Instagram DM automation is now common for creators, shops and service businesses, but the rules behind it are spread across several pages of Meta's developer documentation. This FAQ collects the questions we're asked most often and answers them in plain English, based on Meta's Instagram Platform and messaging policy documentation as of October 2026.
It's general guidance, not legal advice, and Meta does update these rules, so check the current documentation before you build anything important.
Can my business send the first DM to someone?
No. Through Meta's official API, a conversation starts only when the person interacts with you first. Common starting points are:
- sending you a DM;
- replying to your Story;
- commenting on your post or Reel (which allows a private reply, covered below);
- tapping an ig.me link to your account and messaging you;
- messaging you after tapping a Click-to-Direct ad.
There is no compliant way to cold-message people who have never interacted with your account.
What is the 24-hour messaging window?
Once a person messages you, you have a standard messaging window to respond. For most actions it lasts 24 hours, and each new message from the person opens a fresh window. During the window, your messages can be automated and can include promotional content, such as a product link or a discount code.
There's one notable exception: when someone sends their first message after tapping a Click-to-Direct ad, the window can last up to 7 days from that message.
How do comment-to-DM automations fit the rules?
They use a feature called private replies. When someone comments on your post, Reel or ad, your app can send that person one private message in reply. The key limits are:
- One message per comment. You can't send a sequence in response to a comment alone.
- Within 7 days of the comment being made.
- Instagram Live is different: private replies to Live comments can only be sent during the broadcast.
- Follow-ups only if they reply. If the person responds to your private reply, the standard 24-hour window opens and the conversation can continue.
The private reply includes a reference to the post they commented on. If the person follows you, it lands in their main inbox; if not, it goes to their message Requests. That's worth remembering when you write it: make the first line clear and friendly so it doesn't look like spam.
Can I message people after the window closes?
Only in limited cases. Meta offers a Human Agent tag that lets a person on your team reply manually within a separate 7-day period, which is useful when a customer question needs research or a colleague's input. It's meant for real human responses, not automated or promotional messages.
Several features that exist on Messenger are not available on the Instagram Messaging API, including One-time Notifications, Sponsored Messages and news messaging. In practice, that means no broadcasts to past commenters and no "remind everyone next week" campaigns on Instagram DMs.
Do I need to tell people they're talking to a bot?
Where the law requires it, yes. Meta's policy says automated chat experiences must disclose that they're automated at the start of a conversation, after a significant lapse of time, and when a chat moves from a person to automation. Meta specifically calls out users in California and Germany. Even where it isn't required, Meta recommends disclosure as best practice. A light touch works fine: "Hi, this is the automatic assistant for Bloom Studio. A person on the team will follow up if you need more help."
Do I have to offer a human?
Meta's documentation describes escalation paths for automated experiences, either a custom inbox in the same app or a handover to another app with a human agent. Whatever the exact requirement for your setup, offering a person is the right call. Automate the repeat questions and send anything about orders, complaints, health, money or personal circumstances to a human.
Which accounts can use messaging automation?
Instagram professional accounts, meaning Business or Creator accounts. Tools that serve accounts they don't own need Advanced Access from Meta, which involves app review. That's one reason to choose an established tool that connects through Meta's official login and never asks for your password.
What can an automated message contain?
According to Meta's messaging documentation, messages can include text, links, images, videos, audio, PDF files, stickers, reactions, templates and your own Instagram posts. A few practical limits:
- Text messages must be 1,000 bytes or less, so keep DMs short (accented characters and emoji use more than one byte).
- You can only share media and posts your account owns.
- Group messaging isn't supported; each conversation is one business and one person.
Are browser bots and "growth" tools that log in as me allowed?
Tools that use your password to automate actions in the app, mass-follow, mass-DM or scrape followers aren't using the official API. They break Meta's terms and can get your account restricted. If a tool asks for your Instagram password, walk away.
How fast should an automated reply be?
Meta's platform policy expects automated bots to respond to all user input within 30 seconds. That section is written for Messenger bots, but it's a sensible standard on Instagram too. Speed is the main reason to automate in the first place.
What about personal data?
If your flow collects names, emails or phone numbers, collect only what you need, say why you're collecting it and follow the privacy laws that apply to you, such as GDPR, UK GDPR, the CCPA in California or the LGPD in Brazil.
How do I keep up when the rules change?
Meta's messaging policy page was updated as recently as September 2026. Bookmark Meta's Instagram Platform documentation, review your flows every quarter, and choose a tool provider that updates its product when the platform changes.
A quick checklist
- Every flow starts with something the person did.
- One private reply per comment, within 7 days.
- Follow-ups only after they reply, within 24 hours.
- Disclose automation where required, and offer a person.
- No passwords, no unofficial tools, no broadcasts.
If you're looking for a tool that builds these limits in, AutoPilotDM is an Instagram-only option on Meta's official API, covering comment to DM, keyword and Story auto replies, lead forms and human handover, with a 7-day trial to test it on your own posts.
Written by the AutoPilotDM Team. This FAQ is general guidance based on Meta's public documentation as of October 2026 and is not legal advice. Always check Meta's current Instagram Platform documentation and the laws that apply to your business.
Top comments (0)