🛡️ What is a Withdrawal Whitelist?
A withdrawal whitelist (also called address whitelist or withdrawal allowlist) is a security feature that restricts cryptocurrency withdrawals to pre-approved addresses. Only addresses you have added to the whitelist can receive funds from your exchange account.
This is one of the most effective security measures you can enable on your exchange account. Even if an attacker compromises your account credentials, they cannot withdraw funds to their own address — it's not on the whitelist.
Imagine an attacker steals your password and 2FA code. Without a withdrawal whitelist, they could withdraw all your funds to their own wallet. With a whitelist, they can't withdraw at all — your funds are safe.
⚙️ How Withdrawal Whitelist Works
The mechanics of a withdrawal whitelist are simple but powerful.
Step-by-Step Process
- Step 1: You add a withdrawal address to the whitelist. This requires 2FA verification.
- Step 2: The address enters a waiting period (typically 24-48 hours). During this time, withdrawals to this address are blocked.
- Step 3: After the waiting period, the address is fully whitelisted.
- Step 4: You can now withdraw funds to this address without additional verification.
- Step 5: If an attacker tries to add a new address, you have time to detect and stop it.
The waiting period gives you time to react. If you receive an email notification that a new address was added to your whitelist and you didn't do it, you can immediately freeze your account and contact support before the address becomes active.
📝 How to Set Up a Withdrawal Whitelist
Setting up a withdrawal whitelist is quick and easy. Here's a step-by-step guide.
-
1
Log in to your exchange account
Go to your exchange's website and log in (Binance, OKX, Bybit, KuCoin, etc.).
-
2
Navigate to security settings
Look for "Security," "Withdrawal Settings," or "Address Whitelist" in your account settings.
-
3
Enable withdrawal whitelist
If the feature is not already enabled, turn it on. You may need to confirm with 2FA.
-
4
Add your withdrawal addresses
Enter the wallet addresses you want to whitelist. This could be your hardware wallet, self-custody wallet, or other exchange addresses.
-
5
Verify and confirm
Confirm the addition with 2FA and/or email verification. The address will enter the waiting period.
-
6
Wait for the waiting period
After 24-48 hours, the address will be fully whitelisted and ready for withdrawals.
Add your frequently used withdrawal addresses to the whitelist before you need to withdraw. This way, you won't be delayed by the waiting period when you need to move funds quickly.
🏆 Withdrawal Whitelist Best Practices
Follow these best practices to maximize the effectiveness of your withdrawal whitelist.
Add all addresses you regularly withdraw to — hardware wallets, self-custody wallets, and other exchanges. This ensures you're never blocked when you need to withdraw.
Ensure that adding new addresses requires 2FA verification. This prevents attackers from adding their own addresses even if they have your password.
Enable notifications for whitelist additions. If you receive an alert for an address you didn't add, you can immediately take action.
Periodically review your whitelist. Remove addresses you no longer use to keep your whitelist clean and secure.
If you need to add a new address, plan ahead. The 24-48 hour waiting period means you can't withdraw to a new address immediately.
Use the withdrawal whitelist together with 2FA, anti-phishing codes, and strong passwords for maximum security.
- ✅ Enable withdrawal whitelist
- ✅ Add all regular withdrawal addresses
- ✅ Require 2FA for adding new addresses
- ✅ Enable email alerts for whitelist additions
- ✅ Review whitelist regularly
- ✅ Plan ahead for new address additions
🏦 Withdrawal Whitelist on Major Exchanges
Here's how the withdrawal whitelist feature works on major exchanges.
| Exchange | Feature Name | Waiting Period | 2FA Required |
|---|---|---|---|
| Binance | Address Whitelist | 24-48 hours | ✅ Yes |
| OKX | Withdrawal Whitelist | 24-48 hours | ✅ Yes |
| Bybit | Trusted Addresses | 24 hours | ✅ Yes |
| KuCoin | Address Whitelist | 24-48 hours | ✅ Yes |
| Coinbase | Address Whitelist | 48 hours | ✅ Yes |
| Kraken | Withdrawal Address Book | 24 hours | ✅ Yes |
Not all exchanges have the same features. Check your exchange's security settings to see if withdrawal whitelist is available. If it is, enable it immediately.
❌ Common Mistakes to Avoid
Avoid these common mistakes when using a withdrawal whitelist.
- Not adding addresses in advance: If you need to withdraw urgently and your address isn't whitelisted, you'll be delayed by the waiting period. Add addresses early.
- Using the wrong address: Double-check addresses before adding them to the whitelist. A mistake could send funds to the wrong wallet.
- Not enabling 2FA for additions: Ensure 2FA is required for adding new addresses to prevent unauthorized additions.
- Ignoring email alerts: If you receive an alert about a new address being added, investigate immediately.
- Never reviewing the whitelist: Regularly review and clean up your whitelist to remove unused addresses.
If you receive an email notification that a new address was added to your whitelist and you didn't add it, act immediately — freeze your account, change your password, revoke API keys, and contact support.