Bulk WhatsApp in Panama: what you can do (and what can cost you the account)

WhatsApp is, by far, the channel where Panama replies: it’s where people already talk to businesses and where response rates far outstrip email. But “bulk WhatsApp” doesn’t mean what many think. Loading a list of numbers and firing at everyone not only doesn’t work: it can cost you the account. And, on top of that, the rules changed a lot between 2024 and 2025. This guide explains how it really works today, what you can do and what gets you into trouble.

This is general information, not legal advice. Meta’s policies and prices can change; check the official documentation before deciding.

First things first: there’s no “blast” to purchased numbers

Sending in bulk over WhatsApp isn’t done from the WhatsApp Business app or a personal number. That, at volume, goes against the policies and ends in account blocking. Legitimate bulk sending is done through the WhatsApp Business Platform (the API), via a provider, and with message templates approved by Meta.

And there’s one requirement that allows no shortcuts: the opt-in. You can only message someone on WhatsApp if they gave you their number and gave you permission to write to them. Buying a list of numbers isn’t opt-in; it’s the fast lane to a ban and, in Panama, to a breach of Law 81. (We develop this in Law 81 and bulk messaging and in our database cleaning service.)

The rule that governs everything: the 24-hour window

Almost everything in WhatsApp Business revolves around one simple rule:

• When a customer writes to you, a 24-hour window opens in which you can reply with free-form messages (text, images, whatever you like), with no template and no template cost.
• When that window closes, you can no longer write freely: you can only contact them with a previously approved template.

This single rule defines your whole operation: welcome flows, reminders, cart recovery and support are all designed around that window. And it sets a philosophy: the channel rewards replying, not bombarding.

The three template categories (and why they matter)

Every approved template falls into one of three categories, and they don’t cost the same:

• Marketing: promotions, news, offers. It’s the most expensive category.
• Utility: transactional messages about something the customer already did (order confirmation, shipping status, appointment reminder). Cheaper.
• Authentication: verification codes, OTPs.

Since mid-2025 there’s a strict rule: a utility template must be purely transactional. If you slip in an offer, an upsell or a promotional call to action, Meta reclassifies it as marketing — and charges you more. The line between “informing” and “selling” now matters for your bill.

The price change almost nobody explained to you

Until June 2025, WhatsApp charged per conversation (a 24-hour window, no matter how many templates you sent within it). Since 1 July 2025, Meta charges per template message delivered. Each marketing template you deliver is a separate charge: if you send three marketing templates to the same person in a day, that’s three charges, not one.

At the same time, there are things that are free:

• Free-form messages within the 24-hour service window (replying to whoever wrote to you).
• Utility templates sent within that open window.

The strategic upshot is clear: the model penalises spray-and-pray and rewards relevance. Today it pays to consolidate several messages into fewer, higher-value sends, to use the service window for support, and to reserve marketing templates for what really moves the needle.

A figure that changes budgets: the rate depends on the recipient’s country, not where your company is. For contacts in Panama, the Panama rate applies. That’s why it pays to segment by country and not assume a single rate.

Opt-in and opt-out: permission rules (Meta and Law 81)

Here two requirements that point to the same thing cross paths:

• Meta’s policy requires you to have opt-in before writing, to communicate the value of your messages and to honour opt-outs. The user can stop receiving your marketing with a tap (a “dislike” button, or turning off “Offers and announcements” in your profile), block you or report you.
• Panama’s Law 81 requires prior, informed, unambiguous and traceable consent, and the right to revoke it.

In practice: ask clear permission to write on WhatsApp, keep evidence of that consent, and offer and honour an easy way out. It isn’t bureaucracy: it’s what keeps your account healthy and your operation compliant.

Quality: WhatsApp is watching you

WhatsApp measures the quality of your account from how people react to your messages. If you rack up reports, blocks or negative feedback, your rating drops and the system limits your sending (rate limiting). Each “dislike” can also cut how many marketing templates you can send that person.

Translation: discipline isn’t optional. Sending less, to people who want to hear from you, with relevant messages, isn’t just good manners: it’s what keeps you operational.

Realistic expectations

You’ll see everywhere that WhatsApp has “95-98% open rates”. That’s a best-case ceiling, not the norm. A more honest figure for broadcasts with good opt-in is around 60-80% — which is still several times the typical 20-25% of email. Treat it for what it is: a channel of very high rapport and response, not a guaranteed conversion machine. That correct expectation is what makes you use it well — and combine it with email and SMS where each performs, something we cover in our services overview.

Why local matters

Running bulk WhatsApp well means an API provider, approved templates, managing the 24-hour window, template categories, traceable opt-in and Law 81 compliance. It’s quite a bit more than “sending little messages”. Doing it from Panama, with consent sorted, templates well kept and the Panama rate clear, avoids the two bad endings: the blocked account and the fine.

How we solve it

We run your WhatsApp for you: number and approved templates, traceable opt-in and opt-outs, flows designed around the 24-hour window and Law 81 compliance from day one. You don’t fight the API or risk the account: you see the results.