What Is Whitelisting in Influencer Marketing?

Ad access to a handle, not a license to repost

In a standard sponsored post, the content sits on the creator's feed and the brand loses control the moment it goes live. Under whitelisting, the creator authorizes a brand's ad account to run ads carrying the creator's identity, either promoting a post that already exists or publishing dark posts that never appear on the organic feed. The viewer sees the creator's handle with a Sponsored label, not a plain organic post. Two separate permissions are involved and they get conflated constantly. Usage rights let a brand republish creator content from the brand's own channels: its handle, its ad account, its site, its email. Whitelisting grants ad access to the creator's handle instead. A brand can hold one without the other. Name both in the agreement. What the viewer sees also differs by platform. A TikTok Spark Ad mirrors the display name and text of the original organic post. A Meta partnership ad can feature one or both accounts in the ad header. Meta states that branded content ads are now called partnership ads.

Instagram and Facebook: partnership ads

Meta runs two permission paths and they behave differently. The content level path is a code. Per Meta's help documentation, the creator opens the post, story or reel, taps Partnership label and ads, turns on the Get partnership ad code toggle, then copies the code or sends it by direct message. Meta states that ad codes can be used by up to two partners at a time. No expiry period for a code is published.

The account level path is broader. Meta's Partnership Ads Hub documentation says advertisers can manage partnership ad relationships at the account level, and that once the partner accepts the request, further content level permission is not needed. Meta lists "Create partnership ads from a partner's handle without pre-existing content" among what account level permission allows. A brand holding it can run an ad from a creator's handle for something the creator never filmed and never posted. Nothing on the platform side requires the creator's sign-off on that ad.

Eligibility is not universal. Meta requires an Instagram professional account or a Facebook Page or profile in professional mode, plus what it calls an authentic, established presence that "includes maintaining a sufficient follower base." No numeric follower threshold is published. Meta also reserves the right to modify, suspend or terminate access to its content monetization features at any time.

TikTok: Spark Ads

TikTok's Spark Ads run on authorization codes the creator generates. Per TikTok's Spark Ads creation guide, the creator taps the three dots on the video, taps the Ad settings icon, and taps Generate to retrieve the post code. Most of the constraints below surface only after the video already exists.

Per TikTok Business Help Center: About Spark Ads and the Spark Ads creation guide, both updated June 2026. The authorization durations and the dual creator rule come from the Smart+ Campaigns article, updated October 2025. The Story video and Duet carousel rules come from the Spark Ads code error article, updated July 2025.

What actually happens when permission ends

Most explanations of whitelisting say the creator can revoke access at any time. The platform documentation says something narrower, and the difference matters when a campaign is live.

The creator keeps ownership of the account throughout. What is narrower than most explanations suggest is the ability to stop an ad already running. On Meta, turning the code toggle off stops that code being used to create new ads. Meta then states: "Any active ads using the code will continue running." Meta also states that on Instagram only, archiving your content does not remove ad code access from the advertiser, and separately that archived Facebook content cannot be boosted to a partnership ad. A creator who wants a running partnership ad stopped has to ask the advertiser to stop it. Meta does not document what happens to live ads when account level permission is withdrawn. Treat that as unsettled and write the answer into the agreement rather than assuming one.

On TikTok, expiry surfaces as an error at ad creation. The error list is the closest thing either platform publishes to a failure map, and every remedy on it routes back to the creator.

Per TikTok Business Help Center, About Spark Ads Code Error Notifications, updated July 2025. Error 900010 blocks creation outright when the flight outruns the code. The ad end date and the authorization window have to be set together, not in sequence.

Music has to be cleared before filming, not after

TikTok's Commercial Music Library documentation states that businesses cannot use the general music library for commercial usage, and points them to a pre-cleared library of 1 million songs covering organic content, video ads and branded content. A creator who cuts to a trending sound has produced a video that cannot run as commercial content, which is discovered at the point someone tries to spark it. TikTok adds that anyone using original sound from other users, or other licensed sounds, should consult their legal team to confirm a proper license.

Disclosure, and who carries the liability

The paid partnership label does not settle the disclosure question. The FTC's Disclosures 101 for Social Media Influencers, published in November 2019, tells creators: "Don't assume that a platform's disclosure tool is good enough, but consider using it in addition to your own, good disclosure." The same guidance says the disclosure should be in the video and not just in the description uploaded with it, and warns against mixing a disclosure into a group of hashtags or links.

Liability does not sit only with the person on camera. Under 16 CFR 255.1(d), advertisers are subject to liability for misleading or unsubstantiated statements made through endorsements, and an advertiser may be liable even when the endorser is not. That section recommends advertisers monitor their endorsers' compliance, then states that doing so is not a safe harbor. Section 255.1(f) extends exposure to intermediaries for their role in creating or disseminating endorsements, including for hiring and directing endorsers who fail to disclose.

Platform rules sit on top of that. Meta's Branded Content Policies require creators to use the branded content tool to tag the business partner with prior permission. TikTok published a new Branded Content Policy on 4 August 2026 that takes effect on 31 August 2026, replacing the version in force until then. It requires the commercial content disclosure toggle at posting. For a list of restricted industries covering alcohol, financial services, vitamin supplements and gambling among others, it adds three stacked conditions: explicit permission from TikTok, a Registered Business Account for the brand partner, and partnering with creators through the TikTok One platform. Meta's Ad Library carries a searchable database of all active, public branded content running on Facebook and Instagram with a paid partnership label. A live whitelisted ad is visible to anyone who looks.

What to settle in writing before filming

Whitelisting attaches a person's name to targeting and spend they cannot fully see. A code issued before these terms are agreed is a term agreed by default.

• Which permission the brand holds: ad access to the creator's handle, a license to republish content on brand-owned channels, or both
• Whether permission is content level and tied to named posts, or account level, which on Meta covers content the creator never posted
• How long ad access runs and what a renewal requires
• Whether the brand may edit copy, hooks or calls to action on dark posts, and who signs those off
• Any ceiling on media spend behind the creator's handle
• Geographic scope, plus any category or audience the creator will not appear against
• Music clearance, decided before filming, since a general library track cannot run as commercial content on TikTok
• Who holds the creator contract, who carries FTC disclosure liability, and who monitors compliance once the ad is live
• Who owns the footage after the flight ends and what happens to the source files
• End of flight cleanup: authorizations removed, account level permissions withdrawn, ads paused, each step with a named owner

Why brands want ad access at all

Whitelisted ads pair a person's face and voice with the full paid social toolkit.

• Native delivery: the ad arrives from a person's handle, so it reads as a recommendation before it reads as an ad
• Real targeting: creator content can run against lookalike audiences, retargeting pools and interest segments rather than whoever happens to see the organic post
• Control and iteration: the brand sets budget and duration, tests hooks and calls to action, and keeps a winning post in rotation long after organic reach decays
• Creator upside on TikTok: engagement earned while a Spark Ad runs is attributed to the original organic post

TikTok's published Spark Ads figures are 134% and 157% against the two metrics named above. A 142% engagement figure circulates widely but does not appear in TikTok's own materials, which is why it is not cited here.

Frequently asked questions