We support advanced authentication methods, including hardware security keys, to help protect your account. You can use a hardware security key in two main ways:1. Passkey Based Authentication Use your hardware security key to verify your identity during logins and key actions—such as withdrawals—offering an extra layer of security against unauthorized access.

Not an Insurance Product The Security Fund is not an insurance policy, a custodial protection fund, or a guarantee against user losses. OKX is not an insurer, and the Security Fund does not cover losses arising from a user's individual trading decisions, security breaches, or unexpected market events. Users are always solely responsible for their own risk management.2.

OKX Security Assistant is an application developed by our security team to protect our Windows users, prevent virus and trojan attacks, and safeguard user assets. When you receive a risk alert from OKX Security Assistant on a Windows device, it indicates that the current device environment may pose threats to your account and asset security.Why did I receive a risk alert from the OKX Security Assistant?

Here are some tips to avoid potential scammers and learn how to secure your assets.1. Does OKX hold crypto or cash? We only hold onto the seller's crypto once the order is made, for security (otherwise known as escrow). Escrow is a legal term used when a third party holds the assets in a transaction until an agreement has been met between the buyer and the seller.

For account security information and verification protection methods, for example, the account login name and password shouldn't be consistent with other websites as the private key and mnemonic words should be kept privately. If you detect any suspicious activity on your account, you may reach out to our Support team or here. OKX will not ask for your SMS/email/GA verification code in any way.

Separate devices: keep your authentication and passkey apps on a secondary secure device when possible.Device safety Avoid jailbreaking or rooting your devices. Protect devices with strong PINs, biometrics, or secure locks. Refrain from visiting untrustworthy websites or installing unknown software. Use devices and software from reputable sources only. Note: If your email, authenticator, and passkey accounts share the same login, a hacker could compromise all of them at once.

For added protection, clear your browser cache and cookies during this process.Two-factor authentication If you find that the Google Authenticator has been linked and that the action was not performed by you, please reset it immediately. For added account security, we highly recommend enabling two-factor authentication (2FA). Follow the instructions here to link your authenticator. Note: always back up the QR code during setup in a safe place. You’ll need it if you ever switch devices.

In our platform, our user's security and privacy are of utmost importance. As part of our escrow service we provide to safeguard our user's P2P transactions, we'll hold crypto for the buyer during the transaction. The purchased crypto assets will only be released to the buyer after the seller confirms that payment has been received. Traders must understand how they could be targeted to protect their crypto holdings and ensure a safe, seamless P2P trade.

You may be asked to verify again to: Reconfirm your identity for account protection Prevent unauthorized access or financial fraud Maintain compliance with updated local and international regulations Rest assured, your data is encrypted and handled in accordance with data protection laws, including GDPR and other global standards.What’s next for KYC? We’re constantly improving the KYC experience to make it faster, safer, and more user-friendly.

Provide all available evidence and request prompt action to protect other users and resolve the issue. You can now report scams directly on our platform, via both app and web. On the app: head to Menu > Profile & Settings > Security > Community safety > Report scam or suspicious activity Example of where you can report the scam on the app On the web: go to Security → Community Safety → Report scam or suspicious activity.

personal data is encrypted and securely stored in line with data protection laws.

Previously, this issue could cause the OKX App to crash in order to protect your assets. While this ensured security, it did cause some inconvenience for users. Currently, OKX has implemented technical optimizations: if an abnormal mobile environment is detected, you will only receive a security alert instead of the app crashing.

Second example of phishing SMS Third example of phishing SMSHow can I protect myself? It’s essential to remain cautious and informed. Here are a few simple but powerful steps you can take to stay safe:What I should do: Always verify information directly through the OKX app or official website. Avoid relying solely on SMS. Turn on Two-Factor Authentication (2FA) to strengthen your account’s security. Monitor your login activity in the app regularly for any suspicious devices or IP addresses.

Note: To better protect the assets of VIP users, if you have not bound an authenticator, the OKX app will prompt you to bind an authenticator after opening the app or logging in. The reminder will appear on the Promotion page and on the homepage, but it will only pop up once per day (daily reset at 24:00).

It's the most secure option to protect your account, and you can use your biometrics or a USB security key to log in. Once the passkey feature is activated, at least one passkey must always remain linked to the account.