Due to limitations in SMS technology, sender names can be easily spoofed. This means fraudulent messages can appear right alongside your real OKX alerts—such as those for login activity or withdrawals—making it difficult to tell the difference at first glance.This manipulation of SMS sender ID is what makes these phishing attempts particularly dangerous and effective.How does phishing SMS work?

Check storage space: Make sure your SMS inbox isn’t full. Delete old messages if necessary. Review blocked messages: Check whether security apps or system settings are filtering or blocking SMS messages. Disable SMS-blocking apps: Temporarily turn off any SMS-blocking or filtering apps on your device. Check carrier status: Visit your mobile carrier’s official website or app to confirm whether the message was successfully delivered.

Select Send code in both the New phone SMS verification and Current phone SMS verification fields. We'll send a 6-digit verification code to both your new and current phone numbers.

I haven’t received the SMS codeFacial recognition failed Please update your app to the latest version. To enhance account fund security, the fund password feature has been removed starting from App version 6.0.24. If your page still prompts you to enter or set a fund password, please update the App to the latest version. If you are unable to change the password on your own or are unsure how to proceed, please contact customer support for assistance.

Whenever you find an SMS or email is suspicious, you're always welcome to contact our support center that's available 24/7 to verify the authenticity of the message.

If your mobile phone isn't working properly, or you've lost access to it, or you can't get SMS codes, try the following:My SMS codes aren’t working on OKX Try these fixes first to check if you can get codes working again: Automate your mobile phone time.

You'll receive an email/SMS confirmation upon changing authenticator app successfully.Web Go to the Profile icon and select Security. Find Security on the Profile page Find authenticator app and select Change. Find Authenticator app in the Authentication methods section Select Continue and follow the on-screen instructions.

Please note that push notifications, SMS, and email may be briefly disrupted. Your funds will remain safe and unimpacted. We apologize for any inconvenience this may cause. Regards, OKX Jul 14, 2025

Also, when you've a large number of orders, don't release your crypto based on an email or SMS notification. Scammers can send a fake SMS which at first glance looks like an SMS from a bank. Or they may send you a fake email, pretending to be from payment services such as Wise or AdvCash. Always check the email address to make sure the domain matches with the service domain. Raise a dispute if the domains don't match. Be cautious of 'partial payment or amount manipulation' scams.

You'll receive confirmation that you’ve been verified by SMS or email. If you haven’t heard from us after 24 hours, check out Support Center or contact AI chatbot for assistance.

If your account stays inactive for the period you've chosen, we'll first try to contact you by email and SMS. If we don’t hear back or see any login activity within your selected response timeframe, we’ll begin contacting your nominated emergency contact by email and SMS. Follow-up messages will be sent every 10 days until we receive a response or your account is reactivated.

On the web Log in to your account at okx.com, go to Assets, and select Withdraw Select Brazilian Real to start making cash withdrawals Select Brazilian Real to start making an BRL withdrawal Select the account you would like to withdraw from, enter the amount Select Preview to check the withdrawal details Select Withdraw, then enter your authorization code, SMS code or Passkey to complete starting a cash withdrawalOn the app Open your OKX app.

Phishing attacks occur when an attacker pretends to be a trusted source, often using fake URLs, emails, or SMS messages to get you to share sensitive info. They aim to cause panic, using urgent messages like "suspected money laundering" or "account restriction." Example: Note: these are real SMS messages our users receive. Phishing attempts may also arrive via email or from other sources.

If your OKX account is logged in on an infected device, or if you access your email, SMS, or Google Authenticator from it, the Trojan can capture your login credentials and verification codes. This includes the codes required to authorise actions such as withdrawals or security setting changes. With this information, the hacker can perform unauthorized activities on your behalf.

Get SMS/email and Authentication code and Continue to close the account Note: it's required to bind with an authentication app in your account before closing it