What is the WhatsApp Business Messaging Policy?
The WhatsApp Business Messaging Policy is Meta's set of rules for how businesses use WhatsApp to talk to people, on both the WhatsApp Business App and the WhatsApp Business Platform. It sits alongside the platform's contract, the WhatsApp Business Solution Terms, and governs behaviour: whom you may contact, what you may send and ask for, which organisations and industries may use the service, and what Meta does when the rules are broken. The current version was last updated on 23 September 2026.
Its core is consent and quality. You may contact someone only if they have given you their mobile number or username and you have received their Opt-in permission to receive messages; you choose the opt-in method and must meet applicable law. Every request to stop — made on WhatsApp or off it — must be respected, and an Opt-out means removing the person from your contacts list. Outside the 24-Hour Customer Service Window only approved templates may be sent, and if you automate replies you must offer prompt, clear and direct escalation to a person: an in-chat Human Handoff, a phone number, email, a web form or a store.
It also sets content and data rules. Keep a business profile with at least one support contact (email, website or phone); do not impersonate others or mislead; never ask people to share full payment card numbers, financial account numbers or personal ID card numbers; and use data obtained from WhatsApp only to support messaging with that person. Political parties, politicians, candidates and campaigns, and law enforcement, military and intelligence agencies, may not use the platform, regulated goods are allowed only in listed countries, and selling through catalogues and payments falls under the WhatsApp Commerce Policy.
Enforcement is at Meta's discretion. It may limit how many messages a business can send based on user feedback, restrict or remove access for violations or significant negative feedback, and bar a terminated business from future use of WhatsApp products; Policy Violation describes how that escalates. Meta can change the policy without notice unless the law requires it, and continued use counts as acceptance.
Key takeaways
- The WhatsApp Business Messaging Policy is Meta's rulebook for how businesses message people on WhatsApp; it was last updated on 23 September 2026.
- You may message someone only if they gave you their number or username and opted in to receive your messages.
- Every opt-out must be respected, whether made on or off WhatsApp, and the person removed from your contact list.
- Automation is allowed, but a prompt, clear and direct path to a human must always be available.
- Never ask for full card numbers, bank account numbers or ID card numbers in chat; breaches can limit or end your access.
Figure 1
Is your WhatsApp programme within policy?
9/9
ticked
- Required
- 7 / 7
- Optional
- 2 / 2
Ready to message within policy
Every item ticked.
Ready to message within policy. 9 of 9 ticked.
How does the WhatsApp Business Messaging Policy work?
Collect opt-in properly
At the point a customer gives their number, say they will receive WhatsApp messages from your business and what about, and keep proof. Separate opt-ins per message type, and for calls, are Meta's recommended practice.
Honour every opt-out
Act on STOP replies, opt-out buttons, in-app marketing stops, emails and calls alike, and remove the person from the relevant lists in every tool you use.
Use templates outside the window
Send free-form messages only within 24 hours of the customer's last message; at any other time, use an approved message template.
Keep a human reachable
Any bot must offer a prompt, clear and direct path to a person. An in-chat transfer to an agent is the clearest; a phone number, email, web form or store address also qualify.
Keep content and data clean
Maintain an accurate profile with a support contact, never impersonate anyone, never request card, bank or ID numbers, and check that nothing you offer is prohibited or restricted for India.
Watch enforcement signals
Track quality rating, block rate and
account_updateevents, and fix causes as soon as a warning appears rather than waiting for a restriction.
Why it matters
Why does the WhatsApp Business Messaging Policy matter?
Almost every WhatsApp enforcement action traces back to this policy, so it is the document marketers, support leads and developers most need to know — not word for word, but in its four habits: get opt-in, honour opt-out, keep a human reachable, and keep content honest. Following it protects quality rating and messaging limits; breaking it, especially with bought lists or bots without an exit, leads to restrictions and, repeated, to a ban. It also overlaps with Indian law, since consent and easy withdrawal are expected under the DPDP Act too.
Common mistakes with the WhatsApp Business Messaging Policy
Treating a phone number as consent
A number on an invoice or a bought list is not an opt-in. The person must have agreed to receive WhatsApp messages from you, and you should be able to show it.
Bots without an exit
A chatbot that loops without offering a person breaks the escalation rule and frustrates customers. Put "Talk to a person" in every menu and honour it promptly.
Honouring opt-outs in one tool only
A STOP received by the helpdesk must reach the campaign tool too. Use one suppression list that every sender checks.
Collecting card or ID numbers in chat
The policy bars it. Send a payment-gateway link for payments, or a secure form for KYC, instead.
Assuming the policy stands still
Meta updates it, and continued use means acceptance. Re-read it when changes are announced; the current version is dated 23 September 2026.
Example: A Chennai insurance broker's policy check
Before launching renewal reminders on WhatsApp, a Chennai insurance broker checks its plan against the policy. Its web form already has a separate, unticked box for WhatsApp messages about renewals, and the team adds the same wording to the branch sign-up sheet. The renewal bot gets a "Talk to an advisor" button that transfers to a human agent during office hours and shares a phone number after hours. The premium step sends a payment-gateway link instead of asking for card numbers in chat, and STOP replies reach the CRM's suppression list within a minute. A suggestion to message a purchased list of car owners is dropped: those people never agreed to hear from the broker.
Best practices for the WhatsApp Business Messaging Policy
- Write your opt-in wording once and reuse it on every form, ad and counter where numbers are collected.
- Offer a quick-reply button to stop promotions in every marketing template.
- Check restricted categories before adding a new product line to WhatsApp.
- Train agents on the sensitive-identifier rule; well-meaning staff cause many breaches.
WhatsApp Business Messaging Policy FAQs
- What does the WhatsApp Business Messaging Policy require for opt-in?
- That the person gave you their mobile number or username and agreed to receive messages from you on WhatsApp. You choose how to collect it, but it must be lawful and you should be able to prove it.
- Can I use a chatbot under the WhatsApp Business Messaging Policy?
- Yes, automation is allowed, but you must offer a prompt, clear and direct way to reach a human, such as an in-chat transfer, a phone number, email or a support form.
- What happens if I break the WhatsApp Business Messaging Policy?
- Meta may limit your sending, restrict features or remove access, usually after warnings. Repeated or severe violations can end in a ban, and Meta may bar the organisation from future use.
- Is the Business Messaging Policy the same as the Commerce Policy?
- No. The messaging policy governs how you contact people; the commerce rules govern what you may sell through catalogues and payments. A business selling on WhatsApp must follow both.
- Can political parties use the WhatsApp Business Platform?
- No. The policy prohibits political parties, politicians, candidates and campaigns from using it. Government entities may use the platform, but only through a Solution Provider.