Can a WhatsApp group admin be held legally responsible? What to know and how to protect yourself

What the law generally says about group admins

Laws differ from country to country, and very few deal with WhatsApp group admins directly. Most cases are decided using general rules:

So the starting point is that each person answers for what they post. An admin comes into the picture when their inaction contributes to the harm.

A real case: a group creator ordered to pay damages in Brazil

In a decision dated May 21, 2018 (Appeal No. 1004604-31.2016.8.26.0291), the São Paulo State Court of Appeals in Brazil looked at a group created in 2014 to organize get-togethers to watch World Cup matches. Some members began seriously insulting others in the group.

The lower court had rejected the claim. The appeals court reversed it, based on the general civil liability rule in Brazil's Civil Code. What weighed in the decision:

• the insults were serious and proven by a notarized record;
• as admin, the creator could have removed the people insulting others or closed the group, and she didn't;
• she reacted to the insults with laughing emojis, which the court treated as approval;
• damages were set at R$1,000 per plaintiff (R$3,000 in total), kept low because she was 15 at the time.

The ruling also included an important caveat: a group creator, in principle, is not a moderator and can't know in advance what other members will say. In other words, the decision doesn't say every admin is liable for everything. It says that when harm is serious and obvious, inaction and approval can create liability. It is one court's decision in one country, and every case depends on its facts.

Platforms and admins are treated differently

Rules about the liability of online platforms for user content usually apply to the companies that run the service, not to individual users who manage a group. In Brazil, for example, the Supreme Federal Court ruled in June 2025 that platforms can be held liable for certain illegal third-party content if they fail to remove it after notice, while keeping the previous regime for private messaging services such as WhatsApp when it comes to interpersonal communications.

Whatever the rules for platforms are where you live, a group admin is usually judged under general civil liability rules: did you contribute to the harm, by acting or by failing to act?

Screenshots and members' data: other risks

Another common risk is exposing conversations. In 2021, Brazil's Superior Court of Justice (REsp 1.903.273/PR) held that publishing WhatsApp messages without the participants' consent is unlawful and can lead to damages, unless the disclosure is needed to protect the recipient's own rights. Many other legal systems protect private communications in a similar way.

In practice, keeping screenshots to defend yourself or to give to the authorities is different from posting a group conversation on social media. As for members' data, laws such as the EU's GDPR don't apply to processing by an individual in the course of a purely personal or household activity (Article 2), but they do apply when a group is run by or for a business. See what data a group admin can legally collect.

Can an admin delete other people's messages?

Yes. According to the Help Center: how to delete messages, group admins can delete messages sent by other members for everyone:

1. Tap and hold the message.
2. Tap Delete and choose Delete for everyone.
3. Confirm.

The message is replaced with a notice saying it was deleted by an admin, with the admin's name. Admins have about two days after a message is sent, and deleted messages can't be recovered. Admins can also turn on Send for admin review in Group permissions, so members can flag problematic messages.

How a group admin can protect themselves

Your best defense is showing you weren't negligent. That means having rules and acting when they're broken:

1. Publish clear rules in the description and a pinned message, including what happens to people who insult others. These WhatsApp group rules templates can help.
2. Act fast on serious abuse: delete the message for everyone, warn or remove the person and, if needed, set the group so only admins can send messages until things calm down.
3. Don't endorse it: reactions and supportive comments were decisive in the Brazilian case.
4. Have more than one admin to cover different hours.
5. Use automated moderation against spam, scams and suspicious links. With 9bot, Anti-Spam and link moderation work even when no admin is online.
6. Don't share conversations outside the group unless you need to.

The moderation checklist for large groups and the guide on how to avoid scams in groups complement these steps. No tool removes an admin's responsibility, but active moderation shows diligence.

Read also

FAQ