Yes, in two cases. Your API key was created before 10 June 2019 8:00 PM UTC, or the destination address is part of your Addresses Book with Skip Confirm turned on. Understanding which exception applies to your situation helps streamline your withdrawal workflow.
- Legacy API key: If your API key was created before 10 June 2019 8:00 PM UTC, withdrawals made through that key do not require email confirmation. BitMEX introduced mandatory email confirmation for API-initiated withdrawals as part of a security update in June 2019. API keys created after this date require email confirmation for all withdrawals. You can read the full details behind this change in the Important Security Advisory Update, June 2019 blog post. If you have rotated or regenerated your API key since that date, the new key will be subject to the email confirmation requirement regardless of when your account was created.
-
Addresses Book with Skip Confirm: The destination address is part of your Addresses Book with Skip Confirm turned on. When adding an address to your Addresses Book, you can enable the Skip Confirm option, which tells BitMEX to process withdrawals to that address without sending a confirmation email. After saving the address with Skip Confirm enabled, you must confirm the setting via a one-time email verification. Once confirmed, all future withdrawals to that address proceed without requiring further email confirmation.
Otherwise, email confirmation is required for security.
Why does BitMEX require email confirmation for withdrawals?
Email confirmation serves as an additional layer of protection against unauthorised withdrawals. If an attacker gains access to your account credentials or API keys, the email confirmation step prevents funds from being withdrawn without also having access to your registered email account.
BitMEX introduced this requirement in June 2019 following a security review, and the measure applies to all API keys created after 10 June 2019 8:00 PM UTC as well as all withdrawals made through the web interface (unless Skip Confirm is enabled for the address).
For traders who value both security and convenience, the Addresses Book provides a balanced approach. By pre-approving specific addresses with Skip Confirm, you can maintain fast withdrawal processing for trusted destinations whilst keeping email confirmation active for any new or unfamiliar addresses. Regularly reviewing your Addresses Book and removing outdated entries helps ensure that only current, trusted addresses retain the Skip Confirm privilege.