Two checks: the domain first, then the anti-phishing code
The display name on an email can be faked freely, but neither the sending address nor the anti-phishing code you set can be. Make these two a habit and you can judge a suspicious message within ten seconds.
What to prepare before you start
These five things cover almost every delay people run into: Enable the anti-phishing code in security settings and remember what you set.
Learn to reveal the full sender address by tapping or clicking the display name. Add the official sending address to your contacts for future comparison.
Resolve not to log in by clicking links inside emails.
Four checks on any email you receive
In order, and anything odd shows up immediately: Expand the full sender address and compare the domain against the official one.
Confirm the anti-phishing code you set appears in the body; without it, it is forged. Do not click links in the mail; enter from your bookmark and check the in-site messages.
For anything urging "act now" or "verify immediately", confirm in-platform that the matter is real. Once confirmed as forged, report it to official support and delete it.
Fees, limits and processing times
Numbers change from time to time, always confirm on the official fee page before you commit size: Set a separate fund password alongside Google Authenticator, then enable the anti-phishing code and address whitelisting.
Review login devices regularly and expect extra checks after changing SIM, email or device. Official entry: use okx.com or your own bookmark, and check the domain letter by letter - look-alike domains are the most common phishing trick here.
Install the app from App Store, Google Play or the official OKX download page; Android users should avoid APK files shared through chat groups. The help centre and in-app support cover most issues; for fund-related cases open a ticket and keep the reference number.
Nobody from real support will ask for your password, 2FA code or seed phrase - treat anyone who does as a scammer.
The OKX-specific part
OKX offers the same anti-phishing code setting, best enabled together with two-factor authentication. Official mail is usually mirrored in the in-site message centre, which you can use to cross-verify.
Frequently asked questions
If the display name is official, is it genuine
No. Display names are freely editable; only the full sending address is reliable.
What is an anti-phishing code
An identifier you define in security settings that official mail includes automatically, proving authenticity. The link in the mail looks like the official site.
Can I click it
No. Even if it looks right, enter through your own bookmark.
Risk notes and next steps
Keep reading:代币化股票的对手方风险;杠杆仓位与强制平仓;美股行情总览. Official mail never asks for your password or seed phrase.
Setting the anti-phishing code takes one minute and then works permanently. Cross-check any asset-related email against the in-site message centre.
