How to Set Up Binance Withdrawal Whitelist

What Is a Withdrawal Whitelist

The withdrawal whitelist is an important security feature provided by Binance. Once enabled, you can only withdraw to addresses pre-added to the whitelist — any attempt to withdraw to an address not on the whitelist will be rejected by the system. Even if an attacker gains access to your account, they cannot transfer funds to their own address.

This is one of the most effective security measures for protecting crypto assets, and is especially recommended for users holding large amounts.

How the Whitelist Works

You pre-add a set of trusted withdrawal addresses
Enable the whitelist feature
Afterwards, you can only withdraw to these addresses
Attempts to withdraw to non-whitelisted addresses are directly rejected
Adding a new whitelist address requires a cooling-off period (typically 24 hours)

This means even if an account is compromised, an attacker would need to wait through the cooling-off period to add their own address, giving you ample time to detect and address the security issue.

Detailed Steps to Set Up the Whitelist

Setting Up on the Binance APP

Step 1: Access Security Settings

Open the Binance APP
Tap the avatar in the top left to enter your profile
Select "Security" or "Security Center"
Find the "Withdrawal Whitelist" option

Step 2: Enable the Whitelist Feature

Tap the "Withdrawal Whitelist" toggle
The system will prompt: once enabled, withdrawals can only go to whitelisted addresses
Complete security verification (Google Authenticator/SMS/Email verification)
Feature successfully enabled

Step 3: Add Whitelist Addresses

Tap "Add Address"
Select the cryptocurrency (e.g., BTC, ETH, USDT, etc.)
Enter or paste the trusted wallet address
Select the corresponding network (e.g., ERC20, TRC20, BEP20, etc.)
Add a note (e.g., "My Cold Wallet," "OKX Exchange," etc.)
Complete security verification
Address successfully added

Setting Up on Binance Web

Log in to the Binance website
Click the avatar in the top right → "Security"
Find "Withdrawal Whitelist Management"
Enable the whitelist feature
Add trusted addresses

Managing Whitelist Addresses

Adding New Addresses

After adding a new whitelist address, you may need to wait a 24-hour cooling-off period before you can withdraw to that address. This security measure prevents attackers from quickly adding addresses and transferring funds.

Removing Addresses

Go to the whitelist management page
Find the address to remove
Tap "Delete"
Complete security verification
Address removed

Editing Notes

You can edit the notes for whitelist addresses at any time for easier identification and management.

Whitelist Best Practices

1. Add Frequently Used Addresses

Add the following commonly used addresses to your whitelist:

Your personal hardware wallet addresses
Deposit addresses for other frequently used exchanges
Your personal software wallet addresses

2. Carefully Verify Addresses

When adding addresses, verify character by character to ensure the address is completely correct. Adding an incorrect address to the whitelist could result in lost funds during future withdrawals.

3. Use Clear Notes

Add clear notes for each whitelist address, such as:

"Ledger Hardware Wallet - BTC"
"OKX Deposit Address - USDT-TRC20"
"MetaMask - ETH Mainnet"

This allows quick identification of the correct address when withdrawing.

4. Regular Review

Periodically check the addresses in your whitelist:

Remove addresses no longer in use
Confirm all addresses are still valid
Ensure there are no unrecognized addresses (potential security concern)

5. Match Networks Correctly

Whitelist addresses must correspond to their networks one-to-one. The same USDT address on ERC20 and TRC20 are separate entries. Ensure each address has the correct network setting.

Security Advantages of the Whitelist

Prevents Unauthorized Transfers

Even if an attacker somehow gains access to your account (password + 2FA), they cannot transfer funds to their own address because the whitelist only contains addresses you trust.

Cooling-Off Period Protection

Adding a new whitelist address has a 24-hour cooling-off period. This means even if an attacker adds their own address, they must wait 24 hours before withdrawing. This provides ample time to:

Receive the email notification about the whitelist addition
Detect the anomaly and freeze the account
Contact customer support for assistance

Combined with Other Security Measures

The whitelist works even better when combined with other security features:

Google Authenticator: Protects login security
Anti-Phishing Code: Prevents phishing emails
Two-Factor Authentication: Multi-layer verification protection
Regularly checking login history: Detecting unusual logins

Important Notes

Cannot withdraw to new addresses during cooling-off period: Newly added addresses may require a 24-hour wait before use — plan your withdrawals accordingly
Exchange addresses may change: Some exchanges periodically change deposit addresses — remember to update your whitelist
Forgetting to add an address: If you need to withdraw to a non-whitelisted address, you must first add it and wait through the cooling-off period
Disabling the whitelist: Turning off the whitelist feature also requires security verification and has a cooling-off period

FAQ

Q: Does the whitelist support all cryptocurrencies? A: Yes, you can set up whitelist addresses for all withdrawable cryptocurrencies supported by Binance.

Q: Is there a fee for adding whitelist addresses? A: No. Adding, removing, and managing whitelist addresses are all free.

Q: Is there a limit on the number of whitelist addresses? A: There is generally no strict limit — you can add multiple addresses. However, it's recommended to keep only addresses you actually need to reduce management complexity.

Q: Does the whitelist affect P2P trading? A: No. The whitelist only restricts cryptocurrency withdrawal operations and does not affect P2P fiat trading.

Q: Can I re-enable the whitelist after disabling it? A: Yes. You can disable or re-enable the whitelist feature at any time, though related operations may require a cooling-off period.