Moving CRM Follow-Up to WhatsApp and Phone: Checklist

The CRM stays the record; WhatsApp and the phone are channels

Moving follow-up to WhatsApp and calls does not mean leaving the CRM. The CRM is still the record for each prospective student, and every exchange on a new channel has to write back to it. If a WhatsApp thread sits on one enrolment adviser's phone and a call sits in their memory, the team has not migrated; it has scattered its follow-up.

The question usually comes up around offer rounds through UAC or VTAC, when advisers see email go unanswered while a short message or a call gets a reaction. Before habits change, check that nothing essential is lost: consent, opt-outs, identity, history and the handover to a person.

This checklist follows the order in which problems appear. It builds on our pieces on WhatsApp opt-in without blocking applicants, deduplicating leads across channels and the missed-call callback process, and sits within our guide to recruiting more students.

Nine checks at a glance

1. Inventory current follow-up first

List each moment where your team follows up: application received, missing documents, open day invitation, offer-stage outreach, enrolment reminder. For each, note the tool, the channel, the owner and what happens when the student does not answer.

Informal follow-up always turns up: a personal spreadsheet, a broadcast list on a phone, an after-hours mobile known to three people. Bring those into the CRM first, because they vanish when an adviser leaves.

Then decide, journey by journey, what goes on WhatsApp, what goes by phone and what stays on email. Visa documents, academic transcripts and financial information do not belong on a consumer messaging app.

2. Record consent per channel, not globally

Consent for email is not consent for WhatsApp, and a number given to book a campus tour is not agreement to marketing messages. Two regimes matter. The OAIC's guidance on the Australian Privacy Principles explains that under APP 7 on direct marketing, individuals must be made aware of their right to opt out of receiving direct marketing communications from the organisation. Separately, the Spam Act 2003 and the Do Not Call Register Act 2006, both administered by the Australian Communications and Media Authority (ACMA), cover commercial messages and telemarketing calls. Ask counsel how each applies to a recruitment message.

In the CRM, store at least the following per channel:

• Proof of consent: date, source (form, chat, education expo) and the wording shown.
• Purpose: course information, application status, event invitation.
• Current status: agreed, refused, never asked.

WhatsApp adds its own layer. Meta's WhatsApp Business Messaging Policy, in the version last updated on 23 September 2026, allows a business to contact someone only if that person has given opt-in permission to receive messages or calls. Read it again at launch rather than trusting a rule remembered from last year.

3. Wire up one suppression list

A prospect who says stop on WhatsApp should stop getting email chasers for the same purpose, and the reverse. With separate lists, two tools contradict each other and the refusal is ignored.

Meta's same policy requires businesses to respect any request to block, discontinue or opt out of communications. Check three things:

1. The stop keyword or button updates the CRM promptly.
2. Campaigns, sequences and manual follow-ups read that status before sending.
3. The refusal survives a merge or accidental deletion: keep the fact of the refusal, not the content.

For calls, check your obligations against the Do Not Call Register before any outbound campaign. Have your privacy officer decide where a callback the student asked for ends and unsolicited outreach begins.

4. Settle the identity rule before the first message

A phone number is not an identity. It may belong to a parent, be shared in a household or have changed hands. Before writing to a record, decide how the CRM ties an incoming conversation to a prospect.

A simple rule has three lines: store numbers in international format (the ITU's E.164 recommendation describes the structure), confirm with a second data point before merging, and flag a record "to verify" rather than auto-merge when in doubt. For a student under 18, note who the contact is: the student, a parent or both.

5. Require a complete, dated, readable trail

Every WhatsApp message in or out, every call placed or missed and every note should appear on the record with date, channel, author and content or summary. If advisers must copy and paste by hand, the trail will be incomplete within a week of an offer round.

Verify that:

• Inbound messages reach the CRM with no manual step.
• Calls are logged, including unanswered attempts.
• Call recording happens only if your institution decided on it, the caller is told and a retention period is set. Recording rules differ between states and territories, so confirm with counsel.
• The log shows whether a message came from a person or from automation.

For international students, agents recruiting on your behalf are a further channel to include in the inventory: messages sent by an agent must follow the same consent and suppression rules, and the CRM should show who sent what.

6. Write the human handover rule

Automation or a template must never hold on to a student who asks for a person. The rule lists triggers: a question on fees or FEE-HELP, a complaint, a personal circumstance, an explicit request for a call.

For each trigger, name the recipient, the expected delay and the channel of the first reply. A student who writes on WhatsApp and gets an unexpected call is not always pleased; offer the callback instead of imposing it. Our after-hours enquiry process offers an escalation model.

7. Name an owner and a target time per queue

Three queues appear: inbound WhatsApp messages, calls to return and outbound follow-ups. Each needs a named owner, a target time set by your team (no universal public benchmark dictates it) and a backup for absences.

Add a supervision view in the CRM: unanswered conversations, overdue callbacks, prospects without valid consent for the channel in use. That view, more than the messaging tool, makes the migration manageable.

8. Test on dummy records before real students

Create a few fictional records: one with WhatsApp consent, one without, one opted out, two duplicates, one minor with a parent. Run the scenarios: inbound message, stop request, missed call, request for a person, record merge.

Log every gap and go live only when the critical cases (opt-out, missing consent, duplicate) behave as intended. A pass on the happy path proves nothing.

9. Plan the way back

Keep the old follow-up read-only during the transition and write down how to return to it: who decides, how live conversations are picked up, how affected students are told. A migration you cannot undo is one nobody dares to fix.

Set in advance the date the old process closes and what gets archived. The CRM should be able to answer an access or correction request across every channel.

What should not travel on WhatsApp

A rule of thumb helps advisers: messaging is for pointing and scheduling, not for exchanging sensitive documents. ATAR results, passports, visa grants and financial information go through a secure portal, with a link or an appointment. Put it in the adviser handbook.

That applies to universities, TAFE and private providers alike, whether the student applies directly, through a tertiary admissions centre or via an agent.

Where Skolbot fits, and what stays with you

Skolbot Chat is an agent on the school website. It answers from the institution's published content, qualifies the enquiry, offers visit or event slots, then hands the conversation to the team and the CRM. WhatsApp and voice channels are scoped project by project: their scope, timing and price are to be confirmed before any commitment.

Consent, suppression, human handover and retention rules remain your institution's decisions, validated by your privacy officer. A well-configured tool applies those rules; it does not replace them.