More than just messaging rules
The Acceptable Use Policy sits above the Messaging Policy and Commerce Policy and applies to every WhatsApp user, business or personal. It is a short document but it has the broadest reach because breaching it can lead to permanent termination of all accounts associated with you, including your personal number.
Illegal activity
You may not use WhatsApp to facilitate, promote or commit anything illegal in either your jurisdiction or the recipient's. This covers obvious cases like fraud, drug trafficking, and human trafficking, but also less obvious ones like organising unlicensed gambling pools or selling counterfeit goods.
Harm to people
Threats, harassment, stalking, intimidation, and incitement to violence are absolutely prohibited. So is content that exploits, sexualises or endangers minors, which Meta treats as a zero-tolerance category with mandatory law enforcement reporting. Hate speech targeting people based on race, religion, gender, sexual orientation, disability or other protected characteristics also falls here.
Harm to the platform
You may not attempt to reverse-engineer WhatsApp, scrape user data, build unofficial clients, or run automation that mimics human behaviour at scale. The infamous "WhatsApp mods" like GBWhatsApp violate this clause and Meta routinely bans phone numbers detected using them. Bulk-sender tools that drive thousands of messages from a single regular account also fall under this prohibition.
Misinformation and impersonation
You cannot impersonate another person or business, spread coordinated misinformation, or run inauthentic behaviour campaigns. This includes pretending to be customer support for a brand you do not represent or running fake giveaways in another company's name.
Privacy violations
Sharing someone else's private information without consent, also known as doxxing, is a violation. So is using WhatsApp to record or distribute non-consensual intimate imagery. The platform's end-to-end encryption does not exempt users from these rules; reports from recipients are sufficient evidence for action.
Enforcement
Meta enforces the policy through a mix of automated detection and user reporting. Most actions are silent: rate limiting, feature restrictions or full bans appear without warning. Appeals exist but the burden of proof sits with the user, and decisions are usually final.
Why this matters for businesses
If your personal WhatsApp number is banned for abuse, you can lose access to the WhatsApp Business app on the same number. Some bans extend across the broader Meta ecosystem, taking down your Facebook ads account in the process. Treat the AUP as the foundation, not an afterthought.