OKX Introduces Shield Account Takeover Goodwill Reimbursement Program

Cryptocurrency exchange OKX has rolled out "OKX Shield," a voluntary goodwill reimbursement initiative designed to cover specific unauthorized account takeover incidents ¹. According to the program terms, the initiative applies exclusively to assets held directly within an eligible user's exchange account, leaving out external services, decentralized finance protocols, and self-custodial tools such as OKX Wallet ¹. The program explicitly functions as a discretionary platform-level framework rather than an insurance policy, deposit guarantee, or investor compensation mechanism ¹.

To become eligible for potential coverage, users must actively opt in and implement rigorous account defenses ¹. Prerequisites include completing identity verification, enabling passkeys, turning on facial verification for large withdrawals, locking peer-to-peer verification codes to "Always," and disabling web-based withdrawals altogether ¹. Connected devices must run the latest application version and pass security screenings confirming an absence of malware, root access, or jailbreaks ¹. OKX noted that losses linked to pre-existing risks or incidents occurring before activation are entirely excluded ¹.

Covered Theft Scenarios and Exclusions

The policy identifies four primary categories of breach that may qualify for discretionary relief: direct unauthorized account access, phishing breaches, compromise via trojans or malware, and SIM-swap attacks ¹. For phishing claims, claimants must prove an abnormal login environment and material deviations from typical usage patterns ¹. In SIM-swap incidents, OKX may request carrier records, police reports, and replacement documentation ¹.

Conversely, user-authorized actions remain strictly uninsurable ¹. The exchange will reject claims where users personally approved transactions—even under deceit, inducement, remote control, or screen-sharing sessions ¹. In addition, users must have sustained an actual theft caused directly by the takeover, must never have received a prior Shield reimbursement, and must report incidents promptly to platform staff while cooperating with internal inquiries ¹.