WhatsApp Terms of Service: What Really Gets a Number Banned

Everyone clicks "accept." Almost no one reads. And then, on some random afternoon, the app opens with a gray screen warning that the number is banned, and your entire client list goes up in smoke.

It’s not bad luck. It’s not a crazy algorithm. A WhatsApp ban is the execution of a contract. You signed a document when you installed the app, you signed another when you downloaded WhatsApp Business, and every message that leaves your phone is measured against those texts.

It is worth understanding the scale before anything else. In the monthly reports that WhatsApp publishes in India, the number of banned accounts reached 5.1 million in June 2026 alone, with 1.37 million blocked proactively, before any user reports. In the first report of this series, the company stated that over 95% of bans came from the unauthorized use of automated or bulk messaging. No country is exempt. What exists are people operating within the rules and people operating outside of them.

This article deals with the standard WhatsApp and the WhatsApp Business app—the one you download from the store and use directly on your phone. The official API has its own set of rules and deserves a separate text.

slug: why-whatsapp-accounts-get-banned-contract-rules

slug: which-documents-govern-your-number

Which documents govern your number

Many people think there is "the WhatsApp terms of use," in the singular. There are at least four, and they stack up.

WhatsApp Terms of Service. This is the common user contract, effective as of January 4, 2021. The version for the European Economic Area was updated on August 17, 2026, which shows that the document remains active even when the global version's date does not change.

Messaging Guidelines. Last updated on February 16, 2024. This is the text that defines what applies to individual conversations, groups, communities, calls, and status, and it is where WhatsApp explains how it enforces rules without reading encrypted content.

WhatsApp Business Terms of Service. Also from February 16, 2024, with a new version already announced and scheduled to take effect on September 23, 2026. Those who use the Business App need to follow this transition.

Commercial Messaging Policy. Updated in May 2026. This is the most operational document of the four: it talks about opt-in, identity, prohibited sectors, and enforcement.

Add to this Meta's Commerce Policy, which governs catalogs and sales, and the Intellectual Property Policy. A legal detail that almost no one notices: the terms are written in English, and the text itself states that if there is a conflict with the translation, the English version prevails. If your defense depends on a comma, it depends on the comma in English.

The clause that separates personal from commercial

Here is the first trap, and it catches both those who use the common app and those who use Business.

The common user contract expressly prohibits "any non-personal use" of the service without authorization. Selling through regular WhatsApp, with broadcast lists and improvised catalogs, is already operating outside the contract you accepted.

On the other hand, the Business Terms require you to declare three things: that you will use the service only for commercial and not personal purposes, that you are at least 18 years old and authorized to represent the company, and—the most forgotten part—that you have never been suspended or removed from commercial services before. Anyone who has been banned and opened a new account with another number has just violated the contract at the moment of registration, regardless of what they do afterward.

There is also a discreet phrase in the middle of the Business document that strikes down a very common use in Brazil: commercial services are not intended for internal company use. That Business App serving as a channel between teams, without a customer on the other side, is outside the intended purpose.

slug: activities-that-take-down-a-number

The activities that take down a number

I will list these in order of actual frequency, not legal severity.

1. Mass broadcasting and unauthorized automation

This is the absolute champion. The Terms of Service specifically mention "sending illegal or impermissible communications such as bulk messaging, auto-messaging, auto-dialing, and the like." The Messaging Guidelines repeat the prohibition of unofficial clients, bulk messaging, automation, and auto-dialing used to harm the service or users.

The point that confuses business owners: automation is not prohibited in itself, but the Business App was not made for volume. Third-party tools that connect spreadsheets to the application and fire off hundreds of messages per hour reproduce exactly the pattern that detection systems look for. Machine cadence, identical text, contacts who have never replied.

2. Modified applications and unofficial clients

GB WhatsApp, YoWhatsApp, "modified" WhatsApp Business, and company. The terms prohibit reverse engineering, altering, modifying, or creating derivative works of the service, and prohibit creating software that functions substantially the same as WhatsApp and is offered to third parties without authorization.

Two points of confusion appear here, and it’s worth clearing both up. First: a detected mod usually results in a ban without warning, because the unofficial client is identifiable at the moment of connection. Second: since May 2026, there has been an official WhatsApp Plus, a paid Meta subscription that in Brazil costs around R$ 7 per month and delivers themes, customization, and more pinned conversations. It shares the same name as the pirate mod that has circulated for years but is a completely different thing. The official one is contracted inside the application, in the subscriptions area. Any "WhatsApp Plus" downloaded via an APK link is the other one—the one that gets you banned.

3. Talking to those who did not ask to be contacted

The Commercial Messaging Policy is literal: you may only contact someone on WhatsApp if that person gave you their number and if you received opt-in permission confirming they want to receive your messages or calls.

These are two cumulative requirements, not one. Having the phone number is not enough. Purchased databases, event lists, numbers scraped from classified sites—all of these fail the second test. And the policy places the entire responsibility on your shoulders: it is up to you to determine the opt-in method and prove that it complies with applicable law.

4. Accumulated blocks and reports

slug: whatsapp-ban-reasons-negative-feedback-identity-prohibited-sectors

This is the quietest and most fatal mechanism. The Business Terms state that WhatsApp uses information reported by other users—including when they block you or submit your messages as part of a complaint—to decide if a violation has occurred. Furthermore, the termination clause provides for cutting off access when the company "receives an excessive amount of negative feedback."

Notice that no one needs to prove anything. A high volume of blocks within a short window is sufficient evidence to limit reach, reduce delivery, or suspend the account.

5. Ignoring opt-out requests

The terms require that the company honors and complies with all user requests to stop receiving messages, including removing the person from the contact list. The policy calls for clear opt-out instructions and strict adherence to them.

Those who send "reply STOP" and continue blasting messages to someone who replied STOP are violating the easiest clause to prove.

6. Profile name and identity

A detail that often goes unnoticed and causes many account rejections. The Business Terms state that the business name cannot be false, misleading, or defamatory; it cannot parody third parties or include character symbols, excessive punctuation, or trademark designations; and it cannot infringe on others' trademarks.

That profile name in the style of "⭐ STORE X OFFICIAL ⭐⭐" with little stars and three exclamation points violates the contract by form, even before any discussion regarding content. Pretending to be another company, or speaking in the voice of a brand without permission, is a direct violation of the policy.

7. Prohibited sectors and regulated sectors

The Commercial Messaging Policy has a list of prohibited activities: firearms, alcohol and tobacco, drugs of any nature, medical and healthcare products, endangered species, live animals (excluding livestock), hazardous materials, real, virtual or fake currency (including ICOs and binary options), body parts or fluids, gambling and betting for real money, adult products, dating services, multi-level marketing, and predatory lending such as payday loans, salary advances, P2P lending, debt collection, and bail bonds.

And the policy explicitly states that these prohibitions apply regardless of any licenses, registrations, or approvals your business may have, whether global or local.

There is a list of country-specific exceptions for some regulated sectors, and Brazil appears on it for over-the-counter (OTC) medications and alcohol. However, the exception comes with a restriction that changes everything for the audience of this article: it is forbidden to send messages about any regulated vertical via the WhatsApp Business App. The exceptions apply only to the official platform (API). In the app, the answer is no, with no asterisks.

8. Sensitive data and customer conversation

Three practical rules that break entire customer service operations: Do not ask for or receive full credit card numbers, financial account numbers, or government ID numbers. Do not use data obtained in the conversation for purposes other than sustaining that specific conversation. And do not forward information from one customer's chat to another customer, which includes the habit of sharing conversation screenshots as social proof.

9. Fraud, scams, illegal content, and adversarial behavior

This is where the heavy part of the terms resides: content that exploits or endangers children, support for terrorist organizations, coordination of violent crimes, trafficking, and illicit drug trade. It also includes attempts to undermine the platform's integrity systems, abuse reporting tools, compromise others' accounts, and scrape data.

It is worth noting a clause that few people know: filing a fraudulent report or an unsubstantiated appeal is, in itself, a violation provided for in the terms.

10. Account creation by automated means

The terms prohibit creating accounts through unauthorized or automated means and collecting information about users in an unpermitted manner. Operations that buy SIM cards in bulk and register numbers via bots are in violation before the first message is even sent.

slug: how-whatsapp-detects-violations-and-punishment-levels

How WhatsApp finds out if messages are encrypted

This is the question that always arises, and the answer is written in the Messaging Guidelines.

WhatsApp acts based on the limited information available to it: basic account data, group profiles, community profiles, business profiles, and messages that other users report. Automated processing is the backbone of the process and decides on its own in cases where account behavior is highly likely to be in violation. The rest goes to human review teams, distributed by region and specialty.

Translating into practice: no one needs to read your text to know that you sent six hundred messages in twenty minutes to contacts who never replied. The sending pattern is visible. The profile name is visible. The photo is visible. And when someone reports you, the messages from that specific flow go along with the report.

The levels of punishment

It's not just "ban" or "no ban." The Guidelines list the scale: user warning, temporary suspension, permanent suspension, blocking activity in groups and communities, removal of profile information from servers, and revocation of invitation links.

On the commercial side, the Business Terms give the company the right to limit, reduce the sending rate, suspend, or terminate the account, depending on the type and circumstance of the violation. There is also a quality system: people block and report, and the systems limit how many messages that company can send and how many calls it can initiate if quality remains low for a prolonged period.

The harshest level rarely appears in market conversations. If the account is terminated for violation of terms or policies, WhatsApp may prohibit you and your organization from any future use of the platform's products and services. It's not the number that dies. It's the Tax ID (CNPJ).

The scale shows severity, not a mandatory sequence. Heavy violations, such as using modified apps or criminal content, jump straight to permanent banning, without warning and without a counter.

slug: what-to-do-when-the-number-is-banned

What to do when the number falls

If the ban is temporary, the only correct action is to wait for the timer to reset. Trying to bypass it, switching the SIM card to another device, reinstalling, or opening the account on another phone signals evasion and tends to worsen the situation.

If the ban is permanent, the official path is the request review button within the app itself. Write short and factual: how the number is used, why you believe there was an error, and confirmation that you do not use modified apps or mass-blasting tools. Long, emotional text does not help because the review is procedural.

Adjust your expectations. In reports from India, June 2026 recorded 15,182 complaints received through official channels with action taken on 414 accounts—roughly 2.7%. Ban appeals are the largest group of these complaints and the ones that reverse the least.

If the account is on the Business App, there is also a review flow through the Meta Business Help Center, and a formal complaint channel via email for suspension and termination issues, as provided for in the Business Terms themselves.

Regarding data, the commercial contract states that once an account is terminated, the profile leaves the platform and associated data is retained for up to 90 days, with copies potentially remaining for a limited time in backup. This does not mean you can recover the history. It means it exists on their side for a period of time.

And the rule that seals the matter: in the event of termination, the company may not create another business account on WhatsApp without express written permission. The classic "grab another SIM card and start over" workaround is foreseen and prohibited in the text.

How to operate without flying under the radar

A summary of what separates a healthy operation from a burned one, in both the standard app and the Business App:

Collect genuine opt-ins, with a record of when and how the person authorized it, categorized by message type. Maintain a complete business profile with a clean name, no symbols, and an alternative contact channel. Respect opt-outs on the same day. Write messages that generate responses, because two-way conversation is the best quality signal that exists. Treat volume as a symptom: if your plan requires mass-blasting, the app is the wrong tool and the official API is the path provided for in the contract. Monitor blocks as a business metric, not as a detail. And review the terms periodically, with special attention to the September 23, 2026 update in the Business Terms.

slug: whatsapp-ban-faq-and-conclusion-mci

Frequently Asked Questions

Does sending messages to people who don't have my number saved cause a ban? Not by itself. What matters is the combination: unsolicited contact, lack of response, blocking, and reporting. High volumes of messages to people who don't know you produce exactly this combination.

Are broadcast lists prohibited? The broadcast list is a native feature and is not prohibited. The problem is the usage: broadcasting to those who haven't opted-in reproduces the mass messaging pattern that the terms forbid.

How many messages per day can I send on the Business App? There is no number published by Meta. There is a principle: the app was designed for small-scale, personalized communication. Human cadence, messages that differ from one another, and conversations with replies are worth more than any magic number circulating in salesperson groups.

Does a temporary ban become permanent? It can, if the behavior continues or if there is an attempt to circumvent the restriction during the period.

Does buying a "ban removal" service work? There is no paid reversal channel. Anyone charging for this is selling the same review button that is inside the application, for free.

Is using regular WhatsApp for selling illegal? Not illegal. Contractually irregular, yes, because the standard user terms prohibit non-personal use without authorization. A business that sells uses the Business App or the official API.

The text has been there all along

What is striking, after re-reading the four documents, is how little is ambiguous. Meta has written clearly what it does not want: messages no one asked for, non-official clients, doubtful identity, industrial volume in a retail tool.

The Brazilian market has built an entire culture of workarounds on top of this, and then calls it an injustice the day the account goes down. Reading the terms is not legal bureaucracy. It is the description, in open text, of the behavior that keeps a number alive.