WhatsApp Opt-in Rules: Send Broadcasts Without a Ban
WhatsApp opt-in rules for Indian businesses: what counts as consent, how to word it, how to record it, and what protects your quality rating and messaging limits.
Summary of this article
- Explains what WhatsApp requires before a business can message someone, based on Meta's Business Messaging Policy.
- Compares common Indian opt-in sources, such as checkout, forms, inbound chats and QR codes, by strength of consent.
- Gives sample opt-in wording and a list of what to record so you can prove consent later.
- Covers opt-outs, quality ratings, messaging limits and per-user marketing limits that decide whether broadcasts get delivered.
- Outlines how India's DPDP Rules timeline affects consent notices and how Arham Technology builds consent-first WhatsApp programmes.
Summarised by AI from the full article. Check figures and prices against the article before you act on them.

Quick answer
WhatsApp opt-in rules say you may message a person only if they gave you their number and clearly agreed to receive messages from your named business. Ask in advance, say what you will send, keep promotions separate from order updates, record the proof, and stop the moment someone opts out or blocks you.
Key takeaways
- Get explicit opt-in before you send any template message, and name your business and the type of messages in the consent wording.
- Keep promotional consent separate from transactional consent, so an order update checkbox is never read as permission for offers.
- Store the number, wording shown, date, time and source for every opt-in, and honour opt-outs on and off WhatsApp straight away.
- Blocks, reports and low-engagement messages lower your quality rating, which can pause templates and hold your messaging limit down.
- Do not buy, scrape or import cold lists: it breaks Meta's policy and makes the quality problems arrive faster.
On this page
- What are the WhatsApp opt-in rules?
- What makes a strong WhatsApp opt-in?
- Which opt-in sources work for Indian businesses?
- What opt-in wording should you use?
- What should you record for every opt-in?
- How do opt-outs, quality ratings and limits connect?
- How do India s data protection rules affect WhatsApp consent?
- How Arham Technology approaches WhatsApp opt-in and consent
- What should you do next?
Most WhatsApp bans and quality drops do not come from clever tactics gone wrong. They come from messages that people did not expect. A list built from old enquiry sheets, a bought database or a checkbox hidden in the terms is enough to get your templates paused.
WhatsApp opt-in rules are short, but Indian teams often misread them. This guide explains what Meta requires, which consent sources are strong or weak, what to write on the form, what to record, and what happens to your messaging limits when you ignore the rules. It is not legal advice, so confirm consent wording with your lawyer.
What are the WhatsApp opt-in rules?
WhatsApp opt-in rules require a business to hold a person's permission before it sends them messages through the WhatsApp Business Platform. According to Meta's Business Messaging Policy, you may contact people only if they have given you their mobile number or username, and have given opt-in permission confirming they want to receive subsequent messages or calls from you.
The policy also puts three duties on you:
- You choose the opt-in method, and you are responsible for making sure it complies with the laws that apply to your communications.
- You must respect opt-outs, whether the request arrives on WhatsApp or somewhere else, including by removing that person from your contacts list.
- You must not spam or surprise people. Meta can limit or remove access if you receive significant negative feedback.
Meta's marketing best-practice guide adds specifics: the opt-in should clearly say the person is agreeing to receive messages, and it should name your business. It also says you should comply with local laws on notices, permissions and consent.
What makes a strong WhatsApp opt-in?
A strong opt-in is specific, voluntary and provable: the person knows who will message them, what about, and how to stop. Meta's best practices for opt-in recommend that you obtain consent that covers the categories of message you will send and that you ask separately for each category.
Use this checklist when you design the form:
- Name your business in the consent line, not just "us" or "partners".
- State the message type, for example "order updates" or "offers and new launches".
- Use an unticked box or a clear yes button. Pre-ticked boxes and consent hidden in terms of service are easy to challenge.
- Keep promotions separate from transactional updates, so a person can agree to one without the other.
- Say how to stop, such as replying STOP, and make sure you really act on it.
- Record the proof at the moment of consent (see the record-keeping section below).
Which opt-in sources work for Indian businesses?
Sources vary in strength, and the safest ones are those where the customer takes a clear action that mentions WhatsApp. This table compares the common ones.
| Source | Strength | What to add |
|---|---|---|
| Checkout box: "Send my order updates on WhatsApp" | Strong for utility messages | A separate unticked box for offers |
| Enquiry or demo form with WhatsApp consent line | Strong | Business name and message type in the wording |
| Click-to-WhatsApp ad or website chat button | Good for the conversation | Ask in chat if they want updates, then record the reply |
| QR code at store, clinic or event | Good when the QR text states the purpose | A welcome message confirming what they will receive |
| Phone number given for a call or a bill | Weak for WhatsApp | A fresh, explicit WhatsApp opt-in before any template |
| Purchased, scraped or old uploaded lists | Not acceptable | Do not message them on the Business Platform |
For D2C stores, checkout is the best place to collect it, and our guide to WhatsApp abandoned cart recovery for Shopify stores shows where consent fits into that flow.
What opt-in wording should you use?
Good wording is short, plain and specific, and it names the business and the message type. Adapt these examples to your brand and have them reviewed:
- Utility: "Send my order and delivery updates from Your Brand on WhatsApp."
- Marketing: "Send me offers and new launches from Your Brand on WhatsApp. Reply STOP to unsubscribe."
- Appointments: "Send my booking confirmations and reminders from Your Clinic on WhatsApp."
- Inbound chat: "Would you like us to message you about offers on WhatsApp? Reply YES to opt in."
Avoid vague wording such as "I agree to receive communication", because it does not tell the person they will get WhatsApp messages, who they are from or what they will contain.
What should you record for every opt-in?
You should record enough detail to show later what the person saw and agreed to. Meta does not prescribe a format, so use a simple consent log in your CRM or database with these fields:
| Field | Why it matters |
|---|---|
| Phone number (in international format) | Identifies who consented |
| Consent type (utility, marketing, calls) | Keeps categories separate |
| Exact wording or form version shown | Proves what they agreed to |
| Date and time | Shows when consent was given |
| Source (checkout, form, QR, chat) | Lets you compare list quality by source |
| Opt-out date and channel | Lets you stop messaging and prove you did |
A consent log also helps when you move providers or connect a new CRM, which is why it belongs in the integration plan. Our guide to the WhatsApp Business API for India covers how the provider, number and CRM fit together.
How do opt-outs, quality ratings and limits connect?
Opt-outs, blocks and quality ratings are one system: the more people who stop wanting your messages, the less Meta lets you send. Meta says quality ratings reflect feedback signals such as blocks, reports, mutes and archives, and that its systems may limit the number of messages a business can send based on that feedback.
Messaging limits are the other side. According to Meta's messaging limits documentation, limits apply at the business portfolio level and cap the unique people you can message outside a customer service window in a moving 24 hours. A new portfolio starts at 250, and the limit can rise to 2,000 through business verification or sending 2,000 high-quality messages in 30 days, then scale further automatically when quality stays high and you use at least half your limit.
There is a third control for marketing templates. Meta's per-user marketing template limits mean marketing messages to a person who rarely engages may not be delivered. A big list of weakly consented numbers therefore fails twice: it generates blocks, and it wastes sends.
Make these habits routine:
- Offer an easy exit in every marketing template, such as a STOP reply or a quick-reply button.
- Honour opt-outs the same day, including those received by phone or email.
- Ramp up slowly when you add a new list or opt-in method, and watch the quality rating in WhatsApp Manager.
- Remove people who never respond after a few messages instead of keeping them for volume.
- Review blocks and replies by source to find which opt-in method brings the least interested people.
How do India's data protection rules affect WhatsApp consent?
India's Digital Personal Data Protection Rules, 2025 add a legal layer on top of Meta's policy, because a phone number is personal data. The Press Information Bureau's summary says the rules follow an 18-month phased timeline and require standalone, clear consent notices that explain the purpose for which data is collected and used.
The notified rules were published on 13 November 2025, so the main obligations on notices and consent for businesses apply from 13 May 2027. You do not need to wait. Building a consent log, a plain-language notice and a simple withdrawal path now means you will not need to rebuild your WhatsApp flows later. Ask your lawyer to review the final wording, because this article cannot replace legal advice.
How Arham Technology approaches WhatsApp opt-in and consent
Arham Technology designs consent first and templates second, so a broadcast never goes to someone who did not ask for it. Under our WhatsApp marketing services, the work typically includes:
- List audit: sorting your existing contacts into consented, unclear and unusable, and listing what you may message today.
- Opt-in design: forms, checkout boxes, QR landing messages and in-chat questions with clear wording for each message category.
- Consent log: a simple record of number, wording, source, time and opt-out, connected to your CRM through webhooks.
- Template and journey design: separate utility and marketing flows, with an easy opt-out in each marketing template.
- Quality monitoring: a weekly review of replies, blocks, template status and limits, with changes made one at a time.
Consent capture often lives on a form or checkout page, so we may pair this with custom website development for tracked opt-in forms. We do not promise delivery rates or revenue, because both depend on your audience and offer.
What should you do next?
Open your current WhatsApp contact list and mark every number with a clear WhatsApp opt-in, a date and a source. Anything you cannot prove should not receive marketing templates until you ask again.
To get a consent-first plan, contact Arham Technology with your list sources and tools, or read about our WhatsApp marketing and automation service. For the strategy that sits on top of a clean list, see our WhatsApp marketing strategy for Indian brands.
Frequently asked questions
What are the WhatsApp opt-in rules for businesses?
Meta's Business Messaging Policy says you may contact someone on WhatsApp only if they have given you their phone number or username and have given opt-in permission to receive further messages from you. You choose the method, but it must clearly name your business and comply with local law.
Is opt-in required for WhatsApp utility messages like order updates?
Yes, the policy requires opt-in for business-initiated messages in general, not only for marketing. In practice, a customer who gives their number at checkout and ticks an order-updates box has opted in to utility messages. That consent should not be reused for promotions, which need their own explicit opt-in.
Can I message customers who gave me their number on a form or at a store?
Only if the form or counter process also asked for WhatsApp consent. Sharing a number for a callback or a bill is not the same as agreeing to WhatsApp updates. Add a clear, unticked WhatsApp consent line and record that the person agreed.
What happens if people block my WhatsApp business number?
Blocks, reports and similar negative signals feed into your quality rating. Meta says it may limit the number of messages a business can send when it receives significant negative feedback, and templates can be paused when feedback is high. Frequent blocks are a sign your list or message content needs fixing.
How many people can I message on WhatsApp Business API per day?
Meta's messaging limits apply per business portfolio, and a new portfolio starts at 250 unique people outside customer service windows in a rolling 24 hours. The limit can rise to 2,000 and beyond when you verify your business or send high-quality messages. Check the current figures in Meta's documentation.
Do I need opt-in if the customer messages me first on WhatsApp?
When a customer messages you first, you can reply freely for 24 hours while the customer service window is open. That is not blanket permission for later promotions, so ask during the chat whether they want updates or offers, and record the answer before you send marketing templates.
Want WhatsApp Marketing done right?
Get a free consultation and a clear plan โ scope, timeline and cost โ from our Mumbai team.



