Is HeyReach Safe? LinkedIn's Rules, HeyReach's Limits and the Risk That Remains

Some links on this page are affiliate links. If you sign up through them, we may earn a commission at no extra cost to you. How we make money

The honest answer: no LinkedIn automation tool is risk-free, and that includes HeyReach. HeyReach itself says LinkedIn's User Agreement bans software that automates connecting and messaging, and it states that it is not associated with or endorsed by LinkedIn. What HeyReach offers is a set of limits and dedicated proxies that it says reduce the risk of a restriction, not a promise that one will never happen.

This page sets out what LinkedIn's rules cover, what HeyReach says, where HeyReach's own numbers conflict, and what you can do to lower the risk. For features and pricing, see our HeyReach review.

Some tool links here are affiliate links (disclosure). Nerdy Joe is a HeyReach affiliate.

We did not test HeyReach hands-on, and we have no data on how often accounts using it are restricted. Nobody publishes that number.

The short answer

Question What the sources support
Does LinkedIn allow third-party automation? No. HeyReach itself says LinkedIn's User Agreement bans this kind of software.
Is HeyReach approved by LinkedIn? No. HeyReach says it is not associated with or endorsed by LinkedIn.
Can an account be restricted while using HeyReach? Yes. LinkedIn can restrict accounts that break its rules.
Does HeyReach limit activity per account? Yes, per HeyReach: daily and weekly caps, plus automatic pauses users cannot override.
Can anyone promise your account will not be restricted? No. Not HeyReach, not any competitor, not us.
Who carries the risk? The account owner, under HeyReach's terms of service.

What LinkedIn's rules say

A note on method first: LinkedIn blocks automated tools from reading its pages, so our research tools could not open LinkedIn's User Agreement or its help articles. For that reason we do not quote LinkedIn anywhere on this page. We link the pages so you can read them yourself.

The pages to read on linkedin.com:

What we can state from a source we did read: HeyReach's own blog. In a post published in August 2026, HeyReach says LinkedIn's User Agreement "explicitly bans" software that automates connecting, messaging, liking and commenting. It adds that the only official LinkedIn integration covers ads and page publishing, not connection requests or messages.

That is the vendor describing the rules that apply to its own product. On HeyReach's own account, then: LinkedIn restricts bots and other automated methods for adding contacts and sending messages, third-party automation tools are not approved by LinkedIn, and LinkedIn can restrict accounts that break its rules.

This applies to every tool in the category, not only HeyReach. Switching to a competitor does not change LinkedIn's position. We compare the options in HeyReach alternatives, and we do not rank them by safety for that reason.

What HeyReach says about safety

HeyReach has published three main statements on this. They do not fully agree with each other, so we give each one with its date.

The help center article "Is HeyReach safe to use?" (dated February 2026). HeyReach says it prides itself on "adhering to every LinkedIn rule to the letter." It says each account gets about 100 connection requests a week, that accounts nearing the limit are automatically frozen inside a campaign, and that users cannot override this. It also says each account is allowed 200 actions a day, and that each account gets a dedicated static residential proxy whose IP HeyReach "never shares" between two accounts. The article does not acknowledge any risk of restriction.

The connection request limits article (dated August 2026). HeyReach says the daily limit is set per sender and shared across that sender's campaigns, with a default of 25 and a maximum of 40. It says its weekly limit is "capped at 200 Connection Requests per sender".

The blog post of August 2026. Here HeyReach says LinkedIn's User Agreement bans this kind of software. It also says automation carries risk and that outreach tools cannot be risk-free.

The first and third statements do not fit together easily, since the August 2026 post says LinkedIn's agreement prohibits the category. The blog post is the newer of the two, so we treat it as HeyReach's current position and would not rely on the older help center line.

HeyReach's sending limits article adds that HeyReach will never try to get past LinkedIn's limits or put an account at risk. That is a statement of intent from the vendor, not a guarantee of outcome.

HeyReach's stated limits

These are HeyReach's figures from its help center, not LinkedIn's.

Limit HeyReach's figure
Connection requests per day, per sender Default 25, maximum 40 (HeyReach advises against 40)
Connection requests per week, per sender Conflicting: about 100 in one article, capped at 200 in another
Total actions per day, per account 200
Warm-up actions (view, follow, like) per day, per sender 40
InMails per day, per sender 40 maximum
Minimum delay between two actions 3 hours
Messages per day Not stated in the pages we read

Limits apply per LinkedIn account, not per campaign. HeyReach's example: 20 connection requests a day spread over 3 campaigns is about 7 per campaign.

HeyReach also describes two automatic brakes that users cannot remove:

  • Cooldown Mode. When LinkedIn stops an account from sending more connection requests, HeyReach stops sending for that sender until the following Monday.
  • Locks. When HeyReach "detects slight pushback from LinkedIn", it delays sending for a couple of hours. HeyReach says locks are not visible in the app.

The weekly limit: HeyReach's numbers conflict

This is the figure people ask about most, and HeyReach's own pages give two answers.

HeyReach's help center says LinkedIn does not publish its weekly invitation limit. One HeyReach article puts it at about 100 a week per account, and another says it can reach 200 a week for some accounts. HeyReach caps its own sending at 200 a week per sender and pauses a sender when LinkedIn stops accepting requests.

We could not find a weekly number published by LinkedIn. A third-party site, Hublead, says it checked LinkedIn's help pages in September 2026 and found no number there either. Figures such as 100 a week come from vendors and from what users observe.

So treat any weekly number as an estimate, and do not plan a campaign around hitting 200. We go deeper on this in our guide to the LinkedIn connection request limit.

The March 2026 company page removal

In its August 2026 blog post, written by its CMO, HeyReach reports the following. On March 25, 2026, LinkedIn removed the HeyReach company page, which had about 16,400 followers, and restricted the personal profiles of four HeyReach executives. HeyReach says this came with "No notice, no communication."

HeyReach describes this as part of a wider enforcement pattern against third-party tools and says it was not singled out. It names other vendors it says faced similar action. That list is HeyReach's claim, and we have not verified it, so we do not repeat it as fact.

HeyReach also says customer accounts, campaigns and the platform kept operating normally afterward. It reports its own sending totals for the months that followed. Those figures are self-reported and unverified.

LinkedIn has not, to our knowledge, commented publicly, so we only have HeyReach's side.

Two things can reasonably be drawn from the post. LinkedIn does act against automation vendors, and action against a vendor's brand page is a different thing from a restriction on an individual customer account. Neither tells you how likely your own account is to be restricted.

Who carries the risk

HeyReach's terms of service answer this directly. They say HeyReach "has no responsibility or liability for any Third-Party Platform" and "is not responsible for any adverse action taken against the Customer by a third-party platform." The service is provided "AS IS", and liability is capped at fees paid in the prior 12 months.

The terms do not mention LinkedIn by name, but the plain meaning is clear. If LinkedIn restricts an account you connected, that loss is yours. Fees are also non-refundable under the same terms, which we cover in HeyReach pricing.

For an agency this matters twice. You are making the decision for client accounts, often the personal profiles of a client's founders or sales reps. Get the client's informed agreement in writing before you connect anything.

What nobody can promise

  • That your account will not be restricted.
  • That restrictions are rare. No restriction rate exists in any source we read.
  • That a dedicated proxy, server-side sessions or sender rotation stops LinkedIn from detecting automation. HeyReach describes what these features do, not what they guarantee.
  • That LinkedIn's limit "is" 100 or 200 a week. Only vendors state numbers.
  • That a restricted account will be restored, or how long a restriction lasts.

If a vendor, agency or reviewer tells you a LinkedIn tool is completely safe or cannot be detected, treat that as a sales line.

How HeyReach's design tries to reduce risk

HeyReach's core idea is to scale by adding LinkedIn accounts instead of raising the volume on any one account. Its help center says "The only way to do this is to scale by the number of senders."

Each account stays within its own limits, and total volume comes from the number of accounts. HeyReach's marketing line about sending 1,000 or more invites a week only works that way: by our arithmetic, 10 senders at about 100 a week each.

The other pieces, all per HeyReach:

  • A dedicated static residential proxy per account. On the Growth plan HeyReach supplies it; on Agency and Unlimited you bring your own.
  • A recommendation to pick a proxy location that matches your real location.
  • Per-account daily caps, the weekly cap, Cooldown Mode and Locks.
  • A minimum 3 hour delay between two actions on a lead.

These are sensible design choices. They lower the load on each account. They do not make the activity permitted under LinkedIn's rules.

Risk-reduction checklist

Most of this is HeyReach's own guidance from its help center. It reduces risk; it does not remove it.

Before you connect an account

  • Do not automate a brand-new account. HeyReach says new accounts need slow warm-up and at least 100 connections made manually first.
  • Use real accounts that belong to real people on your team or your client's team. Do not buy, rent or create fake LinkedIn accounts.
  • Decide which accounts you could live without for a while. Do not connect a profile your business depends on unless its owner accepts the risk.
  • Use HeyReach as the only automation tool on that account, as HeyReach advises.

Warm-up (HeyReach's schedule)

  • Week 1: 5 connection requests a day.
  • Week 2: 10 a day.
  • Week 3 onward: 15 to 20 a day, aiming for 300 to 500 total connections.
  • Until the account passes 1,000 connections: cap at 20 to 25 a day and skip personal notes.

Running campaigns

  • Keep the default of 25 connection requests a day or lower. HeyReach's own FAQ says not to set 40.
  • Keep your acceptance rate above 20%, per HeyReach. Tighter targeting helps here.
  • Use an 8 to 12 hour working window in the account's own time zone.
  • Wait 7 to 12 days after a connection request before the next step, not 1 day.
  • Run no more than two campaigns at once from one account.
  • Use the auto-withdraw option so old pending requests do not pile up.

If LinkedIn pushes back

  • If a sender enters Cooldown Mode, leave it alone until it resumes. Do not move the same leads to another tool.
  • If LinkedIn asks the account owner to verify identity or shows a warning, stop automation on that account and let the owner handle it directly with LinkedIn.

Is your LinkedIn login safe with HeyReach?

A separate question from restriction risk is what you hand over when you connect an account.

HeyReach offers two methods.

The first is exporting LinkedIn cookies through a third-party Chrome extension, which HeyReach calls the recommended method because no credentials are shared. The connection lasts only until you log out of LinkedIn on that computer. The second is entering your LinkedIn email and password, with an optional 2FA secret key.

HeyReach says credentials are hashed and calls the method "perfectly safe". That is HeyReach's claim, and we have not audited its security. Either way, you are giving a third party working access to the account, including its inbox if you choose to import all conversations.

On the company itself: the business behind HeyReach is an Estonian entity, per its terms of service, and its site says it is trusted by more than 8,000 companies (HeyReach's figure).

Who should and should not use HeyReach

A reasonable fit:

  • Agencies and sales teams that understand LinkedIn's position and accept the risk knowingly.
  • Teams with several real LinkedIn accounts that can keep each one at modest volume.
  • Teams that treat LinkedIn as one channel among several, so a restricted account does not stop the pipeline.

Think twice:

  • Anyone whose income depends on a single LinkedIn profile, such as a creator or solo consultant with a large following.
  • Anyone in a regulated role where an employer or regulator would object to automation on a personal profile.
  • Anyone who needs a guarantee. There is none to give.

If LinkedIn is your only outbound channel, a restriction is a bigger problem. Spreading effort across email lowers that dependence. See email and LinkedIn outreach for agencies and our cold email infrastructure guide.

If you decide to go ahead, HeyReach's pricing page describes a 14 day trial with 3 LinkedIn accounts and no card, which is enough to see the limits and controls for yourself. Our full HeyReach review covers what else you get.

Rather not build the list yourself?

Low volume per account only works if the list is tight. A well-targeted list is what keeps acceptance rates up.

Nerdy Joe is owned by Agency Growth Partners (AGP), and AGP builds verified lists and runs outbound for agencies. If you would rather hand that off, book a call with David.

Bottom line: is HeyReach safe?

HeyReach is not approved by LinkedIn, and HeyReach itself says LinkedIn's User Agreement bans software that automates connecting and messaging. Using it, or any tool like it, carries a risk that LinkedIn restricts the account. HeyReach says its per-account limits, automatic pauses and dedicated proxies reduce that risk.

No vendor can remove it, and HeyReach's terms leave the consequences with you.

HeyReach deserves some credit for saying this in public in its August 2026 post. If you accept the trade-off, keep volumes low, warm accounts up slowly and never connect a profile you cannot afford to lose. Then read the HeyReach review and look at HeyReach's plans, or start with the free trial.

Sources

Frequently asked questions

Can LinkedIn ban you for using HeyReach?

LinkedIn can restrict accounts that break its rules, and HeyReach itself says LinkedIn's User Agreement bans software that automates connecting and messaging. HeyReach says its limits and dedicated proxies reduce the risk. No vendor can remove it.

Is HeyReach approved by LinkedIn?

No. HeyReach states on its own site that it is not associated with or endorsed by LinkedIn Corporation. The same is true of other third-party LinkedIn automation tools.

How many connection requests does HeyReach send per day?

HeyReach's help center says the daily limit is set per sender, with a default of 25 and a maximum of 40 connection requests a day. HeyReach advises against setting 40 and suggests 30 at most for a warmed account with over 1,000 connections.

What is LinkedIn's weekly connection request limit?

We could not find a number published by LinkedIn, and HeyReach's help center says LinkedIn does not disclose one. HeyReach's own articles give two figures: about 100 a week per account in one place and up to 200 a week in another.

Did LinkedIn ban HeyReach?

HeyReach says LinkedIn removed its company page and restricted four executives' personal profiles on March 25, 2026. HeyReach says customer accounts and campaigns kept running. LinkedIn has not, to our knowledge, commented publicly.

Is it safe to give HeyReach my LinkedIn password?

HeyReach offers two ways to connect: exported cookies, which it calls the recommended method because no credentials are shared, or email and password. HeyReach says stored credentials are hashed. That is the vendor's claim, and we have not audited it.

Who is responsible if my LinkedIn account gets restricted?

You are. HeyReach's terms of service say it is not responsible for adverse action a third-party platform takes against a customer, and the service is provided as is.