Recruiters have heard the horror stories: a colleague's LinkedIn account — fifteen years of connections — restricted or gone, over a browser extension. The fear is justified. The blanket conclusion ("all sourcing tools are dangerous") isn't. The risk lives in one specific place, and you can check any tool for it in two minutes.
What LinkedIn actually bans
LinkedIn's user agreement prohibits automated access to their platform: bots, scrapers, and extensions that operate on linkedin.com. In practice, the tools that trigger restrictions do things like:
- Auto-visit dozens of profiles in the background
- Scrape profile data while you browse
- Inject their own buttons and panels into LinkedIn pages
- Send automated connection requests or messages
Every one of those happens on linkedin.com, from your logged-in account. That's the fingerprint. LinkedIn can see it because it's happening on their site, under your name. And one special case deserves its own warning: cloud "profile viewers" that ask for your LinkedIn password so their servers can browse as you. That is credential sharing with a third party, and it's the fastest known route to a restriction.
The two-minute safety check for any tool
Ask one question: does this tool do anything on linkedin.com?
Watch for these tells:
- Does it ask you to be logged into LinkedIn while it works?
- Does its UI appear on top of LinkedIn pages?
- Does it "sync" or "enrich" data from profiles as you browse them?
- Does it send anything (views, requests, messages) on your behalf?
Any yes means the tool operates inside LinkedIn's walls, visible to LinkedIn, attributable to your account. That's where the risk is — the whole risk.
The one-minute technical proof
The behavioral tells above catch most tools. But for a Chrome extension you don't have to guess at behavior — the browser keeps a signed confession. Every extension must declare, in a plain-text file called manifest.json, exactly which websites it is allowed to run on and talk to, and Chrome treats that list as law.
- Open
chrome://extensionsand switch on Developer mode (top right). - Open the extension's Details and inspect its files.
- Look at
host_permissionsandcontent_scripts— the complete list of sites it can touch. - Search the file for
linkedin.
If linkedin.com is listed, the tool runs on or talks to LinkedIn — maybe a trade-off you knowingly accept, but now it's a decision instead of a surprise. If it isn't listed, the browser itself blocks the extension from LinkedIn, no matter what the code might wish. This check works on every extension in the store, and any vendor making safety claims should welcome it.
Why x-ray-based tools sit outside the risk
X-ray sourcing does its work on Google and Bing. A tool built on it (Sourcer's Desk is one; it isn't the only one) builds searches, runs them on the search engine, and organizes what the search results page shows. When it captures a candidate, it's reading Google's page, not LinkedIn's.
Your LinkedIn account isn't logged in anywhere in that loop. There's no automation for LinkedIn to detect because nothing automated ever touches their site. Later, when you personally click through to a profile that looks promising, you're a normal human reading one page — which is what you are.
The honest limits of "safe"
Two things no tool can do for you. No extension can protect your account from your own behavior on LinkedIn — sending connection requests by hand at machine pace is risky with no software involved. And "never touches LinkedIn" describes a tool's architecture, not a magic shield: it means the tool adds zero risk on top of whatever you do yourself. That's the strongest claim any honest vendor can make — and the only version worth trusting is the one you can verify in the manifest.
The rule that keeps you safe forever
Tools will come and go, and every one will call itself "compliant." Skip the marketing and apply the location test: automation on linkedin.com = risk. Reading public search results elsewhere = fine. We keep our own full reasoning published on the account safety page — hold us to it, and hold every other tool to the same standard.