Address whitelists, and the delay they add on purpose

A withdrawal whitelist restricts payouts to addresses you have registered in advance. Adding an address, or changing one, triggers a waiting period before it can be used. That waiting period is the entire point of the feature, and it is also why people turn it off.

What it is actually defending

Consider what someone who has taken over your account wants to do: add their own address and withdraw to it. Everything else — password, email, session — only matters because it leads to that step.

A whitelist with a delay breaks that chain. The attacker can add an address, but it cannot be used yet, and the notification about the new address arrives while the clock is still running. The delay converts a silent, immediate theft into a slow one with a warning attached, which is the difference between losing a balance and changing a password.

This is worth stating clearly because the feature is routinely described as a convenience setting. It is not. It is the control that still works after the attacker has your password.

The cost, and when you pay it

The cost is real: your first withdrawal to a new address waits. Worse, almost nobody sets a whitelist up on the day they open the account. They set it up on the day they want to withdraw — so the delay lands exactly when it is least welcome, which is why it gets a reputation as an obstacle rather than a seatbelt.

The fix is scheduling, not configuration. Add the address you intend to use on the day you open the account, while the clock costs you nothing. By the time there is a balance worth moving, the whitelist is already armed.

One more reason to do it early: it is also when you find out whether the operator supports whitelisting at all, which is a thing worth knowing before you fund the account rather than after.

Where it collides with the rest of the cashier

Three interactions catch people out, and none of them is a malfunction:

• Identity checks still apply. A whitelisted address does not substitute for verification. Checks tend to arrive at the first cash-out rather than at the deposit, so it is entirely normal to clear a whitelist delay and then wait on documents.
• The closed-loop rule may override your choice. If the operator requires money to leave by the rail it arrived on, the whitelisted address may simply not be eligible for this particular balance — see why money has to leave the way it came in.
• Changing a whitelisted address restarts the clock. That is deliberate. If a change could take effect immediately, the delay on adding one would protect nothing.

Reading an operator by this one setting

Whether a cashier offers whitelisting, and how it describes the delay, is a quick and surprisingly honest signal about the people running it. A clear page naming the waiting period and what notification you will get suggests someone has thought about account takeover. No such setting, or one that can be disabled instantly from inside the account, suggests the opposite — a delay you can switch off in a second is a delay an attacker can switch off in a second.

On the account side, the things that pair with it are the ordinary ones: a unique password, app-based two-factor rather than SMS where there is a choice, and treating the email account as the real key, because that is what a password reset runs through.

For what the rest of the withdrawal path looks like once the whitelist is out of the way, start with the pending period; for the terms that decide whether a payout is released at all, read the withdrawal section first.