Drawing 1 · Interactive
Climb the enforcement ladder, one violation at a time
- Tier 1Tier 1: In good standing (below the current tier)No findingsNo findings
- Tier 2Tier 2: Warning (below the current tier)Policy namedPolicy named
- Tier 3Tier 3: Short restriction (below the current tier)1 or 3 days1 or 3 days
- Tier 4Tier 4: Long restriction (below the current tier)5, 7 or 30 days5, 7 or 30 days
- Tier 5Tier 5: Account lock (below the current tier)IndefiniteIndefinite
- Tier 6Tier 6: Disabled (current)Off the platformOff the platform
Tier 6 · Disabled
Off the platform
Why: No change after repeated enforcement: permanent disablement.
After repeated warnings and blocks without change; severe harm goes straight here.
Move 7 of 7: climbs to tier 6, Disabled (Off the platform). No change after repeated enforcement: permanent disablement.
What is a WhatsApp policy violation?
A policy violation is a breach of the rules a business accepts to use the WhatsApp Business Platform: the WhatsApp Business Messaging Policy, the WhatsApp Commerce Policy and the WhatsApp Business Terms of Service. Meta names sending spam, template misclassification and high-risk categories, such as adult content, the sale of alcohol and tobacco, drugs, gambling and unsafe supplements, as typical examples. Messaging people without opt-in, ignoring opt-outs and misleading templates fall under the same rules.
Violations are recorded against the WhatsApp account and escalate with repetition. The first usually brings a warning naming the policy. Repeated violations bring restrictions that grow in length: a 1- or 3-day block on sending marketing, utility and authentication templates and on adding phone numbers, then a 5-, 7- or 30-day block on sending any messages, then an account lock that only an appeal removes, and finally permanent disablement if the business does not change after multiple warnings. Evidence of severe harm leads to immediate offboarding, and excessive negative feedback from users can also lead to limits.
Each violation is shown in Business Support Home, in the Business Manager notifications centre and as a banner in WhatsApp Manager, emailed to admins, and sent as an Account Update Webhook with event: ACCOUNT_VIOLATION and a violation_info.violation_type such as ALCOHOL, DRUGS, GAMBLING, MISLEADING or SCAM. Restrictions arrive as ACCOUNT_RESTRICTION events with a restriction_type and an expiration. This page covers what a violation is and how enforcement climbs; Account Restriction and WhatsApp Account Ban describe the penalties, Restricted Industries maps which sectors are affected, and a Policy Appeal is how to contest a finding.
Key takeaways
- A policy violation is a breach of WhatsApp's Business Messaging Policy, Commerce Policy or Business Terms, recorded against the business's account.
- Enforcement escalates: a warning, 1- or 3-day template blocks, 5-, 7- or 30-day blocks on all messages, an account lock, then disablement.
- Evidence of severe harm, such as scams, child exploitation, terrorism or illegal drug sales, leads to immediate offboarding.
- Each violation arrives as an account_update webhook with event ACCOUNT_VIOLATION and a violation_type such as ALCOHOL or SCAM.
- Spam, template misclassification and high-risk categories are the violations Meta names as typical triggers.
Specifications
A WhatsApp policy violation: key facts and limits
- Rules that apply
- Business Messaging Policy, Commerce Policy, Business Terms
- First step
- A warning naming the policy
- Short restriction
- 1 or 3 days: no templates, no new numbers
- Long restriction
- 5, 7 or 30 days: no messages at all
- Account lock
- Indefinite; removed only by an appeal
- Severe harm
- Immediate offboarding
- Webhook
- account_update · ACCOUNT_VIOLATION · violation_type
- Violation types
- Category codes such as ALCOHOL, GAMBLING, SCAM, WEAPONS
Operating sequence
How does a WhatsApp policy violation work?
A message or listing breaks a rule
Spam to people who never opted in, a promotion sent as a utility template, a prohibited product in a catalogue, or content in a high-risk category.
Meta records a violation
The account gets a warning naming the policy, with examples of what is allowed and what happens on a repeat, across Business Support Home, WhatsApp Manager, email and the
account_updatewebhook.Repeats bring restrictions
First 1- or 3-day blocks on templates and on adding numbers, then 5-, 7- or 30-day blocks on all messages. Each
ACCOUNT_RESTRICTIONevent names therestriction_type, such asRESTRICTED_BIZ_INITIATED_MESSAGING, and itsexpiration.Lock, then disablement
An indefinite lock stops all messages until an appeal succeeds. Without change, the account is disabled;
DISABLED_UPDATEevents reportban_info.waba_ban_stateasSCHEDULE_FOR_DISABLE,DISABLEorREINSTATE.Appeal or acknowledge
Depending on type and eligibility, a violation can be appealed or acknowledged in Business Support Home. A reversal returns the account to its previous status.
Implementation
A WhatsApp policy violation in code
// Route WhatsApp enforcement events from the account_update webhook.export async function onAccountUpdate(wabaId, value) {switch (value.event) {case "ACCOUNT_VIOLATION":await alert.page("compliance", `WABA ${wabaId}: ${value.violation_info?.violation_type} violation`);break;case "ACCOUNT_RESTRICTION":for (const r of value.restriction_info ?? []) {// e.g. RESTRICTED_BIZ_INITIATED_MESSAGING until r.expiration (Unix seconds)await campaigns.pauseAll(wabaId, {reason: r.restriction_type,until: new Date(r.expiration * 1000),});}break;case "DISABLED_UPDATE":// ban_info.waba_ban_state: SCHEDULE_FOR_DISABLE | DISABLE | REINSTATEawait alert.page("leadership", `WABA ${wabaId}: ${value.ban_info?.waba_ban_state}`);break;}}
Subscribe the app to the account_update field; one handler can cover every WhatsApp Business Account you manage.
Failure modes
Common mistakes with a WhatsApp policy violation
Treating the warning as noise
The warning is the cheapest point in the ladder. Find the root cause the day it arrives; the next finding costs days of messaging.
Fixing the message, not the cause
Rewording a template does not help if the audience came from a purchased list. Spam findings are fixed in the audience, not the copy.
Forgetting the catalogue
The Commerce Policy applies to what you list and sell, and its categories are broad: alcohol-related accessories and some health products count. Review items against the violation list before publishing.
Only admins hear about it
Emails to Business Manager admins get missed. Route
account_updateevents to the people who run campaigns and the catalogue.Misclassifying templates
Template misclassification is named as a violation trigger. Promotions belong in marketing templates, even when a utility label looks cheaper.
Example: Wine glasses at a Jaipur gifting startup
A Jaipur gifting startup adds a wine-glass and bottle-holder hamper to its WhatsApp catalogue and receives an ALCOHOL warning: Meta's violation examples include alcohol-related items such as glasses and wine bottle holders, not just drinks. The team removes the item, but a month later a marketing template promotes a "bar accessories" Diwali hamper and the account gets a 3-day block on templates, which also holds its order updates. The founders now keep that category on the website only, review the violation list before adding catalogue items, and page the operations lead on every ACCOUNT_VIOLATION event.
Design intent
Why does a WhatsApp policy violation matter?
Violations compound. One misjudged campaign can cost a few days of templates; the same mistake repeated can stop every message, one-time passwords and order updates included, for a month, or end the account. Treating the first warning as an incident, finding its root cause and wiring the webhook into alerting is far cheaper than recovering a locked account.
Recommended practice
Best practices for a WhatsApp policy violation
- Give every violation_type an owner (catalogue, campaigns or support) so the right team fixes it.
- Check Meta's violation list before adding a new product category to a catalogue.
- Keep a log of warnings and restrictions; enforcement depends on history, so the second finding matters more than the first.
- Re-read the WhatsApp Business Messaging Policy whenever Meta updates it, and check the date at the top of the page before each new campaign type.