WhatsApp Marketing Rules in India: Opt-In, DPDP (2026)
Most WhatsApp numbers that get restricted belong to ordinary businesses, not spammers. A sweet shop uploads every customer number from an old Excel sheet, sends one Diwali offer to everyone, and watches the block rate climb.
WhatsApp's rules aren't complicated, but software enforces them and nobody calls to warn you. You just see a lower quality rating, a paused template or a lower sending limit.
This guide covers the rules for the WhatsApp Business Platform (API) as of October 2026, in the order you'll run into them.
This is practical guidance, not legal advice. For your specific situation, especially around India's data protection law, talk to a lawyer.
Costs are covered separately in WhatsApp Business API pricing in India.
1. Opt-in: the foundation
Before you send someone a template message, they have to have opted in to WhatsApp messages from your business. Meta's opt-in guidance asks you to:
- Say who they're opting in to. Name your business clearly.
- Say what they're opting in to. For example "order updates and offers on WhatsApp". You can collect one opt-in that covers several types of message, or separate opt-ins per type. Meta notes that separate opt-ins by category reduce the risk of people blocking you.
- Give a way out. Explain how to opt out of each type of message, and honor it.
Where you can collect it: Meta accepts any method that meets these requirements and the law. That includes a website form, SMS, an IVR call, or in person and on paper.
What counts in practice
| Situation | Opt-in for marketing? |
|---|---|
| Customer ticked "Send me offers on WhatsApp" on your website form | Yes, if the text named your business and the message types |
| Customer messaged you first asking about a product | You can reply within the 24-hour window. That chat isn't consent to future promotions |
| Customer gave their number on a bill for delivery | Covers order updates at most, not offers. Ask separately |
| A number from an old Excel sheet or a bought list | No |
| Lead from a Meta lead form | Only if the form included a WhatsApp opt-in question |
Keep proof. For each contact, record when they opted in, where (form, store, chat) and what they agreed to. The day a customer complains, or Meta asks, you'll be glad you did.
2. Templates and categories
Outside the 24-hour customer service window, you can only send pre-approved templates. Each template has a category:
- Marketing: offers, announcements, greetings, re-engagement.
- Utility: updates about something the customer did or requested, such as an order, a booking or a payment.
- Authentication: one-time passwords.
Common mistakes
- Promotional content in a utility template. "Your appointment is confirmed. Also, 20% off whitening this week." That's marketing. Meta can re-categorise mis-labelled templates, and then the marketing price applies.
- Vague templates. Templates are reviewed automatically, usually within 24 hours. Clear, specific templates with sample values get approved faster.
- Too many variables. A template that is just a single variable looks like a way around review.
Template quality. Meta rates each template GREEN, YELLOW or RED, based on how people react to it, including blocks and reports. Low-quality templates can be paused and then disabled.
3. Phone number quality and messaging limits
Your number has a quality rating too. Your messaging limit is the number of unique people you can start conversations with in a rolling 24 hours. It moves through tiers:
250 → 2,000 → 10,000 → 100,000 → unlimited
From Meta's documentation:
- Limits apply per business portfolio and are shared across all the numbers in it.
- Reaching 2,000: complete business verification, or send 2,000 delivered messages outside service windows within 30 days using high-quality templates.
- Scaling up: Meta raises the limit automatically when quality is high and you've used at least half your current limit in the past 7 days.
Per-user marketing limits. Meta also caps how many marketing messages one person receives from businesses. The cap moves with how engaged that person is.
- If you hit it, the message fails with error 131049.
- Retrying too soon makes it worse. Meta advises waiting at least 24 hours.
- If a user has stopped marketing messages from you, sends fail with error 131050. Treat that as an opt-out.
4. The AI chatbot rule (from 15 January 2026)
In October 2025 WhatsApp updated its Business Solution Terms to bar general-purpose AI chatbots from the Business Platform. The rule applied to new users from 15 October 2025 and to all existing users from 15 January 2026. That's why ChatGPT-style assistants left WhatsApp.
Banned: open-ended assistants where the AI is the product, such as bots that answer anything, write essays or act as a companion.
Still allowed: AI that supports a specific business job, such as:
- customer support and FAQs about your business;
- bookings and appointment reminders;
- order tracking and delivery updates;
- lead qualification and routing to the right person.
How to design a compliant business bot
- Give it one job. "Answer questions about our services and book a visit" is a job. "Help with anything" is not.
- Answer only from approved information: your price list, services, hours, policies. If the answer isn't there, say a person will confirm.
- Decline off-topic requests politely ("I can help with bookings and questions about our clinic").
- Hand over to a human when asked, on complaints, on low confidence, and after a set number of turns.
- Never invent prices, discounts or medical, legal or financial advice.
5. India's data protection law (DPDP) in brief
India notified the Digital Personal Data Protection Rules, 2025 on 14 November 2025. That set the timeline for the DPDP Act, 2023. Reports describe a phased rollout, and the exact dates are worth re-checking as they near:
- Some provisions apply immediately.
- Consent manager registration follows in about 12 months.
- Core obligations such as notices, consent and security safeguards follow in about 18 months.
Penalties for the most serious failures, such as not keeping reasonable security safeguards that leads to a breach, can reach ₹250 crore.
For WhatsApp marketing, the direction is clear:
- collect consent in plain language, for a stated purpose;
- make withdrawing consent as easy as giving it;
- limit who on your team can export contact lists;
- delete what you no longer need.
A WhatsApp opt-in done properly under Meta's rules already covers much of this. The details still belong with a lawyer as the deadlines approach.
6. A safe broadcast routine
Illustrative example: a D2C skincare brand planning a Diwali offer.
- Segment: only contacts with a marketing opt-in who bought in the last 12 months or clicked a message in the last 90 days.
- Exclude: anyone who replied STOP, anyone with error 131050, and anyone who complained.
- Template: a marketing template with a clear offer, an end date, and a "Reply STOP to opt out" line.
- Pace: send in batches across the day, not all at 9:00 am.
- Watch: template quality and the block/report signal in WhatsApp Manager for 24 hours. If quality drops to YELLOW, pause the rest.
- Follow up only with people who engaged. Don't resend to people who never opened it.
Compliance checklist
- [ ] Opt-in text names the business and the message types
- [ ] Opt-in proof stored (time, source, wording)
- [ ] STOP and opt-out keywords handled automatically
- [ ] Error 131050 treated as a marketing opt-out
- [ ] Error 131049 backed off for 24 hours or more, no immediate retries
- [ ] Templates honestly categorized; no promotions inside utility templates
- [ ] Template and number quality checked after every broadcast
- [ ] Business verification completed (raises your messaging limit)
- [ ] Bot limited to specific business tasks, with human handover
- [ ] Contact exports restricted; old data deleted on a schedule
FAQ
Can I send WhatsApp marketing messages to customers who gave me their number?
Only if they opted in to WhatsApp messages from your business, with your business named and the type of messages stated. Giving a number for delivery or billing is not consent to promotions.
Is ChatGPT banned on WhatsApp?
General-purpose AI chatbots are barred from the WhatsApp Business Platform from 15 January 2026. Business bots that handle specific tasks, such as support, bookings and lead qualification, are still allowed.
What happens if my WhatsApp quality rating drops?
Low-quality templates can be paused and then disabled. Number quality affects your messaging limit. Reduce sends, improve targeting and fix the template before sending again.
What is error 131049 on WhatsApp?
It means the message was not delivered because of Meta's per-user marketing limits. Meta advises waiting at least 24 hours before retrying, since early retries can extend the block.
Does India's DPDP Act apply to WhatsApp marketing?
WhatsApp contact data is personal data, so the DPDP Act's consent and security principles apply as its obligations phase in under the 2025 Rules. Get legal advice for your specific case.
Where BeeCMO fits. BeeCMO Messenger Bee stores opt-in proof for every contact. It handles STOP automatically and treats Meta's 131049 and 131050 errors correctly. Broadcasts are paced and need owner approval. Its lead qualifier is task-specific by design: it answers only from your approved facts and hands over to your team. Set up compliant WhatsApp messaging →
Sources
Checked 12 October 2026.
- Meta, getting opt-in for WhatsApp: https://developers.facebook.com/documentation/business-messaging/whatsapp/getting-opt-in
- Meta, templates overview (categories, review, quality, re-categorization): https://developers.facebook.com/documentation/business-messaging/whatsapp/templates/overview
- Meta, messaging limits: https://developers.facebook.com/documentation/business-messaging/whatsapp/messaging-limits
- Meta, per-user marketing message limits (131049): https://developers.facebook.com/documentation/business-messaging/whatsapp/templates/marketing-templates/per-user-limits
- respond.io, WhatsApp general-purpose chatbot ban (dates, allowed uses): https://respond.io/blog/whatsapp-general-purpose-chatbots-ban
- Business Standard, Meta bans AI chatbots from WhatsApp Business API: https://www.business-standard.com/technology/tech-news/meta-bans-ai-chatbots-from-whatsapp-business-api-chatgpt-to-shut-down-jan-2026-125102200335_1.html
- BDO India, DPDP Rules 2025 (notification and phased timeline): https://www.bdo.in/en-gb/news/2025/digital-personal-data-protection-rules-2025-%E2%80%94-check-provisions,-implementation-plan,-penalties
- exchange4media, DPDP penalties up to ₹250 crore: https://www.exchange4media.com/digital-news/dpdp-act-2025-penalties-for-confirmed-violations-can-reach-rs-250-crore-149360.html