1. Bookmark the real domain manually. Open a fresh browser, type www.okx.com directly into the address bar, and press Enter. Do not click any search-result link, sponsored ad, or Telegram-shared URL.
2. Verify the SSL certificate. Click the padlock icon in your browser's address bar and confirm the certificate is issued to OKX TECHNOLOGIES LIMITED or a clearly affiliated legal entity. If the certificate shows a random company name, close the tab immediately.
3. Cross-check the official app link. On the genuine OKX site, scroll to the footer and tap the "Download" or "Mobile App" section. Always download the iOS version from the official App Store and the Android version from the official Google Play or the QR code shown on the real website — never from third-party APK aggregator sites.
4. Search the domain on a trusted community source. If you are unsure, check OKX's official support Twitter/X account or the help center to confirm the current domain. Major exchange domains rarely change, so any page claiming a "new 2026 address" while redirecting you elsewhere is a red flag.
5. Enable two-factor authentication on your email first. Before you even create the exchange account, make sure the email address you will use is protected by its own 2FA. This is your first line of defense.

A phishing site can look 100% identical to OKX, complete with a valid-looking SSL lock icon. The only reliable signals are the exact URL and the domain age. If a URL has more than one "okx" fragment or includes suspicious words like "vip", "login", "bonus2026", treat it as hostile. When in doubt, type the domain manually from memory — never click through.

💡 Pro tip: Add the real OKX site to your browser bookmarks while you are still on the official page. That way, every future visit starts from a trusted anchor.

1. Click "Sign Up" (注册) on the real website. Use either your email address or mobile phone number. I recommend email with a strong, unique password — one that you have never used anywhere else.
2. Enter the referral code exactly as shown. On the registration form, look for the field labeled "Referral Code" or "邀请码". Enter BTC45 and double-check that it is applied before you submit. This locks in your permanent 20% trading-fee discount.
3. Complete the email/phone verification. OKX will send a 6-digit verification code. Enter it promptly. If the email looks weird — for instance, it comes from a domain other than okx.com — stop immediately and do not click any links inside it.
4. Set up the anti-phishing code (防钓鱼码). Once logged in, go to Security Settings and create your personal anti-phishing code. Every genuine email from OKX will then display this code, instantly exposing any fake communications.
5. Back up your Google Authenticator immediately. Do not rely on SMS alone. Install Google Authenticator or an equivalent TOTP app, scan the QR code from OKX, and store the 16-digit backup key in an offline, secure location.

Never use the same password for your crypto exchange that you use on any other website. Credential-stuffing attacks are the #1 cause of exchange account takeovers in 2026. A breached password from a random forum can silently unlock your trading account if you reuse it.

💡 Pro tip: Write your OKX UID and the anti-phishing code in a password manager. Do not store your 2FA backup key in cloud notes or screenshots that sync to cloud storage.

1. Navigate to "Identity Verification". Log in, click your avatar, then select "Identity Verification" (身份认证). The 2026 interface typically offers three tiers: verified, advanced verified, and institution verified. For most individuals, the advanced tier is what you want — it unlocks full fiat deposits and higher withdrawal limits.
2. Choose your country/region and document type. A national ID card, driver's license, or passport all work. Select the option that gives you the best-quality photo. Your name must match the document exactly — in the same order and with the same spelling.
3. Take clear photos of the document. Place the document on a dark, non-reflective surface, turn on sufficient lighting, and make sure all four corners are visible. Blurry photos are the #1 reason for KYC rejection. There is no need to share a selfie for most advanced tiers in 2026; OKX primarily uses document scanning plus liveness detection.
4. Complete the liveness check (活体检测). The system will ask you to blink, turn your head, or open your mouth. Make sure you are in a well-lit room and your face fills the circle. Removing sunglasses and hats is mandatory.
5. Submit and wait for results. Approval typically takes between 5 minutes and 24 hours. You will receive an in-app notification and an email confirmation.

Only complete KYC on a trusted network. Public WiFi and hotel internet connections can expose your document uploads to man-in-the-middle attacks. Use your home internet or your mobile phone's 5G connection. Also double-check that you are on the genuine HTTPS domain before uploading any identity document — this is the single most sensitive data you will ever share with an exchange.

💡 Pro tip: If your KYC is rejected, do not panic or re-submit dozens of times. Read the rejection reason carefully, correct the specific issue (usually glare, cropping, or name mismatch), and try once more. Repeated failed attempts can extend the review time.

1. Withdraw all newly available limits. Once KYC completes, verify that your withdrawal limit is now tiered correctly. Test the water immediately with a small deposit and a small withdrawal to confirm that everything works, including the 2FA confirmation flow.
2. Set up OKX's withdrawal whitelist (白名单). In Security Settings, enable the address whitelist so that withdrawals can only be sent to addresses you pre-approve. If a hacker ever takes over your session, this block stays firm.
3. Verify the referral discount is active. Head to your fee tier page and confirm that the "with reference" rate shows the discounted value. If you entered BTC45 during registration, your 20% rebate should appear immediately. If