🔍 Introduction: What Is a Withdrawal Address Book?
A withdrawal address book (often called a whitelist or trusted address list) is a feature on crypto exchanges that allows you to save and manage frequently used withdrawal addresses. Once an address is saved, you can select it from a list when making a withdrawal, reducing the risk of typing errors or phishing attacks.
When whitelist mode is enabled, withdrawals are restricted to only the addresses saved in your address book. This provides a powerful security layer: even if an attacker gains access to your account, they cannot withdraw funds to an address that isn't on your list.
Using the address book with whitelist mode enabled is one of the most effective ways to protect your crypto from unauthorized withdrawals. It is highly recommended for all users, especially those holding large amounts.
✅ Why Use a Withdrawal Address Book?
The address book offers several important benefits:
Restricts withdrawals to pre-approved addresses, blocking unauthorized transfers even if your account is compromised.
Eliminates the risk of typos or copying the wrong address. Select from a list instead of manually entering.
No need to re-enter addresses for repeat withdrawals. Save time and reduce friction.
Most exchanges notify you via email/SMS when an address is added or removed, giving you visibility into account activity.
Set up your address book as soon as you create an exchange account. Add your personal wallets and trusted addresses before you need to withdraw. This avoids delays when you're ready to move funds.
➕ How to Add an Address to Your Address Book
The exact steps vary by exchange, but the general process is similar across platforms like Binance, OKX, Bybit, and KuCoin.
-
1
Log in to your exchange account
Navigate to the security or withdrawal settings. Look for "Withdrawal Address Book", "Whitelist", or "Trusted Addresses".
-
2
Click "Add Address" or "Create New"
Select the asset (e.g., USDT) and the network (e.g., TRC20) for the address you want to save.
-
3
Enter the wallet address
Paste the address carefully. Double-check that it matches the selected network.
-
4
Add a label (optional but recommended)
Give it a descriptive name like "My Ledger Wallet" or "Exchange B" to easily identify it later.
-
5
Confirm with 2FA and email verification
Most exchanges require 2FA and email confirmation to add new addresses.
-
6
Wait for the cooling-off period (if applicable)
New addresses may have a 24–48 hour waiting period before they can be used for withdrawals, as a security measure.
Always select the correct network for the address. Adding a TRC20 address to an ERC20 entry will cause withdrawals to fail. The network must match exactly.
📋 Managing Your Address Book
Once you've added addresses, you need to maintain them:
- Review regularly: Check your address book monthly. Remove addresses you no longer use.
- Update labels: Keep labels clear and up-to-date, especially if you use multiple wallets.
- Monitor changes: Always verify email notifications about address additions or deletions. If you didn't make the change, contact support immediately.
- Limit the number: Only keep essential addresses to reduce clutter and potential confusion.
- Use different addresses for different purposes: For example, separate trading wallets from long-term storage wallets.
If you use multiple exchanges, maintain a separate address book on each. Do not rely on a single central list.
🔐 Whitelist Mode: Restricting Withdrawals
Many exchanges offer a whitelist mode that, when enabled, blocks any withdrawal to an address not in your address book. This is the ultimate security setting.
To enable whitelist mode, look for a toggle or setting in the same area where you manage your address book. Once enabled:
- You can only withdraw to saved addresses.
- You must add new addresses before withdrawing to them.
- Adding a new address may trigger a cooling-off period (24–48 hours) before it becomes active.
- Disabling whitelist mode usually requires 2FA and email confirmation.
If you enable whitelist mode and lose access to all your saved addresses (e.g., your hardware wallet is lost), you may not be able to withdraw funds until you can add a new address. Keep a backup of your addresses.
🛡️ Security Tips for Your Address Book
- Use strong 2FA: Protect your exchange account with hardware-based 2FA (e.g., YubiKey) or authenticator app.
- Never share your address book: Keep your saved addresses private. Sharing them can expose your wallet patterns.
- Be cautious of phishing: Always verify that you are on the official exchange website when adding or managing addresses.
- Monitor notifications: Enable email and SMS alerts for address book changes and withdrawals.
- Regularly audit your list: Remove unused addresses and verify that all remaining addresses are correct.
- Backup your addresses: Keep a secure offline record of your important wallet addresses in case you need to re-add them.
Consider storing a list of your saved addresses in a password manager or encrypted file. This ensures you can recover access if you need to set up a new exchange account or if your current address book is compromised.
🔧 Troubleshooting Address Book Issues
- Address not appearing: Ensure you've selected the correct asset and network. Some exchanges have separate address books per asset.
- Can't withdraw to saved address: Check if whitelist mode is enabled and the address is active. Also ensure you have sufficient balance and haven't exceeded daily limits.
- Cooling-off period: If you just added a new address, wait the required time before attempting a withdrawal.
- Forgot to add a new address: You'll need to add it first, wait the cooling-off period (if any), then withdraw.
- Address rejected: Verify the address format matches the network. For example, an Ethereum address (0x...) is not valid for TRC20.
If you cannot add or use an address, contact exchange support. Provide the address, asset, network, and any error messages you see.