Check the sender's email address This is one of the quickest ways to identify a suspicious email, OKX uses a set of official email domains. You can view all official contact channels here. If the address looks similar but not exactly the same (for example, “okx.com” changed to “oikx.com” or an unrelated domain), treat the email as suspicious.2. Review the content carefully Even if an email looks polished, there are signs that often give away a phishing attempt.

Address label description Address label Label name Definition KOL Wallet address of Key Opinion Leader DEV The creator of the token and the wallet address associated with the token creator Fresh Newly created wallet Sniper The wallet address traded the token within the first few blocks after the token release Suspicious Wallet addresses with suspected insider trading and other suspicious activities on the chain Whale Wallet addresses holding 100,000 or more XX tokens Top Rank Top ten wallet addresses

If the address is valid but the email content appears suspicious (e.g., contains instructions to withdraw funds, scan QR codes, or click links), proceed to 2.2. Verify the email's authenticity using the EML file If the verification result shows the address is official, but the content appears suspicious: Proceed to use the EML file to verify the authenticity of the email.

You experience frequent pop-up ads or unwanted redirects to suspicious websites. There are unauthorized transactions on your account. Your keyboard input or clipboard content is modified unexpectedly.How do I remove malware and secure my device? Uninstall suspicious apps: Remove any apps downloaded from unofficial sources. Check if "accessibility permissions" have been granted to unknown apps and disable them.

High-risk behavior: Messages containing suspicious links or requests to call a specific phone number.Why are these messages so convincing? Due to limitations in SMS technology, sender names can be easily spoofed.

Keep personal contact details private and avoid trades with users showing suspicious activity. Verify all email senders before responding. When unsure, use OKX’s official channels. Be cautious with links and attachments, especially those from unknown or unexpected sources. Ignore urgent requests for personal details or immediate action. Report any merchant or email that appears suspicious to p2p@okx.com immediately.

On the app: head to Menu > Profile & Settings > Security > Community safety > Report scam or suspicious activity Example of where you can report the scam on the app On the web: go to Security → Community Safety → Report scam or suspicious activity. Example of where you can report the scam on the web Or you can easily reach out to our customer service via our Help bot on the Support center page.

Random restarts or other suspicious activity.If your account is being taken over, signs include: Logins from unknown devices or locations. Being locked out of your own account. Changes to your recovery email or phone number. Receiving password reset emails you didn’t request. Unusual sent messages or suspicious activity New third-party access or app passwords you didn’t authorize. Multi- or two-factor authentication (MFA/2FA) disabled unexpectedly.

Whenever you find an SMS or email is suspicious, you're always welcome to contact our support center that's available 24/7 to verify the authenticity of the message.

Some common reasons include: Suspicious account activity Past campaign abuse (for example, creating multiple accounts to claim rewards) Failure to meet minimum deposit, trading volume, or verification level required by the campaign Restrictions based on regional regulations or specific campaign termsWhat can I do next? You can: Review the campaign terms on the campaign page to make sure you meet the specific requirements. Wait for the system's review.

When trading on OKX, please avoid high-risk transactions, such as buying crypto on behalf of others, withdrawals for gambling purposes, off-site transactions, or assisting suspicious individuals online to launder money and score points.

Raise a dispute immediately if you find any suspicious activities or scammers during the transaction process. Our customer support team will look into it and contact you. Learn how to raise a dispute here.3. How can I further safeguard myself if I'm a seller? Always check your bank/electronic wallet/payment method of choice to confirm if you've received the full payment. Don't solely rely on payment proof provided by the buyer.

AI-based risk control models monitor suspicious user behavior 24/7. If a high-risk user initiates a high-risk withdrawal, the withdrawal will be directly rejected. Big data–driven risk controls are applied across every key stage of P2P transactions to maximize the identification of suspicious users. Once high-risk users are identified, their account permissions, as well as those of any related accounts, will be immediately restricted.

If rewards are distributed based on a USD value, the amount will be calculated using the crypto price at the end of the competition period.What happens if suspicious activities are detected in a trading competition? The platform strictly prohibits wash trading and any abnormal trading activity. Users found engaging in such behavior will have their competition eligibility revoked. OKX reserves the right to make the final decision regarding this trading competition.

Avoid clicking on suspicious links Scammers often send phishing links or malicious software in group chats to lure users into clicking. Once you interact with these links, your personal information may be leaked at best, and your assets could be stolen at worst. Always verify the source of any link in every situation to avoid losses caused by curiosity or misplaced trust. 3.