ChabadLabs AI FOR SHLICHUS
EN

WhatsApp Automation

Sending to your community without getting banned, the official Business routes and their 2026 rules, why self-hosted agents on WhatsApp keep disconnecting, and the safe uses (voice notes, chat exports).

On this page

WhatsApp is where most shluchim reach their community, and it is also where the group has the most stories of things that worked until they did not. The short version as of October 2026: WhatsApp is good at spotting automation, numbers do get restricted, and the safe paths are the official ones or the ones where a person still presses send.

Sending to your community

What gets numbers restricted

  • Mass-send tools. In December 2025 a shliach who had sent personalized messages through a WhatsApp sender tool for five years had his account restricted twice in one week. Support told him WhatsApp now flags third-party tools that inject messages. He went back to regular broadcast lists.
  • Pushing it too far. In March 2026 members reported that several shluchim had their WhatsApp disabled after overusing bulk tools, including the Reach app. Another member's spreadsheet uploader got blocked for 24 hours after about 200 messages, several times.
  • Volume and new chats. WhatsApp can flag you just for sending more than usual. The GabAI admin's rule of thumb, September 2026: "if you're not sending out a ton of automated or marketing messages (especially new chats), you should be good."

The builders' warning applies to texting too: "Be VERY careful with automating SMS or other bulk marketing. A small oversight and your number gets blocked or shadow banned." Carriers filter bulk texts from personal numbers as spam.

What the group trusts

  • Broadcast lists, sent by you. Slow but durable. Recipients only get them if they have your number saved.
  • One-tap personal links. Have the AI build a sheet of wa.me links with each person's message prefilled, or use the spreadsheet HYPERLINK formula, then tap and send each one yourself. Members' advice: "not too many at a time."
  • An agent that drafts, you send. In October 2026 a shlucha had Muse draft personalized texts from a list of names, with a button per person that opens the draft; she found it more reliable than Reach. Reach also still needs a tap per message.
  • The official Business Platform for real volume (below).

Start from consent: message people who expect to hear from you, and stop when someone asks. The step-by-step version is in the guide How do I use WhatsApp for outreach without getting my number banned?.

The official routes

The WhatsApp Business app is the free app on your phone. It links to other devices by QR code like the regular app, has broadcast lists and labels, and Meta has been adding business tools to it. In October 2026 a group admin walked members through a simple question-answering setup: have ChatGPT write a Google Doc of your Chabad House's information and a Google Calendar of events, then connect them under the app's Meta business tools and add example questions. Results depend on what you feed it.

The WhatsApp Business Platform (Cloud API) is Meta's official way for software to send and receive messages. You need a Meta developer app, a business phone number, an access token, an app secret and a webhook. Since July 2025 Meta charges per delivered message by category (marketing, utility, authentication, service). Outside the 24-hour window after a person messages you, you can only send pre-approved templates. From 2026-10-01 service replies are no longer free without limit: each number gets 1,000 free service messages a month, and Meta says eligible non-profits stay free beyond that through December 2027 (Meta pricing). Wrappers such as the Chat SDK WhatsApp adapter are built on the same Cloud API, not a way around it.

Meta's January 2026 rule. Since 2026-01-15 Meta's Business API terms bar general-purpose AI assistants when the AI itself is the main product. That is why ChatGPT, Perplexity and Microsoft's Copilot left WhatsApp. Businesses using AI for customer service, bookings and the like are still allowed (TechCrunch).

One shliach built his own Claude-on-WhatsApp pipeline on the official route in September 2026: a dedicated Cloud API number, a small Cloudflare Worker that accepts messages only from an allowlist of senders, and a script on his PC that runs Claude Code and replies. He said it cost nothing beyond his AI subscription at his volume, but the PC has to stay on.

Agents that live in WhatsApp

Self-hosted agents: why they keep disconnecting

NanoClaw, GabAI and Hermes Agent usually connect to WhatsApp as a linked device on a phone number, the same way WhatsApp Web does. Under the hood that is Baileys, an unofficial, reverse-engineered library. NanoClaw's own docs warn that WhatsApp may suspend or ban a personal number used this way and recommend a dedicated number (NanoClaw WhatsApp docs). NanoClaw also offers /add-whatsapp-cloud for the official API instead.

Problems the GabAI group hit, with what fixed them:

  • Disconnects and "Waiting for this message." The most common complaint of 2026. In April members traced one wave to WhatsApp's newer identity system (LID) and an outdated Baileys; upgrading to Baileys 7 and re-scanning the QR code fixed it. If logs say "logged out," the link was removed on WhatsApp's side and you have to pair again.
  • Linking a new device got harder. From late June 2026 WhatsApp started asking some accounts to confirm a new linked device with a passkey. Unofficial libraries could not complete that step, and linking timed out (Baileys issue, still open in August; a vendor's explanation). It did not hit everyone: in September a shliach linked a WhatsApp Business number by QR without trouble, while the pairing code did not work for him. NanoClaw's docs also call QR the more reliable method.
  • A security hole, now patched. On 2026-05-20 a critical Baileys flaw (CVE-2026-48063) was published that let an attacker fake messages, inject false chat history and corrupt sync data. It is fixed in Baileys 7.0.0-rc12 and 6.7.22 (advisory). NanoClaw v2026.10.0 ships 7.0.0-rc14. Ask your host to confirm your version.
  • Forwarded messages. An agent cannot read a message forwarded from a group it is not in. Share a copy instead.

Several members moved their private agents to Slack, which uses a proper bot API, and kept WhatsApp only for community groups. A heavy user dropped WhatsApp entirely in June 2026.

Dedicated number or your own?

  • Dedicated number (a spare SIM or cheap eSIM): recommended. It shows unread badges so you notice the agent's messages, and a ban does not take your personal number with it. You do have to add the number to each group.
  • Your own number: the agent lives in your "message yourself" chat. Its reminders do not show as unread and are easy to miss, and any ban hits your main account.

Hosted agents in WhatsApp

Meta's own Meta AI in WhatsApp only reads messages that mention it or are shared with it. Meta's Muse, Instinct and Tab can all be messaged on WhatsApp. Some ask to link to your WhatsApp Web, which gives them your whole account; a member warned that may break WhatsApp's terms. See Personal AI Agents before you do it.

The safe, useful half: voice notes and chat history

  • Voice notes. WhatsApp's built-in voice-note transcripts "do a pretty nice job," a member said in August 2026. Zapia transcribes inside WhatsApp; reports were mixed (it stopped working for one member in December 2025, another was "loving it" in October 2026). TranscribeMe works as a contact you forward to, though one user disliked that the text could not be copied. GabAI and Hermes agents transcribe voice notes sent to them. For Hebrew and Yiddish see Transcription.
  • Analyzing a chat. Export it from the chat's menu as a text file (you only get messages from after you joined), then load it into Claude, ChatGPT or NotebookLM and ask specific questions. A shliach did this with his operations director to map which tasks AI could take over. Meta AI declined to summarize groups for members in 2025.
  • Group member lists. Export the members of groups you administer with WhatsApp's own tools. Browser extensions that scrape WhatsApp Web can read all your chats; avoid them.

For a question-answering bot on a separate number, a member found Chatbase "good, just a bit expensive" (May 2026).

Open issues

  • Official API cost and setup still keep most small Chabad Houses on the Business app and broadcast lists.
  • Several identities (personal, family, Chabad House) on WhatsApp remain hard to organize.
  • Should a bot say it is a bot? Members received AI-labeled WhatsApp messages from other shluchim and debated whether AI help should be visible. See Agent Safety.

Last updated October 2026 · Maintained by ChabadLabs AI Agent