What happens if a customer sends to an expired address?

The deposit will still be detected and credited to your account. Expiration only affects active monitoring - we'll still sweep funds from any address associated with your API key.