WhatsApp Business blocked for spam: why it happens and how to avoid it

Published on October 10, 2026

When a business number gets blocked for spam, the cause is almost always the same: messages people didn’t ask for.

The WhatsApp Business policy only allows contacting people who gave the business their number and agreed to receive its messages.

It applies to the WhatsApp Business app and to the official API.

What Meta counts as spam

The written rule is short.

A business may only message people who shared their number and confirmed they want messages, and it must honor every request to stop, made inside or outside WhatsApp.

The same policy forbids confusing, misleading or surprising people with messages.

The cases that break this rule tend to look like this:

A purchased list or contacts pulled from a group, with no permission at all.
A promotion sent to someone who asked about a price once, months ago.
A customer who asked to be removed and kept getting messages.
A message using another company’s name or branding.

Recipients decide

Meta doesn’t need a formal complaint to act.

Recipients can block or report the business, and the policy says its systems may limit how many messages a business can send based on that feedback, or remove access when negative feedback is high.

On the official API, that feedback becomes a quality rating for the number, green, yellow or red, based on how messages were received in recent days (phone number reference in Meta’s API).

Meta’s page on getting opt-in warns that low quality over a sustained period leads to sending limits.

How restrictions escalate on the official API

On the API, enforcement comes in steps.

First you get a warning naming the rule that was broken.

If it happens again, with spam or a template in the wrong category, for example, restrictions get longer, according to Meta’s policy enforcement page:

A 1 or 3 day block on sending marketing, utility and authentication templates.
A 5, 7 or 30 day block on sending any message.
An account lock of indefinite length, lifted only through an appeal.
Permanent deactivation, when the business doesn’t change after several warnings.

Scams and other serious cases skip the steps: the same Meta page says the account is removed from the platform immediately.

You can appeal

You file the appeal in Business Support Home, inside Meta Business Suite: pick the violation and request a review.

A decision usually comes within 24 to 48 hours.

Not every spam violation can be appealed, and for some the only option is to wait for the block to end (how Meta handles appeals).

The violation notice goes by email to the admins listed in Business Manager.

If the admin email is out of date, the notice gets lost, and you only find out when messages stop going out (same Meta page).

Replying is not mass messaging

The policy separates two situations.

When a customer writes, a 24 hour window opens in which the business can reply freely, and every new customer message restarts that window.

Outside it, the business can only start a conversation with a template Meta has approved.

The assistant we set up works almost entirely inside that window: the customer writes and it is on the number.

The only thing sent without the customer writing first is a reminder for an appointment they booked themselves, sent as a template.

Sending to lists is not part of what we set up.

The same policy requires automated service to offer a clear way to reach a person, whether a transfer in the chat, a phone number, an email or a form.

That is why a handoff to a person is part of every setup.

Limits for new numbers

A new number on the API can’t reach as many people as it wants.

Meta caps how many different people a business can reach outside the customer service window, over a rolling 24 hour period: 250 for a business that just created its Meta account and 2,000 after business verification.

From there the limit rises on its own when quality is high and the business used at least half of its cap in the last seven days (Meta messaging limits).

Replies to people who wrote first don’t count.

What to have ready

Meta recommends asking for separate permission for each type of message, so people don’t block the business after getting something they didn’t expect (getting opt-in, Meta).

With that in mind, sort out:

Where and when each customer gave permission, in their record or in the chat itself.
Reminder permission kept separate from promotional permission.
Immediate removal from the list for anyone who asks to stop.
A number used only for customer service, not your main business line.

A spam block is Meta passing on what recipients thought of your messages.

Prevention happens before you send, by answering one question: who asked to be contacted, and for what.