PhantomBuster
Social media scraping and automation. Extract data from LinkedIn, Twitter, Instagram for investigations.
What should journalists know about PhantomBuster?
PhantomBuster automates what journalists used to do manually — scraping public profiles, extracting follower lists, building connection maps. For investigative work, it can turn a LinkedIn profile into a structured dataset of connections, or pull every public post from a Twitter account for analysis. The tool works by running 'phantoms' (pre-built scrapers) in the cloud, which means your targets' data passes through PhantomBuster's servers. The elephant in the room: most of these scrapers violate the target platforms' terms of service. LinkedIn has sued scrapers. Twitter/X has restricted API access. PhantomBuster operates in a legal gray zone that investigative journalists should understand before using it. Courts have generally upheld that scraping public data is legal (hiQ Labs v. LinkedIn, 2022), but platform ToS violations can lead to account suspension. The other concern: PhantomBuster requires your social media cookies or session tokens to operate, meaning you hand your login credentials to a third party.
Building social network maps for investigations. Extracting public profile data at scale from LinkedIn, Twitter, Instagram. Monitoring public figures' connections and activity. Data journalism projects that need structured social media datasets.
Journalists who cannot risk their social media accounts being suspended. Anyone working under strict legal compliance requirements — ToS violations may be unacceptable for some newsrooms. Reporters who need to keep their investigative targets confidential — PhantomBuster's servers process the queries. Budget-constrained freelancers — $69/month minimum is steep for occasional use.
Security & Privacy
Data is scrambled while being sent to their servers
Data is scrambled when stored on their servers
Where servers are located — affects which governments can request your data
Privacy policy summary
PhantomBuster stores your social media session tokens and cookies on their servers to run automations. Scraped data is stored in your PhantomBuster account. The company states they do not sell user data. They process your queries and extracted data through their cloud infrastructure. GDPR compliant. You are responsible for how you use scraped data — PhantomBuster's ToS places legal liability on the user.
How to protect yourself:
Use a dedicated social media account for scraping — not your primary journalist profile. Expect account suspensions on LinkedIn and Twitter; plan accordingly. Do not scrape private or protected accounts. Store extracted data in your own systems and delete from PhantomBuster after export. Review the legal landscape in your jurisdiction before using for published investigations. Consider whether the same data is available through official APIs or FOIA requests first. Use a VPN to separate your scraping activity from your regular browsing.
Caution rating reflects two concerns: (1) you must share social media session tokens with PhantomBuster's servers, creating credential exposure risk, and (2) most automations violate target platforms' ToS, risking account suspension. The tool itself uses standard cloud security (TLS, encrypted storage, GDPR compliance). For journalists, the operational risk — losing your LinkedIn or Twitter account mid-investigation — is the primary concern. Use dedicated accounts and understand the legal landscape before deploying.
Who Owns This
Known issues
Requires sharing your social media session cookies/tokens with PhantomBuster's servers — if their systems are compromised, your social accounts are exposed. Most scrapers violate target platforms' terms of service. LinkedIn, Twitter/X, and Instagram actively detect and block scraping — automations break frequently and require maintenance. Account suspensions are common on target platforms. Scraped data may include personal information subject to GDPR or other privacy regulations — journalists must handle responsibly. Pricing is high for individual journalists. The legal status of web scraping remains unsettled in some jurisdictions despite favorable US court rulings.
Pricing
Starter: $69/month (5 phantoms, 20 hours runtime). Pro: $159/month (15 phantoms, 80 hours). Team: $439/month (50 phantoms, 300 hours). 14-day free trial on all plans.
This is an editorial assessment based on publicly available information as of 2026-04-11, using our published methodology. Independent security review is pending. Security posture can change at any time. This is not a guarantee of safety.
Something wrong or outdated? Report it.