WhatsApp has over 2 billion users worldwide. If your customers are on WhatsApp (and they probably are), a bot can handle inquiries 24/7, book appointments, and qualify leads — while you sleep.
But there's a catch: do it wrong, and Meta will restrict or ban your number. I've seen businesses lose their primary WhatsApp number because they used the wrong tool, sent messages to people who didn't opt in, or scaled too aggressively.
This guide covers how to build a WhatsApp bot properly — which API to use, how to avoid bans, and what a realistic setup looks like.
TL;DR
- Official API (via BSP) — safe, verified, but costs $50-100/month + per-message fees. Best for established businesses
- WAHA (unofficial, open-source) — free, flexible, but not endorsed by Meta. Risk of account restrictions. Best for small businesses starting out
- Ban prevention — get opt-in before messaging, don't send bulk unsolicited messages, respond to conversations (don't just broadcast)
- Realistic cost — $1,000-4,000 setup + $5-100/month ongoing, depending on your approach
Two Ways to Connect: Official API vs. WAHA
This is the first decision you'll make, and it affects everything else — cost, reliability, features, and risk.
Option 1: Official WhatsApp Business API
The WhatsApp Business API is Meta's official solution for businesses. You access it through a Business Solution Provider (BSP) like Twilio, 360dialog, or MessageBird. (If you want a full breakdown of BSPs, fees, and the onboarding process, see our WhatsApp Business API guide.)
How it works:
- Sign up with a BSP
- Verify your business with Meta
- Get a dedicated phone number (or use an existing one)
- Send and receive messages through the API
Pricing (as of March 2026):
- BSP monthly fee: $50-100/month (varies by provider)
- Per-conversation fees (set by Meta):
- Marketing conversations: ~$0.035/conversation (varies by country)
- Utility conversations (order updates, etc.): ~$0.005/conversation
- Service conversations (customer-initiated): free for the first 1,000/month
- Template messages must be pre-approved by Meta
Pros:
- Officially supported — no risk of account bans for API usage
- Green checkmark verification available
- Template messages for outbound messaging
- Higher rate limits
- Multi-device support built in
Cons:
- Per-message costs add up at scale
- BSP adds another vendor and monthly cost
- Template approval process can be slow (24-72 hours)
- Less flexibility — you can only do what the API allows
Option 2: WAHA (Unofficial WhatsApp API)
Important: WAHA is NOT an official WhatsApp product. It's an open-source project that provides API access to WhatsApp by connecting through WhatsApp Web's protocol. Meta does not endorse or support it.
How it works:
- Self-host WAHA on your server (Docker)
- Scan a QR code with your WhatsApp number (like WhatsApp Web)
- Send and receive messages through WAHA's REST API
Pricing:
- WAHA Core: free and open-source
- WAHA Plus: paid version with additional features
- Your only cost: server hosting ($5-20/month)
Pros:
- No per-message fees
- No template approval process
- Full flexibility — send any message type
- Open-source — you can inspect and modify the code
- No BSP middleman
Cons:
- Not endorsed by Meta — using it technically violates WhatsApp's Terms of Service
- Risk of account restrictions if you trigger spam detection
- Relies on WhatsApp Web protocol — can break when WhatsApp updates
- No green checkmark
- Phone must stay connected (though WAHA handles multi-device well)
Which Should You Choose?
| Scenario | Recommendation |
|---|---|
| Established business, customer communications | Official API |
| Marketing campaigns and broadcasts | Official API (with opt-in) |
| Small business, responding to incoming messages | WAHA can work well |
| Testing and prototyping | WAHA (lower cost to experiment) |
| Highly regulated industry (healthcare, finance) | Official API |
| Budget-conscious startup | WAHA to start, migrate to official later |
In our experience, many small businesses start with WAHA because the barrier to entry is lower, then migrate to the official API as they scale.
How to NOT Get Banned (Critical)
Whether you use the official API or WAHA, these rules apply:
The #1 Rule: Get Opt-In First
Never send the first message to someone who hasn't explicitly asked to hear from you. This is both a WhatsApp policy requirement and common sense.
Good:
- Customer fills out a form and checks "Contact me on WhatsApp"
- Customer sends you a message first and you respond
- Customer explicitly asks to receive updates via WhatsApp
Bad:
- You bought a list of phone numbers and blast them all
- You scrape numbers from websites and send cold messages
- You add everyone in your phone contacts to a broadcast list
Rate Limiting
Don't send hundreds of messages per minute. WhatsApp's detection algorithms look for:
- High volume in short time — sending 500 messages in 5 minutes is a red flag
- Identical messages — sending the exact same text to many numbers looks like spam
- High block rate — if many recipients block you, your quality rating drops fast
- Messaging numbers that don't have you saved — this is a strong spam signal, especially at volume
For a deeper breakdown of the exact thresholds and how WhatsApp's four-layer detection system works in 2026, see the WhatsApp spam detection guide.
Safe practices:
- Space out bulk messages (add 2-5 second delays between sends)
- Personalize messages (use the recipient's name, reference their specific inquiry)
- Keep your block rate under 2-3%
- Start slow — send to 50 people first, monitor for blocks, then scale gradually
WAHA-Specific Precautions
If you're using WAHA (unofficial API):
- Use a dedicated number — don't risk your primary business number
- Don't blast — WAHA is best for responding to incoming messages, not mass outbound campaigns
- Monitor your quality — if you notice messages not delivering, stop and investigate
- Have a backup plan — if the number gets restricted, you need to be able to switch to the official API or a new number
- Keep sessions stable — frequent disconnections/reconnections can trigger flags
Building Your Bot: A Practical Walkthrough
Here's how a typical WhatsApp bot setup looks using n8n (our preferred automation platform) and WAHA.
Architecture Overview
Customer sends WhatsApp message
↓
WAHA (receives message via WhatsApp Web)
↓
Webhook → n8n (processes the message)
↓
Logic: FAQ? Appointment? Lead? → Route accordingly
↓
Response sent back through WAHA
↓
Customer receives reply on WhatsApp
Step 1: Set Up WAHA
WAHA runs as a Docker container. Basic setup:
# docker-compose.yml
services:
waha:
image: devlikeapro/waha
ports:
- "3000:3000"
environment:
- WHATSAPP_DEFAULT_ENGINE=WEBJS
- WAHA_DASHBOARD_ENABLED=true
volumes:
- waha_data:/app/.sessions
volumes:
waha_data:
After starting it (docker compose up -d), open http://your-server:3000/dashboard, start a session, and scan the QR code with your phone.
Step 2: Connect to n8n
In n8n, create a webhook node that WAHA will call when messages arrive:
- Add a Webhook node — this receives incoming messages
- Configure WAHA to send webhooks to your n8n webhook URL
- Add a Switch node to route messages based on content
- Add response nodes to send replies back through WAHA's API
Step 3: Build Your Logic
A basic FAQ bot might look like this in n8n:
Webhook (incoming message)
→ Switch node:
- Contains "hours" or "open" → Send business hours
- Contains "price" or "cost" → Send pricing info
- Contains "appointment" or "book" → Start booking flow
- Default → "Thanks for reaching out! A team member will reply shortly."
Step 4: Add AI (Optional)
To make your bot smarter, add an AI node:
Webhook (incoming message)
→ OpenAI/Claude node:
System prompt: "You are a helpful assistant for [Business Name].
You know: [business hours, services, pricing, FAQ].
If you can't answer, say you'll connect them with a human."
→ Send AI response via WAHA
This turns your bot from a rigid keyword-matcher into a conversational agent that understands natural language.
Real-World Use Cases
These are use cases we've implemented (described in general terms):
1. Appointment Scheduling
The bot asks what service the customer needs, checks available time slots from Google Calendar, proposes options, and books the appointment — all within WhatsApp. Confirmation and reminder messages are automated.
2. Lead Qualification
When a new lead messages, the bot asks 3-4 qualifying questions (budget, timeline, requirements). Qualified leads get forwarded to a human agent immediately. Unqualified leads get a helpful resource and are added to a follow-up sequence.
3. Order Status Updates
Connected to the business's order management system, the bot responds to "Where's my order?" with real-time tracking information. No human intervention needed for 80%+ of status inquiries.
4. FAQ + Human Handoff
The bot handles common questions (pricing, hours, location, services). When it can't answer or the customer asks for a human, the conversation is routed to a support agent in Chatwoot (open-source customer support platform) — with full conversation history preserved.
What It Actually Costs
Here's a realistic breakdown for a small business:
DIY with WAHA + n8n (self-hosted)
| Component | Monthly Cost |
|---|---|
| VPS (2GB RAM) | $5-20 |
| WAHA | Free (Core) |
| n8n | Free (self-hosted) |
| OpenAI API (if using AI) | $5-50 (depends on volume) |
| Total | $10-70/month |
Professional Setup (someone builds it for you)
| Component | Cost |
|---|---|
| Bot development | $1,000-4,000 (one-time) |
| Hosting + maintenance | $25-75/month |
| AI API costs | $5-50/month |
| Total | $1,000-4,000 setup + $30-125/month |
Official API Route
| Component | Monthly Cost |
|---|---|
| BSP subscription | $50-100 |
| WhatsApp conversation fees | $20-200 (depends on volume) |
| n8n or automation platform | $0-25 |
| Total | $70-325/month |
Common Mistakes I See
1. Going straight to mass messaging. Build a bot that responds to incoming messages first. Get that working well. Then — and only then — consider outbound campaigns, and always with opt-in.
2. Not planning for human handoff. No bot handles 100% of conversations. You need a clear path for escalating to a human agent. We use Chatwoot for this — the bot handles routine questions, and complex issues are seamlessly transferred to a person.
3. Ignoring the conversation window. With the official API, you have a 24-hour window to respond to a customer's message for free. After that, you need to use a pre-approved template (which costs money). Design your bot to respond instantly.
4. Overcomplicating the bot. Start with 5-10 common questions. Get those right. Then expand. A bot that handles 10 things well is better than one that handles 50 things poorly.
5. Not testing with real users. Your team will use the bot differently than your customers. Test with actual customers (or friends who can pretend to be customers) before going live.
Beyond the Bot: Scaling Into Full Automation
A WhatsApp bot is usually the first automation businesses deploy — but it's rarely the last. Once you have conversations flowing in, the natural next steps are:
- AI agents for business — move from scripted replies to autonomous agents that handle multi-step tasks (lookup orders, escalate tickets, schedule appointments) without hand-written flows.
- Broader business automation — the same n8n instance that powers your bot can automate invoicing, CRM updates, lead routing, and inventory sync. One workflow engine, many business processes.
- Dedicated customer service chatbots — once your WhatsApp flow is stable, the same stack can power an omnichannel support bot (web chat + Messenger + email) with ticket routing and SLA tracking.
Most of our clients start with a WhatsApp bot and expand outward as they see ROI.
Getting Started
Building a WhatsApp bot doesn't have to be complicated or expensive. Start with a clear goal ("I want to handle appointment bookings automatically"), choose your API approach, and build from there.
If you want help building your WhatsApp bot — whether it's a simple FAQ responder or a full AI-powered agent — reach out to us. At Achiya Automation, we specialize in WhatsApp bots, business automation, and CRM integration using open-source tools.
Contact us or message us directly on WhatsApp — we practice what we preach.
Top comments (0)