The withdrawal whitelist is an important security feature offered by Binance. Once enabled, you can only withdraw to addresses on the whitelist. Even if your account is compromised, attackers cannot transfer your assets to their own addresses. All users are strongly recommended to enable this feature.
Log in at the Binance official site to access account settings. If you need the mobile app, Android users can download the APK to install the Binance App.
What Is a Withdrawal Whitelist?
A withdrawal whitelist is a pre-approved list of withdrawal addresses. Once the whitelist feature is enabled, each withdrawal can only be sent to an address on the whitelist β you cannot enter a new address for direct withdrawal. If you need to withdraw to a new address, you must first add it to the whitelist, and newly added addresses typically have a cooldown period before they can be used.
Steps to Enable the Whitelist
Log into your Binance account, go to the "Security Settings" page, find the "Withdrawal Whitelist" option, and click to enable it. The system will require two-factor verification (email verification code plus Google Authenticator code, etc.). Once confirmed, the whitelist feature takes effect immediately.
Adding Whitelist Addresses
After enabling the whitelist, go to the "Address Management" page and click "Add Address." Select the cryptocurrency and corresponding network (for example, Bitcoin network for BTC, or TRC20/ERC20 for USDT), then paste the target address and set a label for easy identification. Security verification is required when adding addresses.
Cooldown Period Mechanism
Newly added whitelist addresses typically require a cooldown period (usually several hours to 24 hours) before they can be used. During the cooldown, even though the address is on the whitelist, you cannot withdraw to it. This mechanism prevents attackers from quickly adding their own addresses and transferring assets after breaching an account.
Managing Whitelist Addresses
You can view, edit, or delete whitelist addresses at any time. It's recommended to periodically review the whitelist, removing addresses you no longer use and keeping only those you currently need. Security verification is required for each operation.
Important Notes
When adding addresses, carefully verify every character of the address. Once cryptocurrency is sent to a wrong address, the assets cannot be recovered. Use copy-paste to enter addresses, and after pasting, manually verify the first and last few characters. Also confirm that the selected network type matches the target address β for example, don't add an ERC20 address as a TRC20 type.
Using the Whitelist with Other Security Measures
The whitelist feature works even better when combined with two-factor authentication, anti-phishing code, and other security measures. Even if an attacker bypasses your login verification, the whitelist prevents them from transferring assets to their own addresses. Layering multiple security measures provides maximum protection for your digital assets.
Android: direct APK install. iOS: requires overseas Apple ID
Register through our link for automatic fee discounts on every trade