WhatsApp Business setup checklist for a small business

For a lot of businesses in Kerala and across the Gulf, WhatsApp is not a marketing channel bolted onto the business — it is where the business happens. Which means the platform's rules are not a marketing detail. They are operational risk, and most businesses discover them the week their number stops delivering messages.

This checklist covers setup and the habits that keep a number healthy. Where a rule belongs to Meta rather than to us, it is cited at the bottom with the date we last checked the page.

1. Choose which WhatsApp you are on, once

• Decide whether the number is one a human answers on a phone, or one a system answers. That single decision determines which WhatsApp product you need, and it is expensive to reverse after customers have saved the number.
• Check the current rules on moving an existing number between WhatsApp products before you commit a number customers already use. Meta documents this; read it rather than assuming.
• Whichever you choose, use a number the business controls — not a staff member's personal number. When that person leaves, the number and every conversation on it leave too.
• Write down who has access to the account, and review it whenever someone leaves.

2. Display name and business profile

• Assume your display name will be reviewed and can be rejected. Check the current display-name rules before you print the number on a board, a prescription pad or a school circular.
• Use the name customers already call you, not a marketing slogan. The display name is how a stranger decides whether to trust an unknown number.
• Fill in the business category, a description that says plainly what you do, your address, your hours, an email and your website. A half-filled profile reads as a scam to exactly the customers you most want to reassure.
• Check the profile photo is legible at the size it actually appears in a chat list — about forty pixels. Detailed logos become grey smudges.
• If you enable a catalogue, commit to keeping it current. A catalogue with last year's prices creates arguments at the counter.

3. Opt-in: get it before you need it

Meta's WhatsApp Business Messaging Policy requires businesses to obtain opt-in before sending messages to people, and it is enforced through the same signals that get numbers restricted. Treat consent as a record you keep, not a box someone ticked once.

• Decide where you collect opt-in: the admission form, the registration slip, the appointment booking screen, the website, or a first message the customer sends you.
• Make the wording say who will message them and what about. "We may contact you" is not consent anyone can point at later.
• Keep the record: the date, the source, the exact wording shown, and the number it applies to. If you cannot produce that for a given number, you do not have opt-in for it.
• Make opting out one word, honour it the same day, and keep a list of who opted out so a later import cannot resurrect them.
• Never message a purchased or scraped list. It is the fastest route to a restricted number, and it is a breach of the policy cited below.
• Do not treat "they messaged us once, two years ago" as standing consent to send them offers today.

4. The 24-hour window

When a customer messages you, a 24-hour customer service window opens, and inside it you can reply with free-form messages. Outside it, you can only send a pre-approved template. Since 1 November 2024, service conversations — the ones the customer starts — are free for all businesses; and since 1 July 2025 Meta charges per message delivered rather than per conversation. There is also a 72-hour free entry point window when someone reaches you through a Click to WhatsApp ad or a Facebook Page call-to-action button.

• Design your flows so the important message lands inside a window somebody opened, or is a template you already had approved. Fighting the window never works.
• Anything that invites a reply — a queue token, a payment link, "reply YES to confirm" — opens a free window you can then work inside. That is the whole cost-control strategy, in one line.
• Tell your front-desk staff the window exists. Otherwise a reply that silently fails at 11am the next day looks to them like the software being broken.

5. Template categories are a pricing decision

• Write templates that survive review: say who is messaging, why, and what the recipient should do. Vague templates get rejected, and rejection is slow.
• Keep variables to what genuinely varies. A template with eight placeholders is a template that will one day send a customer a sentence with a blank in it.
• Categorise honestly. A promotional message dressed as utility is the cheapest short-term trick available and the most expensive long-term one.

6. What quietly gets a number restricted

• People blocking or reporting you. This is the signal that matters most, and it does not care whether your message was technically permitted.
• A falling template quality rating. Meta rates templates on how recipients respond, and low-quality templates can be paused — which means the message you depend on simply stops going out.
• Sending beyond your messaging limit tier. Limits scale with the quality of your number and how many people you have messaged; a sudden broadcast to a list far larger than usual is exactly the pattern that trips them.
• Messaging people who never opted in — including a list imported from an old system without checking consent came with it.
• Content the Business Messaging Policy prohibits. Read that list once, properly. It is shorter than you expect and it includes categories businesses do not think of themselves as being in.
• A display name that does not match the business people think they are talking to.

7. Five minutes before your first broadcast

• Send the template to five colleagues first, on their own phones, and read it as a stranger would.
• Check it on an older Android handset — the one your customers actually own, not the one on your desk.
• Check it in every language you send in, including right-to-left if you send Arabic. Punctuation and numbers are where this goes wrong.
• Test the opt-out. Reply with the word and confirm it is honoured.
• Test what happens when someone replies. Who sees it, on which device, and how fast? A broadcast that nobody is staffed to answer is worse than no broadcast.

8. The ongoing habits

• Check your quality rating weekly, not after something breaks.
• Keep the opt-out list clean, and check it before every send.
• Review templates each quarter — most businesses accumulate templates nobody uses and one that is quietly wrong.
• Watch the ratio: for every promotional message you send, how many conversations did customers start? A healthy business number is mostly answering, not mostly broadcasting.
• Never let one person be the only one with access to the account.