Official WhatsApp API vs unofficial QR tools: the risks and how to migrate

Businesses use WhatsApp in three ways: the WhatsApp Business app on a phone, Meta's WhatsApp Business Platform, and tools that automate WhatsApp through a web session linked by QR code. The first two are official Meta products; the third is not. This guide explains why the difference matters and how to move to the official platform.

How do QR tools work?

These tools usually link a phone's WhatsApp account to a web session by scanning a QR code, and then drive that session with software. Setup is easy: no template approval, no Meta account and no per-message Meta fees. Behind the convenience are three problems:

• Rules. An app built for personal use is used for business automation.
• Access. A QR session gives access to every chat on that number. The session may run on a server whose operator and data location you don't fully know.
• Continuity. A change on WhatsApp's side can break such a tool overnight, and there is no official party to turn to.

What do WhatsApp's terms say?

The "Legal And Acceptable Use" section of WhatsApp's Terms of Service begins:

"You must access and use our Services only for legal, authorized, and acceptable purposes."

It goes on to say that "You will not use (or assist others in using) our Services in ways that" include, among others:

"involve sending illegal or impermissible communications such as bulk messaging, auto-messaging, auto-dialing, and the like"

"involve any non-personal use of our Services unless otherwise authorized by us."

The "Harm To WhatsApp Or Our Users" section also forbids accessing the services through automated or unauthorized means, and says you must not:

"create accounts for our Services through unauthorized or automated means"

Finally, the terms state that for violations "we may take action with respect to your account, including disabling or suspending your account". For business use, the routes Meta authorizes are the WhatsApp Business app and the WhatsApp Business Platform.

The risk to your number

If a number is restricted or banned, you lose more than a channel: you lose the trust built up on it, from the entry in your customers' contacts to past conversations, business cards and the contact details on your website. Sessions that send bulk and automated messages are the most visible kind of use.

No provider can guarantee that a number will never be restricted; breaking the rules is sanctioned on the official platform too. The difference is that the rules are clear and quality information is visible to you.

The official platform's rules

• The account is yours. Your WhatsApp Business account and number sit with Meta in your name. Even if you work with a software provider, these assets stay with you.
• Opt-in. WhatsApp's business messaging policy lets you contact people only if they gave you their number and opted in to receive messages from you, and you must respect every request to stop.
• 24 hours and templates. When a customer writes, a 24-hour window opens and restarts with each new message; during it you reply freely. Outside it, only templates approved by Meta go out.
• Quality and limits. Meta limits how many different people a business can reach in 24 hours with messages the business starts. A new business starts at 250; business verification or high-quality use raises the limit to 2,000, then step by step. Businesses that collect many complaints stop growing.
• Delivery statuses. Every message reports sent, delivered and read, plus error codes, so you can see which message failed and why.

This is a category-level comparison; individual tools may differ.

Cost: is the official platform expensive?

The strongest argument for QR tools is "no Meta fees". On the official platform, Meta charges per delivered message, but for the type most businesses send most often, service messages (free-form replies within 24 hours of the customer's message), the first 1,000 per number each month are free. Service messages above the free tier are charged at the market's utility rate in Meta's rate card.

A team that sends 5,000 service messages a month pays for 4,000 of them; multiply that by the utility rate for your customers' market. Marketing templates are charged on every send, except during the free window of click-to-WhatsApp ads, and usually cost more than utility templates. Our post on pricing after 1 October 2026 covers the categories and fees in detail.

A six-step migration plan

1. Know where your number stands. It may be in the phone app and linked to a QR tool. A number connected to the official platform can't be used in the WhatsApp or WhatsApp Business app at the same time with UPPU; remove it from the app first, or start with a new number.
2. Close the QR session. Log the tool's session out on the phone too, so no linked device keeps access to the number.
3. Prepare the Meta side. You need a Meta business portfolio; you can create one in the signup flow. Business verification raises your messaging limits. Add a payment method to your WhatsApp Business account.
4. Turn bulk sends into templates. Submit your campaigns and notifications as marketing or utility templates.
5. Collect consent. Record where, and with which wording, customers agreed to receive WhatsApp messages. Don't send marketing to a list without consent.
6. Tell your team and customers. If you switch numbers, announce it on your old channels and update the number on your website and signatures.

Common questions

My number is in a QR tool today. Can I keep it?

In most cases, yes: the number is removed from the phone app first, then connected to the official platform. If the number is restricted, that has to be resolved first. We can look at your number's situation with you.

Can I send bulk messages on the official platform?

You can send approved templates to people who opted in, within Meta's messaging limits; local consent rules for commercial messages apply. In UPPU these sends go out from your own system through the API today; there is no campaign screen in the panel.

What happens to my old chats?

When you connect a number to UPPU, the old chat history on the phone is not transferred to UPPU. Back up the conversations you must keep before you switch, and decide how long to keep them under your privacy obligations.

How UPPU works

UPPU connects to WhatsApp only through Meta's official WhatsApp Business Platform (Cloud API); it never uses QR or session-based methods. You connect your own WhatsApp Business account and number through Meta's signup flow, and the UPPU team enables WhatsApp for your workspace. A nine-item channel checklist shows the state of the connection. You create utility and marketing templates in the panel; marketing templates need a recorded consent, and anyone who writes STOP has their consent withdrawn. See the WhatsApp page for details.