Guide
WhatsApp CRM in the UAE: Rules, Templates and the 24-Hour Window
Quick answer
A WhatsApp CRM in the UAE runs on Meta's official WhatsApp Cloud API, either directly or through a Business Solution Provider layered on top. Businesses can reply freely inside a 24-hour customer service window after a customer messages them; outside it, only pre-approved templates go out. MAJ Leads connects directly to the Cloud API, with no BSP markup, and runs six approved templates covering lead intake, booking, and follow-up.
What is the difference between the official Cloud API and a BSP?
Every legitimate WhatsApp business integration ultimately runs on Meta's WhatsApp Cloud API, hosted directly by Meta. A business can connect to it directly, or through a Business Solution Provider (BSP), a reseller that manages the technical connection and typically adds its own monthly fee or per-message markup on top of Meta's own conversation pricing.
Neither approach is more "official" than the other in terms of compliance, both ultimately send messages through the same Cloud API. The practical difference is cost and control: a direct Cloud API connection removes a middle layer of markup, while a BSP can be simpler to set up if a business does not want to manage its own Meta Business Manager configuration. MAJ Leads connects each client directly to the Cloud API using that client's own Meta Business Manager, WhatsApp product and number, with no BSP in between.
What are WhatsApp template categories, and why do they matter?
Any message a business sends outside an active customer service window has to use a pre-approved template, and every template is submitted under a category that Meta reviews it against. The two categories that matter for lead follow-up are utility and marketing. A utility template supports a specific transaction or request the customer already initiated, a booking confirmation or an update on something they asked about. A marketing template promotes a product or offer, and is treated far more strictly, with tighter opt-in requirements and a higher bar for approval.
This distinction is not a technicality. Every WhatsApp template MAJ Leads sends on a client's behalf is submitted and approved as utility, because every message is tied to a lead's own enquiry or booking, never an unsolicited promotion.
What is the 24-hour customer service window?
Once a customer sends a business a WhatsApp message, that business can reply with free-form text, images or any other content for the next 24 hours without needing a pre-approved template. Once that window closes, without a further message from the customer, any new outbound message has to go out as an approved template again. This is the mechanic behind why templates exist at all: they are how a business reaches a customer outside a window the customer themselves opened.
In a lead follow-up context this plays out constantly. A lead who replies to a WhatsApp message reopens the 24-hour window for free-form conversation, letting MAJ Leads or the assigned rep answer questions naturally. A lead who goes quiet moves back outside the window, and the next outbound message, a booking reminder, for instance, has to be a template.
What are the messaging limits before a business is verified?
Meta applies messaging limits to every WhatsApp Business number, described in its own messaging limits documentation, capping how many unique customers a number can message in a rolling 24-hour period. Before a business completes Meta's business verification process, MAJ Leads' default tier for a client's number caps this at 250 unique contacts within 24 hours. This is not a MAJ Leads restriction on top of Meta's rules, it reflects the limit Meta itself enforces on an unverified number. Completing business verification is what raises that ceiling.
Note
What templates does MAJ Leads actually send?
MAJ Leads runs six approved WhatsApp templates, four to the lead and two to the client's team, each tied to a specific point in the lead's journey rather than a generic broadcast:
| Template | Sent to | Purpose |
|---|---|---|
| lead_received_after_hours | Lead | Acknowledges an out-of-hours enquiry and states when a call will follow |
| booking_confirmation | Lead | Confirms a booked viewing, appointment or call |
| tried_to_reach_you | Lead | Sent after the RNR5 attempt goes unanswered, so the lead knows the business tried |
| callback_confirmation | Lead | Confirms a callback time the lead requested |
| booking_summary | Client team | Notifies the assigned team of a new booking with the relevant details |
| needs_human_alert | Client team | Flags a lead that AI Mode determined needs a human agent, with a transcript link |
Once a lead replies to any of these, the conversation moves into the open 24-hour window and continues as a normal free-form WhatsApp thread, still visible inside the console alongside the call history for that lead.
None of these six is a marketing broadcast. Each one exists to move a specific lead through a specific stage, an after-hours acknowledgement, a booking that just happened, a call that just failed, a callback the lead itself requested, or an update to the client's own team. That is a deliberate design choice, not an accident of what happened to get approved: a template built to promote an offer faces a stricter review and a lower approval rate than one built to confirm something the customer already asked for.
How is opt-out handled?
A lead who asks to stop being contacted is recorded on a do-not-contact list tied to that phone number, which the cadence checks before scheduling any further call or WhatsApp message, on this lead and any future lead sharing that number for the same client. This sits alongside the same rail that governs the calling window itself: the system enforces it by default rather than relying on a rep to remember.
This mirrors the same principle already written into UAE telemarketing law for phone calls: Cabinet Resolution No. 56 of 2024 requires a business not to call a consumer back after they refuse on a first call, and caps unanswered follow-up at once a day and twice a week. WhatsApp opt-out handling follows the same logic for messaging, once a lead says stop, the system stops, rather than leaving that judgement call to whoever happens to be working the queue that day.
What does setting this up actually look like in the console?
A client's WhatsApp connection is configured once, under Settings, WhatsApp: the permanent system-user token from the client's own Meta Business Manager, the connected number, and a live status for each of the six templates as Meta reviews and approves them. This sits alongside the same settings area that manages lead sources, team routing, and the schedule the calling window runs on, so a workspace admin has one place to see whether WhatsApp is actually ready to send, not just connected.
Why does this matter when choosing a WhatsApp CRM?
A lot of what gets marketed as a "WhatsApp CRM" is really a chat inbox with a pipeline view attached, useful for organising conversations, but still dependent on a person opening the app and replying. MAJ Leads treats WhatsApp as one channel inside the same cadence that drives the calling: a lead's WhatsApp thread, call history and attribution sit against the same record, and the templates above fire automatically at the right point in that cadence rather than needing a person to remember to send them.
See the full setup on the WhatsApp CRM page, and compare how this fits inside AI Mode versus Team Mode. Pricing details, Team Mode starts from AED 299 per month, are on the pricing page.
Sources
Frequently asked questions
Do I need a Business Solution Provider to use WhatsApp for lead follow-up?
What is the 24-hour window and why does it limit what I can send?
How many people can I message on WhatsApp before completing business verification?
Can a lead opt out of WhatsApp messages?
Anam Jalal
Founder & CEO, MAJ Leads
Anam Jalal is the founder of MAJ Leads, a Dubai-based AI voice agent company deploying TDRA-compliant AI receptionists and callers for UAE clinics, brokerages and SMEs — working hands-on across UAE telephony and CRM integrations, from SIP provisioning to TDRA compliance configuration.
Read more about Anam →Related articles
Guide
Why a WhatsApp Bot Can't Replace Your Phone Line in the UAE
Every UAE business has a WhatsApp bot for FAQs and confirmations by now. Almost none of them can take a call, because WhatsApp voice and video calling doesn't work reliably on UAE networks. Here's what that structural gap means for your phone line.
Compliance
Recording Business Calls in the UAE: PDPL, Consent, and What the Law Actually Says
Most guides quote a PDPL call-recording rule that does not exist. Here is what UAE law actually says about recording business calls: one explicit notice duty, a data-protection law with a real gap, and executive regulations still unissued.
