What X's Help Center says about locked accounts, which connection checks are worth ten minutes, and what to do next.
1. Suspected automated behavior. If X thinks the account behaves like a bot, it may lock it and ask you to pass a captcha. While the account is in this state, people who visit your profile may see a message that it has displayed unusual activity.
2. A possible compromise. X says that when it detects suspicious behavior and the account may have been compromised, you see a message that the account is locked for security purposes, with instructions to restore access and change the password.
3. Aggressive following or engagement. If an account follows, likes, reposts or quotes at a pace that breaks the X Rules, X may limit its features for a set time instead of locking it. In that state you can choose to wait it out or verify by phone or email, and repeated violations can lead to a permanent suspension.
| Item | Locked | Limited |
|---|---|---|
| What it means | X detected suspicious or automated behavior, or a possible compromise, and needs you to confirm you own the account | Some features are restricted for a stated time after aggressive following or engagement, or a possible rule violation |
| What you do | Log in, select Start, and verify by phone, email or captcha, then continue to X | Log in and follow the message: continue in the limited state, or verify by phone or email when X offers it |
| What others may see | A notice on your profile that the account has displayed unusual activity | Your past posts may be visible to followers only, and the account may be filtered out of search and notifications |
Source: X Help Center, “Help with locked or limited account”, read 15 November 2026. The page does not mention IP address or location as a cause.
Run the curl test below with the details from My assets. A JSON reply with an IP means the proxy works; an error means fix the proxy before you look at X.
Expected result JSON with the exit IP and country.
Open the account only from the IP you have assigned to it. Do not try the account on several IPs to see which one works, and do not log in from two places at once.
X's developer guidelines allow automation only through the official API, and list browser scripting and scraping as prohibited. If a tool, a bot or a bulk-posting extension runs on the account, switch it off before you verify.
X says that in a limited state you may be able to post from a desktop browser but not from the app. Check both before you decide the account is fully locked.
Choose the method X offers: phone, email or captcha, using a phone number or email you control. X says the phone number you enter will be associated with the account. If no code arrives, wait a few minutes and check spam, junk and social folders.
Before continuing Chrome and Edge do not support SOCKS5 with a username and password, so use an HTTP asset in a browser.
If you cannot log in, or you believe the lock or limit is an error, contact X support. Give the account name and what you did, and do not open a second account to replace it.
# Does the proxy answer, and which country is the exit in?
curl -x http://LOGIN:PASSWORD@HOST:PORT https://ipinfo.io/json
# SOCKS5 asset (port 3333)
curl -x socks5h://LOGIN:PASSWORD@HOST:PORT https://ipinfo.io/jsonExample only: replace LOGIN, PASSWORD, HOST and PORT with the values from My assets.
Check Do you control the phone number or email on the account?
Fix Log in, select Start and verify by phone, email or captcha.
Stop when If the code does not arrive after a few minutes and a spam check, contact X support.
Check X says a limited state may allow posting from a desktop platform only.
Fix Follow the limited-state message on screen.
Stop when Do not retry from a different IP.
Check X says to contact its support team when you have no login access.
Fix Use X's support form with the account name and what you remember doing.
Stop when If you lost both the phone and the email, X says the only option may be a new account.
Check The proxy fails before X is reached.
Fix Follow the proxy address and port guide.
Stop when If curl also fails, send us a ticket with the order number.
An IP changes the address X sees. It does not unlock an account, shorten a limit or undo a decision. Only the steps X shows, or X support, do that.
X's developer guidelines allow multiple accounts only when each has its own non-duplicative purpose, and they list identical posting across accounts and non-API automation as prohibited. Give each account its own IP and its own purpose, and post through the official API if you automate.
For an account you open every day, a static ISP IP is the usual fit: it stays the same for the whole lease. One IP costs US$0.50 for 1 day or US$7.99 for 30 days (about US$0.27 a day, 7.99 ÷ 30), the same in every country. There is no free trial, and stock for each country is shown on the order page.
The X use-case page covers the full setup, including posting through the official API.
Open the static ISP page, choose the country and the term, keep the protocol on HTTP for a browser, and pay from the wallet.
Open My assets and copy HOST, PORT, USERNAME and PASSWORD. HTTP uses port 2222 and SOCKS5 uses port 3333 on proxy.proxy302.com.
Enter them in the browser profile you use for this X account only.
Open https://ipinfo.io/json through the proxy to confirm the country, then sign in.
X says it locks an account when it detects suspicious or automated behavior that may break the X Rules, or when the account may be compromised. It does not publish which exact signal triggered your lock.
X's Help Center page does not list IP address as a cause. Use one stable IP for the account and make sure no automation runs on it, but treat the verification X shows as the way to unlock.
Log in, look for the message, select Start and verify by phone, email or captcha, depending on what X shows. If you cannot log in, contact X support.
X's developer guidelines list multiple accounts for the same duplicative purpose as prohibited. Appeal through X support if you think the lock is a mistake instead of opening a replacement.
A table matching account logins, public pages and data collection to a plan; static ISP costs US$7.99 for 30 days.
Every working proxy is described by five basic fields: protocol, host address, port, login, and password.
One static IP per kept account: 10 accounts for 30 days cost US$79.90. Static versus rotating, and how to plan a batch.
Fixed static ISP proxies: a residential-grade IP that stays the same for the whole term. For social accounts, stores and AI tools. HTTP and SOCKS5.
View options and pricingOfficial documentation · Confirmed on:
Read on 15 November 2026: locked or limited accounts may be compromised or in violation of the X Rules; verification by phone, email or captcha; visitors may see an unusual-activity notice; limited accounts may be filtered from search and notifications; if you cannot log in, contact support; appeal by contacting support. The page does not mention IP address.
Official documentation · Confirmed on:
Read on 15 November 2026: the quick check asks whether you use only the official API, not scraping or browser automation; prohibited activities include identical content across accounts, non-API automation (browser scripting, scraping) and account farms (multiple accounts for the same duplicative purpose).
Official documentation · Confirmed on:
Read on 15 November 2026: no authentication methods are supported for SOCKSv5 in Chrome.
Product observation · Confirmed on:
Product facts file of the site, checked 10 November 2026: static ISP per-IP prices (1 day US$0.50, 30 days US$7.99), HTTP port 2222 and SOCKS5 port 3333, no free trial, same price in every country.
Create an account, top up once, then pick rotating residential, static ISP or datacenter IPs and have one running in your browser within minutes.
