Do Amazon Wishlists Leak Creator Addresses

TL;DR. Does an Amazon wishlist show your address? Not to the fan who buys the gift, and yes to the seller who ships it. Amazon's live help page, checked on 4 August 2026, says a Wish List "only displays the name, city, and state of the address to gift purchasers" and that Amazon hides the street address, while the same page says sellers receive the recipient's name, shipping address, phone number and an "anonymous email address (some emails aren't anonymized due to system reasons.)" Since 25 March 2026 a list owner can no longer keep third party sellers out of that flow, so any live list can now feed whatever address is on it to a rotating population of merchants. The fix is not a different platform. The fix is that no creator's home address is ever the address on any list.

Most owners have never read what the list actually shows, so they either delete the revenue line in a panic or leave it running on a home address. Neither is the answer.

What Changed in 2026 and Who Can See Your Wishlist Address Now

Amazon told list owners in late February 2026 that it was removing the setting restricting list purchases to items Amazon fulfils itself. The notice, as quoted by the Daily Dot and corroborated by 404 Media, read: "Starting March 25, 2026, we will remove the option to restrict purchases from third-party sellers for list items. When this change takes effect, gift purchasers will be able to purchase items sold by third-party sellers from your lists and your delivery address will be shared with the seller for fulfillment." It added that during delivery an address "may become visible to gift purchasers through delivery updates and tracking information." Amazon's suggested mitigation was an alternate address or a PO Box.

Rather than rely on the coverage, read the live help pages. Four things matter, all checked on amazon.com on 4 August 2026.

The fan sees name, city and state. The Purchase from a List page says "Only the List owner's name and city appear on the default address to protect the privacy of the List owner." The Manage Your Wish List Shipping Address page is wider: "Your Wish List only displays the name, city, and state of the address to gift purchasers. We hide your street address to protect your privacy." The street number never renders at checkout. The metro area and the recipient name always do, and always did, long before this year's change.

The seller gets everything. The same page lists it plainly: sellers receive the name of recipient, the shipping address, the phone number, and an anonymised email that is not always anonymised. That is a full identity package handed to a merchant the creator cannot vet and has no relationship to complain into afterwards.

The exposure is dynamic, so auditing a list once is worthless. Amazon's wording: "Some items are sold by multiple sellers. Sellers may change from the time you add an item to your Wish List and the time when it's ordered." An item added in January because it was Amazon fulfilled can be a marketplace item by the time a fan buys it.

Public lists are findable, not just linkable. Amazon runs a list and registry finder and its help pages describe searching for a gift list by the owner's name, so public is not a private URL only your fans have.

So the answer is a split one. Amazon does not hand the gifter a street address. It hands one to a rotating set of merchants, and since 25 March the owner cannot switch that off.

Which Wishlist Setups Still Expose a Location and Which Do Not

Run every creator against this list. The variable is the address, not the brand of wishlist.

Public retailer list on a home address. Exposed, and the setup to kill first. Name, city and state go to every fan who reaches checkout, the full address goes to sellers, and tracking can surface location detail. No configuration repairs it.

Link only or shareable list on a home address. Still exposed. Amazon's Share Your List page says the view only setting means "Anyone with a link can view your list". A link is not a credential, so treat any link that has touched a fan channel as public forever.

Retailer list on an intermediary address. Acceptable. The residual leak is the metro area, the recipient name and whatever the mailbox operator holds. Manageable for most personas, unacceptable for a creator whose safety case turns on nobody knowing her city.

Gifting platform on a home address. Exposed, with a different failure mode. These services genuinely do sit between the fan and the retailer. Throne's published position, in its own February 2026 post about the Amazon change, is that "A creator's shipping address is not shown to gifters on Throne" and that creators "do not share their personal address directly with buyers." That is a real architectural difference, and it is also a promise that depends on one company's engineering staying correct forever.

In March 2023 the German research collective zerforschung found a misconfigured Firebase database at Throne exposing session cookies for the Amazon accounts used to place gift orders, and TechCrunch reported on 6 April 2023 that researchers could look back at thousands of orders along with creator names and addresses. It was reported on 30 March 2023 and fixed the same day, which is good incident response and still proof of the point: a vendor's privacy promise is a control you do not operate.

Gifting platform on an intermediary address. This is the standard. Two independent layers, neither relying on the other holding.

Fan buys direct from wherever he likes. Unmanaged and unacceptable. The moment an address goes into a chat, the control is gone and you will not know until it is used.

Digital only gifting. Zero physical exposure and badly underused. Gift cards, storefront credit, game keys, hardware the agency buys and ships internally. For a location sensitive persona this is not a downgrade, it is the correct default, and it deletes the mailbox problem below.

The rule that falls out: the control is the address, not the platform.

Intermediary Addresses, Forwarding and What They Cost

Four workable structures, and they fail in different places.

A USPS PO Box. Cheap and quick, and it breaks in a way most owners discover only after a gift fails. Private carriers do not deliver to PO Box numbers, and since March marketplace sellers, many of whom ship by UPS or FedEx, can fulfil any item on a list. USPS publishes a partial fix: "With Street Addressing (if available), you have the option of using the street address of your Post Office location, combined with your PO Box number, as your mailing address," which "lets you receive packages from private carriers (such as UPS, FedEx, DHL, and Amazon)." Availability varies by branch, so confirm before building a workflow on it, and note that USPS says prices "differ depending on your location".

A commercial mail receiving agency: a virtual mailbox, or a mailbox at a shipping store. A real street address private carriers deliver to, plus scanning and forwarding. The catch is onboarding. USPS Form 1583 is required and asks for two forms of identification, one a government issued photo ID and the second confirming the applicant's address. Practitioner range, not a published figure: roughly 10 to 30 dollars a month plus package handling and postage. Two operational notes. Mail addressed to a name the operator has not been given can be refused, so add the creator's working name as an authorised recipient at signup and expect to be asked for documentation. And that Form 1583 means the operator now holds her real home address, your second single point of failure. Choose one you would be comfortable naming in a breach notification.

An address the agency already controls. An office, a studio, a fulfilment partner. Zero incremental cost and an ugly dependency: the agency becomes the custody point for a creator's mail. The clean version, papered before the first parcel, is a mailbox in her name that the agency pays for and she keeps.

Nothing, because she is remote or overseas. Digital gifting only. Do not improvise a forwarding chain across a border.

One 2026 wrinkle for international fans. Executive Order 14324 suspended duty free de minimis treatment for all countries effective 29 August 2025, and CBP's interim final rule for the postal environment took effect on 24 July 2026. One exemption survived: CBP states in that rule that it "does not suspend the exemptions for bona fide gifts under 19 U.S.C. 1321(a)(2)(A)", which 19 CFR 10.152 sets at an aggregate fair retail value of 100 dollars per day per recipient, rising to 200 dollars from the Virgin Islands, Guam and American Samoa.

An overseas fan sending a genuine personal gift under that value is usually fine. A marketplace order shipping in from abroad is a commercial import, duties and fees are in play, and somebody pays them at the door. Cap international gifting low or restrict it to domestic retailers. General information, not customs advice.

Where Gifting Sits Between Tipping and Custom Content

Run the liquidity maths first. OnlyFans and Fansly both take 20 percent of fan spend, so a 200 dollar tip nets the creator 160 dollars in cash. A 200 dollar gift nets her an object. If it is an object she was going to buy anyway, it is worth close to full retail and it beat the tip. If not, its cash equivalent is resale value, which practitioners generally put in the 40 to 60 percent of retail band for consumer goods, before her time. Decision rule: only list items the creator would spend her own money on this quarter. Everything else is a worse tip.

That gives you the ladder. Practitioner price bands, not published figures, and they move by niche:

1. Tips. Low friction, no fulfilment, instant. Typically the 5 to 50 dollar band, and the right ask for a fan you are still qualifying. Our breakdown of how to build an OnlyFans tipping strategy covers the rungs below this one.

2. Paid unlocks and pay per view. The volume line, and the one gifting must never cannibalise.

3. Gifts. Typically the 30 to 250 dollar band, occasionally far higher. The rung for the fan who wants to be recognised rather than to consume more content. He is buying a relationship marker and the object is the receipt.

4. Custom content. Higher ticket, labour bearing, scheduled. See our guide to running custom content upsells at scale for pricing and capacity.

5. Bespoke and recurring high spend. A different management problem.

Two structural traps sit inside that.

The commission blind spot. If your fee is a percentage of platform revenue, gifting is invisible to your commission and competes directly with the tips you are paid on, so an agency built that way quietly suppresses it and leaves the recognition seeking segment unmonetised. Fix it explicitly: bring gifting into the fee basis with a written valuation method, or run it uncommissioned and stop pretending the incentive is neutral. WhaleFinders bills flat per creator per month so this never distorts the recommendation, but on a split you have to answer it in your paperwork.

The quid pro quo problem. In the United States, 26 U.S.C. 102(a) excludes gifts from gross income, and Commissioner v. Duberstein, 363 U.S. 278 (1960) held that a gift must proceed from "detached and disinterested generosity" rather than "the incentive of anticipated benefit." A fan told he gets a custom video if he buys the 180 dollar item is not making a gift under that test, and characterisation follows substance. Watch the platform side too, because promising deliverables for money moving outside the platform is the fact pattern in our note on off platform payment risk for OnlyFans agencies. Gifts buy attention, never a deliverable.

Prompting Gifts Without Breaking the Paid Experience

Gifting converts a segment unlock pricing never reaches, and it dies the moment it reads as a second till. Six rules.

Never make it a bio level call to action. A wishlist link in the top slot tells every new subscriber the paid product is not the product. Gifting is a mid funnel ask to identified fans, not a shopfront.

Give the ask a reason that already exists in the content. A shoot needs the outfit. A stream needs the light. A themed set needs the prop. The list becomes a way to participate in something the fan already follows, which is a different transaction from buy me things.

Segment before you ask. Gifting belongs to fans who have already spent and who respond to recognition, and the tiering logic in our guide to fan segmentation and whale strategy is the right selector. Sending a list to a cold subscriber is the fastest way to look transactional.

Cap the cadence. Practitioner range: one gifting prompt per fan per month at most, never within 48 hours of a paid unlock push. If a chatter has three asks queued for one fan, gifting goes last.

Keep a price ladder on the list itself. Practitioner range: five to twelve live items across a low band, a mid band and one aspirational piece, refreshed monthly. Forty items reads like a registry. Six reads like a person.

Ban the pressure script. No countdowns, no nobody has gifted me today, no leaderboards that shame. A top spender who feels compared will leave.

Fulfilment, Thank You Content and Proof of Delivery

The revenue lives or dies on follow through, and most rosters are sloppy here.

Turn surprise settings off. If the list hides purchases you cannot thank anyone, and an unacknowledged gift is a churned fan.

Verify by delivery, never by list status. Amazon's Purchase from a List page describes a "Buying this elsewhere" link that lets anyone mark a seller item as purchased. That is a free way to claim credit for a gift nobody paid for, and if recognition is the reward, someone will. Nothing counts until it arrives.

Set a two clock service level. Practitioner standard: a personal acknowledgement within 24 hours of confirmed delivery, proof content within seven days. Slower and the fan concludes it vanished.

Write the proof content rules down, because this is where the address leaks back out. No shipping labels in frame, ever, including blurred ones. No visible barcodes. No filming in front of a window, a street facing door or a reflective surface. Strip metadata. You paid for a mailbox precisely so a thank you clip does not undo it.

Log the gift as a spend event in your CRM. Retail value, date, fan ID, item. Unlogged, gifting never shows up in your revenue mix and gets cut in the first efficiency review. Our breakdown of OnlyFans revenue streams and mix is where that number belongs.

The Roster Wide Gifting Policy an Agency Should Mandate

One page, signed by every creator, enforced by the account manager.

1. No creator's home address appears on any list, registry, storefront or fan facing form. No exception for private lists.

2. Every physical gift routes through an approved intermediary address, held in the creator's name, paid by the agency, transferring to her on offboarding.

3. Location sensitive personas are digital gifting only. If her safety case depends on her city being unknown, the metro area on a checkout screen is already too much.

4. The platform is a business decision and the address is a safety decision. No privacy claim substitutes for clause 2.

5. Lists are reviewed monthly, not once, checking the address on file, the item count, the price spread and the sharing settings, because sellers change without notice.

6. Surprise settings off, purchase notifications on, routed to an inbox the chat team actually reads.

7. A gift is acknowledged only on physical delivery, never on a list marked purchased.

8. No gift is ever exchanged for a promised deliverable.

9. Proof content follows the frame rules: no labels, no packaging, no windows, no reflective surfaces, metadata stripped.

10. Every gift is logged as a spend event with retail value and fan ID within 48 hours.

What to do this week. Inventory every list, registry and gifting profile across the roster, including dormant ones a creator set up years ago and forgot, recording the shipping address on file, the sharing setting and the recipient name for each. Any list pointing at a home address gets deleted the same day rather than edited, because an edited list keeps its old link and its old crawl history. Open one mailbox in her name per creator staying on physical gifting, confirm private carrier delivery at that location, then rebuild the lists from scratch. Ninety minutes per creator, and the cheapest risk reduction on your operations list.

This is commercial and operational analysis for OnlyFans agency owners, not legal, tax or customs advice, and retailer and gifting platform policies change without notice. The Amazon wording quoted here came off the live help pages on 4 August 2026, so check them before you repeat any of it to a creator. WhaleFinders works white label as the marketing direction arm inside OnlyFans agencies on flat monthly pricing, 349 dollars single platform, 529 dollars dual, 679 dollars triple and 799 dollars omni per creator per month, and we never post, chat, hold credentials or touch creator money. To pressure test a gifting workflow before it goes across a roster, we are on Telegram at t.me/whalefindersupport.

Wishlist Gifting FAQ

Does an Amazon wishlist show your address to the person buying the gift?

Not the street address. Amazon's live help page states that a Wish List "only displays the name, city, and state of the address to gift purchasers" and that Amazon hides the street address. The buyer does learn the recipient name and the metro area at checkout, which for a creator whose location is part of her safety case is already a leak. Amazon's February 2026 notice also warned that on third party seller orders an address "may become visible to gift purchasers through delivery updates and tracking information."

Are dedicated creator gifting platforms actually safer?

Architecturally yes, which is not the same as safe. Throne's published position is that a creator's shipping address is not shown to gifters, which removes the fan facing exposure a retailer list leaves in place. It replaces it with a dependency: one company holds the address for your whole roster. In March 2023 researchers at zerforschung found a misconfigured database at Throne exposing session cookies for the Amazon accounts used to place gift orders, and TechCrunch reported this allowed access to thousands of orders with creator names and addresses. Use the platform, and still never give it a home address.

What does an intermediary address cost and which type should we use?

For a creator receiving marketplace gifts, a commercial mail receiving agency with a real street address is usually right, because private carriers do not deliver to PO Box numbers and many marketplace sellers block them. Practitioner range, not a published figure: roughly 10 to 30 dollars a month plus package handling. USPS Form 1583 is required and asks for two identification documents, one a government issued photo ID and the second confirming the applicant's address. A PO Box works only where Street Addressing is offered, and availability is per location.

Should gifting revenue count toward our management fee?

Answer it in writing rather than by default. If you charge a percentage of platform revenue, gifting is invisible to your fee and competes with the tips you are paid on, which biases your team against a line that serves the recognition seeking segment well. Either bring gifting into the fee basis with a stated valuation method, or run it uncommissioned and measured. What fails is leaving it undefined and wondering why nobody promotes it.

Is a gift taxable income for the creator?

Possibly, and it turns on why the fan sent it. In the United States, 26 U.S.C. 102(a) excludes property acquired by gift from gross income, but Commissioner v. Duberstein, 363 U.S. 278 (1960) requires the transfer to proceed from "detached and disinterested generosity" and not from "the incentive of anticipated benefit". A fan gifting an item because he was promised a custom video is not making a gift under that standard, which is one more reason gifts should never be traded for deliverables. Take the characterisation to the creator's accountant in her jurisdiction.