Avoiding look-alike OKX login pages that appear in search adverts

Typing the exchange name into a search engine and clicking the first result feels harmless. Unfortunately, the first result is sometimes an advert placed by someone who has built a near-perfect copy of the OKX login page. The design, logo and wording match the real thing, and the address differs by a single character or an extra word. Once you enter your email, password and verification code there, the attacker can use them on the genuine site within seconds. This kind of attack does not depend on any weakness in your account settings; it relies on habit. Changing that habit is the best defence. This guide explains how to reach OKX reliably, how to recognise a cloned page and what to do if you have already typed details into one.

Stop searching for the login page

The simplest protection is to never search for the login page at all. Type the official address yourself once, confirm it is correct, and save it as a bookmark. Use that bookmark, or the OKX app installed from the official store, every time you sign in. Remove any saved shortcuts that came from search results or links in messages. If you use several browsers or devices, set up the bookmark on each. It takes a minute and removes the most common route by which people land on fake pages.

Signs that a page is not genuine

Look carefully at the address bar before typing anything. Watch for extra words, swapped letters, unusual domain endings or long subdomains placed in front of a familiar name. Be suspicious of pages that ask for your verification code immediately without the normal flow, or that request your recovery phrase or wallet connection, which a centralised login never needs. A pop-up urging you to download a security update or a separate app is another warning sign. If anything feels off, close the tab and use your bookmark.

Use the anti-phishing code and official verification

Set an anti-phishing code in your OKX security settings so genuine emails display your chosen phrase. Messages that lack it, even if they look official, should be treated as suspect. OKX also offers an official verification tool to check whether a website, email address or social media account belongs to the company. If you receive a link and are unsure, check it there rather than clicking. Combining these with a bookmark means you rarely have to judge a page by appearance alone.

If you entered details on a fake page

Act quickly. From a trusted device, open OKX through your bookmark and change your password. Reset two-step verification and review the list of signed-in devices, removing anything unfamiliar. Check withdrawal addresses and API keys for changes you did not make, and consider temporarily freezing the account if the option is available. Change the password of your email account too if you reused it. Then contact OKX support through the app, describing what happened and when, and keep the fake page address for reference.

Risk boundary: OKX Italy Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint

• Save the official OKX address as a bookmark and use it or the official app instead of searching each time.
• Check the address bar for extra words, swapped letters or unusual endings before typing any credentials.
• Treat any login page asking for a recovery phrase or wallet connection as fake and close it immediately.
• If you entered details on a clone, change your password, reset two-step verification and contact support.