Creators say "comment GUIDE" (or LINK, or RECIPE) because software is watching their comments. When you type the keyword, a tool connected to Meta's Instagram API sends you a private message, usually with the link or file they promised. Meta's rules allow that first automated reply once per comment, within 7 days.
This is comment-to-DM automation, and Meta's developer docs say it works on comments left on posts, reels, stories, Live broadcasts and ads. Here's how it works, what the rules allow, whether it counts as engagement bait, what it reveals about you, and how to tell it apart from scams.
Several reasons usually overlap:
- Links. For most accounts, a web address typed into a feed caption still isn't tappable. Meta confirmed to Engadget in March 2026 that it was testing clickable caption links with Meta Verified subscribers, without saying how many had access. A DM can carry a link you can tap.
- Comments count in ranking. In a 2023 explainer, Instagram head Adam Mosseri named how likely you are to comment on a post as one of the five interactions Feed ranking looks at most closely. Creators may hope keyword comments help a post travel, but Instagram hasn't said they get special treatment.
- A conversation starts. The reply sits in your DMs, and if you answer, the account can keep messaging you for a short window, which marketers use for things like collecting email addresses.
- Demand gets measured. A pile of "GUIDE" comments tells the creator how many people wanted the thing.
- The creator connects an Instagram professional account (business or creator) to an automation tool and grants it permission to manage comments and messages.
- You comment the keyword. Meta notifies the tool with your comment text, your username and an ID for your account. These comment notifications only arrive when the professional account is public.
- The tool spots the keyword and sends a private reply, which includes a link to the post you commented on.
- If you follow the account, the message lands in your inbox. If not, it goes to your message requests.
- If you respond, the tool can send follow-ups for 24 hours after your response. That's why some automated replies ask you to reply before they hand over the link.
Meta's developer documentation sets these limits:
| Rule | What Meta allows |
|---|
| First reply | One message per comment |
| Deadline | 7 days after the comment; on Instagram Live, only during the broadcast |
| Follow-ups | Only if you respond, within 24 hours of your response |
| Later human replies | A human agent tag allows manual replies up to 7 days after your message |
| Volume | 750 private replies per hour per account, for posts and reels |
Comment-to-DM tools are third-party automation platforms built on Meta's Instagram API. A legitimate one connects through Meta's own login (Business Login for Instagram, or Facebook Login for accounts linked to a Facebook Page): you approve permissions in an authorization window, and the tool receives an access token rather than your password. Walk away from any service that asks you to type your Instagram password into its own site. Instagram's Terms of Use bar collecting information in an automated way without Meta's permission, and they bar requesting other people's passwords.
Does Instagram have a built-in version?
Meta offers two options of its own:
- Meta Business Suite. Its Inbox automations include "Comment to message," which sends a message in reply to comments on your posts that contain keywords you pick (one Meta help page says hashtags). Meta says keyword automations work only in Business Suite on desktop, that inbox automations are available for Instagram business accounts connected to Business Suite, and that some aren't available on every channel. Its help page also warns that some organic messaging features are unavailable for businesses and ads in Europe and Japan.
- A test in ads. In August 2026, Meta advertising expert Jon Loomer reported a "Reply to Keywords" option that some advertisers see while creating an ad. It sends an automatic DM when someone comments one of up to five keywords or phrases, and Meta says the message can include a link, phone number or email. It appears limited to Instagram placements and to one message for all keywords, and as of early September 2026, Meta hadn't announced a wider rollout.
The answer depends on the app, and none of the Meta guidelines covered here mentions keyword prompts by name.
- Facebook is explicit. Meta's Content Distribution Guidelines, which describe what gets reduced distribution in Facebook Feed, define engagement bait as posts that explicitly request likes, comments, shares, tags, votes or other reactions for any purpose other than a specific call to action. Meta's examples of legitimate calls to action include finding missing people, raising money and sharing a petition. Free downloads aren't on that list, so "comment GUIDE" on a Facebook post could be read as bait, and "comment YES if you agree" plainly fits the definition.
- Instagram's Recommendations Guidelines don't use the term. The closest item, in a low-quality category that may not be recommended to people who don't follow you, covers long unrelated captions and "coordinated comment networks intended to artificially drive engagement." That wording seems aimed at organized schemes rather than followers typing a word. Professional accounts can check whether their content may be eligible for recommendations in Account Status.
- Both apps fall under Meta's Community Standards. Meta's spam policy doesn't allow requiring people to engage with content (its examples are liking and sharing) before they can see content you've promised. Its list of deceptive link practices also includes like/share-gating, which it defines as requiring likes, shares, follows or any other public-facing engagement to reach exclusive content. Meta hasn't publicly said how this applies to comment-to-DM, and it offers the same mechanic in its own tools. The cautious reading: deliver what you promised, and don't make a public comment the only way to get it.
- Your comment is public to anyone who can see the post.
- The creator's tool sees your comment text, username and account ID.
- Replying reveals more. Once you message the account, its tool can look up your name, username, profile photo, follower count, verification status and whether you follow the account. Meta requires that interaction first, and if you block the account, its tool can't see those details. The follow-status field is what lets a tool check whether you follow before it sends the link.
- Meta's Platform Terms require the tool's developer to publish a privacy policy, use your data only as that policy describes, never sell or license it, and delete it when you ask.
- Web forms are separate. If the DM sends you to a page that asks for your email, that site's own privacy policy governs what happens next.
- You can say no. Meta's Developer Policies require apps to respect requests to stop messaging right away. You can also leave the request unanswered or block the account.
How to spot scams that copy the trick
People expect a DM after commenting, and scammers exploit that. Watch for:
- Look-alike accounts. Security company Bitdefender describes fakes that copy a brand's logo and posts, use handles with extra underscores, misspellings or numbers, and reply to your comment with a link. A reply sent through Meta's private-reply feature comes from the account that published the post and links back to the post you commented on.
- Fees for a prize. Instagram lists requests for advance fees to receive a prize among its scam signs. Meta's spam policy also bans giveaways of cash or cash equivalents in exchange for engagement, so "comment to win $500" is suspect on its own.
- Login requests. Never share a password or login code, and ignore links asking you to sign in to "claim" something. Instagram says it never sends you direct messages about your account in the app.
- Pressure. Instagram's safety page flags urgency and requests to move the conversation off Instagram.
- Thin or unverified profiles. Be wary of accounts with no followers or real activity, and of unverified accounts claiming to be big companies or public figures. The About this account screen, in the profile's three-dot menu, shows when an account was created, the country it's based in and any former usernames.
- Choose a distinctive keyword. Common words like "yes" or "price" turn up in normal comments and can trigger messages nobody asked for.
- Say what happens. "Comment GUIDE and I'll DM you the PDF" tells people a message is coming.
- Put the promised thing in the first message. It may be the only one you get to send.
- Don't gate it, and offer another route. Skip "follow and like first" conditions. Instagram lets accounts add up to five links to their bio, and it opened the Stories link sticker to all accounts in 2021, except new accounts and ones that repeatedly break its rules.
- Keep the keyword in plain letters. If you write it in Unicode bold, like 𝗚𝗨𝗜𝗗𝗘, some people will copy those look-alike characters. They're different characters from normal letters, so they may not match your trigger, and screen readers may read them one letter at a time.
- Write for people who never comment. Borrow from these hook formulas that actually work, and check the Instagram caption character limit and how caption length affects engagement. The Instagram caption generator can draft options with a call to action for you to edit.
What can go wrong
- Earlier commenters can be missed. A private reply must go out within 7 days of the comment, so an automation switched on later can't reach people who commented before that. On Live, the chance ends with the broadcast.
- Messages sit unread. People who don't follow you may never open their requests.
- Spikes hit limits. A viral post can draw more keyword comments than the 750 private replies an account can send per hour on posts and reels.
- Private accounts don't trigger it. Meta sends comment notifications only when the professional account is public.
- Automations can pause. Meta says turning on Meta Business Agent pauses existing Business Suite automations.
- Reach isn't promised. Keyword comments may not help, and on Facebook a prompt that reads as bait can be demoted.
- Trust wears thin. If the DM is a sales pitch instead of the promised guide, people notice. For the other side of the comment box, see our Instagram comment ideas.
