Is a P2P bot safe? A checklist
Updated 2026-10-23
A P2P bot works through an API key on your exchange account, so the key's permissions decide what can go wrong. Here is what to check with any bot, and how Price Pulse answers each point.
1. Withdrawal permission must be off
No repricing bot needs to withdraw funds. Create the key with withdrawals disabled; then even a leaked key cannot move money out of your account through the bot. Price Pulse never needs withdrawal permission.
2. Only the permissions the bot needs
- Binance: enable reading; leave withdrawals off.
- Bybit: read access, P2P ads and orders, and Wallet → Account Transfer, which Bybit requires for reading the Funding balance (used to size SELL ads). The bot never moves funds with it. Withdrawal stays off.
Try it on your own ads
10-day free trial, no card. Connect a Binance or Bybit API key without withdrawal permission and watch your ads reprice.
3. Whitelist the IP
Both exchanges let you restrict a key to an IP address. Price Pulse provides the server your bots run on, with a fixed IP you can whitelist. Ask any provider whether that IP is yours or shared with all their customers: some bots give every customer the same few IPs.
4. Hard price limits
A bot without a minimum and maximum price can follow a typo in a competitor's ad and sell at half price. Set hard limits; Price Pulse never crosses them.
5. What the AI is allowed to say
If the bot replies to buyers, it must never invent payment details. Price Pulse's AI can only use the details and links you wrote; anything else is blocked and sent to you.
6. Who built it
Price Pulse is built by verified Binance Gold and Bybit Block merchants and operated by "Profit Group" LLC. Account data is stored in Europe.
Questions
Can a P2P bot steal my funds?
Not if the API key has withdrawals disabled, as it should. Price Pulse never asks for withdrawal permission.
Why does Bybit need Account Transfer?
It is the only way Bybit exposes the Funding balance to a bot; Price Pulse only reads with it.
Does the bot know my exchange password?
No. It only uses the API key and secret you create.
What happens if I delete the key?
The bot can no longer reach your account and stops at its next check. Nothing else on your account changes.
Try it on your own ads
10-day free trial, no card. Connect a Binance or Bybit API key without withdrawal permission and watch your ads reprice.