Whitelist (address book)

On exchanges and Bitcoin apps, a whitelist is an address book for withdrawals. You enter the Bitcoin addressesGlossaryBitcoin addressA string of characters like ‘bc1q…’ that someone can send bitcoin to. It is usually derived from a public key, can be shared without risk to your funds and should be generated afresh for every payment.On the learning path: Stage 5 · Step 4 – First withdrawal →In the glossary →× of your own wallets and confirm them, usually by email and two-factor authenticationGlossaryTwo-factor authentication (2FA)Logging in with two independent proofs, such as a password plus a code from an authenticator app. For accounts with exchanges and Bitcoin apps, 2FA is a must – and SMS codes are the weakest option.On the learning path: Stage 4 · Step 3 – Buying Bitcoin →In the glossary →×. Once the feature is switched on, withdrawals can only go to these addresses.

What it’s good for

• Hijacked account: anyone who steals your password can’t simply send your funds to an address of their own. Some providers can also lock newly added addresses for a while, for example 24 hours – time for you to react (as of September 2026).^[1]
• Typos and tricks: if you pick from the address book instead of copying each time, you are less likely to fall for planted look-alike addresses.
• Less hassle with the Travel RuleGlossaryTravel Rule (Transfer of Funds Regulation)An EU rule requiring crypto providers to send details of the sender and recipient with transfers. Since 30 December 2024, for more than €1,000 from or to your own wallet, the provider also checks that the address is yours.On the learning path: Stage 5 · Step 4 – First withdrawal →In the glossary →×: in the EU, for withdrawals of more than €1,000 to a self-custody address, the provider must check that it belongs to you.^[2] Once it has established and documented this, it doesn’t have to repeat the check for every later withdrawal to the same address.^[3]

How to go about it

1. Generate a receiving address in your wallet and check it – on a hardware wallet, on the device’s screen.
2. Add it to your provider’s address book, confirm it and switch on the whitelist requirement if there is one.
3. Make a small test withdrawal first, then larger ones.

Step by step: Your first withdrawal to your own wallet.