Instagram DM Rules: The 24-Hour Window for Business

How long do I have to reply to an Instagram DM?

Twenty-four hours, measured from the customer's message rather than from the moment your team opens it.

Meta states it plainly in the Instagram messaging reference: "Your app has 24 hours to respond to any message sent from an Instagram user to your app user" (Meta — Send Messages).

The same period has a formal name on the Messenger Platform side, which Instagram messaging shares: "The Standard Messaging Window is the 24 hour time period in which you are allowed to send a message to a person" (Meta — Send a Message).

Inside that period there is no unusual content restriction. Meta's policy page says "Businesses have up to 24 hours to respond to a user. Messages sent within the 24-hour window may contain promotional content" (Meta — Messenger Platform and IG Messaging API policy).

The window is permission to send at all, not permission to send a particular kind of message — which is why what happens when it closes matters far more than what happens inside it.

Checked against Meta's documentation on 28 August 2026.

• How long do I have to reply to an Instagram DM?
• What happens when the Instagram 24-hour window closes?
• How many times can I privately reply to an Instagram comment?
• When does a private reply actually open a messaging window?
• How is Instagram messaging different from WhatsApp messaging?
• Can I send an Instagram broadcast or bulk DM to my followers?
• What opens an Instagram messaging window in the first place?
• What do I need before Instagram DMs reach my own software?
• How should a team handle Instagram leads given the window?
• Should Instagram DMs live in the same inbox as WhatsApp?

What happens when the Instagram 24-hour window closes?

Very little that resembles a marketing channel.

This is where Instagram and WhatsApp separate, and it is the fact the rest of this page rests on. WhatsApp has a documented, paid surface for reopening a closed conversation: an approved template message, charged per message. Instagram has no equivalent. That surface has a cost of its own — Meta decides which category a template belongs to, and a template moved from utility to marketing is charged differently from the day it changes.

What Meta documents instead is a short list of exceptions, and it has been shortening it.

Three named mechanisms are ruled out for Instagram in Meta's own words on the send-message reference: "Sponsored Messages are not available for Instagram Messaging API", "One-Time Notifications are not available for Instagram Messaging API", and "News messaging is not available for Instagram Messaging API" (Meta — Send a Message).

The general-purpose message tags are being withdrawn as well. "Effective April 27th, 2026, all API requests containing the Message Tags CONFIRMED_EVENT_UPDATE, ACCOUNT_UPDATE, and POST_PURCHASE_UPDATE will receive error code 100" (same page).

That leaves one tag standing, and it is a support mechanism rather than an outreach one. The Human Agent feature "allows your app to have a human agent respond to user messages using the human_agent tag within 7 days of a user's message", with the allowed usage stated as narrowly as it sounds: "Provide human agent support in cases where a user's issue cannot be resolved in the standard messaging window" (Meta — Human Agent).

Two constraints matter more than the seven days. That feature "requires successful completion of the App Review process before your app can access live data", and Meta adds that it "is only available with business verification". Separately, tags of every kind are fenced off from selling: "Message Tags may not be used to send promotional content, including but not limited to: deals, offers, coupons, and discounts" (Meta — Send a Message).

A closed Instagram window has one documented reopening path, it is gated behind Meta's review process, it lasts seven days, and it may not be used to sell anything.

Checked against Meta's documentation on 28 August 2026.

How many times can I privately reply to an Instagram comment?

Once. Not once a day, not once per thread — once, for that comment, permanently.

"Only one message can be sent to the Instagram user who commented" (Meta — Private Replies).

There is a deadline attached: "The message must be sent within 7 days from when the comment was created for comments on a post, ads post, or reel."

Live comments are stricter again. "Due to the transient nature of Instagram Live Stories, private replies on Instagram Live Story comments can only be sent during the live broadcast." A team watching the replay the next morning has nothing to send.

Meta names two permissions for it, instagram_manage_comments and pages_messaging, both obtained via Facebook Login, plus a Page access token requested by an Instagram user who can perform the MESSAGING task — worth noting because permissions are what App Review actually grants.

The single-reply rule is the one most often misread as one reply per commenter per day; it is one reply, ever, per comment.

That has a design consequence most guides skip. If the private reply is a bare acknowledgement — thanks for commenting, DM us — the only message you will ever be permitted to send has been spent asking the customer to do the work.

Checked against Meta's documentation on 28 August 2026.

When does a private reply actually open a messaging window?

Only when the person answers it.

"Only when the Instagram user responds to the private message can you continue the conversation within the 24-hour messaging window" (Meta — Private Replies).

Read that as a condition rather than a sequence, because it is routinely presented as a sequence. Sending the private reply does not start a clock in your favour. It creates an opportunity for the customer to start one, and if they do not, there is no second message and no window.

A private reply is a request for permission, not the grant of it.

The reporting consequence is direct. A dashboard counting private replies sent is counting attempts. The number that describes the channel is the proportion of those replies that were answered, because that is the proportion which became a conversation you may legally continue.

Checked against Meta's documentation on 28 August 2026.

How is Instagram messaging different from WhatsApp messaging?

Both give you 24 hours. Only one of them documents a way back in afterwards.

The WhatsApp column is not free, and that is the point of it. "Effective July 1, 2025, Meta charges on a per-message basis" (Meta — WhatsApp pricing), with the same page noting that "All non-template messages are free" and that "Utility templates delivered within an open customer service window are free".

So WhatsApp's re-engagement surface is a metered one, with published rates and a categorisation system that decides which rate applies. That system has teeth: "Effective April 9, 2025, If you selected UTILITY as the template's category and WhatsApp determined it should be MARKETING, the template is approved as MARKETING" (Meta — Template categorization).

Current per-message rates are not reproduced here, because they change and a stale numeral on this site would be worse than no numeral. They are set out in the WhatsApp Business API pricing guide for India, and the question of what is and is not chargeable in whether the WhatsApp Business API is free.

Paying per message to reopen a conversation is an inconvenience; having no documented way to reopen it at all is a different category of problem.

Checked against Meta's documentation on 28 August 2026.

Can I send an Instagram broadcast or bulk DM to my followers?

No documented endpoint does this.

Meta's Instagram messaging reference is explicit about where conversations come from: "Conversations only begin when an Instagram user sends a message to your app user through your app user's Instagram Feed, posts, story mentions, and other channels" (Meta — Send Messages).

The same page adds two structural limits: "Group messaging is not supported" and "An Instagram professional account can only converse with one customer per conversation."

Taken together, the API has no concept of an audience. It has threads, each opened by a person, each governed by that person's last message.

If a tool offers an Instagram broadcast to your followers, the useful question is which documented endpoint it calls.

One more caution belongs here, and it cuts the other way from what most guides claim. Meta does publish per-account rate limits for Instagram messaging, and they are call rates rather than audience caps: "Your app can make 100 calls per second per Instagram professional account for messages that contain text, links, reactions, and stickers", 10 calls per second for messages containing audio or video, 2 calls per second on the Conversations API, and "750 calls per hour per Instagram professional account for private replies to comments on Instagram posts and reels" (Meta — Rate limits). None of that is a volume allowance. A rate limit governs how fast you may make calls you are already permitted to make, and every one of those calls still has to land inside a window somebody else opened — the volume path is the one that does not exist.

Checked against Meta's documentation on 28 August 2026.

What opens an Instagram messaging window in the first place?

Every entry on the list is something the customer does.

Meta's send-message documentation sets out the actions that open the standard messaging window, and they share a shape: the person sends a message; taps a call-to-action such as Get Started; clicks a click-to-message ad and then messages; follows an ig.me link into a thread; reacts to a message; or comments on a post (Meta — Send a Message).

The link mechanism is worth knowing by name. "ig.me is a shortened URL service operated by Meta that redirects users to a conversation in Instagram" (Meta — ig.me), which makes it the closest thing Instagram has to a click-to-chat link — the customer still sends the first message.

Story interactions land as ordinary messages. Meta's Instagram webhook reference describes the messages field as firing when a customer sends "a message with text or media (image/video/file/audio)", plus shares, story replies and mentions, inline replies and quick replies (Meta — Instagram webhooks). A story mention arrives with the story CDN URL attached (Meta — Story mentions), which is worth capturing on receipt, because stories expire.

Instagram is generous about opening conversations and severe about reopening them, which is the whole shape of the channel.

Checked against Meta's documentation on 28 August 2026.

What do I need before Instagram DMs reach my own software?

Four things, and the fourth is the one that decides your timeline.

First, the account. "To use the APIs, your app users must have an Instagram professional account. An Instagram professional account can be for a business or creator" (Meta — Instagram Platform overview).

Second, a configuration. Meta documents two. Under Instagram Login, an app "serves Instagram professional accounts with a presence on Instagram only". Under Facebook Login, an app serves accounts "linked to a Facebook Page", and "your app users' Instagram professional accounts must be connected to a Facebook Page". Private replies to comments are documented against Facebook Login permissions, so comment capture pushes you toward the Page-linked configuration.

Third, permissions. The Facebook Login route lists instagram_basic, instagram_content_publish, instagram_manage_comments, instagram_manage_insights, instagram_manage_messages, pages_show_list and pages_read_engagement on that overview page.

Fourth, an access level. "Standard Access is the default access level for all apps and limits the data your app can get." Advanced Access is required "if your app serves Instagram professional accounts that you don't own or manage", and it "requires App Review and Business Verification" (same page).

That last requirement is why an Instagram integration can work perfectly for the developer's own account and do nothing at all for a customer's.

We will not put a number on how long review takes or how likely it is to pass, because nobody outside Meta can honestly do either. What is knowable is the gate itself, and it is the same App Review and business verification gate described in the green tick, Meta Verified and what verification actually means.

Checked against Meta's documentation on 28 August 2026.

How should a team handle Instagram leads given the window?

Work backwards from the fact that the window will close and cannot be bought open.

That reorders the usual advice. Speed matters, but arranging the next contact matters more, because speed only helps inside a period that is already running out.

Four habits follow from the rules above rather than from taste.

Answer the substance in the private reply. It is the only message that comment will ever earn, so it should carry the answer, the price or the link, not an instruction to start a DM.

Ask for a durable channel while the window is open. A phone number with consent moves the conversation somewhere with a documented re-engagement path; an Instagram thread does not have one. The WhatsApp Business app versus the API comparison covers what that move actually buys.

Route by remaining time, not by arrival order. An eight-hour-old thread is a different object from an eight-minute-old one, and a queue sorted by recency hides that.

Make the deadline visible to the agent rather than to the supervisor's report.

A team that treats an Instagram DM as a lead to be moved, rather than a conversation to be continued, is working with the rules instead of against them.

Should Instagram DMs live in the same inbox as WhatsApp?

Yes, and the windowing rules are the argument rather than the convenience.

An agent switching apps is being asked to hold two different clocks in their head: a WhatsApp thread that can be reopened later at a published cost, and an Instagram thread that mostly cannot be reopened at all. Those decisions are only comparable side by side. A shared WhatsApp team inbox that shows one channel and not the other guarantees the Instagram half gets triaged last, because it is the half nobody is looking at.

It also fixes the contact record. The same person messaging a Page and a WhatsApp number is two identities on Meta's side, and reconciling them after the fact is harder than capturing them into one contact at the time.

WabaCRM ships this as an add-on: Messenger and Instagram DMs land in the same inbox as WhatsApp, with comment capture and one-tap private replies that enforce the one-reply and 7-day rules server-side rather than by disabling a button. Two honesty notes belong beside that. The Instagram half needs Meta's Advanced Access for arbitrary businesses, exactly as described above, so it is not something a vendor can switch on for you. And WabaCRM is a Meta-verified Tech Provider, not a Meta Business Partner and not Meta Verified — a distinction set out in Tech Provider versus BSP, and one that also means Meta bills you for messages directly and we cannot mark them up. The pricing page and the feature list say what the software costs and does.

None of that changes a single rule on this page. Instagram is a superb channel for opening conversations and a poor one for resuming them, and the only durable response is to notice which of those you are relying on.

Every Meta quotation on this page was read from Meta's own documentation on 28 August 2026. Meta changes that documentation without notice; the linked pages are authoritative and this one is not.