What WhatsApp Actually Allows for Sales Outreach
WhatsApp's business policy sets one clear rule: you may contact someone only if they gave you their phone number **and** opted in to hear from you.
WhatsApp’s business policy sets one clear rule: you may contact someone only if they gave you their phone number and opted in to hear from you. Both conditions, not either. That makes WhatsApp a channel for people already in your world — customers, inbound leads, people who handed you a card — not a channel for buying a list.
Key takeaways
- The policy requires two things together: the person gave you their number, and they opted in to receive messages from you.
- Enforcement is reputational. People block or report, and Meta’s systems then limit how much a low-quality-tier business can send.
- The Business Terms also restrict developing or using applications that interact with WhatsApp Business Services without prior written consent.
- Cold WhatsApp outreach to a purchased list is not something we will help you do, and no tool can make it policy-compliant.
- Where WhatsApp is genuinely excellent: re-engaging existing customers, following up on inbound, and continuing conversations that started somewhere else.
What does the policy actually say?
The operative sentence, verbatim from the WhatsApp Business Messaging Policy:
“You may only contact people on WhatsApp if: (a) they have given you their mobile phone number; and (b) you have received opt-in permission from the recipient confirming that they wish to receive subsequent messages or calls from you.”
Two clauses, joined by and. Having someone’s number is not enough. A number scraped from a website, bought in a list, or lifted from a directory fails clause (a) as well as clause (b) — it was never given to you.
The WhatsApp Business Terms of Service add a second constraint. Businesses must not, “directly, indirectly, or through automated or other means… develop or use any applications that interact with our Business Services without our prior written consent.”
Together these two documents define the shape of the channel far more decisively than any limit number does.
What counts as a valid opt-in?
The policy asks for permission that confirms the person “wish[es] to receive subsequent messages or calls from you.” In practice, that means a record of a specific, informed yes. Useful examples and the common failures:
| Generally holds up | Does not hold up |
|---|---|
| A checkout or signup form where the person entered their number and ticked a box to be contacted on WhatsApp | A number in a list you bought, however reputable the vendor |
| Someone who messaged your business first and asked you to follow up | A number on a public website or business directory |
| A written reply to “can I WhatsApp you the details?” | A conference badge scan with no messaging consent |
| An existing customer who gave their number for service and agreed to updates | Consent to email, reused for WhatsApp |
The last row catches a lot of people. Permission is channel-specific. An email opt-in is not a WhatsApp opt-in, and treating it as one is exactly the pattern that generates reports.
What happens if you message without one?
The policy names the enforcement mechanism plainly:
“People can block or report businesses and our systems will limit the amount of messages a business can send or calls a business can initiate if the business’ quality tier is low for a sustained period of time.”
So the penalty is not usually a dramatic ban on day one. It is a slow throttle. Your quality tier degrades, your reach shrinks, and the number becomes progressively less useful for the customers you did have permission to message. By the time it is obvious, the damage is to your main business line.
For businesses on the WhatsApp Business Platform there is a second, published ceiling on top. Meta documents messaging limits as tiers — 250, 2,000, 10,000, 100,000, then unlimited — defined as “the maximum number of unique WhatsApp user phone numbers your business can deliver messages to, outside of a customer service window, within a moving 24-hour period.” New business portfolios start at 250. Limits are set at the portfolio level and shared by every phone number in it. Moving up requires both sending high-quality messages and having used at least half your current limit in the last 7 days; when both hold, the limit rises one level within 6 hours.
Read that as a reputation ladder, not a volume dial. Sending more badly does not climb it.
Where does that leave cold outreach?
Honestly: outside the channel.
We are not going to write the article that explains how to blast a purchased list without getting banned, because the policy answer is that you cannot do it compliantly and the practical answer is that the throttle catches you. If your list is people who never gave you their number, WhatsApp is the wrong channel for the first touch. Email is the right one — it has a consent framework built for exactly that, and it is where cold outreach belongs.
Use WhatsApp for the second conversation, not the first.
What does WhatsApp work brilliantly for instead?
- Re-engaging existing customers. People who bought from you, gave you their number and agreed to hear from you. Highest-permission audience you will ever have.
- Following up on inbound. Someone filled in your form and asked to be contacted. A WhatsApp follow-up on a warm inbound lead is one of the highest-response moves in outreach.
- Continuing a conversation that started elsewhere. A prospect who replied to an email or accepted a LinkedIn invitation and offered their number.
- Service and delivery updates, where the person expects the message and would be annoyed by its absence.
The common thread is that the recipient is not surprised.
How WarmySender handles this
Our WhatsApp channel is built for that reply-first shape, and the caps are the proof. These are our own enforced numbers, and no mode loosens them:
| Control | Value |
|---|---|
| Messages per day | 60 |
| New conversations per day | 20 |
| Actions per hour | 8 |
| Minimum spacing between actions | 45–120 seconds |
| Message length | 4,096 characters |
| Attachments | 15 MB, up to 5 per message |
New conversations carry their own stricter budget on top of the total-message budget, because opening a cold conversation is a riskier act than replying inside one that already exists. New numbers ramp: week 1 allows 5 new conversations and 20 messages a day, week 2 goes to 10 and 40, and week 3 reaches the caps above. A number with genuine history can use a shorter two-week ramp. The most permissive mode available is the hard caps themselves — there is no tier above it, and there never will be.
Your AI agent — Claude, ChatGPT, Cursor, Codex, OpenClaw, Hermes Agent, or any agent that speaks MCP — can create a WhatsApp campaign, launch, pause, resume it, enroll contacts and read account health and stats in plain language. It never sends a message itself and it can never raise a cap. Connecting a number stays in the app.
- How WhatsApp sending limits keep your number safe
- How to build your WhatsApp audience
- How to run a WhatsApp campaign
- WhatsApp safety FAQ
Frequently asked questions
Do I need opt-in to message someone on WhatsApp?
Yes, and you need two things. The policy states you may only contact someone if they have given you their mobile phone number and you have received opt-in permission confirming they wish to receive subsequent messages or calls from you. Having a number without permission does not satisfy it.
Is WhatsApp cold outreach to a purchased list allowed?
No. A bought number was never given to you by the person, and no opt-in exists, so both clauses of the policy fail. We do not support that use case, and the enforcement mechanism — blocks, reports and a degraded quality tier that throttles your sending — makes it self-defeating regardless.
What happens if people report my business on WhatsApp?
Meta’s published policy states that its systems will limit how many messages a business can send or calls it can initiate if the business’ quality tier stays low for a sustained period. The effect is a gradual throttle on the number rather than an immediate shutdown, which is why it often goes unnoticed until it hurts.
How many WhatsApp messages a day can I send?
On the WhatsApp Business Platform, Meta publishes tiered limits starting at 250 unique recipients in a moving 24-hour period for new business portfolios, rising through 2,000, 10,000, 100,000 and unlimited based on quality and usage. Separately, WarmySender enforces its own conservative caps: 60 messages and 20 new conversations a day, 8 actions an hour.
Can I use WhatsApp for the first touch and email for follow-up?
That is backwards for cold prospects. Email has a consent framework designed for a first approach to someone who has not met you; WhatsApp’s policy requires prior permission. Start cold on email, and move to WhatsApp once the person has given you their number and agreed to be contacted there.