WhatsApp Business API in Malaysia: Pricing, Providers and Setup (2026)

Quick answer: The WhatsApp Business API, which Meta now calls the WhatsApp Business Platform, has no licence fee. You pay Meta per message and a Business Solution Provider for the software on top. Since 1 July 2025 Meta charges per message, not per 24 hour conversation. For a Malaysian recipient the rates effective 1 October 2026 are RM0.3467 for marketing and RM0.0564 for utility or authentication. MYR is a Meta rate card and billing currency, so a correctly set up Malaysian entity is charged in ringgit, not a converted dollar figure.

One date needs planning for now. From 1 October 2026 Meta charges for service messages, the replies you send inside the 24 hour customer service window, and for utility templates sent inside it. Both were free from 1 July 2025, so any budget built on “replies are free” is now wrong. Allow two to four weeks from business verification to your first approved template.

What the API actually is, and who needs it

Three things share the WhatsApp Business name and they are not interchangeable.

The WhatsApp Business app is free: one phone, four linked devices, broadcast lists capped at 256 contacts, quick replies and away messages. For a single shop it is often enough.

The WhatsApp Business Platform is the paid API. No app, no phone. Your number lives on Meta’s servers and is driven by software, so any number of agents can work one inbox, the number can connect to your CRM, and messages fire on events. The Cloud API is the only way to reach it: the older On-Premises API stopped accepting new numbers on 1 July 2024 and expired on 23 October 2025, so a provider quoting an on premise deployment is a warning sign.

You need the API when one of these is true, and not before:

• More than one person answers the same number, or you need to see who replied to what
• Order, delivery or payment messages should fire from your system rather than be copied by hand
• You send to more than 256 people at a time, or want to know who opened and clicked
• Conversation history has to survive a staff member leaving with their phone
• You want Click to WhatsApp ads to land in a measurable pipeline, not a personal chat

One shop with forty messages a day does not need it; three branches with a delivery promise and paid social spend does. A number registered to the Platform cannot return to the app, so use a new one.

How pricing actually works

Meta charges you, your provider charges you, and confusing them is how budgets go wrong.

The Meta side

Since 1 July 2025 the unit is the message, not the conversation. Each template is priced by category and recipient country, so a message to a Malaysian number is charged at the Malaysia rate wherever your company sits:

Category	Per message, MYR	Per message, USD
Marketing	RM0.3467	0.0860
Utility	RM0.0564	0.0140
Authentication	RM0.0564	0.0140
Authentication-International	RM0.1685	n/a

The customer service window. A customer messaging you first opens a 24 hour window, and everything inside it used to be free. From 1 October 2026 Meta charges service messages and in window utility templates at the utility rate, so a service reply to a Malaysian number goes from RM0 to RM0.0564.

Free entry point conversations. If a customer reaches you through a Click to WhatsApp ad or a Page call to action button and you reply within 24 hours, a 72 hour window opens in which every message is free. This is the largest cost lever a Malaysian advertiser has and almost nobody uses it: routing a Facebook or Instagram ad click into WhatsApp buys three days of free messaging per customer.

Volume tiers. Utility and authentication rates fall as monthly volume rises, by market and category. Marketing and service get no discount, so the category you most want to send never gets cheaper.

The provider side

You either build against Meta’s API with your own developer, or go through a Business Solution Provider, a company Meta approves to onboard businesses, which wraps the API in an inbox, campaign builder, chatbot and reporting. The trap is comparing a markup provider against a flat fee one on headline price: at 2,000 messages a month the markup wins, at 60,000 it loses badly.

A worked cost example, illustrative only

A model, not a quote. A retailer with 6,000 contacts, 900 monthly enquiries:

Line	Volume	Rate	Monthly cost
Marketing, two sends to the full list	12,000	RM0.3467	RM4,160.40
Utility outside the service window	2,500	RM0.0564	RM141.00
Utility in window, new from 1 Oct 2026	900	RM0.0564	RM50.76
Service replies, new from 1 Oct	1,800	RM0.0564	RM101.52
Meta subtotal			RM4,453.68
Provider fee, mid tier			RM400 to RM900
Indicative total			RM4,850 to RM5,350

Marketing is 93% of the Meta bill, so list discipline is the whole cost story. The 1 October 2026 change adds about RM152 a month here, real but not the disaster some provider blogs imply. Segmenting down to the 2,000 people who might buy moves that RM4,160 line more than any negotiation.

Template categories and what each is for

Every business initiated message must be an approved template, and the category sets the price, so miscategorisation is a billing problem as much as a compliance one.

Category	What Meta says it is for	Typical Malaysian use	Charged
Marketing	Awareness, sales, retargeting	Raya promotions, new arrivals, cart reminders	Always. No volume discount
Utility	Following up on a user action	Order confirmed, shipped, appointment reminder, receipt, renewal	Yes. Free in an open window until 1 Oct 2026. Volume discounts apply
Authentication	Verifying identity with codes	Login OTP, account recovery	Yes, with volume discounts. Needs a Template Library template and a one time password button. No URLs, media, emojis
Service (not a template)	Free form replies in an open window	A person or bot answering a question	Free until 1 Oct 2026, then the utility rate. No discount

The rule that catches people: a template mixing utility content with anything promotional is classified as marketing, and so is any template whose purpose is unclear. “Your order has shipped. Enjoy 10% off your next purchase” costs RM0.3467, not RM0.0564. Split them and you cut 84% off the notification.

Meta also recategorises templates sitting in the wrong bucket. Utility moved to marketing stays usable with about a day’s notice; marketing or utility moved into authentication is rejected on the first of the following month. Category reviews go through Business Support within 60 days.

Choosing a provider

Every price below was read on the provider’s own site on 30 September 2026.

Provider type	What you pay	What you get	Named providers and published price
Direct Cloud API	Meta rates only, plus your build and maintenance	Total control, no inbox unless you build one	None. You are the provider
Flat fee, you own the account	Fixed licence, Meta bills you direct at cost	Predictable forecasting, no markup, fewer frills	ForwardChat (Puchong) RM299, RM499 or RM999/month for 3, 5 or 10 users. 360dialog (Germany) EUR 49 to 500 per number
Seat or tier based inbox	Monthly fee by seats or conversations, plus Meta	Shared inbox, chatbot builder, broadcast tool, integrations, reporting	respond.io (KL) USD 79 to 279/month, 5 to 10 users. Seampify (KL) RM493 to RM2,448/month plus RM2,000 setup. Raion Tech RM160 to RM800. SleekFlow (Hong Kong) USD 109 to 279
Seats plus a markup	Monthly fee and a margin per message	Same tooling, markup compounds with volume	Qiscus (Indonesia) USD 115 to 270/month plus USD 0.0045 per marketing message
Pure pay as you go	No monthly fee, a margin per message	Low entry cost, quick onboarding. Dear at volume	iwsapp.my (KL, Penang) authentication RM0.10, utility RM0.12, marketing RM0.50. iSMS on request. Twilio USD 0.005. Gupshup USD 0.0010

Two things matter more than the numbers. The one genuinely Kuala Lumpur headquartered platform prices in US dollars, so a Malaysian business buying a Malaysian product still carries the currency risk. And iwsapp.my and iSMS are one company under a single registration, so treating them as competing quotes is a mistake. Infobip, Vonage, 8×8, Trengo, Sinch, Moobidesk and Kata.ai publish no pricing, so they are not listed. Wablas is excluded for a different reason: it drives WhatsApp through an unofficial gateway rather than the sanctioned API, the tool category that gets numbers banned.

Two questions before signing. Does the quote separate Meta’s charges from the provider fee, or hide the markup in one blended price? And does the WhatsApp Business Account sit in your own Business Manager?

The setup path, from verification to first message

Timings assume your documents are in order. Every step has a queue.

1. Get a number you can commit. A new SIM or landline able to receive one SMS or call, not active in the WhatsApp Business app. Same day.
2. Set up Meta Business Manager. One portfolio, your legal entity name, the correct address, admin access held by someone still there next year. One day.
3. Submit business verification. Meta asks for documents proving your legal name and address, and shows the accepted list for your country inside Business Manager. Malaysian companies generally use their Companies Commission of Malaysia (SSM) registration plus a second document carrying exactly the same name and address, including Sdn Bhd. A few working days in our experience, though two weeks is common when a document is queried. Meta publishes no committed turnaround.
4. Pick your provider and connect. Embedded signup runs inside Meta’s own dialog, so you approve the connection rather than hand over passwords. Under an hour.
5. Register the number and set the display name. Review is automatic and triggers when you reach a higher messaging limit. One to three working days.
6. Submit your first templates. Meta says review can take up to 24 hours; promotional language takes longer. One to three days with rework.
7. Build the flows. Chatbot logic, routing, CRM connection, opt in capture. This takes longest and is independent of Meta’s queues. One to three weeks. We handle it as chatbot development work, and the design questions sit in how to create an AI chatbot.
8. Send to a small segment first. Two to four weeks end to end. Anyone promising same day go live is counting step 4 only.

Messaging limits and quality rating

Limits count unique numbers you can message outside a service window in a moving 24 hour period, and since 7 October 2025 they attach to the business portfolio, not each number. A new portfolio starts at 250. You reach 2,000 by verifying your business, by having a partner verify it, or by delivering 2,000 messages to unique numbers within 30 days using high quality templates. Above that Meta scales you to 10,000, then 100,000, then unlimited, provided quality stays high and you used at least half your current limit in the last seven days. Verification also raises your cap from two registered numbers to twenty.

Quality is the constraint, not volume. An approved template can be paused for recurring negative feedback or low read rates and disabled after repeated problems, and a low quality number stops scaling.

What to automate and what to keep human

Automate	Keep human
Order confirmations, delivery updates, receipts	Complaints and refunds, where the customer is already annoyed
Appointment reminders and rescheduling links	Quotations, where price depends on scope
OTP and login codes	Medical, legal or financial advice
Opening hours, location, delivery areas, returns, FAQs	Anyone who has asked the same question twice unhelped
First line triage and routing to a branch	High value B2B enquiries, where a person closes and a bot does not

Two rules keep automation from costing you customers. Make the handover to a human one tap, not buried in a menu. And never let a bot answer a question it is only 70% sure about, because a confidently wrong answer gets screenshotted. The patterns are in AI chatbots for ecommerce websites, alongside ecommerce development.

Why templates get rejected

• Variables with no surrounding text. A template that is mostly placeholders reads as abuse potential to the automated reviewer. Give each variable real words around it.
• Formatting errors. Placeholders out of sequence, mismatched braces, a variable at the very start or end of the body, a trailing space. These return an invalid format rejection with no explanation.
• Wrong category. A promotional line inside a utility template is rejected or recategorised at the marketing rate.
• Content against the Commerce or Business Policy. Alcohol, tobacco, vaping, gambling, weapons, unregulated supplements and anything read as a medical claim. Malaysian advertisers hit this most with health and beauty copy.
• Abusive or threatening content, including debt collection wording.
• Authentication templates carrying a URL, media, an emoji or a parameter over 15 characters.

Write the utility templates first: they approve fastest, cost least, and teach the reviewer that your account behaves before you submit anything promotional.

PDPA and consent

Uploading a customer list and sending marketing messages processes personal data, so Malaysian law applies. The Personal Data Protection Act 2010 (Act 709) was amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727), assented 9 October 2024 and commenced in stages through 2025. Four points bite on WhatsApp marketing.

The penalty rose sharply. From 1 April 2025, breaching the Personal Data Protection Principles carries a fine up to RM1,000,000 or three years’ imprisonment, up from RM300,000 and two years. Consent and notice are both Principles, so a sloppy list is an expensive one.

Consent must be recordable and unbundled. Section 6 requires consent, but the Act does not use the word “explicit”, so treat claims about mandatory double opt in carefully. The work is done by Regulation 3 of the Personal Data Protection Regulations 2013: consent must be recordable and properly maintained, presented distinguishably where the same form covers other matters, and the burden of proving it sits with the business. One tick covering delivery updates and promotions fails that. Section 43 separately lets a person require you in writing to stop processing their data for direct marketing, an opt out right rather than an opt in mandate.

Sending through WhatsApp is a cross border transfer. The old section 129 whitelist was deleted on 1 April 2025 and replaced with self assessment. The Commissioner’s Cross Border Personal Data Transfer guidelines of 29 April 2025 require a business sending personal data out of Malaysia to say so in its privacy notice. Uploading a Malaysian list into Meta’s infrastructure is such a transfer, and most notices we audit omit it.

Officer and breach duties now exist. Section 12A requires a data protection officer, with the Commissioner’s circular of 1 June 2025 setting the trigger at more than 20,000 data subjects, more than 10,000 involving sensitive data, or regular systematic monitoring. Section 12B requires breach notification as soon as practicable, and its circular sets 72 hours.

The website side is covered in making a Malaysian website PDPA compliant. This is general information, not legal advice.

Frequently asked questions

Is the WhatsApp Business API free?

There is no licence fee and no minimum, so access costs nothing. You pay per message delivered, and almost always a provider for software. A few hundred utility messages a month runs on well under RM100 of Meta charges.

Can I be billed in ringgit?

Yes. MYR is a Meta rate card and billing currency, added alongside SGD, SAR and AED. Billing currency follows the sold to country on your account in Meta’s Billing Hub, so a correctly set up Malaysian entity pays Meta’s ringgit rates. Your provider may still invoice in USD.

Do I need business verification before sending anything?

No, but you are capped at 250 unique recipients and two registered numbers until you verify or hit the alternative scaling path. It is also a prerequisite for an Official Business Account, the blue checkmark beside your name, along with an approved display name, two step verification and 30 days on the platform.

How long does going live really take?

Two to four weeks. Verification is the unpredictable part, especially if your registration document and Business Manager address differ.

Can I keep the number already on my shopfront?

Technically yes, but once registered it cannot go back to the app, and the chat history on that phone does not travel with it. Most businesses we onboard use a new number.

How is this different from a WhatsApp blast tool?

Blasting tools drive a normal account through automation Meta does not sanction. They are cheap, they work for a while, and the account gets banned. The API is the sanctioned route: approved templates, published rates and a number that survives. Our view on the channel sits in WhatsApp marketing in Malaysia.

Global provider or Malaysian one?

Global platforms have deeper product and documentation. Local providers give you ringgit invoicing, a contact in your timezone and help in Bahasa Malaysia, which matters more than feature lists when a template is rejected on a Friday afternoon.

The bottom line

Pricing is not complicated once you separate the two bills. Meta charges per message at published ringgit rates, with marketing costing roughly six times a utility message, and providers charge for software in a few predictable shapes. Cost is set almost entirely by how many marketing messages go to people who did not want them, and any quote still describing 24 hour conversation bundles is out of date.

Build the utility messaging first: it is cheap, welcome, and it trains your quality rating. Add marketing only once you have a consent record you would show a regulator, and route paid social clicks into WhatsApp so the free entry point window does the work your budget would otherwise do.

Want the cost model built before you sign a provider contract rather than discovered in month three? Talk to us about chatbot and WhatsApp automation development. We can run a free audit of your messaging setup, template library and consent capture, and tell you what your real monthly Meta bill looks like. If paid social drives your enquiries, the same conversation should cover social media advertising and, for online stores, ecommerce SEO.