OKX account hacked?
Do these steps, in this order.

Step one: freeze your OKX account now

Freezing pauses trading and withdrawals, so the attacker can’t move anything else. You can do it yourself in the OKX app under Profile → Security center → Freeze account. If you can’t log in, contact in-app live chat and ask them to freeze it.

1. Freeze the account to stop further withdrawals.
2. Contact live chat and share the suspicious login times and withdrawal records.
3. Once unfrozen, change your login and fund passwords and reset Google Authenticator.
4. Check your email and phone number haven’t been swapped, and change your email password too.

How to check and remove logged-in devices

Security center → Devices lists every phone and computer that has logged in to your account, with times and locations.

• Remove every device you don’t recognize, then change your login password.
• An unfamiliar IP address or city in your login history means your password may have leaked.
• Remove old or sold phones too, and log out of OKX on them.

The withdrawal whitelist: what attackers hate most

With the whitelist on, you can only withdraw to addresses you added and confirmed in advance. A newly added address takes a while to activate, so even if someone gets into your account they can’t send coins to their own address right away.

1. Turn it on under Security center → Withdrawal whitelist.
2. Add the wallets or exchange addresses you actually use and label them clearly.
3. From then on, withdrawals can only go to whitelisted addresses.

How to spot phishing sites, fake apps and fake emails

When in doubt, paste the URL or email address into the OKX app’s “Official verification channel” and check.

What is a SIM swap?

A scammer collects your name, ID number and other details, then poses as you to get your number moved to a new SIM card. Once it works, your phone suddenly loses signal and every SMS code goes to them.

• If your phone suddenly shows “No service” and your bill is paid, call your carrier immediately.
• Protect your OKX account with Google Authenticator or a passkey, not SMS alone.
• Ask your carrier to set a PIN or password for SIM changes.

What is OKX Shield? Will it pay out?

On September 22, 2026, OKX launched OKX Shield for European users. If you opt in and meet its security conditions (such as using a passkey, facial verification for large withdrawals and disabling web withdrawals), you can apply for compensation for losses caused by a third-party account takeover: up to EUR 100,000 for regular users, EUR 250,000 for VIP1-3 and EUR 500,000 for VIP4 and above.

It’s a voluntary, discretionary program run by OKX. It is not insurance and doesn’t guarantee a payout, each person can have only one approved claim in their lifetime, and it currently covers European accounts only. For everyone else, the best protection is still our security checklist.

Sources: OKX Help Center, The Paypers