Definition
A withdrawal whitelist is a specific application of an allowlist. Once enabled, it can prevent ordinary withdrawals to addresses that have not been added and verified. The address book and the whitelist are not always identical features: saving a destination for convenience does not necessarily activate a restriction on all other destinations.
How It Works
The account holder registers an address and, where required, a network and destination tag or memo. The service may request additional authentication or impose a waiting period before a new entry becomes usable. Exact requirements vary, so do not assume any particular delay or workflow applies across exchanges. A network-specific entry should not be treated as approval for sending the same asset over every available network.
Key Considerations
This control can limit damage after some account compromises, but it is not absolute protection. An attacker who can modify the list or bypass recovery controls may still redirect funds. A mistyped or fraudulent address does not become safe because it is approved. Verify full destination details through a trusted channel, protect list changes with strong authentication and review old entries. The feature cannot generally cancel an already confirmed blockchain transfer or insure assets held by the provider.