Fake crypto exchange apps are one of the most common ways people lose money. They look identical to the real thing, accept your deposit, and then refuse every withdrawal. Before you deposit anything, run these six checks on your OKX app.
1. Where did the file come from?
A genuine OKX APK comes from the okx.com domain or from Google Play. If you got the file from a Telegram group, a WhatsApp message, a “support agent”, or a look-alike domain with extra letters or hyphens, delete it.
2. Check the package name
Open Settings → Apps → OKX and look at the app details. The official Android package name is com.okinc.okex.gp. Any other package name means it is not the official app.
3. Review the permissions
An exchange app needs internet access, camera access for KYC and notifications. Be suspicious if an app asks to read your SMS, use Accessibility services, or “draw over other apps”. Those permissions are often used to hijack verification codes and control your screen.
4. Look at the login behaviour
A fake app often lets you “log in” with any password, or shows a balance that does not match your real account. If the app shows deposits but every withdrawal needs an extra “unlock fee” or “tax”, it is a scam.
5. Compare with the website
Log in to okx.com in a browser on a different device. If the balances, order history and deposit addresses do not match what the app shows, stop using the app.
6. Never share codes or your recovery phrase
No genuine OKX staff member will ask for your password, 2FA codes, email codes or Web3 wallet recovery phrase. Anyone who does is attempting to steal your account.
What to do if you installed a fake app
- Uninstall it immediately.
- From a clean device, change your OKX password and email password.
- Reset 2FA and review active sessions and API keys in your account security settings.
- If you entered a wallet recovery phrase, move funds to a brand-new wallet right away.