OKX brings Shield account-takeover support to the U.S.

Protection for an account takeover

OKX launched Shield in the U.S. on October 1, 2026, offering conditional financial support after an account takeover: an unauthorized person controlling an exchange account and transferring assets out. It advertises up to $100,000 for eligible regular customers, $250,000 for VIP 1–3 and $500,000 for qualifying VIP 4+. Activation and subscription are free.

The distinction between an attacker moving money and a customer approving a transfer matters. The launch excludes transactions customers make or authorize themselves, including payments made after being deceived. It also says Shield is not deposit insurance. The advertised amounts therefore describe potential support for a specific event, rather than a balance guaranteed against every loss.

Activation is a separate step

The product introduction linked from the U.S. announcement still describes the earlier European launch. It explains that security settings alone do not activate Shield. Its checklist covers account eligibility, current and linked devices, a passkey (a sign-in credential), Large Withdrawal Protection, Web Withdrawal Protection and multi-factor authentication for supported activities. Multi-factor authentication combines two or more types of identity proof. The customer then accepts the applicable terms and selects Activate OKX Shield.

It describes ongoing checks and restoration once a failed condition is resolved and verified. Reimbursement is discretionary; one reimbursed claim ends lifetime eligibility across OKX entities, even if payment is below the maximum. Losses outside the exchange account are excluded. Its European tiers are not the U.S. limits above. Use the account’s applicable terms and displayed status rather than treating this historical checklist as confirmation of U.S. eligibility.

What setting up a passkey involves

A passkey is a sign-in credential used with a device’s biometric check, such as a fingerprint, or a physical USB security key. OKX’s U.S. web guide supports creating one on the current computer, using an external key, or scanning a displayed QR code with another device. Setup starts under Profile, Security and Passkeys; select Set up, enable the feature and complete the security verification before choosing the device.

The guide specifies Windows 10 or macOS Ventura, or a compatible FIDO2 USB key, and supported versions of Chrome, Safari or Edge. FIDO2 is the authentication standard used by those keys. A customer can name a passkey in the account’s management screen to identify it later. Once enabled, at least one must remain linked: an existing key can be reset or another added before removal.

Resetting a passkey automatically imposes a 24-hour withdrawal and peer-to-peer trading restriction. Removing one also causes that restriction when verification uses something other than another passkey. These account-maintenance consequences are separate from purchasing or activating Shield.

The withdrawal threshold is a security control

This July guide describes the feature on OKX’s UK-locale website; its thresholds and channels have not been independently confirmed for U.S. accounts. OKX’s Large Withdrawal Protection documentation explains the safeguard named in the launch. It uses a personal, cumulative 24-hour outflow threshold: reaching or exceeding it requires facial verification before a withdrawal proceeds. The guide describes limits from $10,000 to $10 million equivalent for identity-verified main accounts, with setup under Security Center, Advanced security and Withdrawal security. These are verification thresholds, not Shield reimbursement ceilings.

To illustrate cumulative counting, assume a $10,000 threshold and two covered withdrawals of $6,000 and $5,000 within the same 24 hours. The first leaves the total below the threshold; the second brings it to $11,000. This is an arithmetic example of the guide’s rule, not an assessment of a particular account.

The guide also requires facial verification to increase the threshold or disable the feature. Neither a successful verification nor a configured limit establishes reimbursement eligibility.

Reporting a suspected breach

Valid identity verification is required. Normally, file through app/web Support or chat within 72 hours of the last unauthorized transfer; provide evidence within seven days of the formal claim. Documented unavoidable circumstances may justify exceptions.