Are proxies legal? Using a proxy, and scraping with one

Yes: in most countries, using a proxy is legal. A proxy is a network tool that forwards your requests through another IP address, and businesses, researchers and ordinary users rely on them every day. What can be unlawful is what you do through it. The same rules apply to your traffic whether it passes through a proxy or leaves from your own connection.

This post is not legal advice. Laws differ between countries and change, and if your project carries real legal risk, a lawyer where you live is the right person to ask. What follows is the general shape of the question, so you know which parts to check.

Are proxies legal to use?

Is using a proxy legal where you live? In most places, yes. Companies use proxies to test how their sites look from other countries, check that their ads appear where they paid for them, and monitor prices. Schools and offices run proxies on their own networks. Developers use them to test their own applications. None of this needs permission from anyone.

A proxy changes the address a site sees. It does not change what you are allowed to do. If an action is legal from your home connection, a proxy does not make it illegal, and if it is illegal from your home connection, a proxy does not make it legal.

Some countries restrict proxies and VPNs

A small number of governments restrict or license the use of proxies and VPNs, or block the services that provide them, often as part of wider controls on internet access. If you live in or are travelling to a country with strict internet rules, check the local position before you use one. We make no country-by-country claims here, because the details change and getting them wrong could hurt someone.

What makes a use of a proxy unlawful?

The tool is rarely the problem. These are the kinds of use that tend to cross legal lines in many countries, and every one of them is also banned on our network:

• Unauthorised access. Getting into systems or accounts you have no right to use. Many countries have computer misuse laws aimed squarely at this, such as the Computer Fraud and Abuse Act in the US and the Computer Misuse Act in the UK.
• Credential stuffing and account takeover. Testing stolen usernames and passwords against a login is unauthorised access at scale.
• Fraud. Testing stolen card numbers, fake-account farms, referral-programme abuse and other transaction fraud.
• Attacks on infrastructure. Denial of service, brute force, port scanning and exploiting vulnerabilities in systems you do not own.
• Spam and harassment. Bulk unsolicited messages, and targeting an individual, including scraping to build a profile of a private person.
• Getting past paywalls to redistribute. Reading is one thing; republishing someone's paid content can infringe their copyright.

Is web scraping legal?

Scraping, meaning automated collection of pages, is common and often lawful, but it touches several areas of law at once. The answer for a given project depends on what you collect, how, and what you do with it. These are the questions that matter most.

Public pages or logged-in data?

Collecting pages anyone can open without an account is the lowest-risk kind of scraping. Once you log in, you have usually agreed to the site's terms, and getting past a login, a paywall or a technical barrier you were not meant to cross moves you towards the unauthorised-access questions above.

Personal data

Names, usernames, photos, contact details and anything else that can identify a person can be personal data under laws such as the EU's GDPR, whether or not it is public. Those laws can apply to you wherever you are, if the people in the data are covered by them. If your project collects personal data, collect only what you need, store it carefully, and know how you will delete it. Proxies for a student research project goes through this for academic work.

Copyright and database rights

Facts, such as a price or a stock level, are generally not protected by copyright. The text, photos and reviews around them often are, and some jurisdictions, including the EU, also protect databases as a whole. Collecting for analysis is a different act from republishing what you collected.

Terms of service

A site's terms may forbid automated access. In many countries, breaking terms of service is a contract matter rather than a crime, but it can still get your access cut off or lead to a claim against you. Some sites offer an API or a data export, which is worth using when it exists.

robots.txt and rate

robots.txt is the site's own statement of which paths automated clients may fetch and how often. It is not a law, but ignoring it is hard to defend if anyone ever asks. Rate matters too: hammering a small site until it falls over is rude, and depending on where you are, it can be treated as an attack. Space your requests, back off when you get a 429 or a 503, and send a User-Agent that says who you are when that is appropriate.

Is it legal to scrape with proxies?

Using a proxy does not change whether a scrape is lawful. It changes which IP address the site sees. Spreading polite requests across several IPs to avoid one address being rate-limited is ordinary practice. Using proxies to keep hitting a site that has clearly told you to stop is a different matter: the site's objection does not go away because the address changed. Why your scraper started getting blocked covers the fixes that start on your own side.

Where residential IPs come from matters too

A residential proxy sends your request through someone's home connection. That only holds up if the person behind that connection agreed to it. Not every pool in this market can show that the people behind it knowingly agreed, so it is a fair question to ask any provider.

Our residential IPs come from people who opted in through an SDK, get paid, and can leave whenever they want. We do not buy pools from brokers who cannot say where the IPs came from. The honesty page sets this out, along with how we label each IP, which you can check yourself with the steps in this guide.

What ProxyPanda allows, and what it does not

Our acceptable use policy has the full list. In short:

Banned outright: credential stuffing and account takeover, carding and payment fraud, spam, child sexual abuse material, harassment and stalking, attacks on infrastructure, malware, and getting around paywalls to redistribute content.

Fine by us: scraping publicly accessible data, price monitoring and rank tracking, ad verification and brand protection, market and academic research, and testing your own applications and infrastructure.

Your responsibility: complying with the law where you are and where the target is, and with the terms of the sites you access. We do not police robots.txt for you and we do not read your traffic, but "ProxyPanda let me" is not a defence, and we will not offer it as one.

When a site owner reports traffic, we check the report against our usage metadata: the destination hostname, the time and the exit IP. For anything on the banned list we suspend straight away and tell you what the report said. For anything else we contact you first, so you can explain or stop. The details are in the abuse section of the honesty page.

Quick answers

Is using a proxy illegal? Not in most countries. A few restrict or block proxies and VPNs, so check the local rules if you are in one of them.

Is web scraping legal? Often, for public data collected politely. Logins, personal data, copyrighted content and a site's terms are where it gets complicated.

Does a proxy make an illegal act legal? No. The rules apply to what you do, whichever IP it comes from.

Is it legal to use a residential proxy? In most places, yes, on the same terms as any proxy. The extra question is where the IPs come from: the people behind them should have agreed to share their connection.

If you are unsure whether a job fits our policy, ask in Discord before you buy. We would rather answer the question first than close an account later.