A small number of users recently received unexpected OneKey ID verification emails without trying to log in. You’re safe. Your accounts have not been compromised. After investigating, we found that attackers are using leaked or publicly available email lists from other platforms to bulk-trigger login and registration requests. That’s why some of you got these emails. X ran into a similar issue recently. One of their engineers publicly confirmed there was no data breach and apologized for the extra emails. We’ve already added extra rate limits and security controls on verification emails to reduce this kind of spam as much as possible. Getting a verification code does not mean someone has access to your account. The person triggering the request cannot see the code. If you didn’t request it, just ignore the email. Never share the verification code with anyone.