Where Oman Announces the Rules of Selling Online

This week two Muscat offices quietly rewrote the rules for anyone who sells by message. The Telecommunications Regulatory Authority locked down exactly when and how a business can send a promotional text or call a customer list, and the Ministry of Commerce, Industry and Investment Promotion confirmed just how closely it now tracks who actually holds a licence to trade online. Neither announcement will trend on Instagram, but both change what you can safely do from your phone this month.

The map that governs your customer list

Four different offices now have a say in how you message a customer to sell something, and most small business owners have only ever dealt with one of them. Knowing who owns which rule is the difference between a normal Thursday and a fine you never saw coming.

• TRA runs the phone network and just tightened when you can call or text a customer for marketing.
• MTCIT, the ministry behind the data protection law, decides whether you were even allowed to keep that customer's number in the first place.
• The Ministry of Commerce, Industry and Investment Promotion decides whether selling through Instagram or a WhatsApp catalogue needs a trading licence.
• Meta's WhatsApp Business Platform decides how a template message, a broadcast list and the free reply window actually work, whatever Oman's law allows.

What changed for marketing texts and calls

In mid-August 2026, TRA issued an updated regulation covering promotional and service calls and texts, exactly the kind of Thursday offer or festival sale blast many shops send from a phone or a bulk SMS account.

• Promotional calls and texts may now only go out between 8am and 9pm.
• The name shown to the customer must be your business, not a personal mobile number, and promotional texts need a recognisable business sender ID.
• Every customer needs an easy way to opt out, and once they do, you have to actually stop.
• Breaches carry fines of up to OMR 30,000, doubling for a repeat breach within a year.
• Businesses have six months from the decision to get this right, so roughly by mid-February 2027.

That covers calls and texts sent over the phone network. It says nothing, directly, about the WhatsApp broadcast you send every Thursday or the Instagram DM you use to close a sale, and that silence is exactly where small businesses assume they are safe. What actually covers that list comes further down.

A boutique's Thursday text, before and after

Maha runs a small abaya boutique in Al Mouj and sends a Thursday offer to about three hundred numbers saved from old orders. Here is what changes for a business exactly her size, and it costs nothing but attention to fix.

Your customer list is no longer just a marketing tool, it is something at least three different regulators can now ask to see.

Where WhatsApp and Instagram actually sit

TRA's new rule applies to calls and SMS carried over the phone network, not to messages sent inside WhatsApp or Instagram. Those two apps answer to their own rulebook first, the one that sets the terms for template messages, broadcast lists and the free reply window you get once a customer writes to you.

Oman's Personal Data Protection Law still sits underneath all of that. If you saved a number to send offers, you needed a genuine reason to keep it, and the customer can ask what you hold and tell you to stop.

Chatbot.OM connects to WhatsApp through that same official Business Platform, so a shop's templates and service window already follow Meta's rules, with the chats and any saved leads kept on servers inside Oman.

Selling through Instagram or a WhatsApp catalogue still counts as e-commerce in the ministry's eyes. Its e-commerce regulation expects anyone trading through a website, marketplace or social media account to hold a licence through the Oman Business Platform, and the ministry's own count, over nineteen thousand licensed e-commerce activities and just over four hundred stores verified on the Maroof platform by early August, shows it is actively tracking who has one.

Ten minutes checking four sources costs less than any fine or lost customer ever will.

What this means for you

1. If you send bulk promotional texts or calls, check your sending window, sender ID and opt-out this week, well before the compliance date lands in February.
2. If you sell through Instagram or a WhatsApp catalogue and never registered it as e-commerce, add that activity to your commercial registration through the Oman Business Platform, and consider Maroof verification too.
3. Keep your WhatsApp broadcast list to numbers with a genuine reason to be on it. The data protection law still expects that, even though this particular TRA rule leaves WhatsApp alone.
4. Give yourself ten minutes on a Monday morning to skim TRA, MTCIT and the Ministry of Commerce for anything new. That is genuinely the whole map.

The bottom line

Nothing in this week's news needs a lawyer or a big budget. It needs ten minutes checking the same handful of sources, a Thursday habit of watching your sending window, and a licence that actually matches what your shop does online. Do that, and the rules stop being a surprise and start being just another Monday chore.