Reviewed guide | 2026-10-09
What to check in OKX after receiving a suspicious text message
Fake SMS messages pretending to come from an exchange are common. A calm checklist for Polish users to verify their OKX account security settings after a suspicious text, whether or not they tapped the link.
OKX | Poland | PLN | fees, access and account safety
The message usually sounds urgent: a withdrawal is pending, your account will be frozen, or a new device has signed in and you must confirm it now. It arrives by text and looks like other messages you get from services you use. Whether you ignored it, opened it or even typed something into the page it led to, the right move is the same: slow down and check your account from a trusted path. This guide gives you that order of checks so you are not guessing while you are nervous, and it helps you decide when to contact official support.
Do not reply and do not use the link again
Close the message without tapping anything else. Open the exchange app you installed from the store, or type the address yourself in a browser you trust, and sign in from there. Real account notices can always be reached from inside the app, so there is no need to use the link to find out whether the warning was true. If the message asks you to call a number, do not call it. Take a screenshot for your records and then delete the text so nobody in the household taps it by mistake.
If you entered any details, change them first
If you typed your password into the page, change it immediately from inside the app and use one that you have never used anywhere else. If you entered a verification code, assume the attacker tried to sign in at that moment. Review the list of active sessions and end anything you do not recognise. Check whether two-step verification settings, the linked email or the phone number were changed. If something was altered without your knowledge, contact support through the official help centre and describe exactly what happened and when.
Check withdrawal settings and the address book
Attackers who get in often add a new withdrawal address and wait. Open the address book and confirm every saved entry is one you created yourself. If the platform offers a withdrawal allowlist or a delay for new addresses, consider enabling it so a stolen session cannot move funds straight away. Look at the recent withdrawal and order history as well. Anything you did not initiate should be reported to support right away rather than after a few days.
Set up a way to recognise real messages
An anti-phishing code adds a personal word to genuine emails from the exchange, which makes fake ones easier to spot. Turn it on if you have not already, and remember that it applies to email rather than texts, so any SMS asking you to act should be treated with suspicion. Tell family members who use the same phone plan that these messages are circulating. A short note on the fridge about never tapping exchange links in texts can prevent the next mistake.
Risk boundary: OKX Poland Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Open the exchange only through the store-installed app after a suspicious text arrives.
- Change the password at once if it was typed into the page the message linked to.
- Inspect the withdrawal address book for any entry you did not add yourself.
- Turn on the anti-phishing code so genuine emails carry your personal word.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.