Check the sender's email address This is one of the quickest ways to identify a suspicious email, OKX uses a set of official email domains. You can view all official contact channels here. If the address looks similar but not exactly the same (for example, “okx.com” changed to “oikx.com” or an unrelated domain), treat the email as suspicious.2. Review the content carefully Even if an email looks polished, there are signs that often give away a phishing attempt.

Address label description Address label Label name Definition KOL Wallet address of Key Opinion Leader DEV The creator of the token and the wallet address associated with the token creator Fresh Newly created wallet Sniper The wallet address traded the token within the first few blocks after the token release Suspicious Wallet addresses with suspected insider trading and other suspicious activities on the chain Whale Wallet addresses holding 100,000 or more XX tokens Top Rank Top ten wallet addresses

If the address is valid but the email content appears suspicious (e.g., contains instructions to withdraw funds, scan QR codes, or click links), proceed to 2.2. Verify the email's authenticity using the EML file If the verification result shows the address is official, but the content appears suspicious: Proceed to use the EML file to verify the authenticity of the email.

High-risk behavior: Messages containing suspicious links or requests to call a specific phone number.Why are these messages so convincing? Due to limitations in SMS technology, sender names can be easily spoofed.

On the app: head to Menu > Profile & Settings > Security > Community safety > Report scam or suspicious activity Example of where you can report the scam on the app On the web: go to Security → Community Safety → Report scam or suspicious activity. Example of where you can report the scam on the web Or you can easily reach out to our customer service via our Help bot on the Support center page.

Random restarts or other suspicious activity.If your account is being taken over, signs include: Logins from unknown devices or locations. Being locked out of your own account. Changes to your recovery email or phone number. Receiving password reset emails you didn’t request. Unusual sent messages or suspicious activity New third-party access or app passwords you didn’t authorize. Multi- or two-factor authentication (MFA/2FA) disabled unexpectedly.

Whenever you find an SMS or email is suspicious, you're always welcome to contact our support center that's available 24/7 to verify the authenticity of the message.

Some common reasons include: Suspicious account activity Past campaign abuse (for example, creating multiple accounts to claim rewards) Failure to meet minimum deposit, trading volume, or verification level required by the campaign Restrictions based on regional regulations or specific campaign termsWhat can I do next? You can: Review the campaign terms on the campaign page to make sure you meet the specific requirements. Wait for the system's review.

When trading on OKX, please avoid high-risk transactions, such as buying crypto on behalf of others, withdrawals for gambling purposes, off-site transactions, or assisting suspicious individuals online to launder money and score points.

Raise a dispute immediately if you find any suspicious activities or scammers during the transaction process. Our customer support team will look into it and contact you. Learn how to raise a dispute here.3. How can I further safeguard myself if I'm a seller? Always check your bank/electronic wallet/payment method of choice to confirm if you've received the full payment. Don't solely rely on payment proof provided by the buyer.

Always access your platform account through official channels or trusted applications, and avoid clicking links from unknown sources or downloading suspicious attachments. Note: Please be especially cautious of scammers impersonating official staff on Telegram. Telegram verification badges are not fully reliable, as scammers may obtain them through special emojis.

Don’t spend suspicious dust. Spending it links your wallets together. Use separate wallets for exchange deposits (identity verification) and for private holdings. Monitor transactions. Unexpected tiny deposits should be treated as suspicious. Don’t interact with unknown tokens. Malicious airdrops can be tied to smart-contract scams. Use privacy tools carefully. hierarchical deterministic wallets or privacy-focused wallets can help, but they have trade-offs.Can a VPN help?

If you receive a suspicious email, SMS, or voice call, try to verify it through our official verification tool. If you have any questions, start with our AI chatbot: you can find it in the OKX Support Center on the website or in the app. You can also contact our customer support through chatbot.

Suspicious claims such as “account restricted, help me unlock it.” The seller insists that buyers make payment despite the order being automatically canceled due to timeout. Don’t rush to make the payment if the remaining time in the payment window is insufficient, as the order may be canceled if you transfer funds after the timeout.What safety practices should I follow during P2P trades? Never engage in any form of communications off-site — always stay on our in-app chat.

You’ve recently installed software or plugins from unknown sources, run suspicious installers, or opened suspicious attachments. Can verify first, then handle (but don’t delay long-term) The risk level is medium, and you can clearly associate it with legitimate software components you installed. It’s still recommended to verify: Process path Source Whether there’s abnormal auto-start behaviorHow do I handle risks? Please prioritize “clean / uninstall” actions.