If you receive an OKX email but can't see your anti-phishing code, there are two main reasons: either you haven't set one up in your account, or the email itself is fake and cannot pass the code check. OKX clearly states: once you set an anti-phishing code, all official emails will include that specific string you created. If an email lacks it or the code doesn't match, it's almost certainly a phishing email.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Step 1: Check if the Anti-Phishing Code is Enabled
The anti-phishing code is not enabled by default; you must activate it manually.
What to do: Log into the OKX App, tap the profile icon at the bottom right → [Security Center], and look for the [Anti-Phishing Code] entry. On the web version, click the avatar in the top right, go to [Profile] → [Security Settings] → [Anti-Phishing Code].
Completion standard: The status shows "Enabled" or "Activated," and you remember the 6-12 character alphanumeric combination you set.
If it shows "Not enabled," you haven't turned on this feature, so of course emails won't contain a code. Tap [Enable Now] and follow the prompts to verify your identity via phone number.
Step 2: If It's Enabled but the Email Lacks the Code, Check the Sender Address
Once set, official emails will always include the code. If it's missing, 99% of the time it's a fake email.
What to do: Don't click any links in the email. First, check the sender's address. Official OKX emails always end with
@okx.comor@support.okx.com. Common phishing email disguises:@0kx.com(number 0 instead of letter O),@okx-security.com,@okx-verify.net, etc.Completion standard: The sender address has the
@okx.comsuffix, and the email body or subject contains the anti-phishing code you set. Both conditions must be met.
High risk: The anti-phishing code is a "secret mark" to identify official emails, not an authorization tool for login or transactions. It cannot replace 2FA or your password; it only helps you judge whether an email is genuine. Even if the email includes your code, always check if the content looks suspicious—especially if it asks for your private key, seed phrase, password, or verification code. OKX will never request such information via email.
Common cause of failure: Many people confuse "SMS verification code" with "anti-phishing code." The SMS code is a 6-digit dynamic number you receive when logging in, while the anti-phishing code is the alphanumeric string you set yourself in the Security Center. Their purposes are completely different.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
Step 3: Verify It Works After Setting or Changing
What to do: After setting it up successfully, wait for an official OKX email (such as a login notification, withdrawal confirmation, etc.) and check whether your code appears at the end of the email subject or in the body. The anti-phishing code is usually displayed at the end of the subject line.
Completion standard: The new email does contain the anti-phishing code you set. If several emails in a row lack it, go back to Security Center and confirm the status is "Enabled." If the status is normal but emails still have no code, submit a screenshot through the in-app customer support on OKX App for feedback.
Verification method after setting: After setting, go to Security Center and see if the status icon turns into a green checkmark. Then wait for the next official email and confirm the code appears in it. If you receive an "OKX email" without a code, mark it as spam and delete it, and don't click anything inside.
