A direct message, or DM, is a private message sent from one account to another on a social platform such as Instagram, Facebook Messenger, LinkedIn, TikTok or X. Only the people in the conversation can see it, unlike comments and posts.
How direct messages work
Each platform has its own inbox. Messages from people who already follow you, or who you have messaged before, usually go straight in. Messages from strangers often land in a separate requests folder that is easy to miss. For Facebook and Instagram, Meta Business Suite gathers both inboxes in one place, with tools for saved replies, away messages and automated answers to frequent questions.
Businesses can also start conversations from ads. Click-to-message ads open a chat in Messenger, Instagram or WhatsApp instead of sending people to a website, so the enquiry happens entirely inside the app.
Platforms limit when a business can message people. At the time of writing (October 2026), Meta generally allows a business to reply freely for a period after the customer’s last message, then restricts what can be sent after that window closes. The details change, so check the current messaging policy before planning any follow-up sequence.
Why it matters
For many customers, particularly younger ones, sending a DM now feels easier than calling or filling in a form. A salon, a personal trainer or a café taking catering orders may receive more enquiries by DM than through its website. A slow reply loses those enquiries to whoever answers first.
DM enquiries are also invisible to your website analytics. If they are not logged somewhere, such as a simple spreadsheet or a CRM, nobody can tell which posts or ads produced them.
In the UK, sending marketing by DM brings legal questions. The ICO applies PECR’s rules on electronic mail to unsolicited direct marketing, and its guidance indicates those rules can extend to direct messages on social media. Check the ICO’s current wording before relying on any reading of it, but the cautious position is to treat cold marketing DMs to individuals like marketing emails: they need consent unless an exemption such as the soft opt-in genuinely applies. Messages in your inbox that identify people are personal data under UK GDPR, so keep them only as long as you need them.
Common mistakes
- Never checking the message requests folder, so new enquiries sit unseen for weeks.
- An automated reply that promises a response and never hands the conversation to a person.
- Sending bulk cold DMs to people who never asked to hear from you.
- Asking customers to send card details or other sensitive information by DM.
- Answering DM enquiries but never recording them, so the channel looks worthless in reports.
How to act on it
Connect your Facebook and Instagram accounts in Meta Business Suite and decide who checks the inbox and when, including the requests folders on every platform. Set an away message that tells people honestly when they will hear back, and a few saved replies for frequent questions that you personalise before sending.
Log every DM enquiry with where it came from, and move bookings or payments to a secure form, phone call or booking system rather than the chat. Keep outbound marketing messages to people who have agreed to receive them. If you want DMs to become a deliberate enquiry channel, with ads that start conversations and a process for following them up, that is the work in my click-to-WhatsApp and Messenger ads service.