Expandi is not risk-free. LinkedIn's User Agreement bans automated access to the platform, and Expandi holds your LinkedIn session in its own cloud, so the machine and IP LinkedIn sees are not the ones you log in from. What Expandi does about that is assign each account a dedicated country-based IP, start new accounts on an automatic warm-up, and stop actions at whatever limit range you set. Those reduce the chance of a restriction. They do not make the activity permitted.
Details below come from expandi.io's pricing page, FAQ and terms, LinkedIn's User Agreement and its prohibited software help page, and two Reddit threads, all read on November 6, 2026.
What LinkedIn permits
Section 8.2 of the User Agreement lists the prohibitions. Item 1 bans using or attempting to use another person's account and names "sharing log-in credentials or copying cookies" as examples. Item 2 bans software, scripts, robots or browser plugins used to scrape or copy the service. Item 13 bans bots and other unauthorized automated methods to access the service, add or download contacts, or send messages.
LinkedIn's help page on prohibited software says it does not permit any third-party software that automates activity on LinkedIn, and that members who use such tools "risk having their accounts restricted or shut down". Section 3.4 of the agreement reserves the right to restrict, suspend or terminate an account that breaches the contract.
Expandi's site is clear on where that leaves the vendor. The footer says it is not an official LinkedIn product and that use is at your own risk. The terms add that Expandi is not responsible for any decision, restriction, suspension or termination imposed by LinkedIn.
How Expandi holds your account
Expandi is cloud software. Campaigns run on its servers with your browser closed, which is why most teams pick it over a desktop tool. Each user account connects to one LinkedIn account, and the pricing page sells that as a per-account seat.
To act as you while your laptop is off, Expandi has to hold a session credential on its side. A teardown of the official Expandi browser connector, posted in r/AutomationSafety in July 2026, describes how that happens: the extension reads the li_at session cookie from Chrome's cookie jar, and on the "Continue to Expandi" step it posts the cookie plus profile data to app.expandi.io, after which the session can run from Expandi's infrastructure. The same post notes the connector injects a script into every LinkedIn tab, which leaves a detectable artifact, and argues that a session replayed from a server carries an IP and device fingerprint that do not match the browser it came from.
That is one researcher's reading, not a statement from Expandi, and the company does not document the mechanism on its site. The session leaves your machine, and the risk moves with it.
The limits, and what Expandi says about them
Expandi sells one plan with every feature. Here is how it compares with Dripify.
| Expandi | Dripify | |
|---|---|---|
| Connection requests | Up to 300+ a week | 75 a day |
| Messages | Set within your limit ranges | 100+ a day, 150 by FAQ |
| IP | Dedicated, country-based | Dedicated, in your location |
| Warm-up | Automatic, adjustable growth rate | Adaptive pacing on Advanced only |
| Accounts per seat | One LinkedIn account | One LinkedIn account |
| Price | $99/month, $79 annual | $59-$79 Pro, $79-$99 Advanced |
| Trial | 7 days | 7 days, no card |
The 300+ weekly figure works out to 60 connection requests a day across five working days. A guide posted in r/Expandi puts the working range at 20 to 50 a day and says a new account should start well under 20. The plan allows more than the company's own advice recommends, which matters when a campaign underperforms and the obvious fix looks like more volume.
What the threads argue, and what they leave out
The r/Expandi thread makes a defensible case. It says accounts get flagged for behaviour rather than for the tool: a new account sending at full volume on day one, high volume with a low acceptance rate, generic messages that earn no replies, loose targeting, and robotic timing. It recommends 20 to 50 connection requests a day, randomised intervals, capped pending requests, and sending inside the prospect's working hours. It also says anyone selling a tool as completely safe is overselling.
Two things sit outside it. The thread sits in r/Expandi, where the posts read as vendor-side guidance rather than independent experience. And behaviour is only half the picture when the session itself is held somewhere LinkedIn can compare against your usual login.
A setup that keeps the risk down
- Cap at 20 to 30 connection requests a day for the first month, even though the plan allows 300+ a week.
- Leave warm-up on longer than feels necessary, and raise the limit in small steps rather than in one jump.
- Keep one LinkedIn account per seat. Sharing a seat between profiles breaks both the terms and LinkedIn's rules.
- Send inside the prospect's working hours. A campaign firing at 3am local time is the easiest pattern to spot.
- Run Expandi alone on that profile. A second automation tool on the same account on the same day compounds the signal.
- Export campaign data monthly. Fees are non-refundable and liability is capped at six months of subscription fees, so the data outlasts the refund.
- Stop at the first checkpoint. A CAPTCHA or an unusual-activity prompt means pause for several days and restart below the previous level.
Verdict
Expandi works for a team that wants shared campaigns, email follow-ups in one sequence and no dependency on a laptop staying open. It suits accounts that already have steady manual activity, a healthy acceptance rate and a reason to send at 20 to 30 requests a day rather than 60.
It is a poor fit in two cases. If the profile is your company's main inbound channel, a restriction takes out the inbox, the network and the posts together, and Expandi's terms put that loss on you. If you want a vendor to carry the risk, none of them will.
For a profile that has to stay clean, the volume belongs somewhere else. An outbound marketing agency runs the sequences on sending profiles and infrastructure built for it, and your own account stays out of the experiment.