Meta's rules, explained

Is Instagram DM automation safe?

Yes, when it runs on Meta's official API and only replies to people who reached out first. Here are the exact limits.

Will automated DMs get my Instagram account banned?

Automated DMs are allowed on Instagram when they run through Meta's official Instagram API and only reply to someone who acted first: commented on your post or Reel, replied to your story, or sent you a DM. What gets accounts blocked is everything else: apps that log in with your password, cold DMs to people who never contacted you, mass follow-and-DM bots and identical messages blasted at speed.

Meta sets the limits: one private reply per comment, sent within 7 days of the comment; up to 750 comment replies per hour per account; and follow-up messages only within 24 hours of the person's reply. A safe tool stays well inside these and spreads messages out.

Last updated 5 Nov 2026

Meta's official limits (2026)

Comment to DM (private replies): one message per comment, sent within 7 days of the comment.

Up to 750 private replies per hour per Instagram professional account for comments on posts and Reels.

Instagram Live comments: private replies only while the broadcast is live.

After a private reply, you can only send more messages if the person replies, and within 24 hours of their reply.

When someone DMs you or replies to your story, you can message them for 24 hours from their last message.

Instagram also limits messages people may not want, like spam, and can stop an account from sending DMs for a while after a warning.

Safe vs unsafe automation

Safe: official API, connected through Instagram's own login screen (you never type your password into the tool).

Safe: replies only after a comment, story reply or DM, with a message that matches what the person asked for.

Unsafe: tools that ask for your Instagram password, follow/unfollow bots, cold DMs, buying followers or likes.

Unsafe: the same message blasted to hundreds of people in minutes. Even inside the hourly limit, bursts look like spam.

How Hypee keeps your account safe

Uses Meta's official Instagram API with the permissions Meta reviewed and approved; Hypee never sees your password.

Replies only to comments, story replies and DMs: no cold DMs.

A send queue spaces messages out and keeps every account below Meta's hourly limit, even when a Reel goes viral.

Doesn't DM the same person again and again from different posts, and stops on its own if Instagram starts rejecting messages.

People can reply STOP to stop automated messages.

Instagram auto DM safety FAQ

Is Instagram DM automation allowed?

Yes, through Meta's official API, for replying to people who commented, replied to a story or messaged you first. Cold DMs and password-based bots are not allowed.

How many DMs can I send per day on Instagram with automation?

Meta's limit for comment-to-DM private replies is 750 per hour per account, with one reply per comment within 7 days. Normal DMs can be sent for 24 hours after the person's last message. Stay well below the limits and spread messages out.

Can automated DMs include links?

Yes. A comment-to-DM private reply is a text message and can include a link. Richer messages like buttons and images can be sent inside the 24-hour window after someone DMs you or replies to your story.

Do I need a business account for Instagram auto DM?

You need a professional account: either Creator or Business. Personal accounts can't use Meta's messaging API.