Instagram Profile Scraper No Login - Bio + Emails + 25 Fields

Deep Instagram profile dossier (25+ fields) without login or cookies - bio emails (MX-validated), phones, multi-link bios, engagement scoring.

Available as an Apify Actor. Pay-per-event. No login means no account bans, scales to bulk.

What does it do?

Takes an Instagram username and extracts a 25+ field dossier without requiring any auth: bio + bio emails (MX-validated at DNS layer), phone numbers, multi-link bio expansion (Linktree, Linkbio, Beacons), engagement quality score, account age estimate, tech stack inference from linked sites, cross-platform presence flags. Designed for B2B lead generation and OSINT investigation.

How is it different from apify/instagram-post-scraper (massively adopted, 96K users) or login-required scrapers?

25+ enrichment fields per profile including bio, MX-validated bio emails, multi-link bio expansion (Linktree / Linkbio / Beacons / Bento), engagement quality, account age, tech stack.

When should I use it?

• B2B lead generation - extract MX-validated emails from Instagram bios for outbound
• Influencer research - score engagement quality before paid partnership
• Due diligence on a brand or founder account
• Fraud investigation - flag suspicious accounts by age + activity pattern
• Cross-platform OSINT - map Instagram to other social profiles via link bio

What does it cost?

Pay-per-event:

Typical scan costs

• Single profile: $0.06
• Bulk 100 profiles: $5.01
• Bulk 1000 profiles: $50.01

You only pay for profiles actually delivered. A username that does not exist, an invalid entry (an email or a link pasted by mistake), or a profile Instagram blocks is recorded in the run summary but is never charged - no Profile Record event fires for it. If Instagram blocks every profile in a run, the run ends as failed and costs you nothing beyond the single Actor Start.

No login needed - and how to get even more (optional)

This actor works without any login. It loads each public profile in a real browser and reads the profile data Instagram embeds in the page - name, follower / following / post counts, bio, bio links, verified and business flags, external URL, profile picture. That is the default, and it needs nothing from you but usernames.

Recent posts (engagement rate, top posts, posting pattern) are not exposed to a logged-out browser. If you want those too, you can optionally supply your own Instagram session:

1. Open instagram.com logged in, DevTools (F12) > Application > Cookies > https://www.instagram.com.
2. Copy the sessionid value into the sessionCookie input (stored encrypted, never logged).

Use a secondary / throwaway account for sessionCookie. Automated use can get an Instagram account rate-limited. It returns only what you can already see logged in - it does not unlock private accounts you do not follow.

If a run comes back empty, the IP may be flagged - retry, set a proxyCountry, or plug a mobile proxy into customProxyUrl. Either way you are never charged for a profile that did not come back.

Which inputs does it take?

Every field except usernames has a working default, and usernames ships prefilled - so a run started with no changes succeeds.

What does the output look like?

Each dataset record:

{
  "recordType": "profile",
  "username": "exampleuser",
  "fullName": "Example User",
  "status": "public",
  "isPrivate": false,
  "isVerified": false,
  "isBusinessAccount": true,
  "category": "Creator",
  "detectedNiche": "food",
  "followerCount": 12500,
  "followingCount": 350,
  "postCount": 184,
  "biography": "DM for collabs hello@example.com +91 98765 43210 linktr.ee/exampleuser",
  "extractedFromBio": {
    "emails": ["hello@example.com"],
    "phones": ["+919876543210"],
    "whatsappLinks": []
  },
  "mxValidatedEmails": [{ "email": "hello@example.com", "hasValidMx": true }],
  "externalUrl": "https://linktr.ee/exampleuser",
  "multiLinkExpanded": { "childLinkCount": 2, "childLinks": ["https://example.com", "https://x.com/exampleuser"] },
  "accountAge": { "estimatedJoinDate": "2023-05-01", "ageBucket": "2-3 years" },
  "engagement": { "engagementRate": 0.031, "engagementQuality": "high" },
  "crossPlatform": { "twitter": { "exists": true, "url": "https://x.com/exampleuser" } },
  "profileUrl": "https://www.instagram.com/exampleuser/"
}

The dataset holds exactly one row per profile actually delivered - nothing else - so your charge equals the profile count. The run summary (counts of scraped / private / not-found / blocked profiles, invalidInputsSkipped, totals, duration) is written to the run's OUTPUT record, not the billed dataset. Blocked, not-found, and invalid entries appear only in that summary, never as charged rows.

Common questions

Q: Does it scrape posts? No, profile-only. Chain to apify/instagram-post-scraper for posts. This actor is built for the profile dossier.

Q: Does it scrape followers list? No. Followers list requires login auth and is out of scope.

Q: Will my account be banned? In anonymous mode there is no account involved, so no. If you supply a sessionCookie for reliable results, that account carries the usual automation risk - use a secondary/throwaway account, not your main one. The cookie is stored encrypted and never logged.

Q: What about private accounts? Private profiles still return - you get the public metadata Instagram exposes (username, full name, follower/following/post counts, bio, verified and business flags, external link) with isPrivate: true and status: "private". Post-derived fields (engagement, posting pattern, top posts) come back empty because Instagram does not expose a private account's posts without a follow. Private profiles are charged as normal deliveries.

Q: I passed 10 usernames but got fewer rows. Why? Rows are only produced for profiles actually retrieved. Check the run summary (the OUTPUT record, also shown on the run's Output tab): profilesNotFound, profilesBlocked, and invalidInputsSkipped list exactly what did not come through, and none of those were charged. If many are blocked, Instagram is rate-limiting the IP pool - re-run with residential proxy on (the default) or fewer usernames per run.

Q: What counts as an invalid username? Anything that is not an Instagram handle: an email address, a link to another site, a blank entry, or a name over 30 characters. These are skipped, listed in invalidInputsSkipped, and never charged. You can pass either bare handles (zomato) or full profile URLs (https://www.instagram.com/zomato/) - both work.

About the maintainer (priority response within 1-2 hours)

Built and maintained by Anshuman Atrey (@AnshumanAtrey).

• Purple-team security researcher, 5x hackathon winner
• Co-founder of Project AISHA (AI cybersec SaaS) and The Drone Syndicate (autonomous defence drones)
• Author of the canonical OSINT actor portfolio on Apify Store: 12+ shipped actors covering email, phone, username, IP/domain, network, secret, social, LinkedIn, and Indian fintech OSINT

Custom feature requests shipped within 1-2 hours (priority)