Automation guide
Instagram DM automation rules: the 24-hour window, private replies and limits
What Instagram allows when you automate DMs: who you can message, the 24-hour window, private replies to comments, and how to stay within limits.
By the FandomFlow team · Updated · 6 min read
Use the official API
Instagram supports automation through Meta’s official Instagram API. Tools that log in with your password or click through the app for you break Instagram’s terms and put your account at risk. FandomFlow connects with Instagram Login — you approve the permissions, and can disconnect any time.
Who you can message
Businesses can’t cold-message people on Instagram through the API. A conversation has to start with the person: a comment, a DM, or a reply to your story. That’s why every good automation starts with a reason for people to reach out — a keyword in your caption, a question in your story, or a link in your bio.
The 24-hour messaging window
When someone messages you, you have 24 hours from their last message to reply through the API. Each new message from them restarts the window. Automations are built for this: they answer instantly, well inside the window.
Meta also offers a human agent option that lets a person on your team reply for longer than 24 hours. It’s for human replies, not automated marketing.
Private replies to comments
A comment isn’t a conversation yet. Instagram lets a business send one private reply to a comment, for a limited time after it’s posted. That single DM is your chance to start the conversation — ask a question or offer a button so the person replies, which opens the normal messaging window.
Rate limits and pacing
Meta applies rate limits to API calls and messages. Bursts — like a viral reel with thousands of comments in an hour — need pacing. FandomFlow paces sends per account, retries temporary errors and never reports a message as sent until Instagram confirms it.
Good practice
- Tell people what they’ll get when they comment, and deliver exactly that.
- Keep the first message short, with one clear action.
- Let people opt out of follow-ups, and pause automations for anyone your team is talking to.
- Don’t automate the same keyword in two tools.