WhatsApp API Gateway: Official Cloud API vs an Unofficial WhatsApp Gateway
The phrase covers two products that could not be more different. One is Meta's own endpoint. The other is a third-party server that puppets WhatsApp Web behind your back. Only one keeps your number. WaBulkSend runs on the official Cloud API.
Free for your first 500 messages a month. No card required.
Two things called a gateway
Side by sideShort answer: A WhatsApp API gateway is any service that lets software send and receive WhatsApp messages over HTTP instead of a phone. There are two kinds. The official one is Meta's WhatsApp Cloud API, hosted by Meta, where you send approved message templates and Meta bills you per delivered template. The unofficial kind is a third-party gateway, hosted or self-run, that logs into WhatsApp Web with a reverse-engineered client and sends as if it were you. Unofficial gateways are cheaper and faster to start, and they violate WhatsApp's Terms of Service, so the number you connect can be restricted or banned. For any business that would miss its WhatsApp number, the official Cloud API is the only gateway worth building on.
Last updated July 2026. WaBulkSend runs on Meta's official WhatsApp Cloud API and is not affiliated with Meta Platforms, Inc.
What people mean by a WhatsApp API gateway
A gateway is the bridge between your systems and a messaging channel. An email gateway turns an API call into a sent email. An SMS gateway turns one into a text. A WhatsApp API gateway turns an HTTP request from your CRM, store, or script into a WhatsApp message, and turns incoming replies into webhooks your systems can read. That much every gateway has in common.
The difference is what sits on the other side of the bridge. With the official Cloud API, the other side is Meta. You register a phone number to the WhatsApp Business Platform, get your message templates approved, and post them to Meta's Graph API. Meta does the delivery and reports back the status of each message. There is a contract, a billing relationship, and a rulebook.
With an unofficial gateway, the other side is a copy of WhatsApp Web running on someone's server, or on yours. You scan a QR code to link your account to it, and from then on the gateway impersonates the WhatsApp app to send your messages. There is no contract with Meta, because Meta did not agree to it. Open-source libraries like Baileys and whatsapp-web.js are the engines behind most of these, and gateways such as Wablas, along with the many QR-scan bulk senders, wrap that engine in a dashboard.
Official Cloud API vs unofficial WhatsApp gateway
The honest version, including the two rows where an unofficial gateway genuinely wins.
| Question | Unofficial gateway | Official Cloud API |
|---|---|---|
| Who delivers the message | A server running WhatsApp Web as you | Meta |
| Approved by WhatsApp | No, it breaks the Terms of Service | Yes, this is the sanctioned route |
| Cost per message | Often free or near free, a real advantage | Meta bills per delivered template |
| Time to first send | Minutes, a real advantage | Hours, business verification and template review |
| Ban risk to your number | High and permanent | None from sending as designed |
| Delivery and read receipts | Unreliable or none | Per recipient, with error codes |
| Survives a WhatsApp app update | Breaks until the library is patched | Stable, it is a versioned API |
| Sends promotional messages to US numbers | Until the number is blocked | No, US marketing templates are paused |
| Fit for a business-critical number | No | Yes |
The two advantage rows are real. An unofficial gateway costs almost nothing per message and starts in minutes. If you are testing an idea against a handful of contacts who already know you, from a number you would not miss, it is the fastest path. Everything else on this table is why businesses move off it.
Why an unofficial gateway gets your number banned
It is not bad luck, and it is not a rumor spread by paid vendors. WhatsApp's Terms of Service, under acceptable use, prohibit "sending illegal or impermissible communications such as bulk messaging, auto-messaging, auto-dialing, and the like," and separately prohibit any attempt to "reverse engineer, alter, modify, create derivative works from, decompile, or extract code from our Services." An unofficial gateway does both by definition. Reverse-engineering the WhatsApp Web protocol is how it exists at all.
Enforcement is automatic. Meta's spam systems watch three signals: how fast a number sends, how many recipients have never messaged that number before, and how many block or report it. A cold list run through a gateway spikes all three in an afternoon. The number gets rate limited, then restricted, then banned, and the chat history goes with it. A banned WhatsApp number is difficult to recover, and the appeal is a web form.
There is a second, quieter failure mode. Because an unofficial gateway rides on a reverse-engineered client, a routine WhatsApp app update can change the protocol and break every gateway using that library at once. Your automation stops until the open-source maintainers ship a patch, which can take days. The official Cloud API is a versioned product Meta maintains, so it does not break when the consumer app changes. If messages leaving reliably matters to your business, that difference alone decides it.
What actually reaches a US number through the official gateway
Be clear on one restriction before you build. Since April 1, 2025, Meta has not delivered marketing-category template messages to United States phone numbers. Through the Cloud API a marketing send to a US number fails with error 131049. Meta has announced no resume date. An unofficial gateway ignores that block because it is not going through Meta's business pipeline, which is exactly why the promo lands for a while and then the number disappears.
What does reach US numbers on the official path is most of what a business actually needs: order and shipping updates, appointment reminders, payment and account alerts, one-time passcodes, and every reply inside the 24-hour customer service window that opens the moment a customer messages you first. Inside that window there is no template and no per-message charge. Utility templates delivered inside an open window are free too.
For promotion there is a compliant route that does reach US numbers: the free entry point. Run a click-to-WhatsApp ad or add a WhatsApp button to your Facebook Page, and anyone who taps it opens a 72-hour window where every message both ways is free. That is the play US businesses use instead of blasting a cold list through a gateway. Meta does not publish per-message dollar rates in its developer docs, only downloadable rate cards, so treat any exact cent figure you see quoted with suspicion.
How to choose a WhatsApp gateway you will not regret
Four checks that separate a real gateway from a liability.
Ask what it connects to
If the setup step is scanning a WhatsApp Web QR code, it is an unofficial gateway automating your session. If it asks you to register a number to a WhatsApp Business Account and get templates approved, it is the official Cloud API. This one question settles the ban-risk conversation.
Look for delivery receipts
The official API returns sent, delivered, read, and failed with an error code for every message. Unofficial gateways usually cannot, because WhatsApp Web does not expose that data to a script. No per-recipient status is a tell.
Check the pricing shape
Official gateways pass through Meta fees plus their own platform fee, priced per message or per month. A gateway that is simply free at any volume is almost certainly unofficial, and the cost has moved onto your number.
Read the terms it asks you to accept
A compliant provider makes you agree to Meta commerce and messaging policies and opt-in requirements. A gateway that asks for nothing but your QR scan has skipped the part that keeps your number alive.
Frequently asked questions
What is a WhatsApp API gateway? +
A WhatsApp API gateway is a service that lets your software send and receive WhatsApp messages over HTTP instead of through a phone. The official version is Meta's WhatsApp Cloud API, where you send approved templates and Meta delivers them. Unofficial versions are third-party servers that log into WhatsApp Web with a reverse-engineered client and send as if they were you.
Is an unofficial WhatsApp API safe? +
No, not for a number you care about. Unofficial WhatsApp APIs and gateways work by automating WhatsApp Web, which WhatsApp's Terms of Service prohibit under the clauses banning bulk messaging and reverse engineering. Meta's spam systems detect the pattern and can restrict or permanently ban the connected number, taking the chat history with it.
Is there a free WhatsApp API gateway? +
Free gateways exist, and nearly all of them are unofficial tools that automate WhatsApp Web at the cost of your number's safety. The official Cloud API is not free: Meta bills per delivered template, though replies inside the 24-hour service window and utility templates delivered inside that window carry no charge. There is no free version of the sanctioned route.
What is the difference between the official and unofficial WhatsApp API? +
The official WhatsApp API is Meta's own Cloud API: you register a number, get templates approved, and Meta delivers your messages and reports their status. An unofficial API is a third party impersonating the WhatsApp app to send your messages without Meta's involvement. One is a contract with Meta, the other is a workaround Meta actively bans.
Can a WhatsApp gateway send bulk marketing to US numbers? +
The official gateway cannot, because Meta has paused marketing-category templates to United States numbers since April 1, 2025, and the send fails with error 131049. An unofficial gateway will push the promo through your automated session and it lands for a short time, until the resulting blocks and reports get the number banned. The compliant way to reach US numbers with promotion is the free entry point from a click-to-WhatsApp ad.
Do I need to keep my current WhatsApp number for the official API? +
You cannot use the same number in both places. Registering a phone number to the WhatsApp Business Platform removes it from the WhatsApp and WhatsApp Business apps permanently. Most businesses register a new or secondary number for the API and keep their existing number for chats on a phone.
What powers most unofficial WhatsApp gateways? +
Most are built on open-source libraries such as Baileys and whatsapp-web.js that reverse-engineer the WhatsApp Web protocol. The gateway wraps that engine in a dashboard and an HTTP interface. Because the engine imitates the consumer app, a routine WhatsApp update can break every gateway using it at once, until the library is patched.
Use the gateway Meta actually built
Approved templates, real delivery receipts, and a number that stays yours. Free for your first 500 messages a month, no card required.
Start Free