Three places copycats slip up
A copycat does not need to look crude to work; capturing your credentials on the login page is enough. You do not judge authenticity by how polished the page looks, but by three technical details that are hard to clone.
What to prepare before you start
These five things cover almost every delay people run into: Open the suspicious page but do not enter any credentials yet.
Keep a notepad handy and copy the domain out in full before comparing it character by character. If possible, open your bookmarked official address on a second device for comparison.
Make sure you have not been nudged into installing any "security component".
Check these three details one by one
All three have to match before you can treat it as official: Domain: there is a single official primary domain; extra prefixes, suffixes or hyphens are a red flag.
Certificate: open the padlock and read the issued-to field; fake sites often show an unrelated subject or none at all. Behaviour: a genuine login page never pushes a download, never asks you to disable antivirus software.
If any item fails, close the page at once and re-enter from your bookmark.
Fees, limits and processing times
Numbers change from time to time, always confirm on the official fee page before you commit size: Official entry: use okx.com or your own bookmark, and check the domain letter by letter - look-alike domains are the most common phishing trick here.
Install the app from App Store, Google Play or the official OKX download page; Android users should avoid APK files shared through chat groups. Set a separate fund password alongside Google Authenticator, then enable the anti-phishing code and address whitelisting.
Review login devices regularly and expect extra checks after changing SIM, email or device. The help centre and in-app support cover most issues; for fund-related cases open a ticket and keep the reference number.
Nobody from real support will ask for your password, 2FA code or seed phrase - treat anyone who does as a scammer.
The OKX-specific part
OKX also supports an anti-phishing code, and official emails carry the identifier you set. Support also only communicates through in-platform tickets, never via personal social accounts.
Frequently asked questions
Can a page that looks identical still be fake
Yes. Styling can be copied wholesale; the domain and certificate cannot, which is why they are the test.
Does the padlock mean it is safe
It only means the connection is encrypted, not that the other side is official. Open it and read the issued-to field.
Can I report a copycat
Yes, send the URL to official support and warn others not to enter through that link.
Risk notes and next steps
Keep reading:代币化股票的对手方风险;杠杆仓位与强制平仓;美股行情总览. Always read the address bar before logging in, rather than judging by how the page looks.
Never type your password into a link someone sent you, even from someone you know. At the first unusual login alert, change your password and lock the account.
