Is Instagram auto-DM allowed?
Yes, when the DM is a reply to something a user did, like commenting on your post. That is exactly how comment-to-DM works. The DMs that get accounts restricted are the opposite: cold messages blasted to people who never interacted with you.
What Instagram actually allows
Meta's rules draw one clear line: an automated direct message is allowed when it responds to a user-initiated action. Someone commenting on your post, replying to your story, mentioning you, or messaging you first all count. The person started the interaction, so a reply is welcome.
The specific mechanism behind comment-to-DM is what Meta calls a private reply. When a viewer comments on your post, reel, carousel, or ad, you are allowed to send them one private message in response. Not two, not a follow-up sequence later that week. One private reply per comment.
That reply has a deadline. You can send it any time within 7 days of the comment on a normal post, reel, or ad. After that window closes, the comment no longer qualifies for a private reply.
One requirement applies before any of this works: you need an Instagram professional account, which means either a Business or a Creator account. Instagram's API does not work with personal accounts. Switching is free and takes about two minutes in your Instagram settings.
What actually gets accounts banned
The fear is real, but it is usually pointed at the wrong thing. Accounts get restricted for behavior that looks like spam, not for replying to comments. Three patterns cause almost all of the trouble:
Mass cold DMs. Sending unsolicited messages to people who never commented, followed, or interacted is the clearest violation. There is no user-initiated action to reply to, so every message is outreach Instagram did not invite. This is the single biggest reason accounts get flagged.
Password-based bots. Tools that ask for your Instagram password log in as you and automate through the regular app, which is against Instagram's terms. They bypass the official API entirely, and Instagram treats that automation as suspicious activity on your account.
Spammy volume. Firing identical messages far faster than a human could, or blowing past the platform's rate limits, trips automated spam detection even when the messages are technically replies.
Comment-to-DM done correctly is the opposite of all three. Every message answers a real comment, the connection happens through the official login with no password shared, and sending stays inside Meta's published rate limits. You are working with Instagram's rules instead of around them.
The real limits
Instagram does not just permit comment-to-DM, it caps how much of it you can do. These are Meta's API limits, not numbers any tool invents:
- 750 private-reply API calls per hour, per account for comments on posts and reels. That is the ceiling Instagram enforces on the private-reply endpoint.
- About 200 automated DMs per hour is the widely-cited safe practice that keeps sending well clear of spam detection, even though the hard API limit is higher.
- 1,000 characters maximum per message. Your DM copy has to fit inside that cap.
There are also two time windows, and mixing them up is a common mistake:
- The comment-to-DM window: 7 days, one message. A comment lets you send a single private reply within seven days.
- The conversation window: 24 hours. Once a person actually messages you, a separate window opens that lets you keep replying back and forth for 24 hours. This is a different rule for an ongoing conversation, not the comment-to-DM rule.
Instagram Live is its own case. A private reply to a Live comment can only be sent during the broadcast. Once you stop streaming, that window is closed.
How Comment Auto Reply stays inside the rules
The whole product is built to sit on the allowed side of every line above.
Official API only. Every DM is sent through Instagram's official private-reply API, the same mechanism Meta documents for replying to comments. Nothing automates the consumer app.
No password, ever. You connect with Instagram's official login authorization. We never see or store your password, and you can disconnect at any time from your Instagram settings.
Rate-limit aware. Sending is paced to stay inside Meta's published limits, so the app never pushes your account into spam-detection territory just because a post did well.
Overflow queue for viral spikes. When a reel pops off and comments arrive faster than the limits allow, an overflow queue holds the extra replies and sends them in order as room opens up. Nobody gets missed, and nothing gets sent too fast.
Which surfaces work
Comment-to-DM covers the places where people comment on what you publish:
- Posts and carousels. A comment on a feed post or carousel qualifies for a private reply.
- Reels. The format most likely to go viral, and the one comment-to-DM is built around.
- Ad posts. Comments on ad posts qualify too, so paid reach can drive DMs the same way organic does.
Two more surfaces work through their own triggers:
- Story replies. When someone replies to your story, that is a user-initiated action you can answer automatically. It runs as a separate trigger from comment-to-DM.
- Instagram Live. You can reply to Live comments, but only while the broadcast is still running.
Read it from Meta directly
None of this is our interpretation. The rules come straight from Meta's developer documentation, and you can read them yourself:
- Private replies on Instagram, including the one-message and 7-day rules: developers.facebook.com/docs/messenger-platform/instagram
- Messenger Platform policy on what automated messaging is and is not allowed: developers.facebook.com/docs/messenger-platform/policy
- Graph API rate limiting, where the per-hour call limits live: developers.facebook.com/docs/graph-api/overview/rate-limiting
Want to see it run before you decide?
Start on the free plan, connect a Business or Creator account, and watch a real comment turn into a DM inside Meta's rules.
Auto-DM rules, answered
The questions creators ask before they trust a tool with their account.
Not when it is done the way Comment Auto Reply does it. Instagram allows an automated DM in response to a user-initiated action, such as someone commenting on your post. That is exactly the comment-to-DM flow. What gets accounts restricted is cold or mass messaging people who never interacted with you, which we do not do. We send through Instagram's official API and stay inside Meta's published rate limits.
Yes. Meta's own documentation supports "private replies": when someone comments on your post, reel, or ad, you may send them one private message in response. Comment Auto Reply is built entirely on this official mechanism, so you are working with Instagram's rules rather than around them.
Yes. Instagram's API only works with a professional account, which means either a Business or a Creator account. Both are free, and switching from a personal account takes about two minutes in your Instagram settings. Personal accounts cannot use comment-to-DM automation from any tool.
For comment-to-DM you can send one private reply per comment, within seven days of that comment. Instagram's API allows up to 750 private-reply calls per hour per account, and the safe practical ceiling most tools work within is around 200 automated DMs per hour. Your plan's monthly limit sits on top of those API rules.
Yes to Reels, posts, carousels, and ad posts for comment-to-DM. Story replies are supported as a separate trigger. Instagram Live is supported too, but a private reply to a Live comment can only be sent while the broadcast is still running.
Two things. First, price: ManyChat bills by active contacts and adds per-contact overage fees, so a viral reel can turn into a four-figure bill in a single month. Comment Auto Reply is a flat price, so going viral never raises your bill. Second, focus: we do comment-to-DM and do it simply, from your phone, instead of a desktop flow builder you have to learn.
Yes. You can drop a link straight into the DM, gate it behind a follow if you want the new follower, and collect emails as part of the reply. That turns a comment into a lead or a sale without you touching your inbox.
Yes. The free plan includes comment-to-DM and story replies for one Instagram account, with a monthly cap and no credit card required. You can run a real campaign and see DMs fire before you ever pay. Paid plans add more accounts, higher limits, the follow gate, email capture, and analytics.
No. You connect through Instagram's official login, the same secure authorization Meta uses for approved apps. We never see or store your password, and you can disconnect at any time from your Instagram settings.
Usually within seconds. The reply fires as soon as the comment comes in, so the person gets your link while they are still on your post. During a viral spike, sends are paced to stay inside Instagram's rate limits, so a few may arrive a little later, in order, rather than all at once.
Run comment-to-DM the safe way
Get early access to the app that does comment-to-DM through Instagram's official API, no password, flat price. We'll send your invite the day it goes live.