Withdrawal Whitelist

A withdrawal whitelist, also called an address whitelist or address book lock, is a security setting that limits withdrawals to a list of addresses you have pre-approved. Once enabled, an attacker who takes over your session or password still cannot send funds to an address of their own without first passing whatever checks the platform requires to add one. Most implementations pair the feature with a cooling-off delay, so a newly added address cannot be used for a set period, and with a second factor for changes. The trade-off is flexibility: urgent withdrawals to a new destination take longer. Keeping the whitelist short, and reviewing it after any device compromise, keeps the protection meaningful.