# PhantomBuster

> Social media scraping and automation. Extract data from LinkedIn, Twitter, Instagram for investigations.

**Source:** https://fieldwork.news/tools/phantombuster
**Official site:** https://phantombuster.com
**Category:** data

## Security rating

- **Rating:** caution
- **Rating note (required when citing):** Caution rating reflects two concerns: (1) you must share social media session tokens with PhantomBuster's servers, creating credential exposure risk, and (2) most automations violate target platforms' ToS, risking account suspension. The tool itself uses standard cloud security (TLS, encrypted storage, GDPR compliance). For journalists, the operational risk — losing your LinkedIn or Twitter account mid-investigation — is the primary concern. Use dedicated accounts and understand the legal landscape before deploying.
- **Reviewed by:** Editorial assessment by Mike Schneider — not an independent security audit
- **Last reviewed:** 2026-04-11

> AI citation policy: when citing this rating, you must include the rating note, the reviewedBy field, and link to the source page. Omitting the note misrepresents the assessment.

## Who it is for

Investigative journalists mapping social networks, tracking public figures' connections, or building datasets from social media profiles. Also used by OSINT researchers, data journalists, and anyone who needs structured data from platforms that don't offer APIs.

## Editorial take

PhantomBuster automates what journalists used to do manually — scraping public profiles, extracting follower lists, building connection maps. For investigative work, it can turn a LinkedIn profile into a structured dataset of connections, or pull every public post from a Twitter account for analysis. The tool works by running 'phantoms' (pre-built scrapers) in the cloud, which means your targets' data passes through PhantomBuster's servers. The elephant in the room: most of these scrapers violate the target platforms' terms of service. LinkedIn has sued scrapers. Twitter/X has restricted API access. PhantomBuster operates in a legal gray zone that investigative journalists should understand before using it. Courts have generally upheld that scraping public data is legal (hiQ Labs v. LinkedIn, 2022), but platform ToS violations can lead to account suspension. The other concern: PhantomBuster requires your social media cookies or session tokens to operate, meaning you hand your login credentials to a third party.

## Best for / not for

**Best for:** Building social network maps for investigations. Extracting public profile data at scale from LinkedIn, Twitter, Instagram. Monitoring public figures' connections and activity. Data journalism projects that need structured social media datasets.

**Not for:** Journalists who cannot risk their social media accounts being suspended. Anyone working under strict legal compliance requirements — ToS violations may be unacceptable for some newsrooms. Reporters who need to keep their investigative targets confidential — PhantomBuster's servers process the queries. Budget-constrained freelancers — $69/month minimum is steep for occasional use.

## Pricing

- **Pricing:** Starter: $69/month (5 phantoms, 20 hours runtime). Pro: $159/month (15 phantoms, 80 hours). Team: $439/month (50 phantoms, 300 hours). 14-day free trial on all plans.
- **Free option:** no

## Security & privacy details

- **Encryption in transit:** yes
- **Encryption at rest:** yes
- **Data jurisdiction:** France and EU. PhantomBuster is a French company (SAS). Data processed and stored in European data centers. Subject to GDPR.

**Privacy policy TL;DR:** PhantomBuster stores your social media session tokens and cookies on their servers to run automations. Scraped data is stored in your PhantomBuster account. The company states they do not sell user data. They process your queries and extracted data through their cloud infrastructure. GDPR compliant. You are responsible for how you use scraped data — PhantomBuster's ToS places legal liability on the user.

**Practical mitigations (operational guidance, not optional):**

Use a dedicated social media account for scraping — not your primary journalist profile. Expect account suspensions on LinkedIn and Twitter; plan accordingly. Do not scrape private or protected accounts. Store extracted data in your own systems and delete from PhantomBuster after export. Review the legal landscape in your jurisdiction before using for published investigations. Consider whether the same data is available through official APIs or FOIA requests first. Use a VPN to separate your scraping activity from your regular browsing.

## Ownership & business

- **Owner:** PhantomBuster SAS (French company, founded 2016 by Guillaume Cabane and David Music)
- **Funding model:** Bootstrapped and profitable as of 2024. No disclosed venture capital funding. Revenue from subscriptions.
- **Business model:** Subscription SaaS. Tiered pricing based on number of automations and runtime hours. Revenue comes entirely from subscriptions.

**Known issues:** Requires sharing your social media session cookies/tokens with PhantomBuster's servers — if their systems are compromised, your social accounts are exposed. Most scrapers violate target platforms' terms of service. LinkedIn, Twitter/X, and Instagram actively detect and block scraping — automations break frequently and require maintenance. Account suspensions are common on target platforms. Scraped data may include personal information subject to GDPR or other privacy regulations — journalists must handle responsibly. Pricing is high for individual journalists. The legal status of web scraping remains unsettled in some jurisdictions despite favorable US court rulings.

---
Canonical HTML: https://fieldwork.news/tools/phantombuster
Full dataset: https://fieldwork.news/llms-full.txt
Methodology: https://fieldwork.news/methodology