yes
The Money Shop Yes
Thomas Cook Yes
Thomas Money Exchange Yes
TorFX Yes
Travelex Yes
WeSwap Yes
World First Yes
UAE Exchange Yes


I shouldn’t need to point this out, but i will, all the same, just to be clear.

The data provided on this page should taken at face value. If you’re not sure about something, please verify it yourself. Nothing reported here should be regarded as a criticism or an endorsement or recommendation of an organisations security effectiveness. I am simply passing comment on whether the home page (whatever that may be) is provided as https on not. Other security concerns are a separate matter.

If your organisation is listed here and is not marked as secure, your best course of action is to fix that, not to complain that someone is reporting a fact anyone with a web browser can discover. The security status of your home page is public information, albeit information that many people don’t understand.

Guest posts

No, we’re not interested in having a guest post about finance related topics. These articles are about security, not finance.

Fully functional, free for 30 days