Meta Business Verification in 2026: Step-by-Step, Documents, Timelines
Business Verification is the one Meta process I tell every team to finish before they need it, because it lands at the worst moment: the day WhatsApp API limits bite, the day a financial ad set won't run, the day a restricted account needs an appeal with a real legal entity behind it. Here is how it works in practice in 2026 - what triggers it, which documents pass first time, why submissions bounce, how long it takes, and what you get once the green tick shows up.
When Meta actually asks for Business Verification
Business Verification (BV) is free, lives in Business Settings → Security Center, and confirms a Business Manager belongs to a real legal entity. It's optional until one of these makes it mandatory:
- Regulated verticals and special ad categories. Declaring a special ad category doesn't itself require BV, but the authorization flows around it do: financial services ads in the UK, Australia, Taiwan and more countries each year need a verified business plus the local licence; gambling and crypto need written permission; politics needs advertiser verification. Meta also prompts BV once a business runs credit or insurance ads at scale.
- WhatsApp Business Platform. Without BV a phone number is capped at 250 business-initiated conversations per 24 hours; verification unlocks the 1,000 tier and the path to 10K, 100K and unlimited.
- Raising Business Manager limits. More ad accounts, Pages, or users: the limit-increase path checks that the BM is verified and has spend history. Developer apps requesting advanced access hit the same gate.
- EU advertiser and payer details. Under the Digital Services Act, EU ads carry a beneficiary and payer. Unverified businesses get recurring prompts to confirm them and, increasingly, to verify; a verified legal name skips the loop.
- Trust events. An ad account restriction, a spend jump, or an unusual login can put up a "verify your business to continue" wall with no way around it.
Business Verification vs Advertiser Verification vs identity confirmation
Four different things get called "verification", and mixing them up costs weeks:
| Process | Verifies | Where | Needed for |
|---|---|---|---|
| Business Verification | Legal entity behind the BM: name, address, phone or domain | Business Settings → Security Center | WhatsApp tiers, BM limits, regulated verticals, EU disclosures |
| Advertiser Verification | The person and organisation paying for ads on a topic | Ads Manager prompt, per advertiser | Politics, social issues; financial services in listed countries |
| Identity confirmation | The admin's profile: government ID plus selfie | Profile prompt, Account Quality | Issue ads, security flags, sometimes a step inside BV |
| Meta Verified for business | Paid badge subscription for a Page or profile | Meta Business Suite | Nothing on the ads side; not a substitute for BV |
Domain verification (Brand Safety → Domains) is a fifth, separate thing - it proves you control a website, not who owns the company - but it doubles as the "confirm your business" step inside BV, which is why I set it up first.
Documents Meta accepts, and which one to pick
Two facts have to be proven: legal name and business address. One document covers both if it shows both. What passes in practice:
| Document | Proves | Notes from our submissions |
|---|---|---|
| Company registry extract (Companies House, national e-register, Secretary of State) | Name + usually address | Strongest option; a fresh extract, not the founding deed |
| Certificate of incorporation / articles | Name | Fine for the name; rarely shows the current address |
| VAT or tax registration certificate, US EIN letter (CP575 / 147C) | Name + address | Accepted everywhere; type the tax number exactly as printed |
| Business licence | Name + address | Must be current, issuing authority visible |
| Business bank statement | Name + address | Last 3 months; black out amounts, never the header |
| Utility or phone bill in the business name | Address | Within 12 months; personal-name bills get rejected |
Then the connection step, where Meta checks that the submitter controls the business: an email on the business domain (fastest - minutes), a call or SMS to the registry phone number, or domain verification. A gmail.com address on the BM is the single biggest reason a clean document set still fails; a domain mailbox costs $1-7 a month at Google Workspace or Zoho.
Step-by-step: submitting in 2026
- Prepare the Business Manager. Business Settings → Business Info: legal name, address, phone, and website, typed exactly as on the document, suffix included ("Ltd", "LLC", "OÜ", "GmbH"). The submitting admin needs two-factor authentication and no advertising restrictions.
- Get the website in order. The domain in Business Info must resolve to a live HTTPS site showing the legal name, address, and a contact email; a parked or "coming soon" page is an automatic no. Verify it under Brand Safety → Domains (DNS TXT, HTML file, or meta tag).
- Open Security Center and press Start verification. If it says verification isn't available, trigger it: add a WhatsApp Business Account or request advanced access on a developer app. The button appears within a day.
- Enter the legal details and pick your business from Meta's list if it appears (pulled from public registries); if nothing matches, say so.
- Upload the documents. PDF or a clear JPG/PNG, all four corners visible, no portal screenshots. One document for the name and, if it lacks the address, a second for the address.
- Confirm the connection - domain email, phone, or domain verification - and submit. Status reads Pending; you get an email when it changes.
- If an identity step appears, the admin uploads a government ID and a selfie - the standard identity confirmation flow, bolted onto BV in some regions; it usually clears within hours.
How long it takes
| Scenario | Time we see |
|---|---|
| Registry extract + domain email, details match | Same day to 48 hours |
| Typical submission | 1-3 business days |
| Manual review (new company, uncommon country, Q4 backlog) | 5-14 days |
| Resubmission after a rejection | 1-3 business days again, no formal cooldown |
| Pending beyond 14 days | Open a Business support case; usually resolved within 3 days |
Two practical notes: the clock restarts with every resubmission, so a sloppy first attempt costs a week, not a day; and after three or four back-to-back rejections we've seen the Start verification button disappear for weeks, so the third attempt should carry a stronger document and a support case number, not the same PDF.
Why submissions get rejected, and how to resubmit
Rejections come with a short reason in Security Center; eight cover almost everything we've hit, most frequent first:
- Legal name mismatch. Trading name on the BM, legal name on the document, or a missing suffix. Fix the BM, not the document.
- Address mismatch. Registered office on the document, operating address in Business Info, or a PO box. Use the registered address everywhere.
- Free email, no domain. The connection step needs a domain you can prove; a gmail.com admin address can't be tied to the entity.
- Website doesn't match. Parked domain, a different company name on the site, no contact details, or a redirect to a marketplace.
- Document too old or unreadable. A bill older than 12 months, cropped corners, glare, a portal screenshot.
- Business too new or invisible. Companies registered under a month ago with no web footprint usually bounce; wait 30 days and get the site up.
- Phone unreachable. Meta's automated call goes to the registry number; voicemail, or a receptionist who has never heard of a "Meta code", fails it.
- Entity already verified elsewhere. The same registration number already sits on another Business Manager (an old one, a former agency's); only support can release it.
To resubmit: read the reason, fix that one thing, make Business Info match the document character for character, wait 24 hours, and upload a stronger document than last time (registry extract beats utility bill). If the reason is generic, open a Business support case first.
What you get after the green tick
Realistic expectations, because BV gets oversold: it does not raise your daily spend limit, undo a policy violation, or protect a bad ad account from being disabled. What it does, in our accounts:
- WhatsApp messaging limits move from 250 to 1,000 conversations a day immediately and scale with quality from there.
- Limit increases in Business Manager (more ad accounts, Pages, agency access) get approved; unverified BMs are usually refused.
- Fewer interruptions: the recurring "confirm your business" and EU beneficiary prompts stop.
- Appeals on a restricted ad account get reviewed with a verified legal entity attached, and the reversal rate we see is noticeably higher - bans still follow policy logic, so pair it with basic account hygiene.
- Access to Business support chat, the only channel that can release a stuck verification or a duplicate entity.
While you're in Brand Safety, verify the domain your pixel runs on too - the pixel diagnostics tool shows whether events actually fire there, and a verified domain underpins Conversions API matching. If you have no entity that can pass, or need to run today rather than in two weeks, agency ad accounts sit under an already-verified Business Manager - talk to us.
FAQ
Q: Does Business Verification raise my ad account spending limit?
Not directly. Daily spend caps grow with billing history and account age. Verification removes friction around limit requests and makes the BM eligible for more ad accounts, which is usually what people needed.
Q: Can a sole trader or freelancer get verified?
Yes, with a registration of some kind: sole-proprietor registration, a tax certificate, or a business licence in your name. A personal ID alone doesn't pass; that's identity confirmation, a different process.
Q: Do I need to verify every Business Manager?
Each BM is verified separately, and in practice one legal entity attaches to one BM at a time. If you run several BMs for one company, decide which one owns the entity; the others stay unverified.
Q: The Start verification button is missing. What now?
Meta only shows it to BMs with a reason to verify. Add a WhatsApp Business Account or request advanced access on an app and it appears within about a day; filling in Business Info completely helps too.
Q: How often do I have to redo it?
It doesn't expire on a schedule. You'll be asked to re-verify if the legal name or address in Business Info changes, if the BM changes hands, or if a trust event flags the account.
Bottom line
Do it before you need it. A clean submission - registry extract, matching Business Info, a domain email, a live site - comes back in one to three days and stays out of your way for years. A rushed one costs two weeks and, after a few rejections, the option to try again. BV won't lift spend limits or forgive a policy breach, but it's the entry ticket to WhatsApp scale, BM limits, regulated verticals, and any appeal with a chance.