If you plan to message customers on WhatsApp through the Business API, a few rules decide whether your account stays healthy or gets limited. This guide explains the main ones in plain language: consent, templates, the 24-hour window, quality, limits and costs. Meta changes its rules from time to time, so use this as a checklist and confirm details in Meta's current documentation.
1. Get consent before you message
Businesses should only send marketing and other business-initiated messages to people who have agreed to receive them on WhatsApp. Consent should be clear, and it should say that the person will get WhatsApp messages from your business. Good places to collect it are website forms, checkout pages, in-store QR codes, and a first message the customer sends you.
- Ask clearly: say what you will send and how often.
- Record when and how each person agreed.
- Never buy, rent or scrape phone number lists.
- Give people an easy way to stop messages, and respect it quickly.
2. Know the message types
WhatsApp groups business messages into categories, and the category affects both the rules and the cost.
- Marketing: promotions, offers, product news and reminders to buy.
- Utility: updates about something the customer already asked for, such as an order, delivery or booking confirmation.
- Authentication: one-time passcodes for logging in or verifying.
- Service: replies to a customer who messaged you first.
Choose the category that honestly matches the message. A promotional offer sent as a utility message is a policy problem, even if the template was approved.
3. Understand the 24-hour customer service window
When a customer messages you, a service window opens. While it is open, you can reply with free-form messages. When it closes, you can start a conversation only with an approved template. Each new customer message can reopen the window, so fast, helpful replies keep conversations flowing without extra templates.
4. Write templates that get approved
- Be clear about what the message is and why the customer receives it.
- Use variables only for real details such as names, order numbers and dates.
- Match the template category to the real purpose of the message.
- Avoid misleading, aggressive or restricted content, and follow Meta's commerce rules.
- Keep language consistent: if you message in Arabic, use an approved Arabic template.
5. Protect your quality rating
Meta watches how customers react to your messages. If many people block or report you, your quality rating can fall and your limits can be reduced. The best protection is simple: message only people who opted in, send relevant content at a sensible frequency, and make opting out easy.
6. Understand messaging limits
Meta limits how many different customers a business can start conversations with in a rolling 24-hour period. Since October 2025 these limits are set per business portfolio and shared by all your phone numbers. A new portfolio starts low and can move up in steps as you send high-quality messages or verify your business, so check Meta's current Messaging Limits documentation for the latest tiers. A provider like Vibbly can show your current limit and quality in one dashboard.
7. Understand how pricing works
WhatsApp charges per delivered message for marketing, utility and authentication messages, and the rate depends on the message category and the customer's country. Each business number also gets 1,000 free service messages (replies inside the customer service window) per month, and from 1 October 2026 service messages beyond that are charged. Conversations that start from a Click-to-WhatsApp ad can be free for a limited window. Your provider may add its own platform fee. Rates change, so check Meta's current rate card and ask your provider for a clear quote before you launch.
8. UAE and MENA: other rules to remember
- Data protection: the UAE has a federal personal data protection law, and some free zones such as DIFC and ADGM have their own rules. Collect only the data you need and explain how you use it.
- Marketing communications: follow the rules that apply to your sector and the countries you message.
- Regulated sectors: healthcare and finance have extra rules. Check with a qualified adviser.
- Language: Arabic and English templates should say the same thing.
A simple compliance checklist
- Collect clear opt-in and keep a record of it.
- Offer an easy opt-out and honour it.
- Pick the right message category for each template.
- Reply quickly inside the service window.
- Send relevant messages at a sensible frequency.
- Watch your quality rating and limits every week.
- Review Meta's policy and pricing pages every quarter.
Frequently asked questions
Can I message customers from a list I bought?
No. WhatsApp expects people to have opted in to hear from your business, and bought lists lead to blocks and reports that damage your quality rating.
Do I need templates for every message?
No. You need an approved template to start a conversation outside the 24-hour service window. Inside the window you can reply freely.
What happens if my quality rating drops?
Your messaging limits can be reduced and your account can face restrictions. Fix the cause by checking who you message, how often and with what content.
Can Extreme Marketing set this up for me?
Yes. Vibbly handles onboarding, templates and monitoring, and our agency team can plan the campaigns around the rules.
Want a compliant WhatsApp setup for your business? Message us on WhatsApp or book a call with Extreme Marketing.
Sources and further reading
Want help putting this into practice?
Book a free audit and we will review your marketing and suggest the quickest wins.
