By TBLTeam No, unsolicited WhatsApp marketing is not legally safe in India. Promotional WhatsApp messages should be sent only after clear user consent or opt-in.
WhatsApp has become one of the strongest business marketing channels in India. A small coaching centre sends admission offers. A salon shares festival discounts. A real estate broker sends project videos. A local shop owner forwards catalogue images. A finance agent sends loan messages. For businesses, WhatsApp feels direct, cheap, personal, and powerful.
But this same power has created a serious problem: spam. Many users now receive random promotional WhatsApp messages from unknown numbers, agents, bots, bulk senders, and businesses they never contacted. That raises one important question: Is unsolicited WhatsApp marketing legal in India?
The practical answer is no, not in a clean legal sense. WhatsApp marketing itself is legal, but sending promotional messages without consent, using scraped numbers, ignoring opt-outs, misleading users, or mass-spamming people can create legal, regulatory, platform, and reputational trouble.
WhatsApp Marketing Is Legal Only With Consent
A business can use WhatsApp for marketing, customer support, order updates, offers, reminders, booking confirmations, and product communication. But the key condition is consent.
WhatsApp’s own Business Messaging Policy says a business may contact people on WhatsApp only if the person has given the business their mobile number and the business has received opt-in permission confirming that the person wants to receive future messages or calls. The same policy also says businesses must respect requests to block, discontinue, or opt out of communications.
So, if a user filled a form, ticked a WhatsApp updates box, messaged the business first, opted in through a website, or clearly agreed to receive offers, the business is on safer ground. But if the number was taken from a database, directory, Telegram group, old customer list, scraped website, or purchased lead sheet, the risk becomes much higher.
Random Bulk WhatsApp Messages Are Risky
Many businesses think WhatsApp spam is safe because it is not exactly the same as SMS marketing. That is a dangerous assumption.
TRAI’s commercial communication framework mainly deals with telecom resources such as bulk calls and SMS. TRAI says businesses using telecom resources for bulk messages must fulfil regulatory requirements under TCCCPR, 2018, including registration and content-template requirements for commercial messages.
WhatsApp is an internet-based messaging platform, not ordinary SMS. Still, the same business principle applies: users should not be surprised, deceived, spammed, or targeted without permission. WhatsApp’s policy makes opt-in mandatory for business messaging, and India’s privacy law strengthens the consent requirement where personal data like phone numbers is used for marketing.
DND Rules and WhatsApp Marketing
India has a National Customer Preference Register, commonly known as DND. TRAI says consumers can block all commercial calls and SMS, or selectively block categories such as banking, real estate, education, health, consumer goods, communication, entertainment, IT, tourism, and leisure.
DND directly applies to telecom commercial communication like calls and SMS. It may not work exactly the same way for WhatsApp messages. However, if a business is using WhatsApp to escape DND restrictions and continue aggressive marketing, that is not a good compliance strategy. It can still lead to customer complaints, account bans, privacy concerns, and consumer protection issues.
DPDP Act: Phone Number Is Personal Data
A phone number is personal data when it can identify a person. India’s Digital Personal Data Protection Act, 2023 applies to digital personal data and recognises both the right of individuals to protect their personal data and the need to process such data for lawful purposes. India Code lists consent, notice, lawful processing grounds, correction, erasure, grievance redressal, and penalties as part of the Act’s framework.
This matters because WhatsApp marketing usually requires collecting, storing, uploading, segmenting, and using mobile numbers. If a business uses people’s numbers for promotional messages without proper notice or consent, it may face privacy compliance risk.
A safe business should collect WhatsApp consent separately and clearly. The user should know that they are agreeing to receive promotional messages on WhatsApp. Consent hidden inside a long form, pre-ticked checkbox, or vague “updates” line is not a strong practice.
Existing Customers Can Also Say No
Some businesses think they can message anyone who once bought something from them. That is not always safe.
If a customer gave a phone number only for delivery, billing, warranty, or appointment confirmation, using the same number later for repeated promotional WhatsApp campaigns may go beyond the original purpose. Transactional updates are different from marketing blasts.
For example, sending “your order has been shipped” is a service update. Sending “buy 3 more products today, last chance offer” is promotional marketing. A business should keep these two categories separate.
Opt-Out Must Be Easy
A proper WhatsApp marketing message should give users an easy way to stop future messages. For example, “Reply STOP to unsubscribe” or “Message STOP if you do not wish to receive offers.”
WhatsApp’s Business Messaging Policy clearly says businesses must respect requests to block, discontinue, or opt out of communications and remove that person from their contacts list where required. It also says businesses should not spam, surprise, confuse, deceive, defraud, or mislead people through communications.
Ignoring unsubscribe requests is one of the fastest ways to lose customer trust and face platform action.
WhatsApp Business API Rules Are Stricter
For larger businesses using the WhatsApp Business Platform or API, the rules are even more structured. WhatsApp says businesses may initiate conversations only using approved message templates, and outside the 24-hour customer service window, they may only send messages through approved templates.
This means serious brands cannot simply upload a random Excel sheet and start blasting promotional messages. They need opt-ins, approved templates, proper category selection, privacy policy, consent records, and opt-out handling.
Misleading WhatsApp Ads Can Create Consumer Law Trouble
Even if consent exists, the message content must be truthful. A WhatsApp campaign saying “guaranteed job,” “100% loan approval,” “lose 10 kg in 7 days,” “government-approved investment,” or “limited seats” when the claim is false can become misleading advertising.
Consumer authorities in India have actively acted against misleading ads. In 2026, the CCPA imposed a ₹15 lakh penalty on a coaching institute for misleading advertising related to civil services exam results.
So, WhatsApp is not a private loophole. A promotional message sent on WhatsApp can still be an advertisement.
Safe Way to Do WhatsApp Marketing in India
A business should use WhatsApp marketing only with a clean opt-in system. Collect consent through website forms, invoices, landing pages, QR codes, in-store forms, or customer chats. Keep proof of consent. Mention the type of messages the user will receive. Avoid bought databases. Never scrape numbers. Do not add people to groups without permission. Give a simple opt-out option. Honour opt-outs quickly. Do not make false claims. Keep customer data secure.
FAQs
Q1. Can I send WhatsApp offers to old customers?
A: Yes, but only if they have agreed to receive WhatsApp promotional messages, or your communication is genuinely related to an active transaction. A past purchase does not automatically give unlimited permission for future marketing.
Q2. Can I buy a mobile number database and send WhatsApp promotions?
A: No, this is highly risky. Purchased databases usually do not come with valid WhatsApp marketing consent from users. It can violate platform policy, create privacy risk, and lead to spam reports or account blocking.
Q3. Is adding people to a WhatsApp group for business promotion legal?
A: It is risky without consent. Adding people to a promotional group exposes their phone numbers to other members and may feel intrusive. It is better to use opt-in broadcast lists, WhatsApp Business tools, or official API-based campaigns.
Q4. Can users complain about unwanted WhatsApp marketing?
A: Yes. Users can block and report the sender on WhatsApp. For calls and SMS, TRAI allows users registered under NCPR/DND to complain through 1909 or the DND app. For WhatsApp-specific spam, platform reporting and privacy complaints are more relevant.
Q5. Is WhatsApp marketing safer than SMS marketing?
A: Not automatically. SMS has a clearer TRAI/DLT framework, while WhatsApp depends heavily on user consent, privacy compliance, platform policy, and message quality. A consent-based WhatsApp campaign is safe; random bulk WhatsApp spam is not.