Check the sender's email address This is one of the quickest ways to identify a suspicious email, OKX uses a set of official email domains. You can view all official contact channels here. If the address looks similar but not exactly the same (for example, “okx.com” changed to “oikx.com” or an unrelated domain), treat the email as suspicious.2. Review the content carefully Even if an email looks polished, there are signs that often give away a phishing attempt.

Address label description Address label Label name Definition KOL Wallet address of Key Opinion Leader DEV The creator of the token and the wallet address associated with the token creator Fresh Newly created wallet Sniper The wallet address traded the token within the first few blocks after the token release Suspicious Wallet addresses with suspected insider trading and other suspicious activities on the chain Whale Wallet addresses holding 100,000 or more XX tokens Top Rank Top ten wallet addresses

If the address is valid but the email content appears suspicious (e.g., contains instructions to withdraw funds, scan QR codes, or click links), proceed to 2.2. Verify the email's authenticity using the EML file If the verification result shows the address is official, but the content appears suspicious: Proceed to use the EML file to verify the authenticity of the email.

High-risk behavior: Messages containing suspicious links or requests to call a specific phone number.Why are these messages so convincing? Due to limitations in SMS technology, sender names can be easily spoofed.

On the app: head to Menu > Profile & Settings > Security > Community safety > Report scam or suspicious activity Example of where you can report the scam on the app On the web: go to Security → Community Safety → Report scam or suspicious activity. Example of where you can report the scam on the web Or you can easily reach out to our customer service via our Help bot on the Support center page.

Random restarts or other suspicious activity.If your account is being taken over, signs include: Logins from unknown devices or locations. Being locked out of your own account. Changes to your recovery email or phone number. Receiving password reset emails you didn’t request. Unusual sent messages or suspicious activity New third-party access or app passwords you didn’t authorize. Multi- or two-factor authentication (MFA/2FA) disabled unexpectedly.

Whenever you find an SMS or email is suspicious, you're always welcome to contact our support center that's available 24/7 to verify the authenticity of the message.

Some common reasons include: Suspicious account activity Past campaign abuse (for example, creating multiple accounts to claim rewards) Failure to meet minimum deposit, trading volume, or verification level required by the campaign Restrictions based on regional regulations or specific campaign termsWhat can I do next? You can: Review the campaign terms on the campaign page to make sure you meet the specific requirements. Wait for the system's review.

Raise a dispute immediately if you find any suspicious activities or scammers during the transaction process. Our customer support team will look into it and contact you. Learn how to raise a dispute here.3. How can I further safeguard myself if I'm a seller? Always check your bank/electronic wallet/payment method of choice to confirm if you've received the full payment. Don't solely rely on payment proof provided by the buyer.

Always access your platform account through official channels or trusted applications, and avoid clicking links from unknown sources or downloading suspicious attachments. Note: Please be especially cautious of scammers impersonating official staff on Telegram. Telegram verification badges are not fully reliable, as scammers may obtain them through special emojis.

Don’t spend suspicious dust. Spending it links your wallets together. Use separate wallets for exchange deposits (identity verification) and for private holdings. Monitor transactions. Unexpected tiny deposits should be treated as suspicious. Don’t interact with unknown tokens. Malicious airdrops can be tied to smart-contract scams. Use privacy tools carefully. hierarchical deterministic wallets or privacy-focused wallets can help, but they have trade-offs.Can a VPN help?

You’ve recently installed software or plugins from unknown sources, run suspicious installers, or opened suspicious attachments. Can verify first, then handle (but don’t delay long-term) The risk level is medium, and you can clearly associate it with legitimate software components you installed. It’s still recommended to verify: Process path Source Whether there’s abnormal auto-start behaviorHow do I handle risks? Please prioritize “clean / uninstall” actions.

If suspicious applications are running on your device, scanning and removing malware is recommended. Trojan horse viruses are likely to be present in browsers and input method applications.What should I do if my account is automatically logged out on the PC (requires device time calibration)? For the security of your account, we recommend calibrating your device time and then trying to log in again. If the issue persists, please check and adjust your device’s time settings.

To protect your funds and data: Download apps only from official app stores Enable two-factor authentication (2FA) Use strong passwords or biometric locks Keep your device and apps updated Avoid entering sensitive information into suspicious pop-ups or emails These precautions help reduce the risk of phishing attacks or malicious apps.

OKX may disqualify users or cancel rewards where activity appears suspicious, non-commercial, or inconsistent with the intended purpose of the Program.10. Modifications, Suspension, and Termination 10.1. OKX reserves the right to modify, suspend, or terminate the Program at any time without prior notice. 10.2. OKX may amend these Terms, and continued participation constitutes acceptance of the updated Terms.11.