A WhatsApp bot built on an unofficial library (Baileys, whatsapp-web.js, WAHA, Evolution API) saves you money at setup and puts your business number at risk of a ban within weeks. This is not a theoretical warning. It is how businesses lose their primary communication channel.
In January 2026, Meta formally banned open-ended AI "assistant" bots on the WhatsApp Business Platform. Only structured bots are allowed: orders, FAQs, lead capture, order status. And that is before we even get to official versus unofficial.
Official vs unofficial: what is the difference?
Meta's official Cloud API is how Meta lets businesses send and receive messages through an API. You are verified, the number is registered, and all traffic runs through Meta's infrastructure. This is what banks, airlines, and large e-commerce sites use. You can go direct, without a reseller in the middle; the fee math is in BSP vs direct Cloud API.
Unofficial libraries reverse-engineer the WhatsApp app. They impersonate a real phone. Meta detects that pattern, and when it does, it bans the number. It is not "if", it is "when".
Why a "cheap" bot ends in a ban
An unofficial library is cheaper to set up because it skips the entire official process: no business verification, no number registration, no policy compliance. Exactly the things that make a bot stable.
The problem: your business number is an asset. If it gets banned, you lose the history, the customers who messaged you, and the channel they are used to. A business that runs on WhatsApp cannot gamble that to save a few thousand shekels at setup.
"Open source" does not mean "safe". These libraries are open source and technically excellent, but they operate against Meta's terms of service. That is the risk, not the code quality.
What a compliant bot looks like
- Official Cloud API only: the number is registered and verified with Meta.
- Clear structure: defined conversation flows, not an open AI you can jailbreak.
- Webhook verification: every inbound message is verified with an HMAC signature before the bot replies.
- Human handoff: when the bot does not know, the conversation moves to a person with full context.
This is what we build at SporeSec. Not because it is more impressive, but because it is what does not get banned.
What to ask any vendor
- Which API is the bot built on? If the answer is not "Meta's official Cloud API", stop there.
- Does my number go through business verification with Meta?
- What happens if Meta changes its policy?
A vendor promising you a WhatsApp bot for ₪2,000 is probably building on an unofficial library. The only question is how long until the number gets banned. For what a compliant build actually costs, see how much a WhatsApp bot costs in Israel.
Want a bot that will not get banned? The fit quiz takes a minute, or book a free call and we will explain exactly how we build on the official API.