The four assets, in Meta’s words
This is not our model. Meta lists these four itself, and says what happens to each one when it gets restricted.
| Asset | What Meta says happens if it is restricted |
|---|---|
| User account your personal profile | “You are not allowed to use Meta Products to advertise.” |
| Page | “Your Page isn’t allowed to advertise.” |
| Ad account | “Your ad account, its ads and some of its advertising assets are disabled.” |
| Business portfolio | “Your business portfolio isn’t allowed to advertise.” |
Two things follow from having this in writing. First, “my account got restricted” is four different sentences, and each one has a different appeal path. Second, warming up is not one process. Each asset builds its own record.
Meta also states the dependency plainly. “Every advertiser will need to have a Facebook Page created before they can advertise.” The Page is not decoration on the ad account. It is a requirement with a record of its own.
The sole-user trap
This is the most practical thing on the page, and Meta buries it in a note.
“If a user account is restricted from advertising, that user can’t advertise or create new ads. Any ad accounts where they’re the only attached user may also be disabled. However, other members of the business portfolio, ad account or Page may still be able to advertise.”
Read that twice. If your personal profile is the only user attached to an ad account, a restriction on you can take the ad account down with it. If a second person is attached, that person may keep advertising.
So a one-person setup puts the whole business on one profile’s record. Adding a second admin is not paperwork. By Meta’s own description it is the difference between a restriction stopping one person and stopping everything.
What Meta says it watches
Meta lists the situations where it may restrict advertising. In short:
- You break the Community Standards, the Advertising Standards, Commerce Policies or other terms.
- Meta suspects a portfolio or business asset has been hacked.
- You do not meet Meta’s two-factor authentication requirements.
- Meta sees unusual payment or account activity, lots of failed payments, or disputed payments.
Three of those four have nothing to do with your ads. They are about security and billing. Two-factor authentication is written as a requirement, not a suggestion, and it is the cheapest item on any warm-up list.
The payment line matters more than people expect. Failed and disputed payments are named directly. So a card that keeps declining is not just annoying. It is one of the documented reasons an advertiser gets restricted.
Setting them up in the right order
Our practice, labelled as ours because Meta publishes no sequence.
- Profile first. A real, established personal account with two-factor authentication switched on. Everything else attaches to it.
- Add a second admin early. Add someone before you need them, for the reason above.
- Page next. You cannot advertise without one, and it carries its own record. Meta lists low Page feedback scores among the things that can pull your spending limit down.
- Portfolio and ad account after that, in their final shape. Meta names a new portfolio, ad account, Page or app as a trigger to readjust your daily limit, so building them mid-campaign costs you.
- Verify the payment method and let a charge settle before you plan any real spend.
Only then does the spending side start. That part is in the full warm-up flow, and the limit itself is in the ad account spending limit explained.
The hardening pass nobody calls warm-up
Look again at what Meta says it watches. Three of the four items are security and billing, not advertising. That means most of what actually protects an account has nothing to do with creative, budgets or audiences — and none of it appears on a typical warm-up checklist.
This is the pass worth doing once, properly, before any of the spending advice matters:
- Two-factor authentication on every admin, not just yours. Meta writes this as a requirement it may restrict advertising for failing to meet. A colleague without it is your exposure, not theirs.
- A second admin attached before you need one. Covered above. The moment you need it is the moment you cannot add one, because Meta lists removing the ability to add admins among the things a restriction can do.
- A payment method that is not going to decline. Failed and disputed payments are named directly. A card near its limit, or one belonging to someone who has left, is a documented restriction trigger sitting quietly in your settings.
- Payment details that match the business. Unusual payment activity is on the list, and a payment instrument with no obvious relationship to the advertiser is exactly what that phrase covers.
- An admin list you have actually read this year. Every person with a role is a link between your assets and theirs. People leave; their access usually does not.
- Recovery access that still works. If the phone number on the profile that owns everything is one you no longer use, you do not have an account security problem yet. You have one waiting.
Stated plainly: the list is ours. Every item on it maps to something Meta names as a reason it may restrict advertising, but Meta publishes no such checklist and no order to do them in.
Restriction is not one thing either
Meta lists what an advertising restriction can actually involve:
- Limits on daily spend, or a lower payment threshold
- Losing access to some payment features
- Losing access to some advertising features
- Losing the ability to advertise on Meta platforms
For unusual activity, Meta adds that it may remove your ability to add admins, partners or users, and to create new ad accounts.
Know that pair before you panic. If you suddenly cannot create an ad account or add a colleague, that is a documented restriction state. The interface is not broken.
It also explains a mistake people make repeatedly. They react to a restriction by opening new accounts. Meta says that trying to create new ad accounts after it has disabled existing ones for policy reasons can itself get your advertising access restricted.
The six-month clock
One figure deserves singling out, because we previously flagged it as unverified.
Meta says that if an ad account is disabled for a policy violation and stays ineligible for reinstatement for six months, unused prepaid services may be forfeited where the law allows, and after that period the account cannot be reinstated. Meta adds that it reserves the right to disable an account permanently before six months in some circumstances.
So the widely repeated “180 days” is close to something Meta does publish. The documented version is about reinstatement eligibility and prepaid balances though, not a countdown you can wait out. If you have a disabled account with money sitting on it, that is the paragraph to read. Building the four assets in the right order, on a schedule rather than in a rush, is work we run as account, ops and KPI growth.
Common questions
How do I warm up a new Facebook Page?
Meta publishes no warm-up procedure for Pages. It does document three things. You need a Page before you can advertise. It can be restricted on its own. And low Page feedback scores can cut your spending limit. Any sensible Page routine is really addressing those three.
My profile is restricted but my Page is fine. Which do I appeal?
The one that is restricted. Meta treats them as separate assets with separate statuses. Working out the layer first is the whole job, and what to do when a business portfolio is restricted walks through it.
Will adding a second admin protect my ad account?
Meta says ad accounts where the restricted person is the only attached user may also be disabled, and that other members may still be able to advertise. It is not a guarantee. But the documentation is clear that sole attachment is the riskier setup.
Do I need two-factor authentication to advertise?
Meta lists failing to meet its two-factor authentication requirements as a reason it may restrict advertising. Treat it as required.
Can I just make a new Business Manager if mine is restricted?
Meta says that trying to create new ad accounts after existing ones were disabled for policy reasons can get your advertising access restricted. Rebuilding around an enforcement action is a documented risk, not a workaround.
I cannot add a new admin or create an ad account. Is something broken?
Probably not. Meta lists removing the ability to add admins, partners or users, and to create new ad accounts, among the things it may do in response to unusual activity. If both stopped working at once, treat it as a restriction state rather than an interface fault, and go and read the notice.
Which asset should I warm up first?
The profile, because everything else attaches to it and it is the one whose restriction can take an ad account down with it. Then a second admin, then the Page, since Meta requires a Page before you can advertise at all, and only then the portfolio and ad account in their final shape.
Does a restriction on my personal profile stop my colleagues advertising?
Meta says other members of the business portfolio, ad account or Page may still be able to advertise. The exception is an ad account where the restricted person is the only attached user, which Meta says may also be disabled. That single sentence is the argument for a second admin.
Sources
- Meta Business Help Centre — About advertising restrictions. Where we got the four assets and their definitions, what each restriction does, the sole-attached-user note, the list of situations including two-factor authentication and payment activity, and the six-month reinstatement paragraph.
- Meta Business Help Centre — About daily spending limits set by Meta. Where we got new assets triggering a limit readjustment, and Page feedback scores affecting the limit.
- The setup order, the hardening pass and the figure are ours. Each item maps to something Meta names, but Meta publishes no checklist and no sequence.
We read both pages on 12 August 2026 by opening them in a browser, because Meta’s Help Centre is built with JavaScript and returns nothing to a plain fetch. Meta changes this documentation without notice, so check the sources before you act.
Related reading: the full warm-up flow, and which layer is actually restricted.