With the increase in phishing attempts where scammers impersonate official OKX email addresses, you may receive emails that appear legitimate but are actually forged.If you are unsure about an email's authenticity, you can verify it through OKX's official channels and by checking its EML file using the steps below:
Verify the sender's email address on okx.com.
Checklist
- How do I check if an email is officially from OKX via EML file?
- Verify the sender's email address
- If the address is valid but the email content appears suspicious (e.g., contains instructions to withdraw funds, scan QR codes, or click links), proceed to 2.
- Verify the email's authenticity using the EML file
- How do I download and verify through the EML file?
- Step 1: Download and open the EML file
- Log in to your email account.
- Step 2: Open the EML file with any text editor on your desktop
- Right-click the file > select "Open with" > select any of your text editors (e.g., Notepad, TextEdit, etc).
- How do I interpret each field?
- "From" (the sender)
- Return-Path / smtp.mailfrom (server-observed sender)
Notes
If the verification result shows that the address is not an official domain, the email can be considered fraudulent.
If the verification result shows the address is official, but the content appears suspicious:
Proceed to use the EML file to verify the authenticity of the email.
By reviewing the technical authentication fields in the EML file (such as SPF, DKIM, and DMARC), you can determine whether the email was truly sent from OKXs official servers.
Details follow the official OKX help article; this page is a learning checklist, not an official mirror.
