What CommentLink Does Not Do (No Cold DMs)

Cold Instagram DMs — messages to people who never commented, never replied to a Story, never opened a thread — are how accounts get restricted and how inboxes fill with sludge. CommentLink does not send them. This is a trust article, not a growth hack with the serial numbers filed off.

We do not encourage unsolicited messaging. We do not provide a target-list uploader for strangers. We do not ask for the Instagram password so a browser bot can scrape suggested users. Connection is official Meta OAuth. Triggers are engagement: comments, Story replies, Story mentions, inbound DMs, keywords in threads you already have.

What “cold” means here

Cold means the person did not take an action that Instagram’s messaging APIs treat as a reason you may write to them in that context. Buying a follower list and DMing it is cold. Exporting emails from a scrape and matching them to Instagram handles is cold. “Warm” in a marketer’s mouth is still cold if Meta never saw an interaction.

Comment-to-DM is not cold. They commented on your media. Story mention thank-yous are not cold. Welcome openers are not cold; they already opened the inbox. Follow-gates still start from a comment, not from a purchased audience.

Unofficial “growth” tools versus Graph

A class of apps promises unlimited outreach, competitor-follower blasting, and auto-follow loops. They typically want your password or a session cookie. That is not the Instagram Graph Messaging API. It is logging in as you. CommentLink is the other category, the same family as native Business Suite automations.

We will not quote fake ban-rate statistics. Meta does not publish a clean “X% of cookie bots die in 12 days” figure we can cite. What we can say: password and session automation is outside the official platform; comment-to-DM on Graph is inside it, still subject to rate limits and content rules. Read is Instagram comment automation allowed and official Graph API versus unofficial tools.

What CommentLink will not ship

• Cold DMs to people who never engaged.
• Password or OTP collection for Instagram.
• Comment → WhatsApp auto-send. WhatsApp is a separate connected channel.
• A NEW_FOLLOWER marketing promise. The enum is not a reliable public follower webhook to sell.
• Mass comments on other people’s posts to look popular.

What we will do instead

Help you answer people who already spoke: comment-to-DM, public replies, Story mention thank-yous, welcome openers, a shared inbox. Pace those sends around ~200 Instagram DMs per hour so a viral Reel does not become a stampede through Meta’s cap.

If your acquisition strategy requires messaging strangers, that is not a missing toggle. It is a strategy we will not implement. Use ads, collaborations, and content — channels Instagram actually sells.

Grey areas people ask about

DMing everyone who liked a post: not a CommentLink feature, and “they liked” is not the same as “they commented” in our product. DMing a downloaded CSV of last year’s commenters after you disconnected: do not use unofficial scrapers to rebuild that. Re-run a live automation on a new post instead.

Affiliate blasting from a throwaway Professional account: still your content-policy problem even if the API send is technically a reply to a comment you baited with a misleading caption. Allowed-API is not the same as allowed-content.

What to tell a boss who wants cold DMs

Instagram sells ads, collabs, and Reels for reaching strangers. Official messaging APIs are for people who already acted. A vendor who promises competitor-follower blasting is asking you to leave Graph. The risk is the account, not the vendor’s invoice. We will not provide a how-to for that category.

If the goal is “more conversations,” the official levers are better creative, a clearer keyword, a follow-gate that actually checks is_user_follow_business, and a queue so viral comments are not dropped. Those are comment-to-DM jobs. Cold lists are not a missing checkbox on our roadmap.

Engagement that still counts as a reason to write

• They commented on your post or Reel in a way that matches your rule.
• They replied to your Story (STORY_REPLY).
• They mentioned you in their Story (STORY_MENTION).
• They started a DM (welcome openers, DM keywords).

Following you, liking a post, viewing a Reel, or appearing in a “suggested” list does not start a CommentLink send. We will not add a silent follow-DM just because a growth thread said other apps do it with a password.

Spam copy can still be “on Graph”

Official APIs will send a misleading DM if you write one. “Free iPhone, comment NOW” on an unrelated meme, then a phishing URL, is still your problem. CommentLink’s refusal to cold DM is not a content filter for every sentence you save. Stay inside commerce rules. Disclose affiliates. Do not bait comments on posts that have nothing to do with the payload.

Password tools dressed as “safer because they wait for a comment”

If the app asked for the Instagram password, it is not this product category even if the pitch is comment-to-DM. Session bots can wait for comments and still be unofficial. Connect through Meta login or use native Business Suite. See the Graph versus unofficial article in this series for the checklist.

Growth threads collapse “automation” into one word. Comment-to-DM on Graph, icebreakers on Graph, and blasting competitor followers with a cookie are not one word. The first two reply to people who spoke. The third is cold. We will not help you do the third. We will not dress it up as a grey area.

If a founder insists on volume from strangers, the honest channels are ads, collaborations, and better Reels. Those are slower to demo than a CSV of handles. They are also the channels Instagram actually operates. A vendor who needs your password to “just send a few” is asking you to step off the Platform. That is the whole article.

CommentLink’s product surface is comments, Story replies, Story mentions, inbound DMs, and WhatsApp after a separate connect. Follows, likes, and purchased audiences stay out. If that list is too small for a growth agency’s pitch deck, the agency and this product want different jobs. That is allowed. Pretending we cold DM is not. If you need a one-sentence policy for a client contract, use: we only message people who commented, replied to a Story, mentioned us in a Story, or started a DM, through Meta OAuth, never with the Instagram password.

FAQ

Can I upload a list of handles to DM?

No. There is no cold-list sender.

Can I auto-DM new followers?

We do not market that. Instagram does not provide a reliable public new-follower webhook for this product.

Is comment-to-DM considered unsolicited?

They commented on your post. The DM is a response to that comment. Keep the copy honest. Message Requests still apply for first-time threads.

Do competitors who cold DM use official APIs?

Often they do not. We will not name a fake statistic. If they want your password, you already have the answer.

Is a like enough of an interaction to DM them?

Not in CommentLink. Likes are not a comment-to-DM trigger. We will not add a “DM everyone who liked” switch. If you want conversations, ask for a comment keyword on the post you already have permission to automate.

Can I message last year’s commenters from a CSV?

Not through a cold-list uploader here — there isn’t one. Run a new live automation on a new post. Rebuilding old commenter lists with scrapers is the unofficial category we refuse.

What if my ads need to “start conversations” with strangers?

Use Instagram ads products Meta actually sells, or click-to-message ads that start from an ad interaction. Do not paste a purchased handle list into a DM tool. CommentLink will not be that tool.

Does refusing cold DMs mean we send fewer messages than growth agencies?

We send replies to people who spoke. Agencies that blast strangers send more unsolicited volume and take a different risk. We will not compete on that volume. We will compete on comment-to-DM, Story mentions, openers, and an inbox on official APIs.

Is a Story view or Reel play enough?

No. Views are not comments. Plays are not DMs. We will not send because someone watched. If you want them to speak, put a keyword on the Reel and send when they comment. That is the whole honest funnel.

Can WhatsApp broadcasts replace cold Instagram DMs?

WhatsApp has its own template and opt-in rules and Meta conversation fees. It is not a loophole for Instagram cold outreach. CommentLink will not take an Instagram spectator list and fan it out on WhatsApp. Connect WhatsApp for people who belong on that channel.

What about “they filled a form on our site”?

That is not an Instagram cold list we will blast. Email them with permission, or run ads. Do not import site leads into unofficial Instagram session tools. Comment-to-DM still starts from a comment on your media. A form fill is not a comment webhook. Do not treat it as one.

Related reading

• Policy FAQs