Send bulk WhatsApp Business messages: why opt-in is mandatory

If you're about to send a WhatsApp campaign and you stopped because you read that you need opt-in from every contact, the short answer is: yes, it's mandatory and it's not a step you can skip. Opt-in is the prior, explicit, recordable consent that a person gave you to receive messages from you on WhatsApp. Without that consent, any mass send stops being a campaign and becomes an unsolicited message, and that's where the problems start: template blocks, account restrictions and, in the worst case, losing the number. The good news is that it can be done right, and it's done right from the first contact, not in a rush the week you want to launch the promotion.

What exactly does "opt-in" mean on WhatsApp Business

Opt-in means that the person clearly agreed to receive messages from your business on WhatsApp. It's not enough that they wrote to you once to ask about a price or that their number is in your customer list. The consent has to be for that: to receive communications from you through that channel. And it has to be provable.

The key distinction is between a message that responds to something the person started and a message that you start. When someone writes to you first, you're inside a conversation that person opened. When you start the contact — a promotion, a reminder, a news update — you're starting a conversation, and for that you need prior opt-in. Most of the blocks I see in small businesses come from mixing up those two situations: because the customer "already knows me," it's assumed you can write anything to them at any time. WhatsApp doesn't work that way.

Why Meta requires opt-in: it's not bureaucracy, it's the model of the channel

WhatsApp is built on a promise: that the messages that arrive are from someone the person knows or chose. If that promise is broken, the channel fills up with spam and people stop opening messages. Meta protects that promise with rules, and opt-in is the main one. It's not an obstacle designed to complicate your marketing: it's the condition that keeps the open rate high, which is what makes WhatsApp worth it for a business.

That's why the consequences of skipping it are serious. When many recipients mark a message as spam or block the number, your account quality deteriorates. That quality is what Meta looks at to decide how much it can trust your number. If it drops, your sends start being limited and templates can be suspended or the account restricted. In the most serious cases, the number is lost. And recovering a WhatsApp Business number isn't an instant process: it depends on the case and on Meta's review, so you shouldn't plan counting on that.

The reasons a campaign gets blocked (and it's almost always one of these four)

• You bought or imported a contact list and sent a promotion to those people without their consent.
• Your customers wrote to you at some point, but they never explicitly agreed to receive communications from you on WhatsApp.
• The opt-in exists, but it isn't recorded anywhere: you can't prove when or how that person agreed.
• You sent a campaign to contacts who had agreed, but a long time ago and with a frequency they no longer expected. Consent isn't forever and doesn't cover every type of message.

Notice that all four causes have something in common: they aren't technical problems. There's no configuration error causing them and no checkbox you forgot to tick. They're process problems, and that's why they're fixed by changing how you capture and store consent, not by calling support.

How to get the opt-in: where and when to ask for it

The best time to ask for the opt-in is when the person is already interacting with you and is clear about why they're letting you write to them. If you ask cold, without context, the acceptance rate is low and the consent is weak. If you ask at the right moment, it's almost natural.

• At checkout or when closing a purchase: "Do you want us to let you know on WhatsApp when your order is ready?"
• At the counter or over the phone, when the customer leaves their number for something specific: make it clear that you'll also write to them on WhatsApp and ask them to confirm.
• On a web or Instagram form: an unchecked box, with a phrase stating what they'll receive and how often.
• When someone writes to you first on WhatsApp: use that conversation to ask if they want to receive updates, and keep a record of that answer.
• On a QR code in the store that opens a chat with a pre-written message requesting sign-up.

How to record and organize consent so you can prove it

Getting the opt-in is half the work. The other half is being able to show it if Meta asks for it or if a contact complains. If you don't have a record, in practice it's as if you didn't have consent: you can't defend it.

1. 1Define a source of truth: a spreadsheet or your contact system where each person is listed with their consent status.
2. 2Save, for each contact, the date they accepted and the channel they used (form, counter, chat, QR).
3. 3Tag contacts according to the type of consent: someone who accepted order notifications is not the same as someone who accepted promotions.
4. 4Before each campaign, filter and send only to contacts who have consent for that type of message.
5. 5Have a clear opt-out channel at hand: whoever asks not to receive more is removed from the list the same day and it's recorded.
6. 6If you use a tool to manage contacts, take advantage of tags to separate those who accepted from those who didn't.

If you work with Wando, the inbox and tagged contacts are useful precisely for this: you can mark who accepted what and filter before building a campaign, instead of sending to the whole list and crossing your fingers. It's not magic and it doesn't replace your process, but it organizes the part that gets neglected the most, which is having consent at hand when you need it.

Templates, campaigns and opt-in: how they combine

When you start a conversation with someone who hasn't written to you in the last few hours, you'll normally need a template approved by Meta. Template approval can take up to 48 hours, and that's the only timeframe you should take as certain: Meta doesn't guarantee any other. The template is the format; the opt-in is the permission. They're two different things and you need both.

A common mistake is believing that because the template was approved, everything is fine and you can send it to anyone. No: approval means the text complies with the format and content rules, not that you have permission to write to that person. If you send an approved template to contacts without opt-in, you'll still get spam reports. And reports are what lowers your account quality the fastest.

How to prevent the problem from coming back: opt-in as part of the process, not as paperwork

The way to avoid having this problem again is to stop treating opt-in as something you resolve before a campaign and make it part of how you capture customers every day. Every person who enters your database should enter with their consent recorded, not with a pending item for later.

• Add the opt-in request in the same place where you already ask for the phone number: if the data enters there, the permission enters there.
• Train whoever handles the counter or the phone to ask for and record consent, not just the number.
• Review your database from time to time and clean out contacts without recorded consent. A smaller, consented list performs better than a large, questionable one.
• Measure your campaigns by response and opt-out rate, not just by how many messages went out. Many opt-outs in a row are a sign that you are writing to the wrong people.
• Always leave a simple way to unsubscribe, and honor it immediately.

When the real problem is something else and opt-in is only the symptom

Sometimes the opt-in is fine and the campaign still fails. If you receive spam reports even though you have recorded consent, it is worth looking at other causes before assuming the problem is the permission.

• Frequency: you send too often and people get tired, even if they accepted. Consent does not authorize saturating.
• Segmentation: the message does not speak to whoever receives it. A contact from one city receives a promo from another branch, or a wholesale customer receives retail prices.
• Send time: writing at 3 in the morning generates instant blocks, even if the permission exists.
• Content: the message looks like misleading advertising or promises something that is not delivered, and that triggers the report.
• Expectation: the person accepted order notifications and receives promotions. They accepted one thing and get another.

If you reviewed all of this and the problem persists, or if your account has already been restricted, the path is Meta's review and not an adjustment on your part. In those cases the resolution time varies depending on the case and it is not advisable to promise deadlines: what you can do is organize the consent record so you can respond if asked, and stop sending campaigns until you understand what happened. Continuing to send while the account is under review only makes the diagnosis worse.

Quick checklist before hitting send

• Did all the contacts in this campaign give their explicit consent for this type of message?
• Can you show when and how they gave it, if asked?
• Is the template, if you use one, approved and does its text match what the person expects to receive?
• Does the message have a clear way to unsubscribe?
• Are the frequency and time of the send reasonable?
• Did you segment, or are you sending the same thing to the entire database?

Mandatory opt-in is not the enemy of your campaigns: it is what makes them work. A contact list of people who agreed to receive your messages opens, replies and buys. A purchased list or one with no record generates blocks and leaves you without a channel. The difference between the two is not technical, it is a matter of method, and it is built from the very first contact.