Instagram DM automation rules: what Meta's API allows in 2026

Most “Instagram DM limits” articles repeat numbers nobody can trace. We build DMFa.st on Meta's API, so we went to the source: every rule below links to the Meta page it comes from, and every claim says whether Meta actually states it or whether it's an inference. Rules change, so check the date at the top.

Is Instagram DM automation allowed?

Yes, through Meta's Instagram API. It's built for exactly this: businesses and creators replying to comments, Story replies and messages at scale. What Instagram does not approve is the other kind of tool, the one that logs in with your password and taps through the app like a person.

Private replies: one per comment, within 7 days

A private reply is the DM a business sends in response to a public comment. It's what powers comment-to-DM. Meta's rules for it:

The 7 days are why “re-run missed comments” features exist: comments that arrived before you switched an automation on can still get their DM, as long as they're less than a week old.

The 24-hour messaging window

Once someone messages you, Meta lets you message them back for a while. Meta calls this the standard messaging window. Its current wording: For most user actions, it lasts 24 hours. The exception is a person who messages you from a Click-to-Direct ad, where the window may last up to 7 days from that message.

Which actions open the window? Here's what Meta's docs say, and where they go quiet:

After 24 hours: the Human Agent tag

Meta allows a separate 7-day window for a person on your team to answer by hand, using the HUMAN_AGENT tag. It allows a business representative to manually respond, and it requires successful completion of the App Review process plus business verification (Meta, Human Agent). It's for real support conversations, not automated follow-ups, and Meta's policy says message tags must never carry promotional content.

Follow checks, and why not to gate the link

Meta's user profile API has an official field, is_user_follow_business, that indicates whether the Instagram user follows your app user. There's a condition: you can only look it up after the person has engaged in the DM.

Being able to check a follow is not the same as being allowed to require one. Meta's Spam policy is direct about this:

So use the follow check to change the tone of the message, never to withhold what was promised:

Rate limits

These are Meta's published limits for accounts connected with Instagram Login:

Source: Meta's Instagram Platform overview. Accounts connected through a Facebook Page use the Messenger API for Instagram, which lists 300 messages per second (Rate Limiting). Meta also warns that it may slow you down if too many messages are sent to a single thread.

The limit that matters for creators is the 750 private replies an hour. A Reel that pulls thousands of keyword comments builds a queue, and every comment in it has to get its DM within 7 days:

Buttons and message limits

Sources: Meta's Button Template, Quick Replies, Ice Breakers and Messaging API pages. Cards and quick replies aren't available on Instagram for desktop, so keep the essential text in the message itself.

Note the unit on text: Meta says message text must be 1000 bytes or less, not 1,000 characters. Plain English letters take one byte each, most emoji take four or more, and Hindi letters take three, so the same limit holds a much shorter DM in Hindi:

Story replies and mentions

• Both reach your automation. A Story reply or a Story mention arrives as a message, so you can answer it inside the 24-hour window.
• Private accounts: Story mentions from a private account will only flow in if the account follows you.
• Don't save their Story. Meta: You must not store or cache the media content on your server.
• GIF and sticker replies don't trigger the Story reply webhook.

Source: Meta, Story Mention.

Consent, opt-out and disclosure

Three myths, checked

What about TikTok and Threads?

• Threads: the API covers posting, reading replies and moderating them. It has no messaging endpoints, and replies are capped: Threads profiles are limited to 1,000 replies within a 24-hour moving period (Meta, Threads API).
• TikTok: its Business Messaging API can answer people who message you first, but can't start a conversation from a comment in most regions. Third-party providers report a 48-hour reply window and no access for accounts in the EEA, Switzerland and the UK. We couldn't check TikTok's own docs for this post.

Ready to set one up? Follow our comment-to-DM guide, and pick a keyword from our list of 60.