Recognising fake OKX notifications, pop-ups and in-app style messages

Phishing has moved beyond suspicious emails. Increasingly, attackers mimic the look of app notifications and pop-ups. A browser page suddenly displays what looks like an OKX security warning. A text message styled like a push notification says a withdrawal is pending. A messaging app shows a banner claiming your account needs urgent verification. Because these imitate the visual language of the app you trust, they can catch you off guard. The defence is to know where genuine OKX messages appear and to verify anything unexpected through the app itself. This guide explains the differences between real and fake alerts, how to check an alert safely and what to do if you interacted with a fake.

Where genuine alerts come from

Real OKX notifications come from the official app installed on your phone, from emails that carry your anti-phishing code and from messages shown inside the app's own notification centre after you sign in. If an alert appears in a web browser, a messaging app or an SMS with a link, treat it with suspicion. Even if it looks identical to an app notification, its origin is different. Make it a habit to open the app directly and look at the notification centre whenever an alert worries you.

Common traits of fake alerts

Fake alerts usually push you to act immediately: confirm a withdrawal, unlock an account, claim a reward before it expires. They often contain a link or a button that leads to a login page outside the app, or ask you to call a phone number. Some ask you to install a separate security tool. Genuine OKX alerts do not require you to sign in through a link in a text message or to download anything outside the official app store. Any request for your password, verification code or recovery phrase is a clear sign of a scam.

Verify through the app, never through the message

When you see an alert, do not tap its link. Close it, open the OKX app from your home screen and check your notification centre, recent activity and security settings. If nothing matches the alert, it was fake. For emails, look for your anti-phishing code. OKX also provides an official verification tool to check whether a website, email or social account belongs to the company. Using these checks takes less than a minute and removes the need to judge a message by appearance.

If you tapped a fake alert

If you entered details after tapping a fake alert, act quickly. Open the genuine OKX app, change your password and reset two-step verification. Review the device list, withdrawal address book and API keys for changes. Consider freezing the account temporarily if the option is available. If the fake page asked you to install something, remove it and scan your phone. Report the incident through in-app support with the time and a description, and keep the message as evidence rather than deleting it.

Risk boundary: OKX App Safety Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint

• Treat alerts that arrive through browsers, SMS links or messaging apps as suspicious even if they look like the app.
• Open the OKX app from your home screen and check the notification centre whenever an alert worries you.
• Never sign in through a link in a text message or install a separate security tool an alert recommends.
• If you tapped a fake alert, change your password, reset two-step verification and review devices and addresses.