Facebook Marketplace bots and monitors: what they do, what Meta allows, and the risks

Quick answer

On Facebook Marketplace, “bot” means one of four things: scripted scam messages, seller tools that auto-reply or relist, monitors that alert you to new listings, and scrapers that copy listings in bulk. Meta’s terms forbid automated data collection without its permission and sharing your password, and fast automated activity can get an account locked. Facebook’s own saved-search alerts carry none of that risk.

A watched Honda Civic search, with an alert soon after something new is posted. No password handed over.
The four kinds of Marketplace bot
KindWhat it doesUses your Facebook login?SpeedCostThe risk to you
Scam botsSend “Is this still available?”, then ask for an address or a codeNo, their own accountsInstantFree to the scammerMoney or an account, if you bite
Seller botsAuto-reply, relist, post in bulkYes, the seller’sInstantFree to monthlyThird-party tools act as you
Monitors and alert appsRe-run a search, report new listingsFacebook’s, your browser’s, or the company’sEvery minute to every hourFree to monthlyRises with speed and shared logins
ScrapersCopy listings into a sheet or databaseUsuallyAs fast as allowedFree code to paid dataBarred without Meta’s written permission

Names and prices are in our comparison of Facebook Marketplace alert apps. This page is about what Facebook allows.

Are there bots on Facebook Marketplace?

Some, but most robotic-looking messages come from people. Facebook offers “Is this still available?” as a ready-made message, so buyers tap it on five sofas at once and reply only to the seller who answers first. Since March 2026 it works the other way too: sellers can let Meta AI draft and send an automatic reply when someone asks whether an item is available. A fast, generic answer may be Facebook’s own tool.

Scam accounts give themselves away by what they want, not how fast they type. Walk away when a buyer or seller:

  • asks for your home address or email before anything about the item, usually just ahead of a fake courier or payment link
  • asks you to read back a code sent to your phone (the FTC calls sharing a code you didn’t request a scam, every time)
  • wants to move to WhatsApp, text or email, or sends a link to “confirm” a payment
  • answers instantly with text that ignores your question

Outside Facebook, Malwarebytes reported in October 2026 a phishing text pairing “Is this still available?” with a fake Marketplace listing in the recipient’s own name. Our guide to Marketplace scams covers each pattern, and is Facebook Marketplace safe has the wider picture.

What monitors, alert apps and scrapers actually do

A monitor reloads a saved search on a schedule and tells you about listings it hasn’t seen. A scraper copies listings into a spreadsheet or database. Where they load Marketplace from decides most of the risk.

Phone apps usually check on the company’s servers and push alerts to your phone, so they work with your laptop shut. Few say which account their system uses to read Facebook. Browser extensions use the browser you’re already signed in to, so nothing logs in as you from elsewhere. Self-hosted scripts run on your own machine with your details: the AI Marketplace Monitor docs say it may ask for your Facebook username and password, and always shows its browser window because Facebook may demand a CAPTCHA or security code at login.

Scrapfly, which sells scraping tools, reports that Meta’s Graph API doesn’t expose public Marketplace listings and that Marketplace search sends anonymous, cookie-less visitors to a login page. So most tools need a signed-in session, and they break when Facebook changes its pages. The most-starred Marketplace scraper on GitHub hasn’t been updated since April 2024.

What Meta’s terms say

Three of Meta’s documents cover bots, and they are blunt.

Meta’s rules on automated access
DocumentIn effect sinceWhat it says
Terms of Service1 January 2025“You may not access or collect data from our Products using automated means (without our prior permission)”. Don’t share your password or give others access to your account.
Automated Data Collection Terms7 October 2024Collection by automated or programmatic tools needs “Meta’s express written permission” first.
Community Standards, SpamCurrentNo posting or engaging “either manually or automatically, at very high frequencies”.

For breaking them, Meta says it may suspend or permanently disable your access, with or without notice.

Scrapers often cite a court case. In January 2024 a federal judge in San Francisco ruled that Bright Data’s logged-out scraping of public Facebook and Instagram data didn’t breach Meta’s terms, and Meta dropped the rest of its case the next month. It is a narrow ruling from a district court, about logged-out access. Marketplace search pushes visitors to log in, and once you’re logged in, the terms you agreed to apply. This isn’t legal advice.

The real risk is to your account

Nobody is likely to sue a buyer over a saved search. The practical risk is losing access. Meta’s help centre says that if it sees unusual activity on your account, it might lock it for security. To get back in, you open Facebook, choose Get started and follow the steps, which can include confirming who you are.

Meta doesn’t publish what counts as unusual, and there are no public numbers on bans over alert tools. Its rules point at the likely suspects: a login from a server in a city you’ve never visited, a shared password, the same page loaded every few seconds around the clock, and one message sent to many sellers. The mildest outcome is a “confirm it’s you” page; the worst is losing Marketplace or the whole account.

Apps keep data of their own, too: Marketplace Monitor’s App Store privacy label lists contact info and identifiers as linked to you. If you have tried a bot or alert app, check your account:

  1. See where you’re logged in. In Accounts Center, open Password and security, then Where you’re logged in. Log out of any session you don’t recognize.
  2. Remove connected apps. Under Settings & privacy, Settings, Apps and websites, remove anything you no longer use.
  3. Change your password if you ever typed it into a third-party tool.

Sniping and auto-message bots

The riskiest tools message every new listing the moment it appears, often with a canned offer. They act from your account, and sending one message to dozens of sellers is exactly the high-frequency behaviour Meta’s spam rules describe. They also work badly: sellers ignore a pile of identical “would you take 50?” messages and answer the buyer who asked something real. A locked account costs more than a missed deal. See how to negotiate on Marketplace and how to handle lowball offers.

Seller bots: auto-reply and relisting

Sellers use tools that answer messages, repost old listings and post in bulk. Third-party versions act on the seller’s account, usually with broad access. Facebook’s built-in Meta AI reply needs no outside access. Buyers see the side effect: the same item bumped to the top of newest-first, again and again. Sift marks those with a Reposted badge and can hide them altogether; see hiding sold and already-seen listings.

How to pick a safer alert tool

Start with what’s free. Facebook’s saved-search alerts involve no third party, and our guide to Marketplace notifications has the setup. Pair them with a search sorted by newest first. If you still want a tool:

  1. Never hand over your password. No alert tool needs your Facebook password or session cookies.
  2. Ask where it runs. Its servers, your browser or your computer, and whose login it uses.
  3. Ask how often it checks. And whether it backs off when Facebook asks you to log in again.
  4. Skip auto-messaging. It is the part most likely to trip the spam rules.
  5. Read the privacy policy for what it stores about you and your searches.
  6. Note the trial terms. Many free trials roll into a paid plan; set a reminder to cancel.
  7. Check the last update. Facebook changes often, and an unmaintained tool stops working.

The Marketplace extensions roundup applies these questions to browser tools, and resellers will find sourcing advice in the flipping guide.

Building your own scraper or bot

If you came from “facebook marketplace bot github”, expect four things. You’ll need to be logged in. Facebook will throw CAPTCHAs and security codes at the login. Your code will break when Facebook changes its markup. And the terms above apply: ScrapeCreators notes that the AI Marketplace Monitor project’s own legal notice says Facebook’s terms prohibit unauthorized automated collection. If you go ahead, use an account you can afford to lose, keep checks to a few an hour, and never automate messages, offers or purchases.

Where Sift fits

Sift is a free browser extension for Facebook Marketplace, with no account to make. It works right in Chrome (and Edge and Brave) on a computer and takes about a minute to set up. It isn’t a bot service: it never asks for your Facebook password, and it never sends messages, makes offers or buys anything. Its filters only change what you see on pages you open.

Alerts are the one thing it does in the background. They only start once you press Watch on a search, and nothing is ever sent to sellers on your behalf.

Sift is built to keep your account safe: if Facebook ever asks you to confirm it’s you, Sift pauses alerts and tells you. Each new listing runs through your filters first, so you only hear about the ones worth a look. Alerts arrive as desktop notifications, even with the tab closed, and with Sift Pro they go to your phone by Telegram, ntfy or email. To get alerts for a search:

  1. Open a search on Facebook Marketplace, or on Kijiji once you switch on Kijiji in Sift.
  2. Click the Sift icon and press Watch. The first time, Chrome asks whether Sift may show notifications.
  3. Leave it to Sift. It lets you know soon after something new that passes your filters is posted.

Sift also puts a red chip such as Pay first or Off-site contact on listings that ask for money before you see the item or want to talk outside the site. More on new-listing alerts, Kijiji alerts and Sift and your privacy.

A sofa listing that wants an e-transfer to hold it and a text off Facebook. Sift flags both.

Questions people ask

Are there bots on Facebook Marketplace?

Yes, though fewer than it feels. Most “Is this still available?” messages are people tapping Facebook’s ready-made message, and some instant replies are Meta AI answering for the seller. Worry about accounts that ask for your address, phone number or a code, push the chat to WhatsApp or text, or send a link.

Is it against Facebook’s rules to use a Marketplace bot or scraper?

Without Meta’s permission, yes. Its Terms of Service bar accessing or collecting data by automated means without prior permission, and its Automated Data Collection Terms require express written permission. A 2024 ruling found logged-out scraping of public data didn’t breach the terms, but most Marketplace tools run logged in. This isn’t legal advice.

Can using a Facebook Marketplace monitor get my account banned?

It can put your account at risk. Facebook locks accounts when it sees unusual activity, and Meta can suspend or disable access for breaking its terms. The risk grows when you share your password, when a server signs in as you, when checks run every few seconds and when a tool messages sellers.

What is the best Facebook Marketplace monitor app?

It depends on speed and where you want the alert. Paid phone apps such as Swoopa, Flipify and DealScout check often and ping your phone. Sift is a free extension that filters before it alerts, on your computer free and on your phone with Sift Pro. We make Sift, so our alert app comparison lists prices without picking a winner.

Is there a free Facebook Marketplace monitor?

Yes. Facebook’s own saved-search alerts are free, though Facebook decides when they arrive. Sift, a free browser extension for Facebook Marketplace, checks the searches you watch on Facebook and Kijiji in the background and lets you know soon after something new is posted, on your desktop free or on your phone with Sift Pro. It runs in Chrome, Edge and Brave on a computer.

Why do I get so many “Is this still available?” messages?

Facebook offers it as a one-tap message, so asking costs a buyer nothing. Many tap it on several listings and follow up only with whoever answers first, and a few are scam accounts checking that you reply. Answer with a pickup time and one detail about the item.

Why is a Marketplace bot asking for my address or a code?

Because it is almost always a scam. An address or email request tends to come just before a fake courier, shipping or payment link. A request to read back a code sent to your phone is the verification-code scam. Never share a code you didn’t ask for, and stop replying.

Does Facebook Marketplace have an API?

Not one for reading listings. Scrapfly, a scraping vendor, reports that Meta’s Graph API doesn’t expose public Marketplace listings, and Meta requires express written permission for automated collection. That is why Marketplace scrapers imitate a person browsing, usually signed in, and break whenever Facebook changes its pages.

Sources

  1. 01Meta Terms of Service (effective 1 January 2025)
  2. 02Meta Automated Data Collection Terms (effective 7 October 2024)
  3. 03Meta Transparency Center Community Standards, Spam
  4. 04Meta Help Centre Unlock your Facebook account
  5. 05Meta Help Centre Log out of Facebook on another device
  6. 06Meta Help Centre Remove an app or game that you’ve added to Facebook
  7. 07Meta Newsroom New Meta AI tools on Facebook Marketplace make selling faster and easier (March 2026)
  8. 08TechCrunch Court rules in favor of web scraper Bright Data, which Meta had used and then sued (January 2024)
  9. 09TechCrunch Meta drops lawsuit against web-scraping firm Bright Data (February 2024)
  10. 10Scrapfly Best Facebook Marketplace scrapers on GitHub (October 2026)
  11. 11AI Marketplace Monitor documentation Usage
  12. 12ScrapeCreators Facebook Marketplace alerts (September 2026)
  13. 13Apple App Store Marketplace Monitor
  14. 14Malwarebytes Facebook Marketplace phish uses your name and number (October 2026)
  15. 15Federal Trade Commission The Google Voice verification code scam