← BlogAccount safety

Will comment-to-DM automation get my Instagram account banned?

What Meta actually allows for Instagram DM automation, what the documented limits are, why some accounts still get restricted, and how to run comment-to-DM without putting your account at risk.

Web Dev George
October 18, 2026 · 4 min read
Account safety
1 reply

per comment, within 7 days. Meta’s own rule.

The short answer

Comment-to-DM is allowed when it runs through Meta’s official API: Meta documents it as “private replies”, one message per comment within seven days. What gets accounts in trouble is the unofficial route (tools that log in with your password or automate the app), sending the same link to everyone, and messaging people who never asked. Use an official integration, reply only to people who commented, and keep the first message personal.

01The short version

There are two very different things people call “Instagram automation”:

Official API toolsUnofficial tools
How they connectYou log in on a Meta page and approve permissionsThey ask for your Instagram username and password, or run on your phone
What they can doWhat Meta allows: reply to comments and messagesAnything a person could do, including mass-following and cold DMs
Risk to your accountLow when used as intendedHigh: this is what Instagram’s spam systems look for

If a tool never sends you to a Meta login page, it is not using the official route.

02What Meta officially allows

Meta’s documentation for private replies is specific (Meta for Developers):

  • You can send one private message to someone who commented.
  • It must go out within 7 days of the comment.
  • You can only continue the conversation after they reply, within the 24-hour messaging window.

Meta’s policy overview adds that businesses have up to 24 hours to respond to a user, and that a human agent (a person, not an automation) can reply within seven days (Meta policy overview).

03What about the “200 DMs an hour” limit?

You will often read that Instagram allows 200 automated DMs an hour. We could not find that number in Meta’s own rate-limit documentation. One careful write-up reports that Meta’s documented ceiling for private replies is 750 calls per hour per account, and describes the 200 figure as a pacing limit some tools chose for themselves (Blotato). A tool that paces itself below Meta’s limit is being cautious, which is fine; just know where the number comes from.

04So why do accounts still get restricted?

People do report restrictions, and the fear is real:

Meta is actively banning Instagram accounts using native Comment-to-DM workflows. 3 of our accounts nuked this week.
a user on r/gohighlevel

A single forum post cannot tell you the cause, and Meta rarely explains a restriction. From what is documented and what is commonly reported, these are the patterns that raise risk:

  • Password-based tools or phone automation, which look like a bot using the app.
  • The same message, with a link first, to everyone. Identical link-heavy messages are what spam filters are built to catch.
  • Messaging people who did not ask. Cold DMs to people who never commented or wrote to you are not what private replies are for.
  • A sudden jump in volume on a new or recently restricted account.
  • Several connected tools doing the same job at once, so one person gets two or three automated replies.

05How to run comment-to-DM safely

  1. 1Connect through Meta’s login only. Never give a tool your Instagram password.
  2. 2Only answer people who commented your keyword. That is the whole point of a private reply.
  3. 3Make the first DM sound like you, and ask a question. Put the link after they answer, not in the first line.
  4. 4Use one automation per post. Turn off the old tool before you connect a new one.
  5. 5Grow volume gradually on a new account.
  6. 6Keep promises honest. Automation should deliver what was offered and start a conversation. Price, results and personal situations are for a person to discuss.

06What to do if you do get restricted

Turn off every automation first, so nothing keeps sending while Instagram is reviewing the account. Then use the in-app “Account Status” screen to see what happened and to appeal. Reconnect one official tool at a time once the restriction is lifted.

We make Mentorship Boss, which uses the official API for all of this. That is a fact about how it is built, not a guarantee: no tool can promise that Meta will never restrict an account.

Web Dev George

Builds Mentorship Boss, and has spent seven years building websites and marketing systems for coaches. Where this post mentions Mentorship Boss, it is our own product. Quotes from public forums are reproduced as posted and linked to their source.

FAQ

Questions people ask

Is ManyChat safe for Instagram?

ManyChat connects through Meta’s official API, which is the safe route. As with any tool, how you use it matters: reply only to people who asked, avoid identical link-first messages, and do not run several tools on the same post.

How many DMs can I send per hour on Instagram?

Meta documents limits per API call rather than one simple DM number. One analysis reports 750 private replies per hour per account; the often-quoted 200 per hour is a pacing figure some tools use, not one we found in Meta’s documentation.

Can I DM everyone who commented before I set up automation?

Meta allows one private reply per comment within seven days of the comment, so recent comments can often still be answered. Older ones cannot.

Will a follow gate get me banned?

Asking people to follow before they receive something is common and is done inside the conversation they started. The usual risk factors still apply: official tools only, and no messages to people who did not ask.

Free guide

Start with the first seven seconds.

How to keep people past the opening of a Reel, and how to measure whether they stayed.