Social Media

Whitelisting

Also called Allowlisting, creator whitelisting

An arrangement where a brand runs paid ads from a creator's own handle, with permission granted in-platform.

Quick facts: Whitelisting

Category
Social Media
Also called
Allowlisting, creator whitelisting
Level
Advanced
Affects
Paid social performance, creative credibility, targeting control, creator relationships
Where to see it
Meta Ads Manager, Meta Business Suite partnership permissions, TikTok Ads Manager
In this article4
  1. How whitelisting works
  2. Why whitelisting matters
  3. Where whitelisting goes wrong
  4. How to set it up properly

How whitelisting works

In influencer work, whitelisting means a creator gives a brand permission to run paid advertising from the creator’s own handle. The ad appears under their name and profile picture rather than the brand’s page, but the brand chooses the audience, the budget and the objective, and the results land in the brand’s own ad account.

The permission is granted inside the platform’s own tools, not by handing over a password — the creator authorises the advertiser’s business account, and can withdraw that authorisation later. On Meta the formal version of this is a partnership ad, which also carries the paid partnership label; older names for the same idea include allowlisting and branded content ads. Never accept a creator’s login instead. Shared logins break the platform’s terms, remove any audit trail, and leave you responsible for anything else that happens on the account.

The word has an unrelated meaning in technical work, where whitelisting is adding an address, domain or IP to a list of permitted senders. If someone in a meeting says whitelisting, check which one they mean.

Why whitelisting matters

An ad that comes from a person performs differently from an ad that comes from a company. It looks like the rest of the feed, it carries the creator’s existing credibility, and viewers who recognise the handle stop for it. That is the whole point: you are buying the frame around the message as much as the message.

The practical gains are just as important. Running from your own ad account means you control the targeting, retarget the people who engaged, test several audiences against the same creative, and keep the campaign running long after the creator’s organic post has scrolled away. A single good piece of creator content can carry a campaign for weeks, which is rarely true of an organic post.

Where whitelisting goes wrong

Most failures are contractual rather than technical. Brands agree a post, then start running ads from the handle without having agreed it, for longer than the creator expected, or against audiences the creator would never have approved. That ends relationships and can end in a public complaint, which is more damage than the campaign was worth.

The second problem is disclosure. When paid promotion runs under a person’s name, viewers are entitled to know a brand is behind it, and the platforms provide a label for exactly this. Skipping it risks the ad being rejected and, more seriously, breaks the trust you were paying for.

The third is treating access as a substitute for judgement. Whitelisted ads still need a landing page that matches the promise, working conversion tracking and a sensible offer. A creator’s face does not fix a broken funnel.

How to set it up properly

Agree the terms before production, not after the post does well. Write down which platforms the ads may run on, for how long, which markets, whether the brand may edit the content, and what happens to the access when the period ends. Fold this into the same agreement that covers usage rights so there is one document, not two conversations.

Then run it like any other paid campaign. Test the creator’s version against your own brand-account version so you know what the handle is actually buying you, keep the paid partnership label on, and check conversions rather than engagement. If you are building this into a wider partnership ads setup, start with one creator and one clear objective before scaling the arrangement to several.

Do and do not

Do

  • Agree platforms, markets and duration in writing first
  • Keep the paid partnership label on every ad
  • Test the creator handle against your own brand account

Do not

  • Ask a creator for their account password
  • Leave access open-ended with no end date
  • Run audiences the creator has not agreed to

Questions people ask about this

Do I need the creator's password to run whitelisted ads?

No, and you should never ask for it. Platforms provide a permission system where the creator authorises your business account to run ads using their handle, without giving up control of the account. Sharing logins breaks platform terms, removes any record of who did what, and makes you responsible for anything else that happens there.

Is whitelisting the same as boosting a creator's post?

Not quite. Boosting promotes the existing organic post with limited controls. Whitelisting lets you build proper campaigns from your own ad account using the creator's identity, with full targeting, multiple audiences, custom placements and your own conversion tracking. Boosting is quicker; whitelisting is what you use when the content is worth real budget.

How long should whitelisting access last?

Whatever period you both agree in writing, with a defined end date. Open-ended access is where these arrangements sour, because the creator loses track of what is running under their name. A fixed window that you renew if the content is still performing keeps the relationship clean and gives you a natural point to renegotiate.

Related terms

Found this useful?

Share it, or ask an AI to summarise it

Back to the glossary

Knowing the term is the easy part

Applying it to your own site and budget is the work. Book a call and I will tell you what actually applies to you.