Skip to content

Engineering

WhatsApp error 368 (temporarily blocked for policy violations): what to do next

What error 368 tells you about your WhatsApp Business account, the restriction durations Meta uses, where the violation is explained, how to request a review, and how 368 differs from 131031, 130497 and 131048.

By Broadchat teamPublished 8 min read

In short

WhatsApp error 368 means the WhatsApp Business account behind your app has been restricted or disabled for violating a platform policy; responses usually read "Temporarily blocked for policies violations". It is an account-level enforcement, not a problem with one message, so retrying will not help. Read the violation in Business Support Home, fix the behaviour that caused it, and request a review if you believe it is wrong. Meta says reviews typically take 24 to 48 hours, and some spam violations cannot be appealed.

Key takeaways

  • Meta's error reference lists 368 as an integrity error: the WhatsApp Business account has been restricted or disabled for violating a platform policy.
  • Restrictions escalate: a warning, then 1 or 3 day template blocks, then 5, 7 or 30 day blocks on all messages, then an account lock, and finally permanent offboarding.
  • Details of the violation, active restrictions and the Request Review button are in Business Support Home in Meta Business Suite.
  • Appeals are reviewed by the WhatsApp team, typically within 24 to 48 hours, with the result Unchanged or Reversed; not all spam violations can be appealed.
  • Subscribe to the account_update webhook to learn about violations and restriction durations in real time instead of from failed sends.

WhatsApp error 368 means WhatsApp has put an enforcement on your account. Meta's error reference lists it under integrity errors with the description "The WhatsApp Business Account associated with the app has been restricted or disabled for violating a platform policy" and points to its Policy Enforcement guide. API responses usually carry the title "Temporarily blocked for policies violations". Every send in scope will fail until the restriction ends or is reversed, so stop your campaigns and find out what happened before doing anything else.

How Meta's enforcement ladder works

Meta's policy enforcement guide says accounts first get a warning naming the policy they broke. If they repeatedly violate the WhatsApp Business Terms of Service, for example by sending spam, misclassifying templates, or operating in high-risk categories such as adult content, alcohol and tobacco, drugs, gambling or unsafe supplements, restrictions follow that gradually increase in length:

StageWhat is blocked
WarningNothing yet; you are told which policy was violated
1 or 3 day blockSending marketing, utility and authentication templates, and adding phone numbers
5, 7 or 30 day blockSending any messages, and adding phone numbers
Account lockAn indefinite block on sending any messages; removed only through an appeal
DisabledPermanent removal from the WhatsApp Business Platform after repeated warnings and blocks

Meta adds two important exceptions. Where there is evidence of severe harm, such as child exploitation, scams, terrorism or the sale of illegal drugs, the account is offboarded immediately. And an account that receives excessive negative feedback from users may be limited or offboarded too.

So 368 can mean anything from a short template block to a disabled account. The error code alone does not tell you which; the notice in Business Support Home does.

What the error looks like

Values illustrative:

{
  "error": {
    "message": "(#368) Temporarily blocked for policies violations",
    "type": "OAuthException",
    "code": 368,
    "error_data": {
      "messaging_product": "whatsapp",
      "details": "The WhatsApp Business Account associated with the app has been restricted or disabled for violating a platform policy."
    },
    "fbtrace_id": "AtR4yHk9Wn2QzXb7LmPeC0v"
  }
}

Step-by-step: what to do after a 368

  1. Pause all automated sending on the affected account: campaigns, drip sequences and integrations. Every attempt adds a failure and none will get through.
  2. Open Business Support Home. In Meta Business Suite, click All tools, then Business Support Home, then Account Overview if needed. Select the WhatsApp account and open the violation.
  3. Read the violation in full. Meta says the update contains a summary of the policy violated with a link to it, examples of allowed and disallowed content, any active restrictions and what happens if it happens again, how to avoid it, and how to appeal.
  4. Find the cause in your own sending. Match the date of the violation to your campaign and template history. Which template, which list, which number?
  5. Decide: appeal or acknowledge. If you believe you complied with policy, request a review. If the violation is fair, fix the cause and wait for the restriction to end.
  6. Fix the cause before you resume. Remove the template, clean the list, change the category or stop the product line, whatever the notice describes.
  7. Resume slowly, starting with replies to customers who message you and transactional templates, before any marketing.

How to request a review

Meta's guide describes the steps: from Business Support Home, select the relevant WhatsApp account, choose the violation from the list and click Request Review. A dialog opens; add supporting details and click Submit. The request moves to the In Review tab.

The WhatsApp team reviews the appeal against the policy. Meta says the decision is sent through Business Manager and typically takes 24 to 48 hours, and the violation is then either Unchanged or Reversed. If it is reversed, the account returns to its previous status. Meta also warns that not all spam violations can be appealed, in which case you wait until the restriction period ends.

A useful appeal is specific: how the recipients opted in (with the opt-in wording and date), why the template is in the category you chose, and what you have changed. "We are a genuine business" alone rarely moves anything.

368 and its neighbours

CodeMeta's descriptionHow it differs
368Account restricted or disabled for violating a platform policyA policy enforcement on the account
131031Account restricted or disabled for a policy violation, or Meta could not verify data in the request (for example an incorrect two-step PIN)Can be a lock or a data mismatch; Meta suggests the Health Status API for more detail
130497Account restricted from messaging users in certain countriesOnly some destination countries are blocked, based on your business category
131048Restrictions on how many messages can be sent from this phone number, possibly because too many previous messages were blocked or flagged as spamA sending limit on one number, linked to quality, not a policy enforcement on the account; see quality rating and messaging limits
131064Messaging limit reached because of template category violationsA specific penalty for misclassified templates; see error 131064

A worked example

Arjun runs WhatsApp campaigns for a supplements brand through his agency. After a large broadcast to a purchased list, every send starts failing with 368. In Business Support Home the violation reads as spam with a 7-day block on all messages, and the notice explains that messages were sent to people who had not opted in.

He does not appeal: the list really was bought. He deletes it, rebuilds the audience from customers who opted in at checkout, and waits out the seven days. When the block ends, he restarts with order updates and replies to inbound questions for a week before running a small marketing campaign to the opted-in list. A second violation would bring a longer block or an account lock, so the brand's opt-in process is now written down.

Preventing a 368

  • Message only people who opted in to hear from your named business, and honour opt-outs at once. Our guide to WhatsApp opt-in best practices shows wording that works.
  • Keep template categories honest. Template misclassification is one of the violations Meta names. See how template categories are decided.
  • Check your products against the Commerce Policy before selling them on WhatsApp, especially regulated categories.
  • Watch quality signals. Blocks and reports lower your quality rating long before a 368; slow down when it turns yellow.
  • Subscribe to the account_update webhook. Meta sends it when an account violates a policy and, when applicable, with the restriction type and duration, so your systems can pause sending by themselves.
  • Keep admin details current in your business portfolio, because Meta emails violation notices to all admins.

How Broadchat responds to a 368

Broadchat treats 368 as a sign that the channel cannot send. When a send fails with it, a running campaign stops instead of failing recipient after recipient, and the channel's health is re-checked against Meta. When Meta reports sending as blocked or restricted, the channel shows Meta's reason, and new sends from that channel are refused with a message asking you to fix the issue and then use Refresh status on the channel. A failed message shows the reason "The business account is temporarily blocked for policy violations." Appeals themselves are made by the account owner in Meta Business Suite; no platform can lift a WhatsApp enforcement.

For other codes, see the WhatsApp API error codes cheat-sheet. Agencies that manage many client accounts can watch channel health for all of them in one panel through the white-label program.

Sources

  1. WhatsApp error codes — Meta for Developers, checked 30 October 2026
  2. WhatsApp Business Platform policy and spam enforcement — Meta for Developers, checked 30 October 2026
  3. WhatsApp Business Messaging Policy — WhatsApp, checked 30 October 2026
  4. WhatsApp Commerce Policy — WhatsApp, checked 30 October 2026

Broadchat team · Product and partner success team

The people who build and support Broadchat, the white-label WhatsApp Business API platform. We write from what we see while onboarding partners and their clients on the official WhatsApp Cloud API, and we check every article against Meta's current documentation.

Last updated:

Frequently asked questions

What does WhatsApp error 368 mean?

It means the WhatsApp Business account behind your app has been restricted or disabled for violating a platform policy. It applies to the account, not to one message, so sends fail until the restriction ends or Meta reverses it after a review.

How long does a WhatsApp 368 block last?

It depends on the enforcement. Meta's guide describes 1 or 3 day blocks on templates, 5, 7 or 30 day blocks on all messages, an indefinite account lock that only an appeal removes, and permanent disablement after repeated violations. Business Support Home shows the active restriction.

How do I appeal a WhatsApp policy violation?

In Meta Business Suite, open Business Support Home, select the WhatsApp account, choose the violation and click Request Review, then add supporting details and submit. Meta says decisions typically take 24 to 48 hours and the result is Unchanged or Reversed.

Should I retry messages that failed with error 368?

No. Retrying adds more failed sends and does not get messages through. Pause sending, read the violation, fix the cause, and resume only when the restriction has ended or been reversed.

Can my WhatsApp provider remove a 368 restriction?

No. Enforcement is decided by WhatsApp. Your provider can help you find the cause and pause campaigns, but the review request has to be made from Business Support Home by someone with access to the business portfolio.

Launch WhatsApp under your own brand

Resell campaigns, chatbots, a shared inbox and CRM on the official WhatsApp Cloud API, with your logo, domain and prices.