Organisers usually want a member list for good reasons: to build a directory, to move members to a new platform, to send event reminders or to know who offers what. The tempting shortcut is a browser extension or tool that promises to pull every number out of a group into a CSV file in one click.
Before you build a member list, it helps to know honestly what WhatsApp lets you see and save, why scraping tools put your account and your members at risk, and what India's Digital Personal Data Protection Act and the EU's GDPR expect in plain terms. Then there is a consent-first way to build the list you need. All of it is general information, not legal advice. Check your own situation with an adviser.
What WhatsApp lets you see and save
In the WhatsApp app, any member can open group info and view the group's members. WhatsApp's Help Center describes a View all option when a group has more than 10 members, and View member changes, which shows who left or was removed in the last 60 days. That is a list to read, not a file to download.
WhatsApp also lets you export a chat. Its Help Center describes opening an individual or group chat, choosing More, then Export chat, with or without media, and sharing the result. The export is a text file and, in WhatsApp's words, cannot be re-imported because it is not a backup. It contains messages, so it shows the names or numbers of people who posted, not everyone in the group, and it includes their message text, which is far more than a member list needs.
In a WhatsApp Community, visibility is narrower. WhatsApp's Help Center says members can only see phone numbers of people who share a group with them, while community admins can see all community members. In a regular group, members are visible to each other.
Ways people try to export WhatsApp group members, compared
There are five common approaches. They differ in what you get, the risk to your WhatsApp account and whether members agreed.
| Method | What you get | Risk to your account | Did members agree? |
|---|---|---|---|
| Copy names from group info by hand | Names or numbers you type yourself | None from WhatsApp | No, they agreed to be in the group, not on your list |
| Export chat | A text file of messages from people who posted | None, it is a built-in feature | No, and it carries message text you should not keep |
| Scraping extensions and tools | A spreadsheet of numbers, often with profile data | WhatsApp says scraping can lead to temporary or permanent bans | No |
| Ask members to fill in a form | Details people chose to give, for a stated purpose | None | Yes, if the form says what it is for |
| Join link to your business number | Members who messaged you, with a profile they filled in | None, members write to you first | Yes, each member joins by sending a message |
The first two are allowed by WhatsApp but give you very little, and still raise privacy questions. The third gives you the most and carries the most risk. The last two take a little longer and leave you with a list you can actually use.
Why scraping tools put your account at risk
WhatsApp's Help Center is direct about this. Harvesting information at scale, also known as scraping, through an automated tool for any unpermitted purpose violates WhatsApp's Terms of Service. WhatsApp names the kind of data scrapers collect, such as phone numbers, profile pictures and statuses, and says accounts suspected of scraping can be temporarily or permanently banned.
The account at risk is usually the organiser's own, the one that runs the group. Losing it means losing admin access to the groups you built. Some tools also ask you to link them to your WhatsApp account through WhatsApp Web, which gives an unknown company access to every chat on that account.
A scraped list is also of limited use. If you plan to message those numbers from a business account, WhatsApp's Business Messaging Policy says a business may only contact people who have given it their number and who have opted in to receive messages from it. Being in the same group as you is neither. Messaging a scraped list risks reports, blocks and enforcement on your business number too.
Privacy rules in plain terms: DPDP Act and GDPR
A member shared their number to be in your group, with the people in it. Turning that into a list for another purpose is a new use of their personal data, and data protection laws care about exactly that.
In India, the Digital Personal Data Protection Act, 2023 applies to digital personal data such as phone numbers. The organisation that decides why and how the data is used is the data fiduciary, which for a community list is usually you. The government's summary of the DPDP Rules, 2025, notified on 14 November 2025 with an eighteen-month phased compliance period, says each data fiduciary must give a separate consent notice that is clear and easy to understand and explains the specific purpose, and that people can withdraw consent at any time. The Act's principles include purpose limitation and data minimisation. The same summary lists penalties of up to ₹250 crore for failing to keep reasonable security safeguards, up to ₹200 crore for failing to notify a breach, and up to ₹50 crore for other violations.
If any of your members are in the EU, the GDPR may apply. Under its Article 6, processing personal data is lawful only on one of a set of grounds, such as the person's consent for a specific purpose. Article 14 says that when you collect data about someone from somewhere other than them, you must tell them, including who you are and what you will use it for. A list pulled from a group without telling anyone does not fit comfortably with either.
- Say what the list is for before you collect it, and use it only for that.
- Collect only what that purpose needs. A directory rarely needs more than a name, city and what someone offers.
- Let people say no, and make leaving as easy as joining.
- Keep the list secure, share it with as few people as possible, and delete what you no longer need.
Our DPDP compliance and GDPR pages explain how Milvao supports these duties for communities that use it.
The consent-first alternative: join links
Instead of taking numbers out of a group, invite members to come to you. A join link is a WhatsApp link to your business number with a message already typed. A member who taps it and presses send has chosen to contact you, which is the start of a list built on consent.
This is how Milvao builds a community's member list. The steps look like this:
- 1Connect your community's own WhatsApp Business number to Milvao.
- 2Create a group in Milvao for each WhatsApp group and make a join link for it.
- 3Pin the link in the WhatsApp group with a short note on what it is for.
- 4Members tap the link, press send and answer a few profile questions in the chat or on a private link.
- 5Your team sees the member directory with phone numbers masked, verifies members who joined through forwarded links, and removes anyone who does not belong.
Members get a privacy notice link in their first message. Introduction requests stay off until a member turns them on, and they can send PAUSE, STOP, MY DATA or DELETE MY DATA at any time. Milvao never joins, reads or exports your WhatsApp groups. The Help Center explains the details in Groups and join links and Who sees what.
If you already have a member list
Many communities already hold a list from membership forms, event sign-ups or payments. That is different from a scraped list, because people gave you their details directly, though possibly for a different purpose than the one you have in mind now.
Milvao can import a CSV or Excel list, but imported people stay people who haven't joined yet, and nobody is messaged unless the owner confirms they agreed to hear from the community. The join link is still the way in. Post it in your groups, include it in your next email or newsletter to members, and let people add themselves. Do not message people on WhatsApp from an old list just because you have their number, unless they agreed to hear from you there.
Whatever tool you use, review the lists you already hold. Delete copies on personal laptops and in old chat exports, limit who can open the main list, and write down what each list is for. If members ask what you hold about them, you should be able to answer.
Sources
- WhatsApp Help Center: How to see group members (checked 5 November 2026)
- WhatsApp Help Center: How to export your chat history (checked 5 November 2026)
- WhatsApp Help Center: About harvesting personal information (checked 5 November 2026)
- WhatsApp Help Center: How to decide whether to create a WhatsApp group or community (checked 5 November 2026)
- WhatsApp Business Messaging Policy (checked 5 November 2026)
- Press Information Bureau: DPDP Rules, 2025 Notified (17 November 2025) (checked 5 November 2026)
- EUR-Lex: Regulation (EU) 2016/679 (GDPR) (checked 5 November 2026)
Milvao publishes this guide and makes a product for WhatsApp communities, so we have a stake in the topic. Facts about WhatsApp and other services come from the sources listed, on the dates shown, and can change. Corrections are welcome through our contact page.