Instagram DM automation: rules, set-up and what to watch for

A bundle of letters and envelopes tied with ribbon, a few open letters and a phone turned face down

Instagram DM automation means replying automatically — and by clear rules — to direct messages, story replies and post comments through Meta’s official Instagram API. You need a professional Instagram account, an app that has passed Meta’s review and a system that receives the messages. The single most important rule: you cannot send the first message. Automation only works once someone has written to you or interacted with you, and only for a limited time afterwards.

In this article we explain what the official route is, the rules you must follow, the set-up steps and the mistakes that put an account at risk.

What is Instagram DM automation?

For many businesses, Instagram is no longer just a shop window — it is a sales channel. People type “price?” under a post, reply “do you have this in a medium?” to a story, and the inbox starts to work like an order book. As the volume grows, replies slow down and questions get lost.

DM automation hands the repetitive part of that flow over to software:

  • Greeting every new message instantly and offering a few options.
  • Answering common questions — price, sizing, delivery, payment — from stored information.
  • Sending a private message to anyone who comments a particular keyword.
  • Passing a customer who is close to buying over to a person on your team.
  • Linking the conversation to a customer record, an order or a report.

Behind it sits a chatbot and the connections that feed it. We look at where a bot helps and where it does not in our article on customer service chatbots.

The official route versus unofficial tools

There appear to be two ways of automating Instagram messages. Only one of them is safe.

Official Instagram APIUnofficial tools
How it connectsThrough a Meta-approved app, with granted permissionsOften with your username and password, imitating a person
RulesWithin Meta’s written policiesOutside the terms of use
RiskLow when the rules are followedAccount restriction or closure
ContinuityPlatform changes are announcedCan stop working overnight after an update

We recommend staying well away from any tool that asks for your password, or that promises “bulk DMs to all followers” or “messages to people who don’t follow you”. They may seem to work for a while, but they put the account itself at risk. We work only with Meta’s official APIs; the current technical details are in Meta’s Instagram Platform documentation.

The rules you need to know

Meta updates its policies from time to time, so we go through the current documentation together at every set-up. Even so, the basic framework has stayed the same for a long while.

The customer sends the first message

Automation cannot message someone who has never interacted with you. A conversation begins with an action on their side — sending you a DM, replying to your story, mentioning you in a story or commenting on your post.

The reply window is limited

Once someone writes to you, a window opens in which you may reply freely, by hand or automatically. The general rule is 24 hours from their last message. After that, you cannot message them unprompted. Meta allows an exception that extends the window, under certain conditions, where a human agent is replying — automated messages cannot use it.

From a comment to a private message

When someone comments on your post, you may send them one private message in response to that comment. This is the official version of the familiar “comment ‘catalogue’ and we’ll DM it to you” campaign. If they reply, a normal conversation begins.

Volume and quality

The API has sending limits. The same message going to many people, in a short time and without relevance, runs into those limits and damages the account’s standing.

Setting it up, step by step

1. A professional account

Your Instagram account must be a business or creator account. Depending on the set-up route, it may also need to be linked to a Facebook Page and a Meta Business account.

2. A Meta app and permissions

The system that reads and answers messages connects through an app registered with Meta. Messaging permissions require Meta’s app review, in which you show why and how the app uses them. We put this step at the very start of the plan — the length of the review is not in your hands.

3. Receiving the messages

When someone writes, Meta forwards the message to an address you specify, via a webhook. This is the heart of the system: the message is stored, its topic is understood and it is routed to the bot or to the right person.

4. Designing the flows

A greeting, ready-made starting options for frequent questions, product or service information, and collecting what you need to take an order. Keep flows short. Walking a customer through a five-step menu is more irritating than waiting for a human reply.

5. Handing over to a person

When the bot does not understand, when the customer asks for a person, or when the topic is a complaint, the conversation moves to your team — with its history attached, so nobody asks the same questions again.

6. Joining up channels and measuring

If your customers write on both Instagram and WhatsApp, managing the two on separate screens leads to losses. Meta Cty, the platform we built, manages WhatsApp API and Instagram API processes in a single architecture over a webhook-driven flow. For the rules on the WhatsApp side, see our guide to WhatsApp Business API sales automation.

Measurement belongs to this step too: how many messages came in, how many were answered automatically, how many were handed over, how many became sales?

Flows that work

A few concrete scenarios:

  • Catalogue from a comment. A boutique sends a catalogue link by private message to anyone who comments “catalogue” under a new-season post. Those who reply are asked for size and colour, then the conversation lands with the sales team.
  • Appointment from a story reply. A beauty salon asks people who reply to a promotional story which days suit them, and logs the request in the calendar.
  • Out-of-hours greeting. Messages arriving at night receive opening hours, answers to common questions and a note that the team will reply first thing. In the morning, the team starts with conversations whose details are already gathered.
  • Delivery questions. A customer asking “where is my order?” enters the order number, and the status is read from the system of record.

Common mistakes

  • Using a tool that works with your password. The biggest risk to both account security and the terms of use.
  • Leaving everything to the bot. A customer who cannot reach a person gives up on the purchase too.
  • Forgetting the time rule. Scheduling an automatic follow-up for a conversation older than 24 hours breaks the rules. Follow-up flows must be designed around that limit.
  • Making the bot memorise prices and stock. When the information changes, the bot keeps saying the wrong thing. Firm facts should be read from a maintained source.
  • Not measuring. You cannot improve a flow without knowing which one turns into sales.

Frequently asked questions

Can I send bulk DMs to my followers?

Not with the official API. On Instagram, automated messages can only go to people who have interacted with you, and only within set time windows. Tools that promise bulk sending generally work outside the terms of use and put the account at risk.

Do I need a Facebook Page for Instagram DM automation?

It depends on the set-up route. Meta offers more than one way to connect to Instagram, and some of them require a Facebook Page. We decide which route suits you by looking at your current account structure together.

Can we still see messages on our phones after automation is set up?

Depending on the system and structure chosen, conversations are gathered in a shared panel. Which screen your team works from, where messages appear and how handover happens are all settled at the start of the set-up plan.

What happens if Meta changes its rules?

Meta updates its APIs and policies regularly. Under monthly maintenance we follow those changes and adapt the flows. If a connection breaks, the flow does not stop silently — it tells you.

If you would like to automate your Instagram messages within the rules, have a look at our automation and integration service or write to us. We start by reviewing your current message flow together and choosing the first flow to build.

— Work in this article

The project this article refers to.

Open a conversation