Last updated July 2026

WhatsApp Opt-In: Message Examples, Policy, and Requirements

Meta requires opt-in permission before you message anyone on WhatsApp. Since November 2024 that opt-in no longer has to be WhatsApp specific, but it does have to say two things. Generate wording that says them.

Start free What Meta requires

Wording built from Meta's published policy requirements. Check it against your own counsel and your state's consent laws before you ship it.

Opt-in wording generator

Your business name What you will send Where you collect it

Consent wording

First message to send

The short answer

A WhatsApp opt-in is permission a person gives you to message them on WhatsApp. Meta's Business Messaging Policy allows you to contact someone only if they gave you their mobile number and confirmed they want to receive messages from you. The opt-in does not have to be collected on WhatsApp, and since the November 2024 policy update it does not even have to name WhatsApp as the channel.

What it does have to do is make two things unmistakable: that the person is agreeing to receive messages, and which business will be sending them. Get those two right, keep a dated record of the wording each person saw, and honor every opt-out. That is the whole compliance surface, and it is smaller than most guides make it sound.

What Meta's opt-in policy actually requires

The WhatsApp Business Messaging Policy states the rule in one sentence. Everything else that gets repeated online is either best practice or a leftover from the pre-2024 rules.

"You may only contact people on WhatsApp if: (a) they have given you their mobile phone number; and (b) you have received opt-in permission from the recipient confirming that they wish to receive subsequent messages or calls from you."

WhatsApp Business Messaging Policy

Required

The person gave you their mobile number themselves
The wording says they are opting in to receive messages
The wording names the business that will message them
You obtained it in a way that complies with the laws covering your communications
You honor every opt-out request, on WhatsApp or off it

Not required anymore

Naming WhatsApp specifically in the consent wording
Collecting the opt-in inside WhatsApp itself
A separate opt-in per message template
Submitting opt-in screenshots to Meta before you can send
A double opt-in confirmation step

That second column is where most businesses waste weeks. The old guidance told everyone they needed a WhatsApp-branded consent checkbox, and a lot of published advice still says so. Meta now puts the choice of method on you: it states that you are solely responsible for determining the method of opt-in and for obtaining it in a manner that complies with applicable law. A general marketing consent that names your business and covers messaging satisfies the platform rule. Whether it satisfies your legal obligations is a separate question, covered further down.

Where to collect WhatsApp opt-ins

Any channel is allowed. What differs is how defensible the consent record is when a customer complains or Meta reviews your quality rating.

Method	How consent is captured	Record strength	Best for
Checkout checkbox	Unticked box under the phone field during purchase	Strong, tied to an order record	Shipping and order updates
Website signup form	Phone field plus an explicit consent checkbox	Strong when the wording names you	Lead capture and product news
Click to WhatsApp ad	The customer taps the ad and messages you first	Strong, customer initiated	Paid acquisition, opens a 72 hour free window
Chat widget on your site	Visitor starts the conversation from your page	Strong, customer initiated	Pre-sales and support
QR code in store or on packaging	Customer scans and sends the first message	Strong, customer initiated	Retail, restaurants, service counters
SMS or email reply keyword	Customer replies JOIN or YES to move channels	Moderate, keep the whole thread	Migrating an existing subscriber list
Paper form or point of sale	Staff record written consent and the date	Moderate, only if the wording is logged	Clinics, dealerships, in person services
Purchased or scraped list	No permission was ever given to you	None, breaks the policy	Nothing. It gets numbers banned

The bottom row is worth dwelling on because it is the single most common way a new sender loses a number. Consent is not transferable: a list broker's opt-in named the broker or some other brand, not you, so it fails the policy on its face. We walk through what happens next in sending WhatsApp messages to a purchased list. If you are migrating from an existing channel instead, the practical playbook is in our guide to building a WhatsApp opt-in list.

WhatsApp opt-in message examples

Each of these names the business, states what will be sent, and gives an exit. Swap in your own name and message types.

Ecommerce checkout

"Yes, send me order updates and delivery alerts on WhatsApp from Northfield Goods. Reply STOP at any time to opt out."

Lead form

"I agree to receive messages from Harbor Financial about my quote, including on WhatsApp. Message frequency varies. Reply STOP to unsubscribe."

Appointment booking

"Send my appointment reminders on WhatsApp from Lakeside Dental. I can reply STOP to turn reminders off."

In store QR code

"Scan to get restock alerts and member offers on WhatsApp from Pinewood Outfitters. Reply STOP at any time."

SMS list migration

"We are moving order updates to WhatsApp. Reply JOIN to keep getting them from Rivera Auto Parts, or ignore this message to stay on text."

First message after opt-in

"Thanks for opting in. This is Northfield Goods. You will get order updates here on WhatsApp. Reply STOP any time to stop receiving them."

Notice what none of them do: bury the consent in a terms of service link, pre-tick the box, or bundle WhatsApp permission into an unrelated agreement. Meta's best practice guidance also suggests collecting consent by message category and a separate opt-in for calls, so a customer who wanted shipping alerts is not surprised by a promotion. The template side of that split is covered in WhatsApp message template examples.

What US law adds on top of Meta's rule

Meta's policy is a contract with Meta. US consent law is separate, and it is the part that carries statutory damages.

The TCPA was written for calls and text messages sent to wireless numbers, and its application to over the top messaging apps like WhatsApp has not been settled the way it has for SMS. Some practitioners treat WhatsApp as outside the statute; others advise clients to assume it is covered. Treating that uncertainty as a loophole is a bad trade. The cost of collecting proper written consent is a checkbox, and the downside of guessing wrong is per-message statutory exposure.

The workable position for a US business is simple. Collect consent to the standard you would use for SMS marketing: clear and conspicuous disclosure, an unticked box, the business name, a description of what you will send, and a dated record you can produce years later. That standard clears Meta's policy comfortably and puts you in a defensible position under state consent statutes and unfair practice rules regardless of how the TCPA question lands. Talk to counsel about your specific program rather than relying on any vendor's summary, this one included.

One US quirk affects how much of this matters day to day: Meta paused delivery of marketing category templates to US phone numbers in April 2025, so a promotional broadcast to a US list will not deliver at all right now. Utility templates, authentication codes, and replies inside an open conversation window still work normally. The practical read is in WhatsApp marketing messages.

Opt-out is the other half of the rule

The policy is explicit that you must respect requests made anywhere, not only the ones typed into WhatsApp. These six habits keep a sending number healthy.

Honor STOP everywhere

The policy covers requests made on or off WhatsApp. An email, a phone call, or a reply to your SMS all count, and the person has to come off your WhatsApp contact list too.

Process it immediately

Suppress the number the moment the request lands rather than at the next list sync. A message sent after an opt-out is the one most likely to be reported as spam.

Offer category level exits

Meta recommends letting people turn off specific message categories. Someone who mutes promotions but keeps delivery alerts stays on your list instead of blocking you outright.

Watch the block rate

Blocks and spam reports drive your quality rating. A rating drop throttles your messaging tier, which caps how many people you can reach in a rolling 24 hours.

Keep the consent record

Store the wording, the timestamp, the source page, and the version. If your number is reviewed, the record is what you have to show for it.

Re-permission stale numbers

Consent collected years ago for a different brand or a different channel is weak. Send a re-permission message before folding old numbers into an active list.

Quality rating is the enforcement mechanism most senders never see coming. It is scored from recipient feedback, and it governs your messaging tier. The tiers run 250, 2,000, 10,000, 100,000, then unlimited unique recipients per rolling 24 hours, and a rating drop moves you back down the ladder. Clean consent is what keeps you climbing it. The full mechanics are in WhatsApp bulk messaging rules.

WhatsApp opt-in questions, answered

What does opt-in mean on WhatsApp?

Opt-in means a person gave you their mobile number and confirmed they want to receive messages from your business. Meta requires both parts before you can send anything. The permission can be collected on any channel you like, such as a checkout page, a form, or a QR code, and it does not have to be given inside WhatsApp.

Do you need opt-in to send WhatsApp messages?

Yes for any message your business starts. Meta's Business Messaging Policy allows contact only where the recipient has given you their number and confirmed they want your messages. The one exception is a conversation the customer starts themselves, because messaging you first is itself the permission for you to reply inside that window.

Does a WhatsApp opt-in have to mention WhatsApp?

No, not since the November 2024 policy update. Meta accepts a general opt-in as long as it complies with the laws that apply to your communications. Naming WhatsApp is still good practice because it sets expectations and strengthens your consent record, but it is no longer a platform requirement.

What should a WhatsApp opt-in message say?

Two things are mandatory: that the person is opting in to receive messages, and the name of the business sending them. Add what you will send and how to stop. A working example: "Yes, send me order updates on WhatsApp from Northfield Goods. Reply STOP at any time to opt out."

How do I collect WhatsApp opt-ins?

The highest quality sources are an unticked checkbox at checkout or on a signup form, a QR code the customer scans, a chat widget on your site, and click to WhatsApp ads. Each captures a timestamped record you can produce later. Store the wording version each person saw, not just a true or false flag.

Can I send WhatsApp messages to a purchased list?

No. Consent is not transferable, so an opt-in collected by a list broker or another brand does not name you and fails the policy. In practice the number gets blocked and reported quickly, your quality rating falls, your messaging tier is cut, and the number can be banned outright.

Is a WhatsApp opt-in required for utility messages too?

Yes. The policy makes no exception by category, so order updates and appointment reminders need permission just like promotions do. In practice utility consent is easy to capture because it sits naturally at checkout or at the point of booking, where the customer expects to hear about their own transaction.

What happens if you message people without opt-in?

Recipients block you and report the message as spam. Both signals feed your quality rating, and a low rating drops your messaging tier so you can reach fewer unique people per day. Repeated violations lead to template rejections, restrictions on the phone number, and eventually a ban.

Send to a list that opted in

Import your contacts, keep the consent record attached to each one, and send templates, campaigns, and replies on the official WhatsApp Business Platform. Flat monthly plans with no per-message platform fee. Start free, no credit card required.

Start free See plans