WhatsApp Business API: what it can and cannot do

The WhatsApp Business API lets a business connect its WhatsApp number to its own software, so several people can reply from one number and systems can send messages automatically. It cannot be used to message people who never agreed to hear from you, and it restricts what you can send outside a short reply window. Knowing those limits before you build saves a lot of rework.

What is the WhatsApp Business API?

It is the official way to use WhatsApp at business scale, offered by Meta through the WhatsApp Business Platform. Most businesses reach it through an approved provider, who handles the connection and often supplies a shared inbox.

This differs from the WhatsApp Business app, which is a free phone app made for very small teams. The app is fine until you have several people replying, want to automate confirmations, or need chats linked to your CRM or orders. The API is built for those cases.

What can you do with it?

The common and well-supported uses are:

• Order, booking and payment confirmations sent automatically from your system.
• Reminders for appointments, fee dues, renewals and deliveries.
• A shared team inbox, so several agents handle one number with assignment and notes.
• Click-to-chat from your website, adverts and QR codes, which creates a conversation and a lead.
• Answers to routine questions using menus, buttons and lists, or an assistant connected to your information.
• Sending payment links and collecting documents or feedback.
• Linking chats to a CRM, booking system or help desk so history is not lost.

Indian and Gulf customers already use WhatsApp every day, so it often outperforms email for confirmations and reminders. We cover the details on our page about WhatsApp Business API integration.

What are the main rules?

Three ideas explain most of the platform.

Opt-in. People must agree to receive messages from you. Capture this clearly on your forms, at checkout or in a first conversation, and keep a record. Under India's Digital Personal Data Protection Act, 2023, consent must also meet the Act's standards for notice and withdrawal.

The customer service window. When a customer messages you, you can reply freely for 24 hours from their last message. After that window closes, you may only start a conversation with an approved template message.

Templates. These are pre-written messages, with fields you can fill in, that Meta reviews and approves. They fall in categories such as utility (order updates) and marketing (offers). Meta charges per message according to its published pricing, which has changed over time, so check the current rate card and your provider's fees.

What can't you do?

These are the limits businesses most often run into.

• You cannot message people who have not opted in, or use purchased or scraped lists.
• You cannot send a free-form message to start a conversation outside the 24-hour window. A template is needed.
• You cannot send templates that Meta rejects. Vague, misleading or pushy wording is a common cause.
• You cannot use the same number on the normal WhatsApp app at the same time as the API, unless you use a coexistence setup that your provider supports. Check this early.
• You cannot rely on it for sensitive details, such as full card numbers or passwords, in chat.
• You cannot ignore quality. If many recipients block or report you, your messaging limits can drop and your number can be restricted.
• You cannot expect every provider to behave the same. Features such as inbox tools, analytics and flow builders differ.

How do you handle opt-in properly?

Add a plain checkbox or message at the point you collect the phone number, explaining what you will send and how often. Do not pre-tick it. Store when and how the person agreed. Make it easy to stop: honour "stop" replies immediately and keep a suppression list. This protects your number as much as it protects the customer.

Our work in Trust, Security & Compliance covers consent records and notices; we implement the technical side, and your counsel advises on interpretation.

How long does setup take?

Mostly it depends on three things: verifying your business with Meta, getting templates approved, and connecting your systems. Business verification and template reviews run on Meta's schedule, so submit early. The build itself depends on how many flows you want and how many systems are involved. A small first release with a handful of well-made flows is better than a long menu nobody uses.

Where does AI fit in?

You can connect an assistant that answers routine questions from your own content, such as opening hours, prices you have approved, availability or order status, and hands over to a person when needed. Meta's terms limit general-purpose chatbots on the platform, so it needs a clear business use and a human fallback. See when an AI agent is worth building and whether an AI assistant can answer customer enquiries on WhatsApp. A quick way to find where this helps in your business is an AI Opportunity Audit.

A short checklist before you start

• List the five messages you send most often by hand.
• Decide what customers can opt in to, and where.
• Choose a provider and confirm inbox, reporting and integration features.
• Plan your number: new, or moved from an existing app.
• Draft templates with clear, honest wording.
• Decide who answers, and when.

We build these integrations under Application Development. This is the kind of work we do for stores, clinics, schools, travel firms and service businesses. To discuss yours, Let's Talk.