WhatsApp Business Compliance: What You Need to Know in 2026

WhatsApp suspends numbers daily for compliance violations. Once suspended, your business is offline until you go through Meta\'s appeal process — which can take days or never resolve. Here\'s how to stay compliant.

The Cardinal Rule: Opt-In

You can\'t message a customer first unless they\'ve explicitly opted in. Opt-in must be:

• Active: they checked a box or sent you a message — not "by using our website you agree"
• Recorded: with timestamp + IP — Meta may audit
• Specific: they consented to WhatsApp messages from your business, not "marketing communications"
• Revocable: they can opt out at any time, easily

The 24-Hour Service Window

After a customer messages you, you have 24 hours to respond freely (any content, any format). After 24 hours, you can only send approved template messages.

Template Messages

Templates are pre-approved messages used outside the 24-hour window. Submission process:

1. Write the template with placeholders ({{1}}, {{2}})
2. Submit to Meta for approval
3. Wait 24-72 hours for review
4. Once approved, use freely

Template Categories

• Marketing: promotional, ~$0.01-0.15 per conversation
• Utility: order updates, ~$0.005-0.07 per conversation
• Authentication: OTPs, ~$0.002-0.05 per conversation

What Gets Templates Rejected

• Misleading content
• Excessive promotional language
• Long URLs or shortened links
• ALL CAPS
• Excessive emojis

Prohibited Content

Per Meta\'s Commerce Policy, you cannot use WhatsApp Business for:

• Adult content
• Tobacco, drug paraphernalia
• Weapons
• Real money gambling
• Cryptocurrency speculation (some jurisdictions)
• MLM / pyramid schemes
• Misleading health claims

Industries vary — check Meta\'s policy for your specific category.

Quality Rating

Each WhatsApp number has a Quality Rating: Green, Yellow, or Red. Rating drops based on:

• Spam reports from recipients
• "Block" actions by recipients
• Slow response times
• Low message read rates (suggesting spammy lists)

Red rating leads to automatic restrictions. Green rating unlocks higher message tiers.

GDPR & Regional Privacy

• Store opt-in records with timestamp
• Allow customers to request data export
• Allow customers to request deletion
• Mention WhatsApp messaging in your privacy policy
• Do not transfer EU customer data outside EU without proper safeguards

Common Compliance Failures

• Buying customer lists and messaging them on WhatsApp — instant ban risk
• Adding customers to broadcast lists without explicit opt-in
• Using WhatsApp for cold outreach — even with templates
• Not honoring opt-outs — must immediately stop messaging when they say "stop"
• Sending spam-looking content — even legitimate promos can trigger spam filters if poorly written

How to Stay Safe

• Build your contact list organically — opt-in forms on your website, opt-in checkbox at checkout
• Honor opt-outs immediately
• Reply to every message you receive (within 24h ideal, never beyond a few days)
• Use templates only for approved use cases
• Monitor Quality Rating in WhatsApp Manager weekly

One Inbox tracks opt-ins, manages templates, monitors Quality Rating, and helps you stay compliant. Free plan available.