Short answer: Yes, if people opted in and you use WhatsApp's business tools within its policy. Since 27 August 2024, UAE telemarketing rules have also covered marketing messages sent through social media apps, with company fines of AED 10,000 to AED 150,000. Unsolicited bulk broadcasts get numbers banned. Calls are regulated, not banned, but the rules leave little room for calling strangers.
This guide is for UAE businesses that sell through WhatsApp, from shops taking cash-on-delivery orders in chat to clinics and property agents. It covers the telemarketing rules, the personal data law, TDRA's SMS rules and WhatsApp's own policy as of September 2026, including WhatsApp's price changes on 1 October 2026.
What does UAE law say about marketing on WhatsApp?
UAE law regulates WhatsApp marketing rather than banning it. Cabinet Resolution No. 56 of 2024 Concerning the Telemarketing Regulations, in force since 27 August 2024, defines a marketing call to include "marketing text messages and marketing messages through social media applications". The Arabic text, which prevails, says the same.
Most coverage, including the Ministry of Economy's August 2024 briefing on the two resolutions, treats it as a cold-calling rule, and its articles are drafted around calls. We found no official guidance on applying each one to WhatsApp. Read literally, they point to five rules:
- Consent first. Market only to consumers who asked for marketing information through a channel you provide; contact at the consumer's request is not unwanted.
- No bought lists. Consumer data may not be disclosed without consent or traded for marketing, and the authority can ask where your numbers came from.
- Company numbers. Use local numbers registered under the company's commercial licence; individuals may not market from numbers licensed in their own name.
- The Do Not Call Registry. Numbers on the national registry (DNCR), supervised by the Telecommunications and Digital Government Regulatory Authority (TDRA), are off limits.
- Say who you are. Identify the company and the purpose at the start.
Two provisions are harder to map onto messaging: prior approval from the competent authority to practise telemarketing, and the 9am to 6pm limit on marketing calls. Ask your licensing authority how they apply to you.
Underneath sits the personal data law, Federal Decree-Law No. 45 of 2021, in force since 2 January 2022. It bars processing personal data without consent outside listed exceptions, requires consent you can prove and withdraw easily, and lets people object to direct marketing. Free-zone companies with their own data-protection laws are excluded. Businesses get six months to comply once its executive regulation is issued, and as of September 2026 the federal legislation portal does not link one.
Which rules apply to WhatsApp, calls, SMS and email?
Each channel has its own mix of rules, and only on WhatsApp can a platform's policy take your number away. As of September 2026:
| Channel | Main rulebook | Consent | Hours and limits | When it goes wrong |
|---|---|---|---|---|
| WhatsApp Business Messaging Policy; Resolution 56; the PDPL | The number plus an opt-in; market only to consumers who asked | None in WhatsApp's policy; the resolution's 9am–6pm limit is written for calls | Blocks, sending limits, lost access; possible Resolution 57 penalties | |
| Phone calls | Resolutions 56 and 57 of 2024 | Consumers who asked; never DNCR numbers | 9am–6pm; no call back after a refusal | Warning, fine, suspension, licence cancellation |
| SMS | TDRA's policy on unsolicited electronic communications; Resolution 56 | Prior explicit consent, stored | 7am–9pm under TDRA's rules; free unsubscribe | The telecom provider warns, suspends, then disconnects |
| The PDPL | Consent by default; right to object to direct marketing | None found on official UAE sites | PDPL complaint; penalties set by Cabinet decision |
TDRA's FAQ adds that SMS consent must be explicit and storable, every promotion needs a free unsubscribe, and transactional alerts such as bank notifications are not spam. TDRA's 7am to 9pm window does not match Resolution 56's 9am to 6pm, and no official page we found reconciles them, so send promotions between 9am and 6pm.
For email we found no channel-specific UAE rule on official portals, but the PDPL still covers your list: consent you can prove, an easy way to object, and no bought lists.
Sector rules sit on top. A customer's opt-in answers the messaging question, not the advertising one:
- Healthcare. The Ministry of Health and Prevention runs a licensing service for health advertisements across media channels and digital platforms. In Dubai, DHA standards bar licensed providers from social media claims such as "the best", "100%" and "no side effects", Khaleej Times reported on 1 September 2026.
- Property in Dubai. The Dubai Land Department's Real Estate Ad Permit, issued through Trakheesi, covers SMS and electronic advertisements.
- Finance. Under Resolution 56, telemarketing for Central Bank-licensed institutions falls under the Central Bank, and securities marketing under the Securities and Commodities Authority.
- Creators. Check whether creators promoting you need a UAE Advertiser Permit.
How do you get opt-in that holds up?
Ask clearly, name your business and WhatsApp, and record when and where each person said yes. WhatsApp's Business Messaging Policy lets a business contact people only if they gave their number and opted in to receive messages from that business, leaving the method and legal compliance to the business.
The usual Gulf case is simpler. Customers message a shop, agree a price and pay cash on delivery, all in one chat. Replying is not unsolicited marketing: Resolution 56 does not treat contact at the consumer's request as unwanted, and on the Business Platform you can reply without a template for 24 hours after the customer's last message. The risk is the offer sent to that number three weeks later.
- Click-to-WhatsApp ads. The customer starts the chat; answer first, then ask about offers. Here is how these ads compare with other UAE ad platforms.
- Forms. An unticked checkbox naming your business and WhatsApp, separate from the terms.
- In store. A QR code that opens a chat, next to a sign saying what customers will receive.
- Checkout or delivery. A separate yes-or-no question about offers.
Keep the date, source and wording of every opt-in, because the PDPL expects proof of consent. Opting out must be just as easy: WhatsApp requires businesses to honour stop requests made on or off WhatsApp, so confirm a STOP reply and apply it on every channel.
WhatsApp Business app or Business Platform: what does each allow and cost?
The Business app suits a small team on one phone; the Business Platform, WhatsApp's API, is built for templates, automation and volume. The same Business Messaging Policy and opt-in rule cover both.
On the app, broadcast lists only reach contacts who saved your number; for others, WhatsApp suggests its separate marketing messages feature.
On the Platform, conversations start only with an approved marketing, utility or authentication template, which WhatsApp can pause or reject. Inside the 24-hour customer service window you can reply without one, and automation is allowed if customers can reach a human.
Meta has charged per delivered template since 1 July 2025, by template category and the recipient's country calling code. Its WhatsApp pricing page, updated 10 September 2026, lists these changes from 1 October 2026:
| Message type (Business Platform) | Until 30 September 2026 | From 1 October 2026 |
|---|---|---|
| Marketing template | Charged | Charged; a UAE rate increase is listed |
| Utility template outside the 24-hour window | Charged | Charged |
| Utility template sent in reply inside the window | Free | Charged |
| Service message (a non-template reply inside the window) | Free | 1,000 free per business phone number per month, then charged |
| Any message in the 72-hour window after replying to a click-to-WhatsApp ad | Free | Free; no change listed |
Meta publishes an AED rate card, and its rates can change each quarter; check it before budgeting.
Why do WhatsApp business numbers get banned?
Numbers are limited or banned when recipients block and report them, when quality stays low, or when a business messages people at scale without authorisation. WhatsApp's policy says a low quality tier cuts how many messages a business can send, and breaches can end access and bar the business from future use.
Arabic-language vendor pages sell "WhatsApp marketing without bans". No software stops recipients from blocking or reporting you, and those signals are what WhatsApp acts on; its policy also names "messaging people at scale in an unauthorized manner" as grounds for removing access. A blast to bought or scraped numbers also runs against Resolution 56 and the PDPL.
To keep a number healthy, message only recent opt-ins, name your business in the first line, make stopping easy and never load an old or purchased list onto a new number.
What do the telemarketing rules require for calls?
Telemarketing calls are legal only inside tight limits: a licensed company with prior approval, calling from its own registered local numbers between 9am and 6pm, to consumers who asked for marketing information and are not on the Do Not Call Registry. The rules cover the mainland and free zones alike.
Resolution 56 also requires companies to:
- Identify the company and the purpose at the start of each call.
- Ask whether the consumer wants to continue before pitching.
- Record calls, telling the consumer, and keep a log of every call.
- Never call back after a refusal, and retry unanswered calls at most once a day and twice a week.
- Avoid pressure and deception, and train staff on the registry.
Automated calling is allowed within the same rules. Consumers can register on the DNCR to stop marketing calls, by sector or entirely, and complain; ask your licensing authority how to screen a calling list against it.
| Who | Penalty |
|---|---|
| Companies | Warning; fine of AED 10,000 to AED 150,000; suspension for 7 to 90 days; licence cancellation and deletion from the commercial register, with telecom services cut |
| Companies repeating a violation within 6 months | May face the most severe penalty straight away |
| Individuals, first violation | AED 5,000; all their numbers suspended until the fine is paid |
| Individuals, repeat within 30 days | AED 20,000; numbers cut for three months |
| Individuals, another repeat within 30 days | AED 50,000; no telecom service for 12 months |
Penalty types come from Cabinet Resolution No. 57 of 2024; the amounts come from the Ministry of Economy's briefing, which counts 18 types of violation.
A compliance checklist before you press send
Run this before any WhatsApp, SMS or call campaign:
- Trace the source of every number and drop anything bought, scraped or untraceable.
- Collect opt-in that names your business and WhatsApp, and store the date, source and wording.
- Send from numbers registered to the company, never from staff members' personal numbers.
- Use approved Platform templates for outbound volume, and keep app broadcasts to saved contacts.
- Name your business and the reason for the message in the first line.
- Offer a one-word opt-out and honour it on every channel.
- Send promotions between 9am and 6pm.
- Ask your licensing authority about telemarketing approval and DNCR screening.
- Secure health, property or financial advertising approvals before sending.
- Budget for WhatsApp's 1 October 2026 prices.
- Keep records of consent, templates, call logs and complaints.
At 4AI, our social media management and ad campaign teams build these funnels from the opt-in up: click-to-WhatsApp ads, landing pages with consent in the form, and first messages that say who is writing and why. Clients keep the accounts in their own name and pay media spend directly to the platform, both worth insisting on when choosing a marketing agency in Dubai.
This is general information, not legal advice. Rules, fees and platform policies change, so confirm on the official pages linked here before acting, or book a consultation for a second opinion on your funnel.
Frequently asked questions
Can I send WhatsApp broadcasts to customers who gave me their number?
Only if they also agreed to receive messages from you. WhatsApp requires both the number and an opt-in, and Business app broadcasts only reach people who saved your number. A number given for a delivery is there to deliver that order, so ask separately before sending offers and keep a record of the answer.
Can my sales team market from their personal WhatsApp numbers?
Resolution 56 of 2024 points to no. It bars individuals from making marketing calls, a term that includes app messages, from numbers licensed in their own name, and it requires companies to use numbers registered under the company's licence. The Ministry of Economy says TDRA can fine an individual AED 5,000 and suspend their numbers for a first violation.
Is cold calling illegal in Dubai?
No, but it is narrowly allowed. The federal rules apply in Dubai, free zones included: a licensed company needs prior approval, its own registered local numbers, calls between 9am and 6pm, no numbers from the Do Not Call Registry, and consumers who asked for marketing information. Company fines run from AED 10,000 to AED 150,000.
Do I need consent to send marketing SMS in the UAE?
Yes. TDRA requires prior explicit consent, written or electronic, that you can store and show later, plus a free unsubscribe option in every message. TDRA allows promotional SMS from 7am to 9pm, but Resolution 56 limits marketing calls, which include text messages, to 9am to 6pm, so the safer window is 9am to 6pm.
Do clinics need approval to send offers to patients who opted in?
Consent and advertising approval are separate questions: an opt-in covers the messaging rules, not whether the offer is a health advertisement that needs a licence. The Ministry of Health and Prevention runs a licensing service for health advertisements, and in Dubai the DHA's social media standards bar claims such as "100%" and "no side effects".