What is cooling-off period?

A window after a security change, such as a new password, a new second factor, or a newly added withdrawal address, during which an exchange blocks withdrawals.

The delay exists because account takeovers follow a predictable sequence. An attacker who gains access changes the credentials, adds their own withdrawal address, and empties the account, usually within minutes. A mandatory wait breaks that sequence and gives the real account holder time to notice the notification email and react.

Its length varies by exchange and by what changed, commonly running from a few hours to a couple of days. It is not published consistently, and it is one of the more common reasons a withdrawal fails at exactly the wrong moment.

How it works

The trigger is any change that would let a new party move funds. Typical triggers are a password reset, disabling or replacing two-factor authentication, changing the registered email or phone number, adding an address to a withdrawal whitelist, and sometimes logging in from a new device or country.

During the window, deposits and trading usually continue normally. Only withdrawals are held, because withdrawals are the irreversible step.

The exchange notifies you through every channel it has, which is the actual mechanism. The wait is worthless unless you see the alert, so a compromised email account defeats it, and this is why the email account behind an exchange login deserves the same protection as the exchange itself.

Some venues apply a longer hold to newly added withdrawal addresses specifically, keeping the whitelist itself under a delay so that adding an address never enables an immediate withdrawal.

Example

Illustrative. You lose your phone and reset two-factor authentication on a Monday morning. The exchange applies a 24-hour withdrawal hold and emails you. Trading is unaffected, so you can still buy and sell, but the transfer you had planned to send that afternoon fails until Tuesday. If instead an attacker had performed that reset, the same email would arrive while you still controlled the email account, and 24 hours is enough to contact support and freeze the account before anything left it.

Why it matters when you buy

The practical planning point is to complete security setup before you need to move funds, not during. If you are buying in order to withdraw to a hardware wallet, add and confirm the destination address ahead of the purchase so the whitelist hold has already expired. The exchange pages note security features where published, and two-factor authentication for crypto covers the setup side.

Related terms

withdrawal whitelist — the address list a hold usually applies to; two factor authentication — the change that most often triggers one; withdrawal limit — the other control on outgoing funds; sim swap — the attack these delays are designed to interrupt; totp — the second factor least exposed to that attack.

Questions

Can I skip the wait if I need funds urgently?

Generally not. The delay is applied automatically and support usually cannot override it, since an override request is exactly what an attacker would make. Plan security changes around transfers rather than the reverse.

Does it apply to trading too?

Usually not. Most venues hold withdrawals only, because trading keeps funds inside the platform and is therefore reversible in the sense that matters.

Why did adding a new address trigger one?

Because a new withdrawal address is the last thing an attacker needs. Holding withdrawals until the address has aged means a stolen session cannot immediately route funds somewhere new.