LinkedIn outreach without getting restricted (2026)
2026-10-15 · 10 min read · Adam Axelsson, founder of Revexa
LinkedIn automation is not allowed: section 8.2 of LinkedIn's User Agreement, in force since 3 November 2025, bans "bots or other unauthorized automated methods" to add contacts or send messages, and LinkedIn says members who use such tools "risk having their accounts restricted or shut down" (User Agreement, LinkedIn Help). LinkedIn publishes no weekly number for connection requests. It says restrictions follow many invitations in a short time, or many that are ignored, left pending or marked as spam, and that most lift within a week (LinkedIn Help). The lowest-risk way to prospect is your own profile, personal messages to relevant people, a low and steady pace, InMail for strangers and no scraping.
Checked on 15 October 2026 against LinkedIn's pages, vendors' pages, court records and regulators' decisions.
Revexa builds Leo, one of the tools below, and Leo automates LinkedIn too, so read with that in mind. This is not legal advice.
What LinkedIn's User Agreement says
These clauses in the User Agreement decide what any outreach tool may do on your account:
| Section | The clause (quoted) | Our reading |
|---|---|---|
| 8.2 | You will not "Use bots or other unauthorized automated methods to access the Services, add or download contacts, send or redirect messages" | Automated invitations and messages break it, whoever runs the tool |
| 8.2 | You will not use software "(such as crawlers, browser plugins and add-ons or any other technology) to scrape or copy the Services, including profiles" | Exporting profiles into a list is scraping |
| 8.2 | You will not "bypass or circumvent any access controls or use limits of the Services" | Using a feature sold as a way around LinkedIn's limits conflicts with this clause |
| 2.2 and 8.2 | You agree to "not share or transfer your account", and not to "use or attempt to use another's account (such as sharing log-in credentials or copying cookies)" | Giving a tool your password or session cookie is hard to square with these |
| 3.4 | "LinkedIn reserves the right to restrict, suspend, or terminate your account if you breach this Contract" | Restriction is the standard consequence |
The help center applies this to tools directly: LinkedIn does not permit third-party software, including bots and browser extensions, "that scrape, modify the appearance of, or automate activity on LinkedIn's website" (Prohibited software). Even HeyReach, an automation vendor, writes: "There is no approved outreach automation tool", adding "ours included" (HeyReach blog, 7 August 2026).
Is there a LinkedIn connection request limit in 2026?
Yes, but LinkedIn does not publish the number. Its help center says (limits, restrictions, network size):
- Limits apply to "All LinkedIn members (Basic and Premium)", and you "can't buy or acquire more invitations".
- Reaching the limit can block your invitations, and "This restriction typically lasts one week".
- Free members can add a personal note to five invitations a month; Premium members to all.
- You can have at most 30,000 first-degree connections.
- After withdrawing an invitation, you cannot invite that person again "for up to three weeks".
Weekly figures elsewhere come from vendors, and they disagree (vendors alphabetical):
| Source | What it says about the weekly limit |
|---|---|
| No number published | |
| Dripify | "Typically, standard profiles are limited to 100 invitations per week", up to 200 with high engagement (help) |
| Expandi | Advertises "Send up to 300+ connection requests weekly", plus a campaign type adding "an additional 100 connection requests per week" (pricing) |
| HeyReach | "roughly 100 invitations per week", the same on Free, Premium and Sales Navigator (blog) |
| Waalaxy | "LinkedIn limits the number of invitations you can send to 200 per week" (help) |
Our estimate, not a LinkedIn number: stay under 100 invitations a week, about 20 per working day spread over working hours, since that is the lowest figure any vendor cites. Send fewer if most go unanswered, because LinkedIn names ignored and pending invitations as a trigger.
What triggers a restriction
| Type | What LinkedIn says triggers it | How long | Source |
|---|---|---|---|
| Invitation restriction | "You've sent many invitations within a short amount of time", or many were "ignored, left pending, or marked as spam" | Most lift "within one week"; up to a month for too many outstanding invitations | Help |
| Suspension for automation | "If you send an excessive number of invitations and we suspect the use of an automation tool" | Until "the time specified in the suspension notice"; "Repeated suspensions may result in permanent restriction" | Help |
| Search and profile-view limits | Activity that suggests "commercial use, like hiring or prospecting" | Search resets on the 1st of each month; profile views are calculated daily | Search, views |
| Account restriction | Profiles that are "intentionally fraudulent", content violations or automated activity | "temporary or permanent" | Help |
How to get a restricted account back
- Turn the tool off. LinkedIn asks you to "Review and disable the software or extension that automates activities"; the account is then re-enabled at the time in the notice (Automated activity). Disconnect cloud tools and change your password.
- Wait. LinkedIn cannot lift an invitation restriction on request, and support "cannot disclose the type or reason for the restriction" (Help).
- Verify your identity if asked, with a government ID through LinkedIn's provider Persona; in Canada, the EU and the UK a notarized Affidavit of Identity also works (Help).
- Ask for a second look by signing in and contacting LinkedIn, an option "currently available only to some LinkedIn members" (Automated activity). There is no phone support, and LinkedIn will "never ask you for your password" (Contact support).
- Do not open a second account. Section 2.1 says "you will only have one LinkedIn account".
- Restart slowly, because repeated suspensions can become permanent.
Cloud tools versus browser extensions
An extension runs in your browser; a cloud tool runs your LinkedIn session on the vendor's servers. LinkedIn's rules ban both.
Extensions are named in LinkedIn's help pages, and LinkedIn looks for those that scrape. In April 2026 BleepingComputer confirmed by its own test that LinkedIn's site checked for 6,236 browser extensions, and LinkedIn told it "we do look for extensions that scrape data without members' consent" (BleepingComputer).
Cloud tools sign in as you. What four vendors say, alphabetically:
| Tool | How it runs | How it signs in | IP address | Built-in caps |
|---|---|---|---|---|
| Dripify | "a web application that operates in a cloud" | Chrome extension at connection, or email and password | Acts "from your local IP address" | Up to 75 connection requests and 150 messages a day |
| Expandi | "Cloud-based software" | "your login, password, and a temporary code" | Dedicated country IP "provided by a data center" | Automatic warm-up and daily ranges |
| HeyReach | Cloud, built for many sender accounts | Cookies exported with an extension, or email and password | "dedicated static residential proxy" per account; bring your own on Agency and Unlimited | Accounts "automatically frozen" before LinkedIn's daily threshold |
| Waalaxy | "fully cloud-based" since 1 July 2026 | "mandatory to validate your LinkedIn credentials" | Fixed VPN IP, "a maximum of 5 users per IP" | 100 invitations a day, up to 200 a week; 11 a day on Pro |
Sources: Dripify FAQ and setup; Expandi pricing, privacy notice and IP help; HeyReach setup, pricing and blog; Waalaxy cloud, FAQ and quotas.
The line has blurred. Dripify and HeyReach offer a browser extension just to hand your session to their cloud, and Waalaxy made its cloud mandatory, saying it was "forced to do so by new Chrome Store regulations", then removed its extension on 1 July 2026. Every cloud tool needs your password or session cookie, which sections 2.2 and 8.2 ask you to keep to yourself.
Which is safer? We have found no independent study of restriction rates by tool type; the safety claims come from vendors. Prices and features: HeyReach vs Expandi vs Waalaxy.
What LinkedIn has done: 2024 to 2026
| Date | What happened | Source |
|---|---|---|
| 5 December 2024 | France's CNIL fined Kaspr, maker of a Chrome extension that reveals LinkedIn users' contact details, €240,000, in particular for collecting details "even if they previously masked them". On 4 March 2026 the CNIL closed its order after Kaspr chose "to delete its database and cease all data collection on LinkedIn" | Fine, closure |
| About 6 March 2025 | Apollo.io's and Seamless.AI's company pages disappeared. Apollo's CEO called it a "brand page restriction"; the report has no statement from LinkedIn. Apollo's page was live when we checked on 15 October 2026 | MarTech, LinkedIn |
| 4 July 2025 | Proxycurl, sued by LinkedIn on 24 January over fake accounts, shut down "to comply with the legal settlement with LinkedIn" | Nubela, docket |
| 2 October 2025 | LinkedIn sued ProAPIs over fake accounts "numbering in the millions" and customers paying "up to $15,000 per month to scrape LinkedIn" | Docket |
| 19 December 2025 | Artisan's CEO says LinkedIn restricted the AI agent startup's page and staff accounts; they were reinstated about two weeks later | TechCrunch |
| 25 March 2026 | LinkedIn removed HeyReach's company page and restricted four executives' profiles. HeyReach says customers' campaigns kept running | HeyReach |
| 16 September 2026 | A consent judgment permanently barred ProAPIs and its co-defendants from accessing LinkedIn with fake accounts, scraping or bots; they denied liability and certified deleting the data | Docket |
The pattern: courts and regulators have targeted companies that collect LinkedIn data at scale, and page removals hit vendors' own marketing. For an individual seller, the consequence LinkedIn documents is a restriction on your account.
A practical playbook
- Your own profile only. One account in your real name (section 2.1), never shared, with a photo and current job so recipients recognize you, as LinkedIn recommends.
- Personal messages to relevant people. LinkedIn's spam policy says "Do not use our invitation feature to send promotional messages to people you don't know" (Professional Community Policies). Invite people you have a reason to talk to, such as those engaging with a competitor's post, and say why in the note.
- Low and steady volume, spread over weekdays and working hours, within the estimate above.
- No scraping. Besides section 8.2, GDPR makes you tell people where you got their data, by your first message at the latest (European Commission). See our GDPR guide and, for Germany, UWG §7.
- InMail for strangers. LinkedIn's advice is to "Use InMail and Groups to network with LinkedIn members you don't know".
- Sales Navigator if LinkedIn is your main channel (below).
- After a warning, stop everything and follow the recovery steps above.
| Connection request | InMail | |
|---|---|---|
| LinkedIn says it is for | "people you know and trust" | "LinkedIn members you don't know" (Help) |
| Volume | Weekly limit, number not published | 5 credits a month on Premium Career, 15 on Premium Business, 50 on Sales Navigator (Help) |
| No reply | Ignored and pending invitations count against you | Credit returned if they reply within 90 days (Help) |
Sales Navigator is LinkedIn's own product, so using it by hand is within the rules, though invitation limits still apply. Core starts at US$119.99 a month or US$1,079.88 a year per license, Advanced at US$159.99 a month or US$1,799.88 a year (€120.99 and €148.21 a month in euros). LinkedIn says these "are estimates and may exclude" VAT; Advanced Plus is priced on request (LinkedIn). Every plan includes 50 InMail credits a month, accumulating to 150, and upgrading raises the search limit (Help).
Where Leo fits
Leo by Revexa is a buying-signal agent: it watches signals such as hiring, funding, new executives and engagement with competitors' LinkedIn posts, and drafts LinkedIn messages and email in your voice. On LinkedIn it uses your own profile, sends on weekdays 08 to 17 in the recipient's time zone and pauses when LinkedIn shows a warning. By default you review every draft before it is sent, in the portal, iMessage or Slack; autonomous mode is opt-in per channel.
Leo still automates actions on your LinkedIn account, so the risk above applies to it too. It is the wrong choice if you want no automation on your account at all, a database to export lists from, or phone, SMS or WhatsApp. €89 a month in Europe, $99 in the US and rest of world, 999 SEK in Sweden, excluding VAT; 7 days free, no lock-in (pricing).
Common questions
Is LinkedIn automation allowed?
No. Section 8.2 of LinkedIn's User Agreement bans "bots or other unauthorized automated methods" to add contacts or send messages, and software that scrapes profiles. LinkedIn has approved no third-party outreach automation tool.
How many connection requests can I send per week in 2026?
LinkedIn publishes no number. Vendors cite roughly 100 to 200 a week. Our estimate: stay under 100, about 20 per working day, and send fewer if most go unanswered.
How do I avoid LinkedIn restrictions?
Use one real profile, invite people you have a reason to contact, say why in a note, keep a steady pace over working hours and use InMail for strangers. Avoid scraping and anything sold as a way around LinkedIn's limits.
Are LinkedIn automation tools safe?
None is risk-free: LinkedIn says users "risk having their accounts restricted or shut down". Vendors add daily caps, fixed IP addresses and warm-up, but the risk stays with you; HeyReach's terms make customers responsible for "maintaining appropriate accounts in good standing".
What should I do if LinkedIn restricts my account for automation?
Disable the tool, change your password, wait until the time in the notice and verify your identity if asked. Do not open a second account; repeated suspensions can become permanent.