How OKX Protected $1.1 Billion in Customer Assets in the First Half of 2026

Scams and social engineering attempts exist across every exchange. The real question isn't whether a platform faces this threat, it's whether it can get ahead of it.

From January through June 2026, OKX protected more than $1.1 billion in customer assets for more than half a million users. That milestone reflects a decision we made a while back: scam prevention isn't a background safeguard bolted onto the platform, it's a frontline product priority.

In that same time period, our Fraud Team stopped $26.3 million in scam losses, catching fraudulent transfers before funds ever left customer accounts. Nearly 49,000 customers were defended through AI-powered detection that flags suspicious patterns in real time, from compromised devices to social engineering attempts, triggering intervention before a scam can complete.

As digital assets move into the mainstream, users rightly expect the same protection from crypto platforms that they get from traditional financial institutions. We agree, and we build against that expectation. The people opening accounts on OKX today are the same people who expect fraud alerts from their bank within seconds and a real person on the phone if something looks wrong. They are not going to lower that bar just because the asset is digital.

Our approach layers multiple verification factors: password, device, and biometrics, paired with independent checkpoints from login to withdrawal. A single compromised credential should never be enough to drain an account. Every critical action requires fresh verification, even mid-session, which can include unusual withdrawal, an API key creation, or a whitelist change. Friction only scales up when behavioral and risk signals say it should. Verified, low-risk activity stays seamless, and customers can layer on their own protections whenever they want.

And we put customers in the driver's seat. They can require instant facial verification for large withdrawals, activate a nighttime withdrawal lock, or place newly added addresses under a 24-hour lock before use. Every protection is visible, auditable, and adjustable at any time.

The best exchanges protect people as well as they perform for them. As digital and traditional finance converge, the platforms that win will be the ones that made this shift early, not the ones still explaining why it took them so long. We intend to lead on this standard, not follow it.