Buy an X account for DM outreach? What 500 DMs a day means
X documents one DM limit: 500 a day, for every account. Here is what that means if you buy an X account for DM outreach, and what to buy instead.
X publishes exactly one Direct Message limit. Its limits page says, verbatim, "The limit is 500 messages sent per day." That number is the same for an account with 400 followers and an account with 400,000. X publishes no separate DM figure for Premium, no figure for Premium+, and no hourly cap at all. So if you plan to buy an X account for DM outreach, the first thing to understand is what you are not buying: capacity.
Every outreach-tool blog on this query quotes a tier ladder instead: a higher daily allowance once you subscribe, a higher one again at the top tier, and an hourly sub-cap for everyone else. We went looking for the X page that carries those numbers. There is not one. None of them appears in any X document we could verify. The only published figure is 500 per day, and it applies flat.
That correction rewrites the buying decision. If throughput is fixed, a bigger account cannot send more messages than a small one, so the money you spend on followers buys something else entirely: the impression a stranger forms in the two seconds after they tap your profile. This article prices that impression using our own transaction data and our directory of 17.9 million X accounts, and says plainly where the ceiling on this strategy sits.
Key takeaways
- X documents one DM limit, 500 messages sent per day, and publishes no per-tier or hourly figures. A larger account buys you zero extra sending capacity.
- Unsolicited bulk messaging is named in X's Authenticity policy as spam. The policy also prohibits buying and selling accounts, and states that "for severe violations, accounts will be permanently suspended at first detection."
- The blue checkmark a prospect sees costs $8 a month. Across a 357,360-account directory sample, 24.90% of accounts in the 10K-100K band carry it and 49.86% of 100K+ accounts do, so above a certain size the checkmark stops being a differentiator at all.
- The median X account we sold in the 1K-5K band cleared $100 (N=57). The median in the 50K-100K band cleared $200 on three sales. Ten times the audience did not cost ten times the money, and it delivers exactly the same 500 DMs.
- Only 2.68% of X accounts with a non-empty bio publish an email address (N=295,138). X is a conversation channel, not a lead list you can export.
- 56.6% of live X inventory on our marketplace is priced under $200 (205 active listings), which is where almost every credible outreach account sits.
- 23 X accounts with 100,000+ followers have been listed on our marketplace and none has sold. The expensive end of this market is close to a one-way door.
X documents one Direct Message limit, 500 a day, and it does not rise with your follower count
The operative sentence is on X's limits page: "The limit is 500 messages sent per day." We fetched that page on 14 August 2026 and confirmed it across repeated reads. There is no second number. X does not publish a Premium DM allowance, a Premium+ allowance, or an hourly ceiling.
Anyone selling you a growth stack based on a DM tier ladder is quoting a number X has never published. That matters commercially, because the tier ladder is the entire justification for buying a big Premium account as an outreach asset. Remove it and the justification goes with it.
What X actually publishes about the limits that touch outreach
| What buyers ask about | What X publishes | Source page |
|---|---|---|
| Direct Messages per day | "The limit is 500 messages sent per day." | X limits page |
| DM limit for Premium or Premium+ | No figure published | None exists |
| Hourly DM cap | No figure published | None exists |
| DMs to accounts that do not follow you | "you may need to verify your phone number" | DM FAQ |
| Same message or link to many accounts | "may be reported as spam activity", and you may need to wait at least 30 minutes before sending again | DM FAQ |
| Original posts per day, unverified | "50 original posts and 200 replies per day for unverified accounts" | X limits page |
| Follows per day and in total | 400 per day; 5,000 total, after which the cap moves with your follower ratio | X follow limit page |
| Email address changes | "4 per hour" | X limits page |
| Likes per day | No figure published | None exists |
Two more details from the same limits page are worth carrying into your planning. Limits count across devices, so a second phone does not give you a second allowance. And X says it may lower limits "during periods of heavy site usage", which means the published number is a ceiling and not a guarantee.
One further wrinkle: the same page carries a legacy line stating that "the post limit of 2,400 updates per day is further broken down into semi-hourly intervals", alongside the 50-posts-and-200-replies line for unverified accounts. X reconciles neither, and it does not label 2,400 as a Premium allowance. If a vendor tells you Premium unlocks 2,400 posts a day, they are filling in a gap X left blank.
Unsolicited bulk DMs break X's rules before they break your account
Sending unsolicited messages in bulk is a rules violation on X, not a grey-area tactic. X's Authenticity policy (stamped "Last Updated: April 2025") defines spam to include sharing content "in a bulk, duplicative, irrelevant or unsolicited manner that disrupts people's experience", and separately names "repeatedly posting identical or nearly identical posts in a duplicative manner popularly known as 'Copypasta.'" X's own Direct Message FAQ makes the messaging case explicit: sending duplicate DMs to multiple accounts, "including sending the same link to multiple accounts", may be reported as spam activity.
If your plan requires the same message to reach hundreds of strangers, the plan is against the rules of the platform you are buying into, and no amount of account age changes that. This article will not tell you how to make bulk sending survive detection, because that is a way to lose an asset you paid for, and because it is the wrong product for a real business anyway.
The enforcement ladder you are exposed to
The Authenticity policy sets out what X can do: anti-spam challenges, URL denylisting, restricting reach, temporarily limiting feature access, requiring profile modifications, and permanent suspension. The escalation language is blunt: "For severe violations, accounts will be permanently suspended at first detection." X's general enforcement menu adds read-only mode, which temporarily limits posting, reposting and liking.
Temporary locks have their own documented triggers, and they read like a description of a badly run outreach campaign: X names "suspicious automated behavior that violates the X Rules", "aggressive following or aggressive engagements (such as, like, repost, and quote)", and automated or scripted activity. X does not publish how long a lock lasts, saying only that it varies with the nature of the violation.
The rule that also covers the purchase itself
The same policy that bans bulk unsolicited messaging is the one that bans account trading. Verbatim, it prohibits "trading, buying, selling (either through monetary or virtual compensation) or soliciting access of X accounts, including the temporary or permanent transfer or sales of accounts, username or X (e.g. 'pay for affiliation' schemes) products". X's Terms of Service state that the Rules and Policies "are part of the User Agreement", so the ban is contractually binding even though it is not printed in the Terms themselves.
We sell accounts and we will still say it directly: you are taking platform risk that X documents and does not quantify. Our safety centre covers the parts of that risk we can control, and the parts we cannot.
If you buy an X account for DM outreach, you are buying credibility and not throughput
Throughput is fixed at 500 a day for everyone. So the only variable a purchase can move is what happens in the seconds after a stranger sees your name in their message requests and taps your profile. That is a credibility purchase, and it should be priced like one.
Think about the actual sequence. A prospect gets a request from a handle they do not recognise, and they tap it. In roughly two seconds they process: is there a checkmark, does the bio describe a real business, are there recent posts, does the follower count look plausible against the following count. Every one of those signals is buyable, and only one of them, the follower count, is what sellers price on.
The panel that changed the calculus in November 2025
X now shows an "About this account" panel on profiles. According to TechCrunch's reporting of the rollout, which began in mid-November 2025 and was visible to some users globally by 21 November 2025, the panel displays the join date, the account's location, how many times the account has changed its username and when the most recent change happened, and how the app was downloaded. X's own help documentation confirms the location is inferred: "X infers this information based on your aggregated IP addresses", and the panel "is part of your account profile which is publicly available if your account is set to public".
A prospect can now see that the handle messaging them changed its name recently, without using any tool. For an outreach buyer that is the single most important change of the last year. You buy an account, you rebrand it to your company name, and the panel records a username change with a recent date. The rollout is partial and X's documentation does not say the panel can be hidden, so plan on the assumption that a careful prospect can see it.
There is a second, compounding effect. X documents that changes to your profile photo, display name or username "will result in a temporary loss of the blue checkmark until your account is validated as continuing to meet requirements". So the moment you rebrand a bought account for outreach, you can lose the checkmark and gain a username-change flag at the same time, which is precisely the wrong pair of signals to show a cold prospect. Our sibling guide on reading an X account's real history before you pay covers the panel from the due-diligence side.
The checkmark your prospect sees costs $8 a month, not $850
The blue checkmark is a subscription, and X says so in one of the most quotable sentences on its help site: "The blue checkmark means that the account has an active subscription to X Premium and meets our eligibility requirements. It does not mean that the account has been ID verified." Anyone treating a blue check as identity proof is misreading it, and that includes prospects, which is exactly why it works as a credibility signal.
| Tier | Monthly (USD) | Annual (USD) | Checkmark |
|---|---|---|---|
| Basic | $3 | $32 | No |
| Premium | $8 | $84 | Yes, blue |
| Premium+ | $40 | $395 | Yes, blue |
| Premium Business (Basic) | $200 | $2,000 | Gold, organizations |
| Premium Business (Full Access) | $1,000 | $10,000 | Gold, organizations |
Prices are from X's help pages, checked 14 August 2026, and X notes they "may vary by location, applicable taxes, and your payment method fees". Only organization accounts qualify for the gold checkmark, "with rare exceptions for personal brand businesses reviewed case-by-case".
How rare is a checkmark at the size you are considering?
Across a 357,360-account sample of the 17.9 million X accounts in the PlayerSells directory (a set that skews toward accounts with some public visibility, not every account ever registered), the checkmark rate climbs steeply with size.
| Follower tier | Accounts in sample | Blue verified | Protected (private) |
|---|---|---|---|
| Under 1K | 217,802 | 5.60% | 10.15% |
| 1K-10K | 110,547 | 13.53% | 4.99% |
| 10K-100K | 25,750 | 24.90% | 3.34% |
| 100K+ | 3,261 | 49.86% | 1.78% |
Read that as a buyer. Under 1,000 followers a checkmark makes you unusual, since only 5.60% of that group has one. At 100K+, half the neighbourhood has one and it stops distinguishing you at all. The cheapest credibility upgrade available to an outreach account is $8 a month, on an account you already own. If a listing's whole pitch is "verified", you are being asked to capitalise an $8 subscription into a purchase price. Our note on what verification is actually worth when you buy an account takes that apart, and if you want the badge on day one, verified X accounts for sale is the filter to browse.
A silent account reads as a shell no matter how many followers it has
The profile check a prospect performs is mostly a check for signs of life. A 30,000-follower account whose last post was in February looks worse than a 2,000-follower account that posted this morning, because the second one is obviously operated by a human who cares.
Here is the posting workload that sits behind a credible-looking account, from the same directory sample.
| Follower tier | Median lifetime posts | Median posts per year of life |
|---|---|---|
| Under 1K | 934 | 130.3 |
| 1K-10K | 5,906 | 660.4 |
| 10K-100K | 8,150 | 871.2 |
| 100K+ | 14,884 | 1,301.3 |
The median account in the 10K-100K band posts 871.2 times a year, which is about 2.4 posts every single day. That is the cadence your bought account will be measured against by anyone who scrolls it, and it is the cadence you inherit the moment you take ownership. A founder who buys a 40,000-follower account and then posts twice a month has bought a museum piece, and the prospect who checks the timeline before replying will see exactly that.
This is the strongest argument for buying small in an outreach context. An account in the 1K-10K band has a median of 660.4 posts a year, a workload one person can plausibly continue. The 100K+ band's 1,301.3 posts a year is a full-time content operation. Our sibling article on the first 90 days after you buy an X account lays out the week-by-week version of that handover.
Audience composition beats follower count for every outreach use case
A follower count tells you nothing about whether the audience contains your buyers. For outreach the audience matters twice: followers can message you back without a request, and the audience is the evidence a prospect uses to decide whether you are credible in their world.
The language problem nobody prices
Among directory accounts with 10,000 or more followers (N=29,013), the language mix is not what a US-focused agency assumes.
| Language | Share of 10K+ accounts |
|---|---|
| English | 45.82% |
| Unknown | 14.56% |
| Japanese | 9.10% |
| Spanish | 7.48% |
| Arabic | 4.39% |
| Portuguese | 3.07% |
| Turkish | 1.79% |
| French | 1.72% |
| Chinese | 1.30% |
| Korean | 1.10% |
Fewer than half of the large accounts in our sample post primarily in English. If you sell B2B software to US buyers, a large account whose audience reads Japanese or Turkish is not a channel, it is a decoration you paid a premium for. Filter for the market before the number, which is why US X accounts are a separate inventory from the global one.
Categories are mostly blank, so you have to read the account yourself
78.60% of directory accounts with 10K+ followers carry no category label at all. Of the labelled remainder, news is 3.35%, politics 2.42%, sports 2.31%, crypto 2.12% and business 1.52%. The blank rate is the story: automated niche verification is not available at scale, so somebody on your team has to open the account, read 30 recent posts, and check whether the replies come from people who look like your customers.
One numeric red flag is worth carrying into that review. Among directory accounts with 1,000 or more followers (N=138,122), the median follower-to-following ratio is 3.99, the 25th percentile is 1.27, and 16.73% follow more people than follow them. That last group is the follow-back growth signature. An account with 5,000 followers that follows 6,000 people assembled its audience through follow churn, and those followers are not going to reply to your pitch. Run the numbers with our free engagement rate calculator before you make an offer, and use the audience finder tool to see who is actually posting about your category.
What an outreach-grade account costs, and what is actually in stock
Here is what X accounts have really sold for on our marketplace between 16 March and 13 August 2026, restricted to sold listings with 100 or more followers. These are closed transactions, not asking prices.
| Follower tier | N sold | Median price | 25th to 75th pct | Median $ per 1K |
|---|---|---|---|---|
| Under 1K | 15 | $15 | $12 to $29 | $41.55 |
| 1K-5K | 57 | $100 | $35 to $125 | $43.05 |
| 5K-10K | 13 | $85 | $70 to $95 | $11.23 |
| 10K-50K | 14 | $150 | $143 to $288 | $13.22 |
| 50K-100K | 3 | $200 | $140 to $350 | $3.43 |
| 100K+ | 0 sold | - | - | - |
Treat the 50K-100K row as directional only, since it rests on three sales. The pattern across the rest is clean: price per thousand followers collapses from $43.05 in the 1K-5K band to $13.22 in the 10K-50K band. Buyers do not pay linearly for reach.
For an outreach buyer the important comparison is the middle two rows. A 1K-5K account cleared a median $100. A 10K-50K account cleared a median $150. An extra $50 buys roughly ten times the audience and exactly zero extra DM capacity. If the audience is the right audience, that $50 is well spent. If it is not, you have paid for a number.
What is on the shelf today
| Price band | Live X listings |
|---|---|
| Under $50 | 50 |
| $50 to $200 | 66 |
| $200 to $1,000 | 45 |
| $1,000 to $5,000 | 27 |
| $5,000+ | 17 |
That is 205 active X listings priced today, and 56.6% of them sit under $200. The outreach account you actually want is almost certainly in the bottom two bands, which is why X accounts under $500 is a more useful browse for a B2B buyer than the premium filters. If you sell developer tools or software, tech X accounts for SaaS marketing is the shelf to start on.
One number to keep in your pocket while you shop: sellers of unsold 10K-50K listings ask a median $475 while sold accounts in that same band cleared a median $150. The sticker price is not the market price. Our sibling guide on what you should actually pay for an X account in 2026 works through the full ask-versus-clear picture before you open a negotiation.
Liquidity dies above 50K followers, so a big account is close to a one-way purchase
If you are spending company money, ask whether you can get it back. Our sell-through data says the answer depends almost entirely on size, and not in the direction most buyers expect.
| Follower tier | Listed | Sold | Sell-through |
|---|---|---|---|
| Under 1K | 47 | 15 | 31.9% |
| 1K-5K | 130 | 57 | 43.8% |
| 5K-10K | 46 | 13 | 28.3% |
| 10K-50K | 72 | 14 | 19.4% |
| 50K-100K | 21 | 3 | 14.3% |
| 100K+ | 23 | 0 | 0.0% |
23 accounts with 100,000 or more followers have been listed on our marketplace and not one has sold. The liquid part of this market is the 1K-5K band, where 43.8% of listings find a buyer. If the outreach experiment fails after a quarter, a $100 account in the liquid band can be re-listed with a realistic chance of clearing. A $6,000 listing in the top band, on our evidence, sits.
A tier you can exit is a different asset from one you cannot, and that should shape the budget conversation with whoever signs the cheque. Our sibling guide on which follower tier you should actually buy covers the exit question in full, including the negotiation data: two thirds of our completed X deals closed at exactly the asking price, while buyers who did negotiate opened at a median 83.3% of ask.
Only 2.68% of accounts publish an email, so X is a conversation channel and not a lead list
A recurring fantasy in this category is that a big X account is a shortcut to an email list. It is not, and the directory numbers are unambiguous. Among accounts with a non-empty bio (N=295,138), 2.68% publish an email address and 0.68% mention Telegram or "DM for".
Turn that into a working number. If you identify a thousand genuinely relevant prospects on X, the bio field will hand you contact details for a small fraction of them. The rest are reachable only inside the platform, subject to the same 500 a day everyone else has.
Scraping your way around it is not available either
X's Terms of Service prohibit accessing or searching the service "by any means (automated or otherwise) other than through our currently available, published interfaces", with a parenthetical that crawling or scraping the Services in any form, for any purpose, without prior written consent is expressly prohibited. That is the April 2026 version of the Terms for users outside the EU, UK and EFTA. There is also a cautionary precedent: after hiQ Labs established that scraping public data is not access "without authorization" under the US Computer Fraud and Abuse Act, the parties settled in December 2022 with a stipulated consent judgment carrying a $500,000 judgment against hiQ, liability for trespass to chattels and misappropriation for breaching the user agreement, and a permanent injunction requiring deletion of the scraped data. Not a crime, still an expensive loss.
The practical read: build your prospect list from public research and your own CRM, and treat X as the place you have a conversation rather than the place you harvest one. This is general information, not legal advice, and you should ask your own counsel about your jurisdiction.
Automated DM sending has a published price list, and paying it does not buy permission
As of August 2026 the X API is priced pay-per-usage: "The X API uses pay-per-usage pricing. No subscriptions - pay only for what you use." The model was announced on 6 February 2026 and legacy Basic plans were auto-migrated after 1 June 2026, so any article describing Free, Basic and Pro tiers is out of date.
| Operation | Published price |
|---|---|
| Read: Users, DM Events, Following/Followers | $0.010 per resource |
| Read: Posts, Lists, Spaces, Communities, Notes | $0.005 per resource |
| Read: Likes, Mutes, Blocks | $0.001 per resource |
| Read: your own data | $0.001 per resource |
| Write: DM and user-interaction requests | $0.015 per request |
| Write: post creation | $0.015, or $0.200 if the post contains a URL |
Resources are deduplicated within a 24-hour UTC window, and pay-per-usage plans are capped at 3 million Post reads per monthly billing cycle. So automation now has a computable unit cost, which is genuinely useful for deciding that it is not worth doing.
A price list is not a permission slip. The Authenticity policy's bulk and unsolicited messaging language applies no matter which interface the message leaves through, and X's documented lock triggers include automated or scripted activity. Paying $0.015 per DM request does not convert a spam campaign into a compliant one.
The permission you would be handing a third-party tool
If you are evaluating an outreach product, look at the access level it asks for. X documents three OAuth permission levels, and the top one is "Read, write, and Direct Message access", which lets an app "send Direct Messages for you, view Direct Messages you've sent and received". X's own security guidance is that you "should be cautious before giving third-party applications access to your account", and that a third party with password access "have complete control of your account".
We are not naming or linking tools in this category. The buyer-protection point is simpler: on a bought account, a tool with DM read access can also read the message history you inherited from the seller, which is a problem most outreach buyers never think about.
The disclosure rules reach your DMs, not only your ads
This is general information, not legal advice. Consult a qualified professional about your own situation. That said, three published rules bear directly on cold outreach from a bought account, and none of them cares whether the message was an ad.
Material connection disclosure
The FTC Endorsement Guides, 16 CFR 255.5, require that a connection between an endorser and the seller of an advertised product "that might materially affect the weight or credibility of the endorsement", where the audience would not reasonably expect it, "must be disclosed clearly and conspicuously". If your bought account posts or messages in a way that endorses a product you are paid to promote, the connection has to be disclosed.
Fake influence indicators reach the buyer, not just the seller
The FTC's Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465, took effect on 21 October 2024. Section 465.8 makes it an unfair or deceptive practice for anyone to "purchase or procure fake indicators of social media influence that they knew or should have known to be fake and that materially misrepresent their influence or importance for a commercial purpose". The definitions in 465.1 cover followers, views, likes, shares and reposts, and define fake indicators to include those generated by bots or by accounts not associated with a real individual, or by hijacked accounts.
Read that against an outreach campaign. If you buy an account whose followers are bot-inflated and then use that follower count to look influential to prospects for a commercial purpose, 465.8(b) reaches you as the buyer. The current civil penalty is $53,088 per violation under 16 CFR 1.98, and there is no 2026 inflation adjustment, so the 2025 amount stands. The FTC's first case over selling fake influence indicators, against Devumi, ended in a $2.5 million judgment against the CEO, suspended on payment of $250,000, plus a ban on selling social media influence. In the EU, the Unfair Commercial Practices Directive's Annex I point 23c blacklists misrepresenting social endorsements outright, with no case-by-case unfairness test.
This is the strongest reason to audit follower quality before you buy an outreach account rather than after. Our guide on how to check if an X account has real followers is the practical version of that audit.
Automated messages and the California bot law
California's B.O.T. Act, Business and Professions Code sections 17940 to 17943, effective 1 July 2019, makes it unlawful to use an undisclosed bot to deceive a person "to incentivize a purchase or sale of goods or services in a commercial transaction". An automated DM sequence sent to California residents without disclosure sits squarely in the territory that statute was written for.
You cannot see whether a DM was delivered, so stop tuning the number you cannot measure
X publishes no delivery metric for Direct Messages. There is no documented delivery receipt, no dropped-request counter, and no dashboard that tells you whether a message request reached a human. Any vendor selling you a "deliverability score" for X DMs is modelling something X does not expose.
What X does document is friction, not visibility. Sending DMs to accounts that do not follow you may require phone verification. Duplicate messages or the same link to many accounts may be reported as spam, and you may need to wait at least 30 minutes with no further attempts before you can send again. Those are the observable states. Everything else is inference.
The one claim to be sceptical of
The most repeated claim in the DM-tool corpus is that message requests to non-followers require a Premium subscription and are silently dropped without one. We could not verify any X page that says this. The gate X's DM documentation actually names for messaging accounts that do not follow you is phone verification. Treat the Premium-gating claim as vendor folklore until X publishes otherwise.
What you can measure
Owner-side analytics are real. X Analytics, gated behind X Premium, shows 28-day impressions, engagement rate, profile visits, follower growth, audience demographics and top posts. For outreach, profile visits matters most, because it proxies how many people looked you up after seeing your name. It is still a proxy for curiosity, not for delivery. Note also that X defines engagement rate as engagements divided by impressions; engagements divided by followers is an analyst construct, not an X metric.
Treat replies as your only real metric. Not sends, not opens, not any tool's invented deliverability figure. If 40 targeted messages produce three conversations, the campaign works. If 400 produce none, you have a targeting problem no account purchase will fix.
What low-volume outreach looks like when the cap is fixed at 500
The compliant version of this play is smaller than most agencies want to hear, and it is the only version worth writing about. Because the cap does not scale, the leverage has to come from relevance and from being a real participant on the platform, not from volume.
- Build the prospect list before you buy anything. If you cannot name 100 specific accounts you want to talk to, the problem is targeting, and an account purchase will not solve it.
- Write each message individually. X's documentation names duplicate messages and the same link sent to multiple accounts as reportable spam activity, so templated blasting is a rules problem and not a throughput optimisation.
- Be visible in public before you appear in private. Replying usefully to a prospect's posts is ordinary platform behaviour, and it means your name is not cold when the request arrives.
- Finish the profile first: real bio, real link, current photo, recent posts. Our free bio optimizer makes the bio do work the DM should not have to.
- Verify the phone number on the account, since X documents that messaging accounts that do not follow you may require it.
- Keep the account's existing character. Ripping a bought account's identity out in week one triggers the username-change flag and the temporary checkmark loss described earlier.
- Do not send a link in the first message to a stranger. X documents that accounts may be filtered from search for posting lots of duplicate links, and its DM FAQ names repeated identical links as a spam signal.
If that ramp is too slow to hit a pipeline target, that is the honest signal to spend the budget elsewhere. X Ads is the sanctioned way to reach strangers at volume, and X documents the bar: the advertising account must be verified through X Premium for individuals or Verified Organizations for businesses, cannot be suspended or deactivated, and needs non-GIF profile and header photos plus "a functional, live URL in your bio that is not gated". Being offboarded from X Ads, X notes, "is not the same as being suspended from X".
The handover details that break an outreach account specifically
Generic transfer advice covers passwords and 2FA. An outreach account has three extra failure modes that a general checklist will not catch.
You inherit the seller's inbox
X's data archive documentation confirms that a user's archive contains their profile information, posts, Direct Messages, media, follower and following lists, and their address book. When you take over an account, that message history comes with it. Those DMs are personal data belonging to third parties who never agreed to share them with you, and the "purely personal or household activity" carve-out in EU data protection law will not cover a commercial account sold commercially. If you operate in the EU or UK, raise this with counsel before the handover.
The seller's old inbox gets told
X documents that "each time the email address associated with your X account is updated, we will send an email notification to the previously-used email address alerting you of this change". So the seller learns the moment you take the email. That is a feature during a clean handover and a liability if the seller is not clean. Related and often missed: changing the password logs out active sessions, but X states explicitly that it "does not automatically log the account out of X for iOS or X for Android applications". You have to revoke access under Apps in settings.
Sessions, tokens and the tool the seller left connected
Under Settings and "Apps and sessions", X shows all active login sessions with the location and time of login, and lets you log out of individual sessions or all other sessions at once. Do that on day zero and revoke every connected third-party app while you are there, especially any with Direct Message access. X's caveat: logging out a session prevents further actions from it, but "it may not delete data (e.g., Direct Messages) that was previously cached on the device while the session was active".
Set up two-factor authentication immediately. X documents three methods: text message, authentication app, or security key. Text-message 2FA has been restricted to paying subscribers since 20 March 2023, so an authenticator app or a security key is the practical choice, and you should store the backup code X issues at setup. The full sequence lives in our X account transfer ownership checklist, and our escrow process holds the money until the handover is complete. Across 175 completed escrow deals the median time from deal creation to completion was 24.0 hours, so a clean handover is a same-day event.
Three buyer profiles, and who should actually buy an X account for DM outreach
The right answer differs by what you sell and who you sell it to. Here is how we would advise each of the three profiles that come to us most often.
| Profile | Budget | What to buy | Why |
|---|---|---|---|
| Solo founder, first outreach channel | Under $150 | Nothing, or a 1K-5K account in your exact niche | Median clear in that band is $100 (N=57) and sell-through is 43.8%, so the mistake is cheap and reversible |
| Agency running client outreach | $150 to $600 | One 5K-50K account whose audience matches one client's ICP | Median clear $85 to $150; the cap is 500 a day per account regardless, so buy for fit and not for size |
| Company wanting volume at any cost | $1,000+ | Nothing. Spend it on X Ads or another channel | 500 a day is the ceiling, bulk unsolicited DMs breach the Authenticity policy, and 100K+ listings have a 0.0% sell-through on our marketplace (23 listed) |
One directory figure puts the purchase in perspective. Across the sample, 8.118% of accounts have 10,000 or more followers and 0.913% have 100,000 or more. Fewer than one account in twelve clears 10,000. That rarity is real, and it is exactly what does not change your DM allowance by a single message.
What to check before you send an offer
Original email included, or the seller keeps a recovery path. Ratio sane, not follow-back inflated. Recent posting in the language your prospects read. Bio and link consistent with the story the seller tells. Handle-change history in the "About this account" panel matching what the listing claims. If those five hold, you can talk about price. If any one fails, walk, and remember that 8.2% of the 414 X listings we have handled were removed by our own moderation, which is the part of the market you never see. Accounts with the original email and aged X accounts are the two filters most outreach buyers should be using, and if you want the shell-account version of this warning, our sibling piece on bulk PVA accounts versus real-audience accounts spells out how the two products get sold under the same phrase.
Frequently asked questions
How many DMs can you send per day on X?
X documents 500 messages sent per day. That is the only DM figure X publishes, and it appears on X's limits page, which we fetched on 14 August 2026. X does not publish a separate limit for Premium or Premium+ subscribers, and it publishes no hourly cap. The limit counts across devices, and X notes it may lower limits during periods of heavy site usage.
Do Premium or Premium+ accounts get a higher DM limit?
Not according to anything X publishes. The tier ladder that circulates widely, with a raised daily allowance for Premium, a higher one again for Premium+, and an hourly sub-cap for everyone else, appears in no X document we could verify. Premium buys a checkmark, reduced ads and other features documented on X's Premium page, but no published increase in DM capacity.
Does buying an aged X account help cold outreach?
It can help credibility, and it does nothing for volume. An aged account with a real posting history and a plausible follower-to-following ratio survives the two-second profile check that decides whether a stranger reads your message. It sends exactly the same 500 messages a day as a week-old account. Buy age for the profile check, never for capacity.
Is cold DM outreach against X's rules?
Bulk unsolicited messaging is. X's Authenticity policy, stamped April 2025, defines spam to include sharing content "in a bulk, duplicative, irrelevant or unsolicited manner that disrupts people's experience", and X's DM FAQ names duplicate messages and the same link sent to multiple accounts as reportable spam activity. Individually written messages to a small number of relevant people are ordinary platform use.
Do you need X Premium to send message requests to people who do not follow you?
X does not document a Premium requirement for this. What X's Direct Message documentation does name is phone verification: "If you are sending Direct Messages to accounts that do not follow you, you may need to verify your phone number." We could not find an X page stating that requests from non-subscribers are dropped, so treat that widely repeated claim as unverified.
What size X account should I buy for B2B lead generation?
Small enough that the audience is genuinely relevant, which usually means 1K to 10K. Median sold price in the 1K-5K band was $100 across 57 sales on our marketplace, and 43.8% of listings in that band sell, so it is the liquid part of the market. Larger accounts give you the same 500 DMs a day and a much harder exit.
Can I automate X DMs with the API?
The API bills DM and user-interaction requests at $0.015 each as of August 2026, so it is technically priced. That does not make automated bulk outreach permitted: the Authenticity policy's rules on bulk, duplicative and unsolicited messaging apply regardless of the interface, and X lists automated or scripted activity among the behaviours that trigger a temporary lock. We do not recommend it and we do not link tools that do it.
Will buying an X account get me suspended?
Nobody can tell you the odds, because X publishes no detection or enforcement statistics for account trading. What X does publish is that trading accounts is prohibited under the Authenticity policy, and that "for severe violations, accounts will be permanently suspended at first detection". Treat every bought account as an asset that can be removed, and do not build a business that only works if it survives.
Is it illegal to buy an X account for outreach?
In the US, no statute criminalises the purchase itself; it is a breach of X's policy, enforced by X. The Department of Justice's charging policy states that a Computer Fraud and Abuse Act prosecution may not be brought on the theory that someone exceeded authorised access solely by violating a term of service on a public website. Criminal exposure attaches to how an account was obtained, such as theft or SIM-swap fraud. This is general information, not legal advice.
How fast does a purchase actually complete?
On our marketplace the median time from deal creation to completion is 24.0 hours across 175 completed escrow deals, with the 75th percentile at 32.3 hours. Roughly one funded deal in twenty ends in a dispute (10 disputes against 197 funded deals, 5.08%). The most common way a deal dies is not fraud but silence: 238 of 448 cancellations were automatic 24-hour inactivity closures.
Do the audience audit before you shortlist a single listing
The decision you are making is not "which account" but "which 100 people do I want to talk to, and whose audience already contains them". Write that list first. Then open the marketplace with a filter for language, posting recency and follower-to-following ratio, and ignore the follower number until those three pass.
When you are ready, browse X accounts for sale or go straight to the live marketplace listings, and hold the money in escrow until the handover is finished and you have logged out every other session. Buy for the profile check, not for the send volume. The send volume is 500 a day, and it always was.
Related Articles
Continue learning with these related guides.
What to do after buying a Twitter account: the first 90 days
What to do after buying a Twitter account, week by week: a 90-day operating plan built on real escrow data so you do not break the audience you paid for.
Tax on Selling a Social Media Account: A 2026 Guide for Sellers
Account sale income is taxable. Whether it counts as a capital gain or ordinary income changes everything. The rules, the records, and what to ask.
