# WhatsApp OSINT Phone Lookup (`brilliant_gum/whatsapp-osint-lookup`) Actor Verify any phone number on WhatsApp instantly. Get profile picture, display name, carrier info, breach data checks, AI face analysis, and a composite risk score — all in one API call. No API keys needed. Supports up to 100,000 numbers per run. - **URL**: https://apify.com/brilliant\_gum/whatsapp-osint-lookup.md - **Developed by:** [Yuliia Kulakova](https://apify.com/brilliant_gum) (community) - **Categories:** Social media - **Stats:** 19 total users, 7 monthly users, 100.0% runs succeeded, NaN bookmarks - **User rating**: No ratings yet ## Pricing from $300.00 / 1,000 whatsapp lookup (fresh)s This Actor is paid per event and usage. You are charged both the fixed price for specific events and for Apify platform usage. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## WhatsApp OSINT Phone Lookup ![WhatsApp OSINT Phone Lookup](https://i.imgur.com/R708sn7.jpg) Turn any phone number into a full intelligence profile — in seconds. Verify WhatsApp presence, pull profile data, run AI face analysis, check data breaches, and get a composite risk score. All in one clean API call. --- ### What You Get Give us a list of phone numbers. We check each one against WhatsApp and return everything publicly available — profile picture, display name, status text, carrier info, breach database hits, AI face detection, and an automated risk score. **No manual work. No third-party API keys required for core features. Just clean JSON output.** --- ### Features #### ✅ WhatsApp Verification Instantly confirms whether a number is registered on WhatsApp and whether it's a personal or business account. Works on any country, any number format. #### 🖼️ Profile Picture URL Retrieves the direct WhatsApp CDN link to the profile picture — ready for download, storage, or further analysis. #### 👤 Display Name & Status Fetches the WhatsApp push name and about/status text when the account has them set. #### 📡 Carrier & Line Type Detection Identifies country, line type (Mobile, Fixed, VoIP) and mobile network code. Powered by Google's libphonenumber — no extra API key required. #### 🔐 Data Breach Check Scans known breach databases to see if the phone number has appeared in any data leaks. Returns breach source names, dates, and total hit count. #### 🤖 AI Face Analysis Downloads the profile picture and runs local AI detection to determine if a real face is present — plus estimated age range, gender, and dominant emotion. Runs entirely on-device, no external AI API needed. #### 🔁 Profile Picture Change Tracking Computes a perceptual hash (pHash) of the profile picture on every run. Automatically detects if the image has changed since your last lookup — perfect for monitoring over time. #### 🎯 Composite Risk Score Aggregates all available signals into a single score from **0 to 100**: | Score | Category | What It Means | |-------|----------|--------------| | 70–100 | `LOW_RISK` | Looks like a real, active person | | 40–69 | `MEDIUM_RISK` | Some signals missing or mixed | | 0–39 | `HIGH_RISK` | Likely fake, VoIP, or suspicious account | Factors include: WhatsApp registration, profile picture presence, display name, about text, account type, breach exposure, carrier type, and face detection result. --- ### Pricing Pay-per-event — you only pay for what you actually use. | Event | Price | When Charged | |-------|-------|-------------| | WhatsApp lookup (fresh) | **$0.30** | Every number checked live | | WhatsApp lookup (cached) | **$0.05** | When result comes from cache | | Breach data hit | **$0.40** | Only when a breach is actually found | | Carrier lookup | **$0.10** | When `includeCarrier: true` | | Face analysis | **$0.20** | When `includeFaceAnalysis: true` | | Risk score | **$0.05** | When `includeRiskScore: true` | > 💡 **Example:** 1,000 numbers with carrier + risk score = ~$450 total > > Set a budget cap in Apify — the actor stops gracefully when the limit is hit. --- ### Input ```json { "numbers": ["+14155552671", "+447911123456", "+4930123456"], "includeProfilePic": true, "includeAbout": true, "includeCarrier": true, "includeLeaks": true, "includeFaceAnalysis": false, "includeRiskScore": true, "concurrency": 5, "timeoutMs": 30000 } ```` #### All Input Options | Field | Type | Default | Description | |-------|------|---------|-------------| | `numbers` | array | **required** | Phone numbers in E.164 format (e.g. `+14155552671`). Max 100,000 per run. | | `includeProfilePic` | boolean | `true` | Fetch profile picture URL | | `includeAbout` | boolean | `true` | Fetch about/status text | | `includeCarrier` | boolean | `false` | Get carrier and line type info | | `includeLeaks` | boolean | `false` | Check breach databases | | `includeFaceAnalysis` | boolean | `false` | AI face detection on profile picture | | `includeRiskScore` | boolean | `false` | Compute composite risk score (0–100) | | `preferCache` | boolean | `true` | Use cached results when available (faster & cheaper) | | `onlyCache` | boolean | `false` | Return only cached results, skip fresh lookups | | `concurrency` | integer | `5` | Parallel lookups (1–50) | | `timeoutMs` | integer | `30000` | Timeout per number in milliseconds | *** ### Output Each number produces one JSON record: ```json { "number": "+14155552671", "phoneInfo": { "regionCode": "US", "type": "MOBILE", "isValid": true, "formatted": { "e164": "+14155552671", "international": "+1 415-555-2671", "national": "(415) 555-2671" } }, "exists": true, "isBusiness": false, "pushName": "Alex", "urlImage": "https://pps.whatsapp.net/v/...", "about": "Available", "carrier": { "country": "United States", "regionCode": "US", "lineType": "MOBILE", "isMobile": true }, "leakedData": { "found": true, "sources": ["Collection #1 2019", "Facebook 2021"], "totalResults": 2, "entries": [...] }, "faceAnalysis": { "hasFace": true, "faceCount": 1, "age": { "min": 25, "max": 32 }, "gender": "female", "dominantEmotion": "neutral" }, "profilePicHash": { "hash": "10101100110010...", "changed": false }, "riskScore": { "score": 75, "category": "LOW_RISK", "factors": [ { "factor": "WhatsApp registered", "impact": 10 }, { "factor": "Profile picture set", "impact": 5 }, { "factor": "Display name set", "impact": 5 }, { "factor": "Mobile number", "impact": 5 } ] }, "source": "fresh", "fetchedAt": "2026-05-05T09:00:00.000Z" } ``` #### Output Fields Reference | Field | Description | |-------|-------------| | `number` | E.164 formatted phone number | | `phoneInfo` | Country, type, all formatted variants | | `exists` | `true` if registered on WhatsApp | | `isBusiness` | `true` if it's a WhatsApp Business account | | `pushName` | Display name (if visible) | | `urlImage` | Profile picture URL (WhatsApp CDN) | | `about` | About/status text (if set) | | `carrier` | Country, region, line type, mobile flag | | `leakedData` | Breach results: found, sources, count, entries | | `faceAnalysis` | AI results: hasFace, age, gender, emotion | | `profilePicHash` | pHash + `changed` flag for tracking | | `riskScore` | Score 0–100, category, contributing factors | | `source` | `fresh`, `cache`, `not-found`, or `error` | | `fetchedAt` | ISO 8601 timestamp | *** ### Use Cases 🔍 **Fraud Prevention** — Flag VoIP numbers, breach-linked identities, and accounts with suspicious signals before they become a problem. 📋 **Lead Verification** — Confirm that numbers from your lead lists are real, active WhatsApp accounts before spending on outreach. 🛡️ **Security Research** — Monitor a set of numbers over time — detect when profile pictures change, new breach data appears, or accounts go dark. 📊 **CRM Enrichment** — Enrich your contact database with WhatsApp status, carrier type, profile pictures, and risk scores automatically. 🔎 **OSINT Investigations** — Build a quick intelligence profile on any phone number from a single API call. *** ### First-Time Setup 1. Set `WA_PHONE_NUMBER` in environment variables (your number without `+`, e.g. `14155552671`) 2. Run the actor — it saves a QR code to the Key-Value Store 3. Scan the QR in WhatsApp: **Settings → Linked Devices → Link a Device** 4. Done — the session is saved automatically and reused on every future run > The actor connects as a standard linked device, just like WhatsApp Web. Your phone and existing sessions are not affected. *** ### FAQ **Do I need any API keys?** No. Core features — WhatsApp verification, profile picture, display name, about text, carrier info, face analysis, pHash tracking, and risk score — all work with zero API keys. **What if a number isn't on WhatsApp?** It returns `exists: false` with `source: not-found`. Enrichment fields are skipped and not charged. **How accurate is the face analysis?** The model runs locally on the profile picture. If the photo is a logo, cartoon, or distant shot, it will return `hasFace: false` — this is expected and correct. **Can I process large lists?** Yes — up to 100,000 numbers per run. Tune `concurrency` (up to 50) to balance speed and resources. **Is data cached between runs?** Yes. Set `preferCache: true` (default) to reuse recent results and reduce cost. Use `onlyCache: true` to only return cached data without any fresh lookups. **How fast is it?** A single lookup takes 1–3 seconds. At concurrency 10, expect ~300–500 numbers per minute. # Actor input Schema ## `numbers` (type: `array`): List of phone numbers to look up (E.164 format recommended, e.g. +14155552671). Max 100,000 numbers per run. ## `preferCache` (type: `boolean`): Use cached data when available (faster). ## `onlyCache` (type: `boolean`): Only return cached results, never make fresh lookups. ## `includeProfilePic` (type: `boolean`): Fetch WhatsApp profile picture URL. ## `includeAbout` (type: `boolean`): Fetch WhatsApp about/status text. ## `includeLeaks` (type: `boolean`): Check for data breaches containing this phone number. ## `includeCarrier` (type: `boolean`): Get carrier and line type information. ## `includeFaceAnalysis` (type: `boolean`): Run AI face detection on profile picture (age, gender, emotion). Runs locally. ## `includeRiskScore` (type: `boolean`): Compute composite risk score (0-100) based on all available data. ## `concurrency` (type: `integer`): How many numbers to process in parallel. ## `timeoutMs` (type: `integer`): Timeout per number lookup in milliseconds. ## Actor input object example ```json { "numbers": [ "+14155552671" ], "preferCache": true, "onlyCache": false, "includeProfilePic": true, "includeAbout": true, "includeLeaks": false, "includeCarrier": false, "includeFaceAnalysis": false, "includeRiskScore": false, "concurrency": 5, "timeoutMs": 30000 } ``` # Actor output Schema ## `results` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "numbers": [ "+14155552671" ] }; // Run the Actor and wait for it to finish const run = await client.actor("brilliant_gum/whatsapp-osint-lookup").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "numbers": ["+14155552671"] } # Run the Actor and wait for it to finish run = client.actor("brilliant_gum/whatsapp-osint-lookup").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "numbers": [ "+14155552671" ] }' | apify call brilliant_gum/whatsapp-osint-lookup --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=brilliant_gum/whatsapp-osint-lookup", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "WhatsApp OSINT Phone Lookup", "description": "Verify any phone number on WhatsApp instantly. Get profile picture, display name, carrier info, breach data checks, AI face analysis, and a composite risk score — all in one API call. No API keys needed. Supports up to 100,000 numbers per run.", "version": "1.0", "x-build-id": "W490KAKCEGAkfUpd5" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/brilliant_gum~whatsapp-osint-lookup/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-brilliant_gum-whatsapp-osint-lookup", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/brilliant_gum~whatsapp-osint-lookup/runs": { "post": { "operationId": "runs-sync-brilliant_gum-whatsapp-osint-lookup", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/brilliant_gum~whatsapp-osint-lookup/run-sync": { "post": { "operationId": "run-sync-brilliant_gum-whatsapp-osint-lookup", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "required": [ "numbers" ], "properties": { "numbers": { "title": "Phone Numbers", "minItems": 1, "maxItems": 100000, "type": "array", "description": "List of phone numbers to look up (E.164 format recommended, e.g. +14155552671). Max 100,000 numbers per run.", "items": { "type": "string" } }, "preferCache": { "title": "Prefer Cache", "type": "boolean", "description": "Use cached data when available (faster).", "default": true }, "onlyCache": { "title": "Only Cache", "type": "boolean", "description": "Only return cached results, never make fresh lookups.", "default": false }, "includeProfilePic": { "title": "Include Profile Picture", "type": "boolean", "description": "Fetch WhatsApp profile picture URL.", "default": true }, "includeAbout": { "title": "Include About", "type": "boolean", "description": "Fetch WhatsApp about/status text.", "default": true }, "includeLeaks": { "title": "Include Leak/Breach Data", "type": "boolean", "description": "Check for data breaches containing this phone number.", "default": false }, "includeCarrier": { "title": "Include Carrier Info", "type": "boolean", "description": "Get carrier and line type information.", "default": false }, "includeFaceAnalysis": { "title": "Include Face Analysis (AI)", "type": "boolean", "description": "Run AI face detection on profile picture (age, gender, emotion). Runs locally.", "default": false }, "includeRiskScore": { "title": "Include Risk Score", "type": "boolean", "description": "Compute composite risk score (0-100) based on all available data.", "default": false }, "concurrency": { "title": "Concurrency", "minimum": 1, "maximum": 50, "type": "integer", "description": "How many numbers to process in parallel.", "default": 5 }, "timeoutMs": { "title": "Timeout (ms)", "minimum": 5000, "maximum": 120000, "type": "integer", "description": "Timeout per number lookup in milliseconds.", "default": 30000 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```