Is a Binance P2P bot safe to use?

A bot that changes your P2P prices has access to your Binance account, so the question is fair. This guide covers what that access is and what to check before you trust any tool with it.

How a P2P bot gets access

Binance's standard API keys can read your P2P order history, but editing P2P ads isn't part of them. So P2P bots work through the same web session your browser uses when you log in on binance.com.

With P2P Trade Bot you log in once, in a Chrome window the bot opens, exactly as you would on the website, including your two-factor code. The bot keeps the session in its own folder on your computer or server. It is not sent anywhere else.

Compared with API keys this has one advantage: there is no key with trading or withdrawal rights sitting in a config file. It also has a cost: the session is as sensitive as a password, and you need to log in again when Binance ends it.

What a repricing bot should never do

A repricing tool needs to read the market and change the price of your ads. Nothing more. Check that it:

  • doesn't create or delete ads;
  • doesn't change amounts, payment methods or terms;
  • doesn't touch orders, chats or payments, and never releases crypto;
  • doesn't send your session or data to its maker.

P2P Trade Bot does none of those. It talks to Binance, and to Telegram if you connect your own bot. The Python source is included, so you or someone you trust can check.

Protect the session

  • Don't share the bot's data folder, in particular session/ and chrome-profile/. Nobody needs them for support; logs are enough.
  • On a server, keep the control panel behind HTTPS and a password.
  • If you think the session leaked, log out of all devices in your Binance security settings. That ends it everywhere.

Risks that remain

  • Pricing mistakes. A bot follows your settings exactly, including wrong ones. Always set a floor or ceiling, and start in simulation mode.
  • Binance's terms. Binance limits automated use of its website. Using any bot is your decision and your risk. Read the terms that apply to your account.
  • Website changes. When Binance changes its site, a bot can stop working until it is updated.

Checklist before running any P2P bot

  • Runs on your own machine or server
  • Needs no withdrawal rights
  • Only changes prices
  • Has hard price limits
  • Has a simulation mode
  • Its code can be inspected

Related: running a P2P bot on a VPS.