Reddit's scraper crackdown: what the Dec 2026 rules mean for marketers

On December 2026 Reddit rolled out a new mod-facing policy titled "Protecting communities from scrapers and platform abuse", followed by a spez post that framed the change bluntly: "Humans welcome. Bots must wear name tags."

If you run any kind of Reddit distribution for a B2B product, you probably read the headline and immediately wondered whether your workflow is about to break. Short answer: probably not, if you were already operating like a real person. Longer answer below.

What actually changed

The policy targets three specific behaviors, and it helps to name them precisely instead of lumping them into "Reddit hates bots now":

1. Unverified scrapers hitting Reddit at high volume without a developer token. Reddit's edge is now more aggressive about blocking IPs that pull HTML or the public JSON endpoints at rates that look like scraping. If you've hit a Reddit URL recently and seen a "blocked by network security" page, that's the same system.
2. Automated accounts that don't disclose they're bots. Reddit is asking mods to enforce that any account taking automated actions must identify itself, either via a bot flair, a clear bio, or account-level metadata. This is the "name tag" line from spez.
3. Bulk data pulls for LLM training or resale. This is really the point of the whole policy. Reddit wants a clean line between (a) partners who pay for the firehose and (b) anonymous scrapers hoovering up content for model training. Everything else is downstream of that fight.

What the policy does not do:

• It does not ban third-party clients that authenticate properly.
• It does not ban scheduled posting or scheduled commenting done from a real account through the official API.
• It does not ban AI-assisted reply drafting.
• It does not ban low-volume DM outreach.
• It does not introduce a new karma floor or account-age gate for regular users.

Most of the noise online is conflating "Reddit is cracking down on bots" with "Reddit is cracking down on marketers." Those are two different sentences.

Who this actually affects

Three camps get hit, in order of pain:

Camp 1: unauthenticated scrapers (biggest hit)

If your workflow relies on hitting reddit.com/r/foo/new.json from a random IP with no token, expect that to degrade fast. Reddit's block page is already showing up on the JSON endpoints for a lot of IP ranges, including some cloud provider blocks. If you built a scraper around the no-auth JSON workflow, the fix is straightforward: register a developer app, get a token, and authenticate your requests. Reddit's official API rate limits are generous for legitimate use.

Camp 2: undisclosed bot accounts (medium hit)

If you have an account that posts automated updates (release notes, deal alerts, price trackers, digest posts) without any indication that it's automated, you're now at higher risk of being actioned. The fix is small: add "bot" to the username or bio, or use post flair when the sub allows it. Mods have always liked knowing which accounts are automated. Now they're being asked to enforce it.

Camp 3: humans doing Reddit marketing (basically no hit)

If you're a founder or growth marketer running a real account, replying to threads, posting occasionally, and using tools to help you find the right threads faster, none of this touches you. The policy is not aimed at you. You still need to follow each sub's self-promo rules, you still need to warm up new accounts (see the 30-day account warm-up playbook), you still need to avoid the specific behaviors Reddit has always cared about: vote manipulation, mass identical replies, brigading, account farming.

What to change in your workflow this week

Here is a simple decision path for auditing whatever you have running:

Rendering diagram…

Concrete moves worth doing before end of week:

• Swap unauthenticated JSON polling for the official API. Register at reddit.com/prefs/apps, generate a script-type app, use OAuth. Nothing about your monitoring workflow changes downstream, only the request headers.
• Label your bots. If you run a bot account that posts summaries or auto-replies, add "bot" to the username or a one-line bio disclosure. Some subs already require this.
• Keep human accounts human. Don't run scheduled posts on your personal account at 2:47 AM local time from a datacenter IP. Post from where you actually live, on a normal cadence, using either Reddit's own scheduling or a tool that respects rate limits.
• Review your action volume per account. If a single account is casting more than a few dozen votes or replies a day, that's a signal Reddit's anti-abuse systems have always cared about. The new policy just gives mods more tools to act on it.

The bigger picture: this is a fight about training data

Read the spez post carefully. The line "humans welcome" is doing a lot of work. Reddit's business model now depends on being the primary supplier of high-quality conversational data to Google and OpenAI. Anonymous scraping directly undercuts that revenue. Legitimate B2B marketing on Reddit does not. If anything, the new policy is good news for founders who play the long game: fewer bots posting garbage means more real threads with real intent, which is exactly the signal you want to be reading.

If part of your workflow is scanning subs for buyer-intent threads and replying quickly, Bazzly does that scanning against the authenticated API so you don't have to babysit it. But the underlying tactics don't change: find real threads, write real replies, respect each sub's rules.

What to watch next

A few things to track over the next 60 days:

1. Whether Reddit publishes updated developer terms. The current rate limits are workable, but a tighter tier for commercial use is possible.
2. Which subs adopt "bot must self-identify" rules. Expect the bigger tech subs to formalize this in their sidebars first.
3. Whether the block page starts showing up for logged-in users on legitimate third-party clients. So far it hasn't, and that's the tell that this is aimed at scrapers rather than tools.

The headline version of this policy sounds scary if you're new to Reddit marketing. The actual policy is narrower than the tweet threads about it. Migrate anything unauthenticated to the API, label your bots, and get back to work.