WhatsApp is not a loophole around consent law or Meta policy. It is a high-trust channel — and Meta defends that trust with template reviews, quality ratings, and enforcement.
Compliance is not only legal hygiene. It is how you keep the right to message at scale. This guide translates the rules teams actually need day to day, and how Pyngdesk helps you operationalise them.
The three pillars
- Consent (opt-in) — People expect your messages for a stated purpose.
- Format rules — Outside open sessions, use approved templates with the right category.
- Quality behaviour — Low blocks, low reports, relevant content, sensible volume.
Break any pillar and the others will not save you.
Opt-in that stands up to scrutiny
Valid patterns usually include:
- Checkbox at checkout: “Send me offers on WhatsApp” (unchecked by default is safer practice in many regions)
- Inbound message to your business with clear context
- Signed form / QR journey that states message types
- Customer explicitly asking for updates on WhatsApp
Invalid patterns:
- Bought lists
- Scraped numbers
- “They ordered once years ago” as marketing consent
- Hiding consent in unrelated terms
In Pyngdesk: store consent via tags (e.g. promo-opt-in) on Contacts (/contacts). Train staff to apply tags at capture time. When someone opts out, block or remove marketing tags immediately — blocked contacts are excluded from campaigns.
Keep a note of how you obtained opt-in (form, QR, chat). You may need it if disputes arise.
The 24-hour customer care window
When a user messages you, you typically get a customer care window to reply with free-form messages.
When that window is closed, proactive outreach generally requires an approved template.
Practical implications:
- Support can chat freely while the window is open
- Re-engagement tomorrow morning for an old lead usually needs a template
- Do not try to “keep the window open” with junk pings — that harms quality
Use Templates (/templates) for structured outbound; use Chats (/chats) for conversational service.
Categories and honesty
| Category | Compliant use |
|---|---|
| Utility | Order, appointment, account alerts users expect |
| Marketing | Offers and promos to opted-in users |
| Authentication | OTPs / verification |
Labelling marketing as utility to pass review is a policy risk — and a fast way to lose trust if users report you.
Quality rating as a compliance dashboard
On WhatsApp setup (/whatsapp/onboarding), monitor quality (Green / Yellow / Red).
If quality drops:
- Pause marketing campaigns
- Shrink to verified opt-ins
- Prefer utility messages for a cooling-off period
- Lower daily sends (Spread over time in campaigns)
- Fix copy that drives “Who is this?” replies
Pyngdesk cannot override Meta enforcement — it helps you see issues and slow down.
Campaign controls that support compliance
In Campaigns (/campaigns):
- Approved templates only
- Audience filters and tags
- Automatic exclusion of blocked contacts
- Throttled delivery windows
- Analytics for failed / delivered / read
Pair with human processes: staff in Chats must honour STOP quickly.
Regional and industry caution
Meta policies intersect with local spam, telecom, and consumer rules. Verticals such as finance, healthcare, and alcohol face extra scrutiny. This article is practical guidance, not legal advice — consult counsel for regulated campaigns.
Compliance checklist for every marketing send
- Documented opt-in for marketing WhatsApp
- Template Approved and correctly categorised
- Audience excludes blocks and non-opt-ins
- Preview reads clearly on mobile
- Throttling set for new or recovering accounts
- Team ready to process opt-outs in minutes
- Quality rating reviewed the same day
Frequently Asked Questions
Is email consent enough for WhatsApp?
Not automatically. Consent should be specific to WhatsApp messaging where required by policy and law.
Can I message people who messaged me once?
You can usually service them in-window. Long-term marketing still needs proper opt-in and templates.
Does using Pyngdesk make us compliant?
It provides controls (templates, blocks, pacing, roles). Your list practices and copy remain your responsibility.
