OKX Account Hacked: Emergency Response Steps

When you discover your account has been hacked, the first thing to do is not to change the password—immediately transfer any remaining assets to a secure address, then contact official customer support to freeze the account. If you can still log in, transfer as much as possible; if you cannot log in, use the customer support emergency channel directly.

OKX Exchange
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！

Register Now App Download

1. If You Can Still Log In: Transfer Assets First, Then Reset Security Settings

If you can still access your account, follow these steps in order:

1. Immediately Transfer Remaining Assets

• Create a new wallet or another exchange account (use a device you confirm is secure).
• Use a strong password and enable 2FA, then transfer the remaining assets from your OKX account.
• Do not send assets to an address that may be known or monitored.

2. Contact Customer Support to Freeze the AccountAccording to OKX's official help center: In the app, tap the full-feature icon at the top left of the homepage → [Get Help] → [Online Chat], type "hacked" as a keyword, and the system will directly connect you to a dedicated anti-fraud and anti-theft support agent.

When reporting, provide a detailed description: time of the incident, amount involved, suspicious transaction records, and relevant screenshots. The platform will keep this information confidential.

3. Check and Reset All Security SettingsIf you notice any unusual logins or settings tampering, review the following items one by one:

• Login Password: Change it immediately. Use a combination of uppercase and lowercase letters, numbers, and special symbols. Do not reuse the same password for your email or other platforms.
• Google Authenticator: If you find that the authenticator has been linked by someone else, reset it immediately. Withdrawals will be disabled for 24 hours after reset.
• API Keys: Go to [Security Center] → [API] and check. Delete any API keys that you did not create yourself (hackers may use APIs to automatically withdraw funds).
• Device Management: In the "Device Management" section of Security Center, remove any unfamiliar devices and login sessions.
• Withdrawal Address Book: Check your "Withdrawal Addresses" and delete any verified addresses that you did not add.
• Third-Party Login Links: Check if third-party login methods (e.g., Google, Apple ID, Telegram) are linked. Remove any that you did not authorize.

2. If You Cannot Log In: Use the Emergency Channel Directly

If the hacker changed your password and you cannot log in:

1. On the login page, click "Forgot Password" and try to reset it via your phone or email.
2. If your email or phone is also compromised,contact online customer support immediately. Explain that your account has been hacked, and the support agent will help freeze the account.
3. Submit identity verification materials as requested by customer support.

OKX Exchange
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！

Register Now App Download

3. What to Do After Contacting Customer Support

Customer support will guide you through account recovery. Meanwhile:

• The platform will verify your identity and cooperate in investigating suspicious transactions.
• If the stolen funds have flowed to other exchanges, there may be cross-platform coordination.
• The review and recovery process takes time—keep your communication channels open.

FAQ

Is it useful to report to the police after being hacked?Reporting to the police may not guarantee recovery, but filing a police report is a prerequisite for law enforcement to issue a freezing order to exchanges. Without a case, exchanges cannot unilaterally dispose of assets in involved accounts. It is recommended to prepare a criminal complaint, fund flow diagram, and other materials, and choose an appropriate jurisdiction to file the report. While crypto-related cases are indeed difficult to file, not reporting means there is no chance of recovery.

What can I do after my account is frozen?During the freeze period, you may still be able to log in to view balances and transaction records, as well as close existing positions. The specific available functions depend on the actual account display.

Can stolen funds be traced on-chain?Yes. Asset flows on the blockchain are publicly visible. Using blockchain explorers and on-chain analysis tools, you can trace the transfer path of stolen funds and create a flow diagram. This diagram can serve as evidence for filing a report and for subsequent tracking.

After completing the above steps, while waiting for feedback from official customer support, consider filing a police report. If the amount is significant, it is advisable to consult professional security firms or lawyers. Do not trust third parties online who claim they can recover your assets—this often leads to secondary scams.