Anti-ban

WhatsApp ban risk matrix by type of use

The risk of a WhatsApp ban rises when you message people who did not expect to hear from you, at volume, with repeated text and no easy exit; it falls when the conversation is expected, one to one and answered. This matrix is qualitative: it ranks types of use from lower to higher risk, with no messages-per-day numbers, because WhatsApp publishes no limits and anyone who publishes one is guessing. Unofficial API use violates WhatsApp's Terms, so no level here is risk free.

Published on · 7 min read

This article is also available in: Português · Español

How to read this matrix

The classification combines three factors: who receives (do they know you), what they receive (a reply or your initiative) and how it is sent (one to one at a human pace, or bulk and repeated). It is a priority map, not a guarantee. Nothing here is a rule published by WhatsApp; it comes from reading the Terms of Service and from reported practice.

The levels are low, medium and high. Even low exists, because the platform can restrict any account that uses unauthorized automated means. The foundation is in the guide why WhatsApp bans numbers.

The matrix by type of use

Type of useRelative riskWhyWhat lowers it
------------
Replying to a customer who messaged firstLowThe person started the conversationFast replies, human text
Confirmation and reminder for someone who booked or boughtLow to mediumExpected, but repeated at scaleUseful message, calm pace, easy exit
After-sales and collection for an existing customerMediumExpected, but tone mattersCourteous tone, no pressure, opt-out
Campaign to your own list with consentMediumYour initiative, audience knows youSegmentation, text variation, intervals
New number sending from day oneHighNo usage historyGradual warm-up
Cold or purchased listHighMany reports and blocksDo not use
Same text to many people in little timeHighDetectable repetitive patternVary, space out, shrink batches
Adding people to groups without noticeHighReports and mass exitsInvite by link, consent

The honest reading: what weighs most is not the tool but the combination of cold audience, volume, repetition and lack of an exit. The more items on that list you tick, the higher the risk, with any vendor.

The five factors that move the risk

1) Relationship: a contact who has already talked to you reports less than a stranger. 2) Reciprocity: if people reply, the pattern looks like conversation. If nobody replies, it looks like blasting. 3) Repetition: identical texts to many people are easy to recognize. 4) Pace: bursts with no pauses depart from human behavior. 5) Reputation: recent blocks and reports weigh, and a new number has no history yet.

Each factor has practical levers, described in the anti-ban guide and the chip warm-up guide. If you want a ready routine, use the warm-up checklist.

How to measure your case's risk in 10 minutes

Answer yes or no: has the recipient talked to me before? Did they consent to receive this? Does my text change from person to person? Is there an interval between sends? Does the number already have usage history? Is there an easy exit that I honor? Do I track replies and complaints?

Three or more "no" answers put the case in the high band. The good news is that each "no" is fixable: asking for consent, varying the text, spacing sends and warming up the number change your position on the matrix. No adjustment removes the risk, but they take the case out of the band where restriction is likely.

Signs the risk is rising

Watch the reply rate (falling is a warning sign), messages that stay undelivered, "who are you?" replies and blocks reported by support. The API has an endpoint to check the number's current limit of new conversations, described in the reference, useful for tracking warm-up.

If the signs get worse, slow down, pause cold campaigns and go back to talking only to people who reply. Stopping early costs little; insisting costs the number. If the number falls anyway, follow the blocked number step by step.

What the matrix does not say

It does not say how many messages per day are safe, because there is no reliable public number; read how many messages per day. Nor does it say low risk is zero risk: WhatsApp can restrict any account at any time, within its Terms.

For operations where losing the number is unacceptable, the matrix points to Meta's official API, with approved templates and clear rules. See the unofficial API, an honest guide to decide.

Contingency plan: the number is a replaceable asset

Treat the number as consumable: keep a spare number already warmed up, split functions across different numbers (support, sales, collections) and keep contacts and history in your CRM, not only on the device. That way a restriction becomes an annoyance, not an outage.

This is architecture, not a promise: well organized multi-instance isolates the problem. See several numbers in one system.

Three applied cases

A clinic confirming appointments: the audience already booked, the message is useful and one to one, and there is a natural reply ("confirmed" or "I need to reschedule"). The matrix puts the case between low and medium. The watch-out is the volume of identical reminders at the same hour: spread sends through the day and vary the wording.

A shop reactivating old customers: the list is yours, but nobody has talked in months. It lands in medium to high. Segmenting by recent buyers, asking for refreshed consent and starting with a small batch changes the position. If the list has contacts from years ago, clean it first with the number check.

An agency blasting third-party lists: this is the highest-risk case on the matrix, because it combines a cold audience, repeated text and no relationship. The honest answer here is to change the model: capture contacts with consent and only then converse. If the agency's client demands this kind of blast, it is worth discussing the official API with approved templates.

Weekly checklist to keep risk low

Every week, look at five indicators: reply rate per number, number of exit requests, undelivered messages, complaints or blocks reported by the team, and recent changes to text or audience. Note what changed, because almost every problem shows up one or two weeks after a change in behavior.

If two indicators get worse together, halve the pace and go back to talking only to people who replied in recent days. If the drop continues, stop the number and investigate before insisting. This simple habit is worth more than any table of limits copied from third parties.

Quick summary

  • Risk grows with a cold audience, volume, repeated text, a relentless pace and no exit; it falls with expected, answered conversations.
  • Replying to someone who messaged first is the lowest-risk use. Cold lists and new numbers blasting are the highest.
  • The matrix is qualitative: there is no safe number of messages per day, and no level is risk free.
  • Each risk factor is fixable: consent, variation, intervals, warm-up and opt-out.
  • Keep a spare number and the contacts in your CRM: the number is a replaceable asset.

Also read

Frequently asked questions

Which type of WhatsApp API use has the lowest ban risk?

Replying to customers who messaged first, with human text and fast replies, is the lowest relative risk. Even so, unofficial API use is not provided for in WhatsApp's Terms, so no use is risk free.

How many messages per day can I send without being banned?

There is no reliable public number. What weighs is the whole: who receives, repetition, pace and the number's reputation. Avoid any promise of a safe limit.

Is a campaign to my own list risky?

It is medium risk: the audience knows you, but the initiative is yours. Consent, segmentation, text variation, intervals and an easy exit for people who do not want messages lower the risk.

Does the official API remove the matrix risk?

It swaps the risk: instead of restriction for unauthorized use, you have Meta's rules, such as approved templates and account quality. For critical channels, it is the most suitable choice.

Start with the lowest-risk use and scale up calmly

Create the account, verify your phone and receive the welcome credit with no deposit (one per phone, subject to the current campaign). Test with a secondary number and conversations the customer started.