WhatsApp Business Policies: What's Allowed and What's Not

Losing the WhatsApp number every customer messages is a nightmare, and almost always avoidable. Meta has clear rules about what you can do with WhatsApp Business, and knowing them is the difference between operating calmly and waking up to a suspended account. This guide sums up WhatsApp Business policies in plain language: what's allowed, what's banned, and how to stay on the safe side.

The three documents that govern everything

The rules live in three Meta policies you accept by using the service:

1. WhatsApp Commerce Policy — which products and services you may sell.
2. WhatsApp Business Policy — how you must communicate and contact people.
3. Platform / messaging policies — technical limits, consent and templates.

You don't need to memorize them, but you do need their spirit: the user is in charge. WhatsApp fiercely protects the user experience against spam.

What's BANNED to sell

The Commerce Policy bans entire categories. You can't use WhatsApp Business to sell, among other things:

• Illegal products or services.
• Alcohol and tobacco (including vapes).
• Drugs, whether recreational or supplements making prohibited medical claims.
• Weapons, ammunition and explosives.
• Live animals.
• Adult products and sexual services.
• Dangerous supplements.
• Documents, currency or financial instruments (per the rules).
• Body parts or fluids.
• Gambling and betting in jurisdictions where it isn't allowed.

If your business falls into one of these categories, WhatsApp Business isn't your channel, and no trick gets around it.

The golden rule: consent (opt-in)

This is the one most people break without realizing. You can't message someone who didn't give you permission. Before sending proactive messages, the user must have agreed to receive them (opt-in), and it must be clear they'll come via WhatsApp and from your business.

Valid ways to get opt-in:

• A checkbox on your web form or checkout.
• The customer messaging you first.
• A documented verbal or written opt-in.

Buying lists of numbers and blasting them with promos is the fast lane to a ban, and it violates policy no matter how you justify it.

The 24-hour window and templates

When a customer messages you, a 24-hour service window opens in which you can reply freely with any message. After those 24 hours, to initiate contact again you may only use message templates (HSM) approved by Meta. This stops businesses from bombarding people outside an active conversation.

Templates have their own rules: they're approved by category (utility, marketing, authentication), can't be misleading, and excessive marketing lowers your quality.

What IS allowed and works well

• Answering questions and giving support inside the 24-hour window.
• Sending useful notifications with templates: order confirmation, shipping, appointment reminder, verification code.
• Sending promotions only to those who opted in, with an easy way to unsubscribe.
• Sharing catalog, payment links, photos, audio and documents in a consented conversation.
• Using bots and AI agents to serve customers, always transparently.

Quality rating: your health in real time

Meta assigns a quality rating (green/yellow/red) based on how users react. If many people block or report you, your quality drops, your messaging limits fall, and you can end up suspended. Keeping it green comes down to the same things: relevance, consent, and not overloading people.

How to stay on the safe side (checklist)

• Get real opt-in and keep it as evidence.
• Don't sell banned categories.
• Respect the 24-hour window; outside it, use approved templates.
• Always offer an easy exit ("reply STOP to opt out").
• Don't buy databases or blast strangers.
• Watch your quality rating and slow down if it drops.

A management platform makes compliance effortless. With Omnifox you work on the official WhatsApp API, manage approved templates, record each contact's consent and monitor your number's health, so best practices are built into your operation rather than something you have to remember.

Verification and prerequisites

Before operating at volume with the API, Meta usually requires Business Verification and a profile that's real and consistent: a name, category and details that match your business. Meeting this isn't pointless bureaucracy: it's what unlocks higher messaging limits and the path to the green verified badge. An incomplete profile, or one with made-up details, is a red flag to Meta.

What to do if you're suspended

If your number gets restricted or suspended, don't immediately spin up another to "dodge" the block, that makes things worse. Check Business Manager to see the reason, fix what caused the penalty (opt-in, content, category), and file an appeal through the official channels. Many restrictions are lifted once you show you operate with consent and within the rules.

WhatsApp Business policies aren't there to make life hard: they exist so the channel stays a place where people trust opening a message. Playing within the rules doesn't just protect your number, it protects your results. If you want to run on the official API with best practices baked in, try Omnifox.