WhatsApp Barred General Bots, Let Sales Agents In

By 2023, WhatsApp Business had 200 million monthly active users, with QR codes and catalogs to bring shoppers into merchant chats. In January 2026, WhatsApp barred general-purpose chatbots from its Business API; that June, its owner Meta introduced a sales agent for businesses on the service.

WhatsApp had spent years making a conversation useful to a merchant. An assistant serving the customer could use that same conversation to become the customer’s first stop for everything else. Meta can make WhatsApp a place where approved business agents act, while API terms, user permissions, and regulators determine which other agents may enter and what they can do.

Business chat acquired a workflow before it acquired an agent

In 2017, WhatsApp tested tools for businesses to talk with customers as a possible source of revenue. A business could reach someone already using WhatsApp without requiring that person to visit another destination.

By 2020, WhatsApp Business said it had 50 million users and added QR codes and shareable catalog links. A customer could discover a business elsewhere and arrive in a conversation with its products close at hand. WhatsApp added Business API option menus and more message types, including reminders, in 2021. It also introduced payments in Brazil, bringing a purchase closer to the thread where the customer and business had met.

Meta said WhatsApp Business had crossed 200 million monthly active users by 2023 and introduced tools for creating click-to-WhatsApp ads. Meta described the 2020 figure as users and the later figure as monthly active users, so they should not be treated as a precise growth multiple. The product changes show how an ad or QR code could begin a conversation and business tools could keep it moving.

A merchant’s sales agent enters a chat that already has a customer, a catalog, and a history between them. To complete a purchase, it may also need an order system, a payment step, and a handoff when it cannot finish the task. An automated reply leaves most of that work to someone else; an agent coordinating those steps can carry the customer through it.

Meta opened the sales lane and narrowed the assistant lane

In October 2025, WhatsApp changed its Business API terms to prohibit general-purpose chatbots beginning January 15, 2026, affecting assistants from OpenAI, Perplexity, and others. The restriction applied to general-purpose bots using the Business API; merchants could still automate customer service. A merchant’s agent answering a product question serves the merchant’s relationship. A general assistant available through the same channel can become a destination in its own right.

Meta made the distinction visible in June 2026 when it introduced Meta Business Agent globally for businesses on WhatsApp, Instagram, and Messenger to answer questions and help close sales. The agent follows the business across Meta’s conversation surfaces, alongside the advertising and messaging tools Meta already supplies.

European regulators challenged the other side of that arrangement. The European Commission sent Meta a statement of objections over its treatment of rival AI chatbots and warned that it could act to prevent serious harm. In March 2026, Meta agreed to offer rival general-purpose chatbots paid WhatsApp access in Europe for 12 months to avoid potential interim measures. EU regulators subsequently ordered free access while they continued their investigation. Meta and regulators were contesting the price, duration, and conditions of entry.

A secure account does not authorize an agent to spend

WhatsApp strengthened the account beneath the conversation in August 2026, adding support for multiple passkeys and allowing longer alphanumeric two-step-verification passwords in place of six-digit PINs. Stronger authentication helps establish who can enter an account. It does not establish what software may do after the account holder arrives.

That second question becomes concrete when an agent moves money. Félix, an AI-powered WhatsApp remittance platform serving Latino immigrants in the United States, raised a $200 million Series C in September 2026, including $113 million in debt. The financing shows investment behind a financial workflow carried through a familiar private channel; it does not measure how many consumers use autonomous agents there. OpenAI and Visa, meanwhile, partnered on purchases made by agents after users grant permission. Their design puts authorization between a request and a transaction, whether or not the request begins in a messaging app.

A remittance or purchase needs a record of the amount, recipient, permission, and outcome. Six major banks, including BofA and Capital One, warned in September 2026 that greater autonomy for commerce chatbots could bring more scams, fraud, and disputes. A customer who can log in securely may still approve too broad a task or need to challenge what an agent did. Consent architecture must specify the action, not merely identify the account holder. The customer needs a chance to refuse a proposed transfer and a receipt for one that goes through.

Encryption protects the thread but complicates its evidence

WhatsApp said in April 2016 that it had enabled end-to-end encryption by default for all forms of communication on a service with more than a billion users. That design helped make private chat different from a public feed. Adding an AI feature does not give the platform a general right to inspect conversations whenever it needs to explain an agent’s behavior.

Meta’s planned Private Processing system for WhatsApp message summaries and composition was designed to keep the data used by those cloud-based AI features inaccessible to Meta. That privacy design covers specified features, not every action an agent might take in a conversation. When a payment is disputed, the customer, business, and payment provider may need evidence of the authorized action without access to the entire private exchange.

Legislators and regulators have yet to settle the boundaries around private messaging itself. The EU Parliament advanced a child-sexual-abuse-material scanning proposal with an exemption for end-to-end encrypted services such as WhatsApp. Meta challenged Ofcom’s categorization of WhatsApp and Instagram under the UK Online Safety Act. Those disputes precede routine agent execution in private chats, but they bear on what a platform must verify when it cannot inspect a conversation as though it were a public post.

Other messengers are testing different admission rules

Tencent began beta testing Xiaowei, powered by WeLM and DeepSeek models, inside WeChat in June 2026. Apple approved Poke as the first AI agent for Messages for Business after Poke launched in March. Telegram had already given Premium users business-account features, including greeting messages and chatbots, in 2024. Tencent is testing an assistant inside its own app; Apple approved a third-party entrant to a business channel; Telegram packaged bots with merchant tools.

Those examples establish experimentation, not a cross-platform standard or broad consumer demand for delegated tasks in chat. Each arrangement places a different party at the gate, before anyone decides which account an agent can represent, which systems it can call, and which actions require a person’s assent.

The customer sees a continuous WhatsApp thread from the QR code to the order. Behind the last bubble sits a Business API contract deciding who was allowed to send it.