How to Whitelist Our Address on Binance

Why bother?

Without the whitelist, an API key with withdrawal permission can move funds to any address. With the whitelist enabled, withdrawals can only go to addresses youve pre-approved. Even an attacker with your full API key and secret cannot bypass this - and adding new addresses requires email confirmation plus a cooldown period.

Net effect: the worst-case scenario goes from "attacker drains your account" to "attacker can do nothing useful with stolen keys".

Step-by-step

The flow is the same on desktop and phone - both use binance.com in a browser.

1. Open binance.com in your browser and log in. If youre on mobile, dont use the Binance app - open binance.com in Chrome, Safari, or any browser.
2. Click your profile icon (top-right corner), select Account, then click Security in the left-hand menu.
3. Find "Withdrawal Whitelist" at the top of the Security Checkup section. If its currently OFF, toggle it ON and confirm with 2FA.
4. Click "Manage" next to Withdrawal Whitelist (or scroll to the Withdrawal Whitelist panel further down the page).
5. Click "Add Address".
6. Coin: select USDC (USDT also works - same address).
7. Network: select BSC (BEP-20). This is critical - if you pick a different network, the address wont be valid for IOIs withdrawals.
8. Address: paste
   0x9d8bf0ffb39ea9fae4ea347369bf3c288f05877f
   (Use the Copy button at the top of this page.)
9. Label: name it something memorable like IOI Payments.
10. "Add Address to Whitelist": make sure this checkbox is ticked, then save.
11. Confirm via 2FA and email. Binance will send a confirmation link to your email - click it to finalize. There may be a 24-72 hour holding period before the address becomes fully active for withdrawals - this is the security cooldown that makes the whitelist effective.
12. Done. The address is whitelisted and IOI can collect commission/subscription payments to it. Nothing else can leave your account.

Common questions

Why cant I do this in the Binance app?

Withdrawal whitelist management is a web-only feature on Binance. The mobile app shows most security settings (2FA, anti-phishing code, app authorization, etc.) but not the whitelist. For now, you have to use binance.com in a browser. You can do that on your phone too - just open the website instead of the app.

I have a binance.us account - does this work?

No. IOI only works with binance.com. binance.us is a separate platform with separate accounts, and our bot wont be able to connect or trade there. If you only have a binance.us account, IOI isnt usable for you right now.

What if I dont enable the whitelist?

The bot still works - withdrawal permission alone is enough for IOI to collect commissions/subscription. But without the whitelist, your API key can withdraw to any address. If those keys leak, the funds are at risk. The whitelist closes that gap entirely.

Can I whitelist multiple addresses?

Yes. Binance allows multiple whitelisted addresses. You can add IOIs address and any of your own external wallets. Withdrawals are restricted to whichever addresses are on the list.

What if I want to remove IOIs address later?

You can remove it anytime from the same Withdrawal Whitelist screen. Note that if youre on the commission model or auto-renewal subscription, removing the address means IOI can no longer collect what's owed - which will eventually pause your bots.

Why BSC (BEP-20) and not Ethereum?

BSC has much lower withdrawal fees than Ethereum. For commissions that are typically a few cents to a few dollars per trade, ETH gas fees would eat the entire payment. BSC keeps transfers cheap.

I added the wrong network. What now?

The address is only valid on BSC. If you added it under a different network (ERC-20, TRC-20, etc.), it wont work. Just remove that entry from your whitelist and add it again under BSC (BEP-20).