The risk of a QR code is that you cannot see the address
Scanning a code is just opening a link, except you skip the step where you read the address first. So the rule reduces to one thing: after scanning and before typing anything, read the address in full.
What to prepare before you start
These five things cover almost every delay people run into: Identify the source: official material, an official page, or something forwarded by someone.
Use a scanner that previews the link instead of jumping straight away. Plan to check the domain after the redirect before going further.
On older phones, confirm the scanner does not auto-open links.
Three rules for scanning
If any one of these is violated, stop: Look before opening: expand the full link and confirm the official primary domain.
Source matters: only scan codes published on official pages, official material or verified accounts. No sensitive input on a scanned page: log in and withdraw only through entrances you saved yourself.
Go slower when a "limited-time offer" is pushing you; urgency itself is a standard tactic.
Fees, limits and processing times
Numbers change from time to time, always confirm on the official fee page before you commit size: Official entry: use okx.com or your own bookmark, and check the domain letter by letter - look-alike domains are the most common phishing trick here.
Install the app from App Store, Google Play or the official OKX download page; Android users should avoid APK files shared through chat groups. Set a separate fund password alongside Google Authenticator, then enable the anti-phishing code and address whitelisting.
Review login devices regularly and expect extra checks after changing SIM, email or device. The help centre and in-app support cover most issues; for fund-related cases open a ticket and keep the reference number.
Nobody from real support will ask for your password, 2FA code or seed phrase - treat anyone who does as a scammer.
The OKX-specific part
OKX QR codes are mostly for campaigns and referrals, and the page resolves back to the official domain. If the scanned address differs from the official domain, close it and report it to official support.
Frequently asked questions
Does the platform itself use QR codes
Yes, on physical material and campaign pages, always with the official domain and a clear description.
Is it normal to land on a download page
Fine if the domain is official; otherwise close it and search the app store instead.
How do I know a code was not pasted over
Stickers pasted over physical material are a known trick, so cross-check against the announced campaign details.
Risk notes and next steps
Keep reading:代币化股票的对手方风险;杠杆仓位与强制平仓;美股行情总览. Check the post-scan domain even for codes printed on official material.
Do not scan codes sent privately, especially ones promising rebates or gifts. If a scanned page asks you to install a package, go back to the official app channel.
