How to handle spam and junk on a business WhatsApp: block, report, filter, and keep the AI agent from replying to it

A public business number attracts junk: fake delivery notices, loan offers, "your WhatsApp Business will be suspended", job scams, and the occasional competitor fishing for prices. Most of it is harmless if ignored and harmful if answered. Here is how to handle it, and how to stop an AI agent from politely replying to a scammer thirty times.

By Ritchie, ReplyKit · Published 5 September 2026 · 5 min read

Quick answer

Block and report spam from the chat menu; WhatsApp uses reports to act on senders. Never click links or share codes from unsolicited messages, including ones claiming to be WhatsApp or Meta. Instruct your AI agent to reply only to messages that look like genuine customer enquiries and to stay silent on obvious spam, so junk does not consume your reply allowance. Keep two-step verification on and review linked devices monthly.

What business numbers receive Block, report, ignore What the agent should do Keeping a public number usable FAQ

What business numbers receive

Account threats. "Your WhatsApp Business account violates policy and will be suspended, verify here." WhatsApp does not message businesses this way with links.
Fake invoices and delivery notices with links or PDFs.
Loan, grant and investment offers.
Job and task scams offering pay for likes or reviews.
Code requests. "I sent my verification code to your number by mistake." This is the hijack attempt itself; see protecting your account.
Competitors asking for full price lists with no intention to buy.

Block, report, ignore

Open the chat, open the contact, and choose Report or Block; reporting sends recent messages to WhatsApp for review. Do not reply, even to say stop; a reply confirms the number is live. Do not open links or attachments. If a message claims to be from WhatsApp, Meta, your bank or a courier, verify through the official app or website, never through the message. WhatsApp's security page covers the reporting features.

What the agent should do

An AI agent that answers everything will answer spam, cheerfully and repeatedly, using your reply allowance while doing it. Add to the instructions: reply only to messages that appear to be from a customer or prospect asking about the business; do not reply to unsolicited offers, promotions, links, or messages that ask for codes or account details; never open or describe links from unknown senders. ReplyKit's default instructions include this, and a loop guard stops any conversation that goes back and forth without purpose. Caps are explained in the daily limits guide.

Keeping a public number usable

Use a business number, so junk never reaches a personal chat list.
Set the WhatsApp Business privacy options for who can add you to groups to "my contacts".
Review the inbox weekly and archive resolved and junk chats.
Do not publish the number in scraped places (open directories, comment sections) more than needed.

Frequently asked questions

How do I stop spam on my WhatsApp Business number?

Block and report senders from the chat menu, never reply or click links, and restrict who can add you to groups.

Will WhatsApp really suspend my business account by message?

WhatsApp does not send suspension threats with links by chat. Treat such messages as scams.

Does an AI agent reply to spam?

Not if instructed properly. It should reply only to genuine enquiries and stay silent on unsolicited offers and code requests.

Does spam use up my reply allowance?

Only if the agent replies to it, which the instructions prevent.

Should I reply 'stop' to spam?

No. Any reply confirms the number is live. Block and report instead.

Answers customers, ignores junk

An agent with the spam rules built in. 7-day free trial.

Start free

Written by Ritchie, ReplyKitPart of the small team in Malaysia that builds and runs ReplyKit. Writes about WhatsApp automation, AI customer service and small business lead response.

How we know this. Because ReplyKit counts AI replies against a monthly allowance, we care about the agent not answering junk; the rules below are built into our default instructions and are what we recommend adding to yours. Product figures in this article (limits, prices, per-reply costs) are taken from ReplyKit as it runs today and are re-checked when we update the page. Where we cite outside research, the source is linked below. We sell ReplyKit, so read our product claims with that in mind; we say where a different tool or no tool is the better choice. About ReplyKit.

Sources and further reading

WhatsApp, Security
MyCERT advisory, Scammers using compromised WhatsApp accounts for impersonation
WhatsApp Business Messaging Policy · opt-in, opt-out and prohibited-use rules every business must follow

ReplyKit is an independent product and is not affiliated with or endorsed by Meta or WhatsApp. This article is general guidance for running a small business, not legal, financial or regulatory advice.