Mass likes and comments are one of the most effective ways to attract attention to an account on Instagram, TikTok, and other social networks. However, the algorithms of these platforms have learned to recognize such activity and block accounts for suspicious behavior. This is especially critical for SMM specialists who manage dozens of client accounts and cannot afford to lose even one profile.
In this article, we will discuss why social networks ban for likes and comments, what safe activity limits exist, how to properly warm up accounts, and how to set up anti-detect browsers with proxies to work with 20-50 profiles without getting blocked.
Why social networks block for mass likes and comments
Social networks are constantly fighting against spam and artificial activity inflation. Mass likes and comments are seen as attempts to manipulate algorithms and gain undeserved reach. Platforms invest millions of dollars in developing systems to detect such behavior because spam degrades user experience and reduces trust in the platform.
Instagram, owned by Meta, especially aggressively combats automation following scandals with bots in 2018-2019. The platform has closed access to its API for third-party mass following and liking services, and machine learning algorithms have learned to recognize behavior patterns typical of bots and automated actions.
TikTok employs even stricter measures: the platform analyzes not only the number of actions but also behavioral factors — scrolling speed, pauses between actions, cursor movements. If an account behaves "too perfectly" or monotonously, it raises suspicions.
VKontakte and Odnoklassniki have also implemented anti-spam systems, although they are less strict compared to Western platforms. However, mass likes from a single IP address or device will still lead to temporary function blocks.
How algorithms detect suspicious activity
Modern spam detection systems analyze dozens of parameters simultaneously. Understanding these mechanisms will help build a strategy for safe account management.
Frequency and volume of actions
The first and most obvious parameter is the number of likes and comments per unit of time. If a new account likes 100 posts in 10 minutes, it will immediately raise suspicions. Algorithms compare your activity with typical behavior of regular users and identify anomalies.
It is important to understand that limits are not fixed — they depend on the account's age, activity history, number of followers, and engagement level. A fresh account with no followers may get banned after just 20-30 likes, while a warmed-up profile with 5,000 followers can handle 200-300 actions per day.
Behavior patterns
Social networks analyze not only the quantity but also the patterns of actions. If you like a post every 3 seconds with perfect accuracy — this is a clear sign of a bot. A regular person takes breaks of varying lengths, gets distracted, reads posts, and switches between tabs.
Activity during nighttime (from 2 to 6 AM local time of the account's time zone) or continuous operation for several hours without breaks looks particularly suspicious. Algorithms know that real people sleep and take breaks.
Technical parameters
Platforms collect a vast amount of technical data about each user: IP address, browser fingerprint, screen resolution, installed fonts, time zone, system language, browser version, and operating system. If 10 different accounts operate from one IP address or device — this is a red flag.
Instagram and TikTok also analyze cookies, localStorage, and other browser identifiers. Even if you change your IP through a proxy but use the same browser without clearing data, the platform will link the accounts together. This is why it is critically important to use anti-detect browsers like Dolphin Anty or AdsPower for multi-accounting.
Content quality and target audience
Algorithms analyze what content you like. If your account is dedicated to cooking but you are mass liking posts about cryptocurrencies — this looks unnatural. It is also suspicious when an account only likes new posts (published in the last 5-10 minutes) or only content from specific hashtags.
Safe limits for likes and comments on each platform
Activity limits are not exact figures but ranges that depend on many factors. Below are conservative recommendations based on the experience of SMM specialists and data from closed communities.
| Platform | New account (0-7 days) | Warmed-up account (7-30 days) | Mature account (30+ days) |
|---|---|---|---|
| Instagram (likes) | 20-30 per day | 100-150 per day | 200-300 per day |
| Instagram (comments) | 5-10 per day | 20-30 per day | 50-70 per day |
| TikTok (likes) | 30-50 per day | 150-200 per day | 300-500 per day |
| TikTok (comments) | 10-15 per day | 30-50 per day | 70-100 per day |
| VKontakte (likes) | 50-80 per day | 200-300 per day | 500-700 per day |
| VKontakte (comments) | 15-20 per day | 50-70 per day | 100-150 per day |
Important note: these figures are the maximum safe limits. It is better to start with 50-60% of the indicated values and gradually increase activity while monitoring the platform's response. If the account receives a warning or temporary function restriction — immediately reduce activity for 2-3 days.
Activity distribution throughout the day
It is equally important HOW you distribute actions throughout the day. Do not perform all 200 likes in one hour — spread them out over the entire day with breaks. An optimal scheme for a mature Instagram account:
- 9:00-10:00 — 30-40 likes (morning activity)
- 13:00-14:00 — 40-50 likes (lunch break)
- 18:00-20:00 — 60-80 likes (evening prime time)
- 21:00-22:00 — 30-40 likes (before bed)
Between activity sessions, take breaks of at least 2-3 hours. Within each session, like posts with intervals of 15-45 seconds, varying the time. Add "humanity": sometimes scroll through a post without liking it, visit the author's profile, watch Stories.
Account warming: step-by-step guide
Warming up (warm-up) is the process of gradually increasing the activity of a new account, simulating the behavior of a real user. Proper warming takes 14-30 days but reduces the risk of blocking by 70-80%.
Days 1-3: Minimal activity
The first three days after registration are the most critical. Platforms pay special attention to new accounts because spammers usually start activity immediately after creating a profile.
- Complete your profile: avatar, description, link (if applicable)
- Follow 5-10 accounts in your niche
- Like 10-15 posts from recommendations
- Watch 5-7 Stories
- DO NOT comment, DO NOT send Direct messages
- Spend 15-20 minutes in the app per day, divided into 2-3 sessions
Days 4-7: Gradual increase
Start increasing activity, but very gradually — no more than 20-30% per day.
- Increase the number of likes to 20-30 per day
- Follow another 10-15 accounts
- Leave 2-3 comments (simple: emojis or "Cool!")
- Post your first post or video (for Instagram/TikTok)
- Time in the app: 20-30 minutes per day
Days 8-14: Active growth
By the second week, the account no longer looks completely new. You can increase activity to 50-60% of target values.
- Likes: 50-80 per day (Instagram), 100-120 per day (TikTok)
- Comments: 10-15 per day
- Follows: 20-30 per day
- Post content regularly: 3-4 posts per week
- Start responding to comments on your posts
Days 15-30: Reaching operational metrics
By the end of the first month, the account is considered warmed up and can operate at full capacity.
- Likes: 150-200 per day (Instagram), 300-400 per day (TikTok)
- Comments: 30-50 per day
- Follows/unfollows: 50-70 per day
- Regular posts: 1 post per day or 4-5 per week
Critically important: if you are using the same proxy server for multiple accounts, warm them up at different times with a gap of at least 2-3 days. If 10 accounts from one IP start the same activity simultaneously — all of them will come under suspicion.
Setting up anti-detect browsers for safe work
Anti-detect browsers are specialized programs that allow you to create isolated profiles with unique digital fingerprints. Each profile appears as a separate device with unique browser, operating system, and hardware parameters.
For working with social networks, three solutions are most popular: Dolphin Anty (optimal price/quality ratio), AdsPower (more automation features), and Multilogin (the most expensive but with maximum protection). We will discuss the setup using Dolphin Anty as it is the most widely used among SMM specialists.
Step 1: Creating a browser profile
Open Dolphin Anty and click "Create Profile." The main parameters to configure are:
- Profile name: use a clear naming system, e.g., "Instagram_Fitness_Account1"
- Operating system: choose the same OS as your proxy. If using mobile proxies, select Android or iOS
- User Agent: leave automatic selection or choose a popular option (Chrome on Windows 10 is the most common)
- Screen resolution: use typical resolutions (1920x1080, 1366x768, 1440x900). Avoid exotic options
- Language and time zone: must match the geolocation of your proxy. If the proxy is from Moscow, set it to ru-RU and UTC+3
Step 2: Configuring the proxy in the profile
In the "Proxy" section, choose the type of connection (HTTP, SOCKS5, or Mobile). For working with Instagram and TikTok, residential proxies or mobile ones are recommended — they have IPs of real users and are rarely blacklisted.
Enter the proxy details:
- IP address or host
- Port
- Username and password (if authentication is required)
After entering, click "Check Proxy." Dolphin Anty will show the real IP, geolocation, and connection speed. Ensure that the geolocation matches your expectations.
Important: one proxy = one social network account. Never use the same IP for multiple profiles simultaneously. This is the most common cause of chain bans, where blocking one account leads to all others being blocked.
Step 3: Configuring the fingerprint
Fingerprint is a set of browser and system parameters by which websites identify the device. Dolphin Anty automatically generates a unique fingerprint for each profile, but you can configure it manually:
- WebRTC: disable or mask it to prevent leaking the real IP
- Canvas: enable substitution, each profile will generate a unique Canvas fingerprint
- WebGL: similarly to Canvas, enable unique substitution for each profile
- Fonts: use the standard font set for the selected OS, do not add exotic fonts
- Geolocation: allow geolocation detection via the proxy IP
Step 4: First launch and check
Save the profile and launch the browser. Before logging into the social network, make sure everything is set up correctly:
- Open whoer.net or 2ip.ru — check that the IP matches your proxy
- Ensure there are no DNS and WebRTC leaks
- Check the time zone and language of the browser
- Open pixelscan.net or browserleaks.com — ensure the fingerprint is unique
Only after a successful check proceed to log in to the social network. If you are creating a new account — do it directly in the anti-detect browser, without switching between devices.
Choosing and configuring proxies for multi-accounting
Choosing the right type of proxy is critically important for safe work with social networks. Different types of proxies have different levels of trust from the platforms.
Comparison of proxy types for social networks
| Proxy Type | Trust Level | Speed | Price | Recommendation |
|---|---|---|---|---|
| Datacenter | Low | High | Low | Not recommended for Instagram/TikTok |
| Residential | High | Medium | Medium | Optimal for most tasks |
| Mobile | Very high | Medium-low | High | Ideal for Instagram, TikTok |
| ISP (static residential) | High | High | Medium-high | Good price/quality compromise |
Why datacenter proxies are not suitable for social networks
Datacenter proxies (server proxies) have IP addresses that belong to hosting companies, not regular Internet providers. Instagram, TikTok, and Facebook maintain databases of such IPs and automatically apply heightened security measures to them.
If you attempt to access Instagram with a datacenter IP, the platform may require additional verification (phone confirmation, captcha) or immediately block the account for suspicious activity. The only scenario where datacenter proxies can still be used is on VKontakte and Odnoklassniki, where moderation is less strict.
Residential proxies — the golden mean
Residential proxies use IP addresses of real home users connected to regular Internet providers (Rostelecom, MTS, Beeline, etc.). From the perspective of the social network, such an IP looks completely legitimate — as if an ordinary person is logging in from home.
Residential proxies come in two types: rotating (IP changes every 5-30 minutes) and static (IP is assigned to you for a long period). For working with social networks, static residential proxies are needed because frequent IP changes will raise suspicions with the platform.
The optimal usage scheme: one static residential IP for one social network account for the entire lifespan of the account. This simulates the behavior of a real person who always logs in from home with the same IP.
Mobile proxies — maximum protection
Mobile proxies use IP addresses from mobile operators (MTS, Megafon, Beeline, Tele2). This is the most trusted type of proxy for social networks because most Instagram and TikTok users log in from mobile devices.
The feature of mobile proxies is dynamic IP change. Mobile operators do not have static IP addresses; they change periodically (usually every few hours or upon reconnection). But this does not raise suspicions with social networks because this is how mobile Internet works for all regular users.
Mobile proxies are especially effective for Instagram and TikTok, where mobile traffic accounts for 80-90% of the total. If you are working with expensive accounts or managing client profiles where blocking cannot be tolerated — mobile proxies are essential.
How many proxies are needed for work
The basic rule: one proxy for one account. If you manage 20 Instagram accounts for clients — you need 20 separate proxies. Trying to save money by using one IP for multiple accounts will lead to chain bans: the platform will link the accounts together, and blocking one will result in all others being blocked.
Exception: if you manage several accounts of the same brand (for example, the main company account + regional branches), you can use one proxy. But these must be officially linked profiles, not an attempt to hide multi-accounting.
Safe automation of likes and comments
Automation is a double-edged sword. On one hand, it saves dozens of hours when working with multiple accounts. On the other hand, improper automation leads to mass blocks. Let's discuss how to automate processes safely.
Built-in tools of anti-detect browsers
AdsPower and Dolphin Anty have built-in automation tools via extensions or API. For example, in AdsPower, you can create a script (RPA — Robotic Process Automation) that will automatically execute a sequence of actions: open Instagram → go to the "Explore" section → like → wait 20-40 seconds → next post.
The advantage of built-in tools is that they operate at the browser level, mimicking the actions of a real user: mouse movements, scrolling, clicks. This is harder to detect than direct requests to the social network's API.
Third-party automation services
There are specialized services for social media automation: Jarvee (closed in 2021), Ingramer, Combin, SocialCaptain, and others. Most of them work by emulating a mobile application or web version.
Important warning: after 2020, Instagram significantly tightened its fight against automation. Many popular services stopped working or caused mass blocks. If you still use third-party tools, be sure to:
- Check reviews from the last 3-6 months — the situation changes quickly
- Start with minimal activity settings (20-30% of limits)
- Use proxies and anti-detect browsers even when working through the service
- Test on a test account for at least 2 weeks before using it on working profiles
Manual work with assistants
The safest but labor-intensive option is browser extensions that simplify manual work but do not fully automate it. For example, extensions that add hotkeys for likes (press L — like, press J — next post).
Such tools speed up work by 2-3 times compared to regular mouse clicks, while maintaining the human factor: you control the speed, pauses, and content selection. The risk of blocking is minimal.
Setting safe automation parameters
If you use any automation tool, be sure to configure the following parameters:
- Random intervals: not 30 seconds between likes, but 20-45 seconds with random distribution
- Reading simulation: add pauses of 5-15 seconds on some posts, as if you are reading the text
- Skipping posts: do not like every post in a row, skip 20-30% randomly
- Variety of actions: not only likes but also viewing Stories, visiting profiles, saving posts
- Working hours: activity only during daytime (9:00-23:00), no actions at night
- Breaks: take breaks of 1-2 hours between activity sessions
Common mistakes that lead to blocks
Even experienced SMM specialists sometimes make mistakes that cost them accounts. Let's discuss the most common blunders and how to avoid them.
Mistake 1: Too fast a start
The most common mistake of newcomers is to start mass activity immediately after creating an account. "Why wait two weeks if you can start working right now?" — this logic leads to a ban in the first few days.
Solution: always warm up new accounts for at least 7-14 days. If you need to launch a project urgently, it is better to buy already warmed-up accounts (aged accounts) that are 1-3 months old with an activity history.
Mistake 2: Using one proxy for all accounts
Trying to save on proxies is a direct path to chain bans. Platforms easily link accounts by a common IP address, and blocking one profile automatically spreads to all others.
Solution: strictly adhere to the rule "one proxy = one account." This is not an area where you should cut costs. Losing even one client account will cost more than a year of proxy payments.
Mistake 3: Ignoring time zones
If your proxy shows a geolocation of Moscow, but you are liking posts at 4 AM Moscow time — this is suspicious. Regular people are asleep at this time.
Solution: set the activity schedule according to the time zone of the proxy. If you work with different regions, use a task scheduler that considers the local time of each account.
Mistake 4: Identical comments
Copying the same comment text on dozens of posts is a classic sign of spam. Instagram and TikTok instantly detect this and block the commenting function.
Solution: create a database of 50-100 comment variations and use them randomly. Add variability: emojis, different lengths, synonyms. Even better — use spintext (a technology for generating unique text variations).
Mistake 5: Switching between devices
Logged into an account from an anti-detect browser on a computer, then from a phone, then back to the browser but with a different fingerprint — the social network sees this as suspicious activity or account hacking.
Solution: each account should have one permanent "device" (anti-detect browser profile with a fixed fingerprint and proxy). If you need to log in from a phone — use a mobile proxy from the same operator and region.
Mistake 6: Mass actions after a break
The account does not...