SIM swap and account takeover: protecting the number your clients message
How a brokerage loses its WhatsApp number to a SIM swap, a phished code or a linked device — the settings that stop it, and what POPIA requires afterwards.
Meta bills WhatsApp per message delivered. Which of a broker’s messages are charged, which are free inside the service window, and how to budget a month.
The question usually comes from whoever signs the invoices rather than from the people sending the messages: what does WhatsApp actually cost us? It has an unsatisfying answer, because the WhatsApp Business Platform no longer bills by conversation, by client or by campaign. Since 1 July 2025 Meta charges per message delivered, and whether a particular message costs anything at all depends on which category it falls into and on whether the client happened to write to you in the previous twenty-four hours.
That sounds like an accounting detail. It is not. It means the cost of a brokerage's WhatsApp book is decided by how the firm sequences its messages, not by how many clients it has. Once you can see the shape, the monthly statement stops being a surprise.
Five rules carry almost all of the billing logic:
None of this applies to the free WhatsApp Business app running on a handset: it has no per-message billing — and none of the shared inbox, template or record-keeping capability either. That trade-off is set out in our comparison of the WhatsApp Business app and the Business Platform, and it is worth settling before you worry about rates at all.
Map your standard message set onto the categories once, and the rest of the budgeting follows.
| Message | Category | Charged? |
|---|---|---|
| Renewal notice quoting the client's policy and date | Utility | Yes outside a window, free inside one |
| Premium due, or notice of a failed collection | Utility | Yes outside a window, free inside one |
| Claim acknowledgement and status update | Utility | Yes outside a window, free inside one |
| Document list sent after the client asked for it | Free-form | No — the client has just written to you |
| Answer to a question from a client | Free-form | No, inside the 24-hour window |
| Cover review or cross-sell offer | Marketing | Yes, always |
| Re-engagement of a dormant client | Marketing | Yes, always |
| Festive or birthday greeting | Marketing | Yes, always |
You propose a category when you submit a template; Meta validates it against its guidelines at approval and can reclassify an approved template later. Templates that mix content default to marketing, which is the trap most brokerages fall into: a perfectly good renewal notice with one persuasive sentence added at the end stops being utility. The mechanics of getting the category you asked for are covered in our guide to template approval and the utility versus marketing distinction.
A 24-hour customer service window opens each time a client messages you. Inside it, free-form replies are free and utility templates are free; marketing templates still cost. Outside it, every template you send is billed.
The practical consequence is that a service-led book is cheap to run and a broadcast-led book is not. All the work your administrators do all day — answering questions, chasing documents, walking a client through a claim — sits inside windows the client opened, and none of it is billed. The cost lives entirely in the messages you send first, to people who are not currently talking to you.
That gives you a design principle rather than a saving. Open with a single utility template that invites a reply — the platform allows up to three quick-reply buttons, and a button press counts as a reply — then run the rest of the exchange free-form inside the window that reply opened. A renewal conversation structured that way is one billed message and then a real conversation, instead of five billed templates fired at a silent contact.
Two guardrails belong next to that principle. Never withhold a message a client needs because it is billable: a lapse notice or a claim update that does not get sent costs far more than any rate card. And never dress marketing as utility to shift it into the free window — Meta reclassifies, repeat offenders face messaging restrictions, and the resulting complaints feed straight into the quality rating that governs your messaging limits.
Do it per policy rather than per client, in five steps:
In ORIS this is easier to see than to calculate: segments define who receives a campaign, campaigns run from Meta-approved templates with their categories visible, delivery statuses show what was actually delivered, and a CSV export lets finance reconcile your own send counts against the provider's statement. The discipline that saves money is the same one that improves conduct — send fewer, better-targeted proactive messages, and let the client's reply carry the rest of the conversation. Our note on segmenting a book before a renewal campaign is the natural companion to this one.
No. Inbound messages are not billed, and they are the messages you most want, because each one opens a 24-hour service window in which your free-form replies and your utility templates cost nothing. A book that talks to you is cheaper to serve than a book that ignores you.
No. The free-inside-the-window treatment covers free-form messages and utility templates only. Marketing templates are charged whenever they are delivered, which is exactly why the category your template is approved under matters more than its wording.
Billing attaches to delivery, so a message that fails to reach the recipient is not charged. Check how your provider reports failures, though: the platform statement and your own send count will only agree if you are both counting delivered messages rather than attempted ones.
You would remove the per-message charge and also the shared inbox, the audit trail, the templates and any ability to hand a client's history to another adviser. For a firm that must be able to show who said what to whom, that is not a saving; it is a different and larger risk sitting on someone's phone.
Reasonably far. Rates change only on the first day of a quarter, with a minimum of one month's notice for standard updates, so a quarterly review of the rate cards covering the countries in your book is enough for a budget you can defend.
Shared WhatsApp inbox, client records, follow-ups and opportunities for the whole brokerage. 15-minute demo.
How a brokerage loses its WhatsApp number to a SIM swap, a phished code or a linked device — the settings that stop it, and what POPIA requires afterwards.
Registry papers, a display name clients recognise, two-step verification: what Meta checks before a brokerage number can scale, and what the badge is worth.
Half the premium reminders did not send. What a WhatsApp messaging limit counts, how tiers and quality rating work, and how to run a month-end batch safely.