Instagram DM limits in 2026: how many auto-DMs you can actually send

Most people searching for Instagram's DM limits are worried about one thing: whether a post that does well will hit a wall, or worse, get their account restricted. The honest answer is that the limits are real, they are published, and almost nobody running a normal comment-to-DM setup gets anywhere near them. What actually gets accounts restricted is a different thing entirely, and it is not volume.

Here is every number that matters, stated precisely, with the difference between Meta's published rules and the numbers the industry repeats.

The limits at a glance

Every one of those comes from Meta's own documentation for Private Replies, the Messenger Platform policy, and Graph API rate limiting. The one number below that is not from Meta is flagged as such.

One private reply per comment, within 7 days

This is the core rule of comment-to-DM, and it is stricter than most people expect. When someone comments on your post, you may send that person exactly one private message in response to that comment. One. Not a follow-up, not a reminder, not a second DM the next day.

You have 7 days from the moment of the comment to send it. After that, the comment is no longer a valid trigger and the private reply will not go out.

Two things follow from that. First, the single DM has to carry the whole job: the acknowledgement, the link, and whatever you want them to do next. There is no second chance built into the rule. Second, if someone comments your keyword three times on the same post, that is three separate comments, so a compliant tool will not blast them three DMs. It sends one and moves on.

In practice the 7 days are rarely the binding constraint, because replies go out as the comments arrive. The window only matters if your automation was disconnected while a post was live and you reconnect days later.

The 24-hour window is a different rule

These two get mixed up constantly.

The 24-hour window is the standard messaging window: once a person sends you a message, you can keep replying for 24 hours from their last message. It governs ongoing conversations, not comment triggers.

The 7-day window is the private reply window: it governs how long a comment stays valid as a trigger for that one automated DM.

They are separate rules with separate clocks, and they are not interchangeable. You do not get 7 days of open conversation because someone commented, and you do not lose your comment trigger after 24 hours. If a tool's documentation blurs these two together, treat that as a sign it has not read the policy closely.

750 private-reply API calls per hour

This is the throughput limit. Instagram allows 750 private-reply API calls per hour, per account, for comments on posts and Reels. Live comments have their own, higher limit.

That ceiling is per account rather than per post, and it resets every hour. To hit it you would need roughly 750 keyword comments arriving inside a single hour, which is a genuinely viral moment rather than a good day.

When you do go over a rate limit, requests get throttled until the window resets. Nothing about that is a penalty or a strike against your account. It is the API declining calls, the same way any metered API does. What matters is whether your tool handles it: a queue that paces sending and retries inside the window means nobody gets missed, while a tool that fires everything at once and drops the rejections means some people who commented never hear back. The viral-spike overflow queue on our Max plan exists for exactly that hour.

The 200 DMs per hour figure, and where it comes from

You will see "200 DMs per hour" quoted constantly as an Instagram limit. Be careful with it.

It is not a number Meta publishes. It is widely-cited safe practice, a conservative pacing figure the automation community settled on, and it is well below the actual 750 private-reply calls per hour. Repeating it as an official Meta limit is wrong, and so is ignoring it.

The reason it persists is that staying inside a documented API limit is not the same as looking ordinary. The 750 figure caps how many calls Instagram will accept in an hour. It is not a promise that one enormous burst will look like normal activity. Pacing well under the ceiling costs you nothing on a normal post, and on a big one it means your replies leave steadily instead of all at once.

Treat 200 an hour as a sensible default pace, not a law.

1,000 characters per message

Every message is capped at 1,000 characters. That is not a constraint most people hit, but it does shape good DM copy.

A thousand characters is roughly 150 words, which is plenty for a warm opener, the link, and a short nudge. It is not enough for a sales page. Since you only get one private reply per comment, the temptation is to stuff everything into it, and that is exactly the wrong instinct. Short DMs get read. Write it the way you would text a friend who asked for the link, then stop.

Which surfaces are covered

Comment-to-DM works on comments on posts, carousels, Reels, and ad posts. All four behave the same way under the one-reply, 7-day rule.

Story replies are a separate trigger rather than a comment reply. When someone replies to your Story, they have messaged you, which opens the standard 24-hour conversation window rather than the private reply path.

Instagram Live is the exception worth remembering. Comments on a Live broadcast can only be privately replied to during the broadcast itself. Once the stream ends, those comments are no longer valid triggers. There is no 7-day grace period for Live.

You need a professional account

The API only works with an Instagram professional account, Business or Creator. Personal accounts cannot use it at all, and no tool can work around that, because the permission simply does not exist.

Switching is free and takes about two minutes in Instagram's settings. You keep your username, your followers, and your posts. Either professional type works for comment-to-DM.

What actually gets accounts restricted

This is the part worth being blunt about. Hitting an API rate limit is not what gets accounts restricted. Sending automated messages to people who never contacted you is.

Meta's policy allows automated DMs only in response to a user-initiated action: a comment, a Story reply, a mention, or the person messaging you first. Comment-to-DM sits squarely inside that, because the viewer typed your keyword and asked for the thing. Cold outreach, scraped follower lists, and mass DMs to people who never interacted with you are prohibited, and that is the behavior that gets accounts limited.

The other risk is the login method. Tools that ask for your Instagram username and password are driving the app like a human, which is unofficial automation and exactly what spam systems are built to catch. With the official API you sign in on Instagram's own login screen, so the tool never handles your password at all.

Staying inside the rules means: only reply to people who acted first, one private reply per comment, and connect through Instagram's official login. Volume inside those bounds is not the problem. We go through the full reasoning, with Meta's policy language, in is Instagram auto-DM allowed and in what actually gets accounts restricted.

How plan limits sit on top of API limits

There are two ceilings, and they are independent.

Instagram's limits are the hard ones: one reply per comment, 750 calls an hour, 1,000 characters. No tool can raise them, and any tool claiming otherwise is either wrong or not using the official API.

Your plan limit is a monthly budget on top of that, set by whatever tool you use. On our plans that is 1,000 auto-DMs a month on Free, 15,000 on Pro, and 100,000 on Max. Max also includes a viral-spike overflow queue for the hour when a Reel takes off. Full details are on the pricing page.

The thing to watch is how a plan behaves when you go over. Flat-rate plans cap you. Contact-metered pricing bills you more for the same traffic, which means a post doing well becomes a line item. That is a pricing choice, not an Instagram limit, and it is worth knowing which one you are signing up for.

The short version

One DM per comment, within 7 days. 24 hours is a separate rule for conversations someone else started. 750 private-reply calls an hour, with 200 an hour as a conservative pace nobody at Meta published. A thousand characters a message. Professional account required. Live only works during the broadcast.

None of those are the reason accounts get restricted. Messaging people who never asked is. More answers to the questions people actually ask are on the FAQ page.