Instagram DM automation means answering Instagram Direct messages with software through Meta's official Instagram API. The customer must message first. You then have 24 hours to reply, a human agent can use a separate 7-day window, and a comment allows one private reply. Good automation answers routine questions and hands the rest to a person. OmniChannels.ai runs this inside one shared inbox with WhatsApp and Messenger.
Facts checked at their sources on 8 November 2026. Every Instagram rule in this guide comes from Meta's Instagram Platform documentation or Meta's messaging policy, and each one is linked inline. Facts about OmniChannels.ai come from its own website. Meta changes its APIs and limits often, so check the linked page before you build.
This guide covers what Meta allows, what it forbids, which automations are worth building, and what gets accounts into trouble. For choosing a full omnichannel platform, read our omnichannel messaging platform buyer's guide.
| What happens | What your automation may send | Time limit | Source |
|---|---|---|---|
| Person sends you a DM | Any supported reply: text, media, quick replies, templates | 24 hours from their last message (most user actions) | Meta: Send Messages |
| Person's first DM follows a Click-to-Direct ad | Replies | May last up to 7 days from that message | Meta: Send Messages |
| Person comments on your post, reel, story or ad post | One private reply | Within 7 days of the comment | Meta: Private Replies |
| Person comments during an Instagram Live | One private reply | Only while the broadcast is live | Meta: Private Replies |
| A human agent needs more time | Manual reply with the Human Agent tag | Separate 7-day window | Meta: Send Messages |
| Person never contacted you | Nothing | Not allowed | Meta: Send Messages |
What does Meta's Instagram API allow for DM automation?
Meta allows automation that responds to people. It does not allow automation that starts conversations. Meta's Send Messages guide says conversations only begin when an Instagram user messages your account, for example from your feed, posts or story mentions. Only after that can your app send a message.
Inside the standard window, automation can do a lot. According to Meta's documentation, a message can contain:
- Text and links. Text must be UTF-8 and 1,000 bytes or less.
- Media. Images (PNG or JPEG, up to 8 MB, up to 10 in one message), audio, video and PDF files up to 25 MB each.
- Your own posts. You can share posts that your account owns.
- Templates, reactions and stickers. Cards with buttons, emoji reactions and stickers.
- Quick replies. Up to 13 plain-text buttons of up to 20 characters each. Meta's quick replies page says phone number and email quick replies are disabled for Instagram, and quick replies do not show on desktop.
Meta's Messenger Platform and IG Messaging API policy marks some features as unavailable on Instagram, including one-time notifications and sponsored messages. Group messaging is not supported either. One account talks to one customer per conversation.
What do you need before you can automate Instagram DMs?
You need an Instagram professional account, a Meta app or a platform that has one, and the right permissions. A personal account cannot use the API.
- Professional account. Meta's Instagram Platform overview says app users must have an Instagram professional account, which can be a business or a creator account.
- A login type. With Instagram API with Instagram Login, no Facebook Page is needed. With Instagram API with Facebook Login, the Instagram account must be linked to a Facebook Page.
- Messaging permissions. With Instagram Login, the app needs instagram_business_basic and instagram_business_manage_messages. Comment replies need a comments permission as well.
- Advanced Access. An app that serves accounts it does not own or manage needs Advanced Access. Meta says this requires App Review and Business Verification.
- A webhook server. Messages, button taps and reactions reach your system as webhook events, such as messages and messaging_postbacks.
If you use a messaging platform instead of building your own app, you authorize your account through Meta's login screen. You should never need to share your Instagram password.
How long can you reply to an Instagram DM?
For most messages you have 24 hours from the customer's last message. Every new message from the customer resets that window.
- Standard window. Meta's Send Messages guide says the window depends on the user action that opens it. For most actions it lasts 24 hours.
- Click-to-Direct ads. When the first message follows a click on a Click-to-Direct ad, the window may last up to 7 days from that message.
- Human Agent tag. If a person on your team needs more time, the app can tag the reply to use a separate 7-day Human Agent window. It is for a human reply, not for a bot sequence.
- Tag misuse. Meta's policy says using tags outside approved use cases may restrict your ability to send messages.
After the window closes, the conversation waits until the customer writes again. Instagram is a reply channel, not a campaign channel. For promotions to opted-in lists, use WhatsApp templates, SMS, RCS or email.
How do comment-to-DM automations, ice breakers and story mentions work?
These are the three main entry points that turn a public action into a private conversation. Each has its own rules.
Comment-to-DM (private replies)
When someone comments on your post, reel, story, Live or ad post, Meta's Private Replies API lets your app send them one private message. The rules are strict:
- Subscribe to the comments webhook (and live_comments for Lives).
- Check the comment, for example for a keyword such as PRICE or SIZE.
- Send one private reply within 7 days of the comment. For a Live, send it during the broadcast.
- Wait. Follow-up messages are allowed only if the person responds, and must go out within 24 hours of that response.
Meta's overview limits private replies on posts and reels to 750 calls per hour per account. Plan a queue for viral posts. Since you only get one message, make it useful: give the price or the guide, then ask one short question.
Ice breakers
Ice breakers are frequently asked questions that a person sees when they open a new conversation with your account. Meta allows a maximum of 4 questions, and you can set them per language. When someone taps one, your webhook receives the question and a payload, and your bot answers. Ice breakers are not available on desktop.
Story mentions and ig.me links
When someone mentions your account in their story and messages you, the webhook can carry a story_mention attachment, as Meta's webhook examples show. Treat it as a thank-you moment, not a sales trigger. Meta's ig.me links open a conversation from your website, emails or a QR code on packaging. Add a referral parameter to see which link started the chat.
Which Instagram DM automations are worth building?
Automate the questions that never need judgement. Keep people for everything else. A good first set:
| Automation | Trigger | What the bot does | Hand over when |
|---|---|---|---|
| Welcome menu | First DM or an ice breaker tap | Greets, says it is automated, shows 3 to 4 options | The customer types outside the menu twice |
| FAQ answers | Keyword or question match | Answers hours, delivery, returns and sizes | The customer asks for a person |
| Lead capture | Keyword in a comment | Sends one private reply, then asks what the person needs | The lead is qualified |
| Order status | "Where is my order" | Asks for the order number and looks it up through your API | The order is late or lost |
| After-hours reply | DM outside team hours | Says when the team will answer and covers the FAQs | Next working day |
Do not automate complaints, refunds, payment problems or medical and legal questions. A quick and honest "I am passing you to a colleague" beats a wrong bot answer. For the wider case for mixing bots and people, see our article on AI chatbots and the hybrid future of customer conversations.
How should a bot hand over to a human?
Plan the handover before you write a single bot answer. The customer should never repeat themselves.
Meta's Send Messages guide describes two ways to give an automated experience an escalation path. A single app can run a custom inbox where people reply. With several apps, Meta's handover protocol passes the conversation from the bot app to a human-agent app (conversation routing).
- Set the triggers. A request for a person, two failed answers in a row, sensitive words such as refund or complaint, or a high-value lead.
- Pass the context. The full thread, what the bot understood and any details it collected.
- Assign an owner. Send the conversation to a queue or a named agent, with tags for the source and the topic.
- Tell the customer. "I am passing you to our team. They can see our chat above."
- Use the Human Agent tag only for people. If the agent needs more than 24 hours, the tag gives a separate 7-day window for manual replies.
Meta also sets a disclosure rule. Where the law requires it, automated chats must tell people they are talking to an automated service: at the start, after a long pause, and when a chat moves from a person back to a bot. Meta names California and Germany as markets that need special attention, and recommends disclosure everywhere as good practice.
What gets Instagram automation restricted?
Most problems come from trying to work around the user-first rule. These patterns put an account at risk:
- Password-based tools. Meta's documented route is a Meta login flow with access tokens and permissions. A tool that asks for your Instagram password or simulates taps is not that route.
- Cold outreach. The API cannot start a conversation. Anything designed to message people who never contacted you will fail or create risk.
- Human Agent tag on bots. Using the tag to keep an automated sequence going is outside its approved use, and Meta says tag misuse may restrict sending.
- Hiding the bot. Where the law requires disclosure, a bot that pretends to be a person breaks Meta's policy.
- Ignoring stop requests. Meta's policy says people can block or mute a business at any time. Respect it, and remove them from automated flows.
- Bot loops with no exit. Always include a "talk to a person" option.
Also plan for Meta's real limits, not myths. Meta's overview lists 100 calls per second per account for text, links, reactions and stickers, and 10 calls per second for audio or video. Messages in the Requests folder that are inactive for 30 days are not returned by the API.
How do you manage Instagram, WhatsApp and Messenger DMs in one inbox?
Connect every channel to one shared inbox, and keep one thread per customer. Each channel keeps its own rules, so the inbox should show which window applies.
- Instagram: user-first, 24-hour window, Human Agent tag for 7 days, one private reply per comment.
- Messenger: the same Meta policy family, with Messenger-only message tags.
- WhatsApp: a 24-hour customer service window, with approved templates to reopen a conversation. Our WhatsApp Business app vs API guide explains that channel in detail.
A shared inbox also fixes the team problem. On Instagram's own app, staff pass a phone around. In a team inbox, every agent has a login, every conversation has an owner, and the bot's earlier messages stay in the thread.
How OmniChannels.ai automates Instagram DMs
OmniChannels.ai is BroadNet's omnichannel messaging platform. BroadNet has run messaging since 2003, is headquartered in Dubai and is an official Meta Business Solution Provider. Its network has 1,000+ direct operator connections, reaches 200+ countries and carries 300M+ messages a day. Here is what the OmniChannels.ai site states about Instagram:
- Connect through Meta's login. You authorize your Instagram professional account through Meta's OAuth flow. Access goes to the app, not through shared passwords (Instagram channel page).
- DMs in the Omni Inbox. Instagram DMs land next to WhatsApp, Messenger, Telegram and email, in one thread per customer. Several agents work the same account at once, and supervisors assign and tag conversations (unified inbox).
- Flow chatbots. Menu and keyword flows run on Instagram as well as WhatsApp, Messenger, Telegram, RCS and web chat. They collect details, look up orders through your API and hand over to an agent with the history kept (chatbots).
- AI agents. AI agents powered by BroadNet AI answer in English and Arabic from your knowledge base, act through your APIs or MCP tools, and pass the chat to a person in the inbox.
- Instagram API. The Instagram Messaging API docs cover text, media, quick replies, cards with buttons, catalog products, post shares, reactions, typing indicators and a HUMAN_AGENT tag for human follow-up outside the standard window.
- Itemised pricing. The pricing page lists no setup fee and no monthly minimum, a platform licence, one seat per inbox agent, channel add-ons and usage from a prepaid wallet.
The limits are just as clear on the site. You cannot start a DM with someone who has not messaged you. Instagram comments, posts and ads are managed in Meta's own tools, not in the Omni Inbox. Customer matching across channels depends on shared identifiers, so a customer with a different name on Instagram may appear separately. There is no self-serve free trial; the team runs a live demo instead.
BroadNet's own channel stack is described on our omnichannel messaging page.
Want your Instagram, WhatsApp and Messenger DMs answered by one team, with a bot that knows when to step aside? Book a live OmniChannels.ai demo and a specialist will map your first Instagram flow, the handover rules and an itemised quote.
Frequently asked questions
Is Instagram DM automation allowed by Meta?
Yes, when it runs through Meta's official Instagram API and follows Meta's messaging policy. The customer must message your professional account first, and your replies must fit the messaging window. Where the law requires it, the bot must say it is automated. Tools that ask for your Instagram password are not Meta's documented route.
How do I set up an Instagram auto reply for business?
Switch to an Instagram professional account, then connect it to a platform that uses Meta's Instagram API through Meta's login screen. Write a welcome message with a bot disclosure, add up to 4 ice breakers, build keyword answers for your top questions, and set a handover rule. Test every path from a personal account before launch.
Can an Instagram DM chatbot message my followers first?
No. Meta's documentation says conversations only begin when an Instagram user messages your account. A comment allows one private reply within 7 days, but that still starts with the user's action. One-time notifications and sponsored messages are not available on Instagram. For promotions to opted-in lists, use WhatsApp, SMS, RCS or email.
How long do I have to reply to an Instagram DM through the API?
For most user actions, 24 hours from the customer's last message. If the first message follows a Click-to-Direct ad, the window may last up to 7 days. A human agent who needs more time can tag the reply to use a separate 7-day Human Agent window. That tag is for human replies, not automated follow-ups.
What is the rate limit for Instagram DMs?
Meta lists 100 calls per second per Instagram professional account for text, links, reactions and stickers, and 10 calls per second for audio or video. Private replies to comments on posts and reels are limited to 750 calls per hour per account. Private replies to Live comments are limited to 100 calls per second.
Do I need a Facebook Page to automate Instagram DMs?
Not always. With Instagram API with Instagram Login, no Facebook Page is needed. With Instagram API with Facebook Login, the Instagram professional account must be linked to a Facebook Page. Either way, you need a business or creator account, because personal accounts cannot use Meta's messaging API.
Can I manage Instagram, WhatsApp and Messenger DMs in one inbox?
Yes, with a shared inbox that connects all three through Meta's APIs. The OmniChannels.ai Omni Inbox keeps one thread per customer, with assignment and tags. Each channel keeps its own rules, such as Instagram's 24-hour window and WhatsApp's template requirement. Matching across channels depends on the identifiers each channel shares.
Should an Instagram DM bot always offer a human?
Yes. A bot that hides the way to a person frustrates customers and leads to blocks. Offer a "talk to a person" option in every menu, and hand over on complaints, refunds or repeated failed answers. Pass the full thread to the agent, so the customer does not have to repeat anything.