HFM's pitch is improbable on paper: $0 minimum, FCA + CySEC, full payment stack. The catch is the mobile app — solid until it isn't.