Address Whitelisting on HercleX

Before you can withdraw any asset — fiat or crypto — from HercleX, the destination address must be whitelisted and approved. This is a security and compliance requirement: it ensures that only verified, authorised addresses can receive funds from your account.

Whitelisting applies to withdrawals only. You do not need to whitelist an address to receive deposits.

Fiat Address Whitelisting

Fiat withdrawal addresses are bank accounts (IBAN, account number, or equivalent) that you register on the platform before initiating a transfer.

How to whitelist a fiat address

The process depends on which sections are available on your platform.

If your platform has the Network section

1. Go to Network and click Add New Payee.

2. Fill in the payee details — name, type (Individual or Company), address, city, country. A maximum of 50 payees can be added to your account.

3. Once the payee is created, click the eye icon next to the payee and select Add New to register a payee address.

4. Enter the bank account details: asset (EUR, USD, GBP), IBAN or account number, BIC/SWIFT, and network.

5. Submit the address.

6. Confirm the address either via the confirmation email you receive, or via the API using the confirmation token returned during address registration (see Confirmation and approval process below for details).

7. After confirmation, the address enters a short compliance review. You will be notified once it is approved.

If your platform does not have the Network section

1. Go to Settings (hover over the Hercle logo in the top-right corner) → Bank Accounts tab.

2. Select the currency.

3. Enter the account number/IBAN and an account name.

4. Click Add. You will receive a confirmation email — click the link to verify.

5. After email confirmation, the address enters compliance review. You will be notified once approved.

Field requirements for fiat addresses

Getting the details right the first time avoids delays and failed payments. These are the most common formatting rules:

Crypto Address Whitelisting

Crypto withdrawal addresses follow a similar flow but include an additional verification step depending on the type of wallet.

Hosted vs. unhosted wallets

When you add a crypto address, you need to specify the wallet type:

Hosted wallet — a wallet managed by a regulated Virtual Asset Service Provider (VASP), such as a centralised exchange or institutional custodian. These addresses are verified automatically through Travel Rule checks against SumSub’s VASP registry.

Unhosted wallet — a self-custody wallet that you control directly (for example, Fireblocks self-managed, Ledger, MetaMask, or Trust Wallet). These require a penny test for verification: you will be asked to send a small deposit from the wallet to a Hercle address to prove ownership.

How to whitelist a crypto address

1. Go to Settings → Crypto Addresses tab.

2. Select the asset (e.g. USDT, BTC, ETH).

3. Enter the crypto address.

4. Select Hosted or Unhosted under the “Hosted By” dropdown.

5. Add an address label for your reference.

6. Click Add.

For hosted wallets: the address is submitted for Travel Rule verification. Once the VASP is confirmed, it moves to approval.

For unhosted wallets: you will receive a confirmation email containing the penny test details — a small amount and a destination address. Send the specified amount from your wallet to complete verification. Once the deposit is detected and confirmed, the address moves to compliance review.

Important notes on crypto addresses

• One address, one account: the same crypto address cannot be whitelisted under different Hercle entity accounts.

• Deposit addresses are permanent: once you generate a crypto deposit address on HercleX, it remains assigned to your account and does not change over time. You can reuse it for future deposits.

• Deposit addresses are per-asset and per-network: each crypto deposit address is specific to the asset and network you selected when generating it. Always make sure you are sending the correct token on the correct network. Cross-chain transfers (for example, sending an ERC-20 token to a TRON address) are not supported and may result in loss of funds.

• Whitelisting is for withdrawals only: you do not need to whitelist an address to receive a crypto deposit — only to send funds out.

Confirmation and Approval Process

Both fiat and crypto addresses follow the same general flow after submission:

1. Confirmation — you can confirm the address in one of two ways:

• Via email: you receive an email with a verification link. This link expires after 1 hour. If it expires, the address must be resubmitted.

• Via API: if you registered the address through the API with confirmationStrategy set to API, you can confirm it programmatically by calling the approve payee address endpoint with the returned confirmation token. Important: the API key used to approve the address must be different from the API key used to create it. This is a security requirement — a single key cannot both create and approve the same address.

2. Compliance review — after confirmation (and penny test completion, for unhosted crypto wallets), the address is reviewed.

3. Approval — once approved, the address becomes available for withdrawals. You will receive a notification confirming the status change.

Troubleshooting

I’m not receiving the confirmation email.

Check your spam, junk, and quarantine folders. If your company uses a strict mail server (e.g. Microsoft Defender, Barracuda, Mimecast), the email may be blocked at the server level. Ask your IT team to whitelist the Hercle notification sender domain. If the email has still not arrived after 15 minutes, delete the address and resubmit it.

The confirmation link returns a 404 error.

The confirmation link expires after 1 hour. If you clicked it after it expired, or if it was pre-fetched by your email security system, it will return an error. Delete the address and submit it again to receive a new link.

I confirmed the address, but the status is still “Pending” or “Refused”.

After confirmation, the address enters a compliance review. This review is typically completed within the same business day. If the status moves to “Refused”, it usually means there is a data mismatch — for example, the beneficiary name on the address does not match the name in the payee record, or the IBAN format is invalid. Correct the details and resubmit.

I completed the penny test, but the crypto address is still not approved.

Ensure that you sent the exact amount specified in the confirmation email, from the exact wallet address you are whitelisting. The penny test is checked automatically — if the transaction does not match, the verification will not complete. If you believe the test was successful but the status has not updated, contact support with the transaction hash.

The address shows as whitelisted, but I still get “The address is not whitelisted” when withdrawing.

This can happen if there is a mismatch between the asset or network of the whitelisted address and the asset or network you are trying to withdraw. Double-check that the whitelisted address matches exactly — including the network (e.g. USDT on TRON vs. USDT on Ethereum).

Can I whitelist an address without email confirmation?

Yes — if you register the address via the API, you can use the API-based approval flow instead of email confirmation. Set confirmationStrategy to API when registering the payee address, then call the approve payee address endpoint with a different API key (one that has the Approve Payee permission).

Can Hercle manually approve an address without the penny test?

No. For compliance reasons, all unhosted wallet addresses must complete the penny test verification. There are no manual overrides for this process.

If your issue is not covered here, submit a request through the Hercle support centre and the team will respond within 1 business day.