Address whitelisting

With whitelisting turned on, an account can withdraw only to addresses already saved in an approved list. Adding a new address usually requires extra confirmation, such as two-factor codes, an email link or approval by a second person, and many platforms impose a delay of a day or more before the new address can be used.

The point is to limit damage when a login is compromised. An attacker who phishes a password or hijacks a session cannot simply withdraw to their own wallet; they must also get past the whitelist and its delay, which gives the owner time to notice alerts and lock the account. Institutional custodians go further, binding withdrawal lists to approval policies with several signers.

Whitelisting is only as good as the addresses on the list. If a poisoned or mistyped address gets approved, the protection works in the attacker's favour, so verify each entry carefully when adding it. The feature does not protect self-custodial wallets, and a compromised email account can sometimes be used to approve new entries, so pair it with strong authentication.