Reviewed guide | 2026-10-18
Turning on withdrawal whitelists on Binance, OKX, Bybit and Bitget before you need them
A withdrawal whitelist limits where your coins can be sent, even if someone gets into your account. This guide shows where each exchange keeps the setting, how to fill it sensibly and what changes afterwards.
Multiple exchanges | Turkey | TRY | fees, access and account safety
Strong passwords and two-factor codes make it harder for someone to log in as you. A whitelist addresses a different question: if they do get in, where can they send your coins? With the setting on, withdrawals go only to addresses you saved beforehand, and adding a new one triggers extra checks and often a waiting period. That delay is the point. It gives you time to notice an alert and freeze the account. All four large exchanges offer some version of this control, but none of them switch it on for you.
Find the setting on each platform
On Binance, look under address management, reached from the withdrawal page or security settings, for the whitelist option. On OKX, the address book in the withdrawal section lets you save verified addresses and restrict withdrawals to them. Bybit and Bitget place similar options in their address book or security pages, sometimes described as withdrawal address protection. Names shift between app versions, so if you cannot see it, search the platform's help centre for whitelist or address book.
Save only addresses you really use
Add your own wallets and accounts you transfer to regularly, each with the correct network and, where needed, memo or tag. Use labels that combine the destination and the network, such as hardware wallet TRC20 or my OKX account ERC20. Resist the urge to save every address you have ever used. Each saved entry is a permitted destination, and old addresses whose keys you no longer control should not be on the list at all.
Switch it on and test the block
Enable the restriction and confirm with your email code and authenticator or passkey. Then send a small withdrawal to one saved address to make sure normal use still works. Next, open the withdrawal form and paste an address that is not saved. You should see a message refusing the withdrawal or asking you to add the address first. Seeing that message once tells you the protection is actually active, not just configured.
Living with the delay on new addresses
When you need a new destination, expect additional verification and possibly a waiting period before it can be used; the length is shown in the interface. Add new addresses a day or two before you need them rather than minutes before a time-sensitive transfer. If you ever receive an alert that an address was added and it was not you, freeze the account from the security settings immediately and contact support through the app.
Risk boundary: Turkey Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Locate the whitelist or address-protection setting on each exchange you use.
- Save only active destinations, each with the right network, memo and a clear label.
- Test the block by trying to withdraw to an unsaved address after enabling it.
- Add new addresses a day or two ahead of any planned transfer.
- Freeze the account at once if you are alerted to an address you did not add.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.