How to Set Up an Anti-Phishing Code After Opening an OKX Account?
The anti-phishing code is a personal identifier in official OKX emails. Once set, any email that does not contain your code is a fake. It does not participate in login or transaction verification; it simply helps you distinguish real emails from phishing attempts. Below are the complete steps from account creation to final setup.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
1. Prerequisites After Registration
Before configuring the anti-phishing code, ensure the following:
Registered and logged into your OKX account: The anti-phishing code is a security feature that requires you to be logged in.
Verified your bound email address: A verification code will be sent to your registered email during setup, so the inbox must be able to receive messages normally.
2. Step-by-Step Setup
Step 1: Enter the Security Center
App: Open the OKX app, tap the profile icon in the top-left corner to go to [User Center], then select [Security Center] or [Security Settings].
Web: After logging in, click the profile icon in the top-right corner, then go to [User Center] - [Security Center].
Step 2: Find the Anti-Phishing Code Option
In the Security Center page, look for and click [Anti-Phishing Code] or [Anti-Phishing Code]. Some versions may place it under an "Advanced Security" section.
Step 3: Create Your Anti-Phishing Code
Tap [Create Anti-Phishing Code] or [Set].
Enter a custom combination of characters. A 6–12 character alphanumeric string with at least 2 uppercase letters and 2 digits is recommended.
Avoid using easily guessed information such as birthdays, phone numbers, or parts of your name.
Step 4: Complete Verification and Activate
After submitting, the system will require secondary verification, usually by sending a code to your bound email address.
Enter the verification code received in your email and confirm.
Once the [Anti-Phishing Code] status in Security Center shows "Enabled" or "Set," the code is active.
3. How to Use It Correctly After Setup
After the anti-phishing code is set, all official emails from OKX will automatically include this code at the end of the email subject line.
How to Judge an Email:
| End of Email Subject | Judgment |
|---|---|
| Contains your anti-phishing code and matches it exactly | High confidence – likely an official email |
| Missing anti-phishing code, or content does not match your setting | Very likely a phishing email – do not click links or download attachments |
Note: The anti-phishing code does not participate in sensitive operations like login, trading, or withdrawals. It is only an identifier and does not replace passwords or 2FA codes.
4. Common Reasons for Setup Failure
Not receiving the email verification code: Setting the anti-phishing code requires entering a code sent to your email. If you don't see it, check the spam folder or confirm whether your email provider is blocking OKX messages.
Anti-phishing code too simple: The system may reject purely numeric or repetitive character strings. Use a mix of uppercase and lowercase letters and numbers.
5. Risk Reminder
Anti-phishing code does not equal total protection: It helps you spot fake emails, but cannot prevent phishing sites from stealing passwords or verification codes. If an email asks you to click a link and enter your password or 2FA code, the request is unsafe even if the email contains your anti-phishing code. OKX will never solicit such information via email.
The anti-phishing code is personal and confidential: Do not share your code with anyone. If you suspect it has been leaked, change it immediately.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
6. Frequently Asked Questions
Q: What is the difference between the anti-phishing code and Google Authenticator? A: Google Authenticator is a dynamic verification tool for login and withdrawals, acting as a second layer of account protection. The anti-phishing code is an email identification tool that only helps you distinguish genuine official emails. They serve completely different purposes and can be enabled simultaneously.
Q: After changing my anti-phishing code, will the code in old emails change? A: No. Only new emails sent after the change will display the new code. Older emails will still show the old code; this is normal and does not mean the update failed.
Q: What should I do if I accidentally clicked a link in a phishing email? A: Immediately change your OKX account password and check the Security Center for any suspicious device logins. If you entered any account information on that link, prioritize moving your assets, then contact OKX customer support to secure your account.
Final confirmation: Open the OKX app, go to [Security Center] - [Anti-Phishing Code], and ensure the status shows "Enabled." Then check your bound email for a recent official OKX email and verify that the subject line ends with the code you set. If you can see it, the setup is fully active.
