How to collect WhatsApp opt-ins (and stay compliant)
Opt-in is the boring rule that quietly decides whether your WhatsApp channel thrives or gets your number banned. Here's how to collect consent properly — with wording you can copy.
Two stores send the same festive offer to 5,000 people on WhatsApp. One store's messages land, get opened, and drive sales. The other store's number gets throttled by lunchtime and restricted by the weekend. Same product, same message, same platform. The only difference: one had opt-in, the other bought a list. That's the whole game.
Opt-in isn't legal box-ticking you do to keep a lawyer happy. On WhatsApp it's the mechanism that protects your number's ability to send at all. Get it right and you build a channel with open rates email can only dream of. Get it wrong and Meta shuts you down. Let's do it right.
A valid WhatsApp opt-in is an active choice by the customer — a ticked box, a submitted form, a reply, a scanned QR — where you clearly name your business and clearly state they'll get WhatsApp messages from you. You can collect it anywhere (checkout, website widget, ads, QR codes, in store), not just inside WhatsApp. You must honour STOP and opt-outs instantly, keep a record of consent, and never message purchased or scraped lists — that's the fastest route to a banned number.
Why opt-in decides everything
WhatsApp is not email, where you can blast a cold list and shrug off the bounces. Every number you message can block or report you in one tap, and Meta watches those signals obsessively. It assigns your number a quality rating — green, yellow or red — based largely on how people react to your messages. Too many blocks and reports and your rating drops, your daily sending limits shrink, and eventually your number gets restricted or banned.
Opt-in is what keeps that rating green. People who asked to hear from you don't block you. People who didn't, do. So consent isn't a compliance chore sitting off to the side — it's directly wired to whether you can keep sending. We go deeper on protecting that rating in how to send bulk WhatsApp messages without a ban.
What actually counts as valid consent
Meta's rule is refreshingly simple, and it comes down to two things you must make explicit when you ask:
- Name your business. The person must know exactly who they're agreeing to hear from — your brand name, not a vague "we."
- State it's WhatsApp. They must understand they'll receive messages from you on WhatsApp specifically.
On top of that, consent has to be an active action — someone ticks a box, submits a form, sends a message, scans a code. A pre-ticked checkbox isn't consent. Burying it in a wall of terms isn't consent. And good practice (increasingly, the expectation) is to also say roughly what kind of messages they'll get and how to stop them.
One more thing that surprises people: you don't have to collect the opt-in inside WhatsApp. A checkbox on your checkout page is perfectly valid. The consent can live anywhere — what matters is that the two requirements above are met and you can show you got a yes.
An inbound message or a Click-to-WhatsApp ad click opens a 24-hour window so you can reply — but it is not consent to send marketing broadcasts later. To promote to that person afterwards, collect a separate, explicit marketing opt-in. Conversation access and marketing permission are two different things.
Where to collect opt-ins — with wording you can steal
The best opt-in is the one you gather where the customer is already engaged. Here are the channels that work, with example language you can adapt. Keep it plain and honest — the clearer you are, the fewer complaints later.
1. Checkout checkbox (the highest-intent moment)
An unticked, optional checkbox on your order page. People who just bought from you are your warmest audience.
"☐ Send my order updates and offers on WhatsApp. I agree to receive messages from [Your Brand] on WhatsApp. Reply STOP anytime to opt out."
2. Website widget or WhatsApp button
A "Chat on WhatsApp" button or a small form. When someone starts the chat, confirm the opt-in in your welcome flow.
"Thanks for reaching out to [Your Brand] on WhatsApp! We'll use this chat for support and, if you'd like, updates and offers. Reply STOP anytime to stop hearing from us."
3. Click-to-WhatsApp ads
Great for leads — but remember the ad click only opens a conversation. Ask for the marketing opt-in inside that first exchange, and log the yes before you ever broadcast to them.
4. QR codes (packaging, receipts, in-store, billboards)
A QR that opens a WhatsApp chat with a pre-filled message like "I'd like to get updates from [Your Brand]." The customer scanning and sending it is the active action. Put a one-line notice beside the code stating they'll receive WhatsApp messages from you.
5. Point of sale / offline
At the counter, a staff member asks and the customer says yes, or fills a short slip. Note it against their number. Verbal-with-a-record is fine as long as the two requirements were stated.
| Channel | Best for | The active action |
|---|---|---|
| Checkout checkbox | Buyers (highest intent) | Ticking the box |
| Website widget / button | Browsers & support | Starting the chat |
| Click-to-WhatsApp ads | Cold leads | Reply + explicit marketing yes |
| QR codes | Offline & packaging | Scanning & sending |
| Point of sale | Walk-in customers | Verbal yes + logged |
Turn opt-ins into a channel that sells
QuickWA captures consent across checkout, widgets, ads and QR codes, tags every contact, auto-suppresses opt-outs, and lets you broadcast to only the people who said yes. All on the official WhatsApp Business Platform — no code.
Start free →Honour STOP — instantly, every time
Consent isn't a one-way door. The moment someone wants out, you let them out. If a contact replies STOP, UNSUBSCRIBE, or tells you in any words to stop, you must stop messaging them and remove them from your future sends — immediately, not "at the next list clean-up."
This matters for two reasons. It's a firm Meta policy, and violating it is a fast track to restrictions. And practically, a customer who wanted to leave but keeps getting messages is exactly the person who'll hit "block" and "report" — the two actions that hurt your quality rating most. A decent platform (QuickWA included) detects opt-out keywords automatically and suppresses those contacts so a stray campaign can't reach them by accident.
Never buy, rent, or scrape a list
This is the one that ends businesses on WhatsApp, so it gets its own section. Do not upload purchased lists. Do not scrape numbers. Do not "borrow" your cousin's customer database.
Purchased lists are riddled with dead and wrong numbers — often a large share are invalid — and Meta's delivery system notices the failures within hours. Worse, the real people on that list never asked to hear from you, so they block and report at brutal rates. Both signals scream "spammer" to Meta, and a fresh number can go from green to restricted in a single campaign. The maths never works: you save a few days of list-building and lose the number, sometimes the whole account.
And a subtler trap for new tenants: your own old customer list isn't automatically opted-in either. Having someone's number from an order two years ago is not consent to WhatsApp them today. Start clean — re-permission them through the channels above before you send.
Keep light records
You don't need a compliance department, but you should be able to answer "how did this person opt in?" for any contact. Capture the basics: the source (checkout, QR, ad), a timestamp, and ideally the exact wording they agreed to. Most platforms tag this on the contact automatically. It protects you if Meta ever asks, and it stops you from second-guessing whether a segment is safe to message. Under India's data rules and general good practice, this quiet record-keeping is cheap insurance.
Put it to work
Clean opt-ins aren't a constraint on your marketing — they're what makes the marketing work. A list of people who genuinely asked to hear from you will out-perform a bought list ten times over, and it'll still be sending next month instead of sitting banned. Once you've got consent flowing, the next step is sending messages people are glad to get: see our guide to broadcasts that convert and how to build gentle follow-up journeys. Collect the yes properly, respect the no instantly, and your WhatsApp number stays healthy for the long haul.