OKX Account & KYC Setup Checklist

Register: your email and password are the first door

People trip here not because it's hard, but because they rush it: they sign up with a throwaway email and can't receive a code months later, or they reuse a password from another site that later gets breached — and attackers try the same combo on OKX. There's real money behind an exchange login, so set the password bar a notch higher than usual. The verification-code step is also a phishing hotspot: only ever type a code on the official OKX page. Anyone calling or messaging to ask for it is running a scam.

KYC: the top reason reviews fail is mismatched photos and details

KYC has two tiers. LV1 just needs your name and ID number, usually to unlock basic features. LV2 needs document photos and a face scan, and you have to pass it to deposit, withdraw, and trade properly. When a review bounces, it's almost always one of two things: the name or ID number doesn't match the document (even by one character), or the photo is blurry, glaring, or missing a corner — or the face scan ran in poor light. Keep photos under 5MB, use JPEG/PNG, and send the original, and you'll usually pass on the first try. Finish KYC before you deposit so you never end up with money in that you can't take out.

Security: these four are the only things that save you if you're hacked

2FA, a fund password and the withdrawal whitelist sit unused day to day, then save your account in a crisis. The one to take most seriously is the withdrawal whitelist: once it's on, withdrawals can only go to addresses you added in advance, so even with your password and 2FA fully compromised, an attacker can't move coins to their own wallet. An authenticator app beats SMS codes, which can be stolen via SIM-swap. When you turn on 2FA, copy the recovery codes onto paper so you can still get back in if you lose your phone. Tick every item in this group and your account is as locked down as a veteran's.

Before you start: phishing and fake support are the real beginner traps

Whether a leveraged trade liquidates comes later. The trap newcomers actually hit first is phishing sites and fake support. Fake sites buy search-engine ads to rank above the real one, with a domain that looks almost identical — log in there and you've handed your credentials to a thief. So confirm okx.com, type it by hand or bookmark it, and don't click ads. Always test your first withdrawal with a tiny amount to confirm you picked the right chain and address — a wrong blockchain address can't be recovered. And keep one line in mind: real support never DMs you asking for a verification code, password, or seed phrase. Anyone who does is, without exception, a scammer.

Stuck on verification — repeated rejections, face scan won't pass? Walk through the fixes here: What to do when OKX KYC verification fails, with the common causes and how to clear them.