OKX account hacked? Freeze it, then check each item
Short answer
Freeze it first: ask OKX's official support, or in the app go to User Center, Account settings, Security, Account management, Freeze account (link Google Authenticator first). Then change your login password, reset an authenticator you didn't link, and remove API keys, devices, addresses and passkeys that aren't yours.
First step
Freeze the account
Ask official support, or do it in the app
Freeze it yourself
Security → Freeze account
Google Authenticator must be linked first
While frozen
No login or sign-up
With the same email, phone or identity details
Unfreezing
Pass security checks
Phone, email or authenticator app
Work through OKX's checklist
Change your login password right away, so no one else can keep logging in
Authenticator: if you didn't link it, reset it now; if you never set one up, turn it on
API keys: open the menu, scroll down to the Toolbar, tap API and delete any you didn't create
Devices: Security Center, Device Management. Remove any device you don't recognize
P2P payment methods: P2P Trading, Profile, Payment. Delete any you didn't add
Withdrawal addresses: Assets, Withdraw, pick a coin, Address Book. Delete any verified address you didn't add
Passkeys and connected accounts: Security Center, Passkeys; Profile, Connected accounts. Reset or unlink any that aren't yours
OKX: what to check and what to do
What to check
- Login password
- Someone else may still be able to log in
- Authenticator
- Did you link it yourself?
- API keys and devices
- Any you don't recognize?
- Address book
- Any verified address you didn't add?
What to do
- Login password
- Reset it now
- Authenticator
- If not, reset it now
- API keys and devices
- Delete or remove them
- Address book
- Delete it
| What to check | What to do | |
|---|---|---|
| Login password | Someone else may still be able to log in | Reset it now |
| Authenticator | Did you link it yourself? | If not, reset it now |
| API keys and devices | Any you don't recognize? | Delete or remove them |
| Address book | Any verified address you didn't add? | Delete it |
The exchange has the final word
FAQ
Can I log in while the account is frozen?
OKX says you can't log in or sign up with the same email, phone number or identity details while it's frozen.
How do I unfreeze it?
OKX says to complete security verification with your phone, email or authenticator app, and to contact customer service if you run into problems.
Can I withdraw right after resetting my authenticator?
No. OKX says withdrawals are disabled for 24 hours after an authenticator change, for security.
How do I stay safe day to day?
OKX suggests checking your devices regularly, keeping your system and apps updated, scanning with trusted antivirus software, and doing all security changes on a trusted device.
Someone says they can get my stolen crypto back if I pay first. Should I?
No. Asking for money up front to recover funds is a common warning sign. Only reach OKX support through its own website or app.