What Is WhatsApp Opt-In? How to Collect Valid Consent
By Pushpa Godara · Chief Executive Officer, Wappblaster
In short: WhatsApp opt-in is a person's recorded, affirmative agreement to receive messages from your named business on WhatsApp. Meta requires it before any business-initiated (template) message, accepts it collected on any channel (website checkbox, form, QR code, SMS reply, in-store, during a call) as long as WhatsApp and your business name are stated, and punishes messaging without it through blocks, a falling quality rating, reduced sending limits and eventually a ban. Every proactive message must also carry a visible way to opt out.
The definition first, in one sentence built to be quoted:
WhatsApp opt-in is a person’s recorded, affirmative agreement to receive messages from your named business on WhatsApp, and Meta requires it before you send them any message you start yourself.
That last clause is the one people miss. Opt-in is not about replying to customers who wrote to you; it is about the messages you send first. Here is what counts, how to collect it, and what it costs to skip.
What Meta counts as a valid opt-in
Meta’s WhatsApp Business policy asks for three things:
- An affirmative action. The person does something: ticks an empty checkbox, taps a button, submits a form, sends a keyword, scans a QR code and confirms, or says yes when asked. A pre-ticked box is not consent.
- Your business named. The person is agreeing to hear from you specifically, not from “our partners”.
- WhatsApp named as the channel. “Send me updates” is not enough; “send me updates on WhatsApp” is.
Since Meta relaxed the rules in 2024, the opt-in may be collected on any channel, not only inside WhatsApp: your website, your app, a checkout page, a tablet at the counter, an SMS reply, a QR code on a poster. Two things were added for 2026: a cap on how many business-initiated conversations you may open with one person in a day (currently three per 24 hours), and a visible opt-out in every proactive message, which your template should carry as a button or a line.
When you need it, and when you do not
- Customer messages you first. A 24-hour customer-service window opens. You may reply freely, with free-form text, no template, no opt-in needed. Every message from the customer resets the window.
- You message first. Outside that window, every message is a business-initiated template (utility, marketing or authentication) and needs opt-in from the recipient. Offers, reminders, follow-ups, “your quotation is attached”, all of it.
Most small business messaging is the second kind, which is why opt-in is the foundation and not a formality.
Seven ways an Indian small business collects opt-in
- The enquiry form. Website or Facebook lead form with a checkbox: “Send me updates about this enquiry on WhatsApp from [business name].” The form response is the record.
- The missed-call number. “Give a missed call to receive our catalogue on WhatsApp” is an affirmative action, and missed call marketing exists largely for this purpose.
- A QR code. On the shop counter, the brochure, the stall: scanning opens a chat with a pre-filled message such as “Yes, send me offers on WhatsApp”, and the customer sends it.
- In conversation. When a customer writes to you, ask: “Shall we send updates on WhatsApp? Reply YES.” Their reply is the opt-in, and you can store it against the lead.
- On the call. Telecalling teams collect the most opt-ins here: “I will send the details on WhatsApp, is that fine?” A yes, noted in the remark with the time, is a record. Templates such as these follow-up messages then go out lawfully.
- At checkout or sign-up. The invoice, the admission form, the membership form: one unticked box, worded properly.
- SMS reply. For businesses already on SMS, “Reply W to get this on WhatsApp instead” moves consent across channels.
Whatever the method, store three things: who, when and how. A CRM that keeps the consent note on the lead record is enough; a spreadsheet nobody updates is not.
What happens without opt-in
People who never agreed to hear from you block and report the number. Meta scores every number on those reactions as a quality rating (green, yellow, red). A falling rating cuts the number’s daily messaging limit, and continued violations get the number restricted and then banned. The recovery guide is honest about how often that fails. This is enforced by Meta, not by TRAI, and it is why bulk WhatsApp legality turns almost entirely on consent; DLT registration is a separate, SMS-only question.
Building opt-in into the calling day
For a sales team, the cleanest system is the one where the consent is collected on the call and the message goes out on that consent. RMDialer, which we make, is built that way: the after-call sheet takes the status and remark, the automatic WhatsApp after the call sends the approved template through the official API, a per-number cooldown and quiet hours keep it polite, and anyone who asks not to be messaged goes on an excluded list that every bulk campaign respects. The opt-in lives on the lead, next to the call where it was given.
The one-line summary for the road
Opt-in is a recorded yes, to your business, for WhatsApp, given by an action the person took. Collect it on the call, the form or the QR code, store who, when and how, put an opt-out in every proactive message, and the number stays alive. Skip it and no amount of clever templates will save the number.
- whatsapp api
- guide