← Back to blog

UGC Whitelisting and Spark Ads: 2026 Guide

How UGC whitelisting works in 2026, from TikTok's and Meta's own help pages: Spark Ads video codes and their 7 to 365 day durations, Meta partnership ad codes and permissions, where AI-generated UGC fits, and the disclosure rules to respect.

Correction, 2026-10-02: we re-checked this page against TikTok's and Meta's own help pages and the FTC's rules. Meta's help pages now describe managing partnership ad permissions in Creator Marketing Hub, not the "Partnership Ads Hub" with three tabs that we described. We said that when a Spark code expires the brand's ad stops automatically; TikTok's pages say Ads Manager reports the authorization as expired and tells the brand to ask the creator to extend it. Our note that the brand cannot edit a whitelisted ad holds for the caption of a TikTok Spark Ad, but not on Meta, where advertisers can edit content for a partnership ad and the original post stays unchanged. We said partnership ads carry a mandatory paid-partnership label; Meta's pages say a partnership ad shows the creator's and/or the brand's account in its header, while the "Paid partnership with" label belongs to branded content posts, which creators must tag when there is an exchange of value. We referred to Meta's "Made with AI" labels; Meta's ad label is now "AI info". We also claimed, without data, that whitelisted, Spark and partnership ads consistently outperform standard ads on click-through and cost per result; those claims are gone. We said to run 9:16 on both platforms; Spark Ads use the organic post as it is, and Meta recommends 4:5 for Facebook feed video. Every platform rule is now quoted from its source with a link and a date, and the page has a Sources section.

Whitelisting is the mechanism that lets a brand run paid ads from a creator's own account, keeping the creator's name and profile on the ad instead of only the brand's. On TikTok that is Spark Ads; on Meta (Facebook and Instagram) it is partnership ads, which Meta used to call branded content ads. This guide covers how authorization works on each platform, from their own help pages as we read them on 2026-10-02, where AI-generated UGC fits and where it does not, and the disclosure rules that apply. By the end you'll know which content to run from your own account and which needs a real creator's handle.

This is general information, not legal advice. Platform rules and laws change, and how they apply depends on your ad and where it runs. Check the current text of each source (all linked below) and ask a lawyer about your campaign.

What you'll end up with

A working understanding of two paid-media setups and a clear rule for routing content into them:

Whitelisting has no per-clip production cost of its own; it's a permissions layer on top of creative you already made. The spend is media plus whatever you pay the creator. Meta notes that "Creators who make content that is used for partnership ads are paid off the platform." For creator prices published by three marketplaces, see AI UGC vs real creators, and for the wider budget, the UGC cost breakdown.

What whitelisting is

Whitelisting (also called creator licensing) is a creator granting a brand permission to run paid ads from the creator's social account. The ad carries the creator's handle and profile, so the viewer sees a person they may already follow, not only a brand. Meta says partnership ads "leverage signals from both accounts for improved ranking and incremental performance." That is Meta's claim, not our measurement: compare them with your standard ads in your own account before you scale.

The mechanics differ by platform. TikTok uses a video code that the creator generates for one post (often called a Spark code). Meta uses partnership ad permissions, either for one piece of content (with an ad code) or for the whole account.

TikTok Spark Ads

TikTok describes Spark Ads as "a native ad format that allows you to leverage organic TikTok posts and their features in your advertising", so that "all views, comments, shares, likes, and follows gained from boosting the video during the promotion are attributed to your organic posts." A brand can run Spark Ads from its own account's posts, or from "organic posts made by other creators (with their authorization)".

For a creator's post, the permission runs through a video code (the Spark code). TikTok's help center lists these steps:

  1. The creator allows ad authorization and generates the code from the specific post. In the TikTok app: open the post, tap the three dots, tap Ad Settings, agree to the advertising content terms, turn on the Ad authorization toggle and generate a video code.
  2. The creator picks a duration. TikTok's options are "7, 30, 60, or 365 days". If the brand requests authorization through TikTok's Content Suite instead, TikTok says requests default to 365 days.
  3. The creator copies the code and sends it to the brand.
  4. The brand enters the code in TikTok Ads Manager, either while creating the ad or in the Creative library (Spark ads posts, then Apply for Authorization). TikTok supports "a batch authorization of video codes of up to 20 at a time", and a Duet or Stitch needs codes from both creators.

Three rules from the same pages matter for planning:

Meta partnership ads

Meta's help center says "Branded content ads are now called partnership ads." Partnership ads "allow advertisers to run ads with partners: creators, brands and other businesses", and "The partner and/or advertiser accounts are featured in the ad's header."

The permission comes from the creator: "To run partnership ads, advertisers need permission from the partner whose handle the ad will include. Creators and other partners can revoke these permissions at any time." Meta has two kinds:

Meta describes Creator Marketing Hub as a tool in Meta Business Suite or Ads Manager "that helps brands discover and evaluate creators to partner with on branded content and partnership ads and find creator content to boost into partnership ads", and notes that it "may not be available to you yet".

Two differences from TikTok. With content-level permission, Meta lists that the advertiser can "Edit your content for ads and your original post will stay the same." And when you build the ad in Ads Manager, you turn on the partnership ad toggle, paste the ad code, post ID or URL, and choose which identities appear in the header: both, the first only, or "dynamic identity", which Meta turns on by default.

Eligibility: Meta says partnership ads are available for public content on "Facebook Pages or profiles in professional mode" and "Instagram professional accounts", and that creators need "an authentic, established presence", which "also includes maintaining a sufficient follower base."

Where AI-generated UGC fits

This is the part brands get wrong, so be precise. AI-generated UGC and whitelisting intersect in two very different ways.

Own-account posting (clean fit)

Running AI-generated UGC-style creative from your own brand account is straightforward: you made the creative, you own it, you run it. On TikTok you can also Spark your own organic posts ("Publish ads using your own TikTok account's posts"). This is where the bulk of AI UGC belongs: your account, your creative, labeled as AI where the rules require it.

Creator handles (consent and honesty required)

Whitelisting runs an ad from a real person's account, with that person's permission. An AI-generated "creator" has no real person behind it to give consent, hold an opinion or use the product. Two rules follow:

The safer way to use an AI avatar is as an obvious presenter, spokesperson or character delivering brand claims that are true and substantiated. The Endorsement Guides give two examples that are not endorsements: an "obviously fictional dramatization," and a spokesperson who "does not purport to speak from personal experience." Run that kind of creative from your own account.

The clean mental model: AI UGC on your own account is a creative decision; putting creative on a human's handle is a consent-and-honesty decision. Keep them separate.

Disclosure crossover

Whitelisting disclosure and AI disclosure stack; one does not replace the other.

When in doubt, run AI UGC from your own account with the required AI label, and reserve whitelisting for real creators producing real (even AI-assisted) posts they genuinely stand behind.

Platform notes

FAQ

Can I whitelist AI-generated UGC?

Not as a fake creator. Whitelisting runs a paid ad from a real person's account with their permission, and an AI-generated persona has no real person behind it to consent or to have used the product. Presenting it as an independent creator's endorsement runs into the FTC's rules on endorsements and fake testimonials. You can run AI-generated UGC-style creative from your own brand account (including as Spark Ads on your own TikTok posts), labeled as AI where required, and a real creator can authorize a real post that uses AI-assisted b-roll. The dividing line is whether a real person genuinely stands behind the product.

How does a TikTok Spark code work?

The creator opens the post in the TikTok app, taps the three dots, taps Ad Settings, turns on Ad authorization, generates a video code and chooses a duration of 7, 30, 60 or 365 days. They send the code to the brand, who enters it in TikTok Ads Manager to run the post as an ad. The caption can't be edited once the post is authorized, and engagement from the ad is credited to the original post.

What happens when a Spark code expires?

TikTok Ads Manager shows "Authorization expired. Contact the creator to extend the authorization." It also warns you if the authorization ends before the ad's end time, so match the duration to your flight, or ask the creator to extend it.

Does a Meta partnership ad code expire?

The Meta help pages we read on 2026-10-02 do not give one. The creator can turn the code toggle off, which stops new ads from using it while active ads keep running, or revoke the advertiser's permissions at any time.

What's the difference between Spark Ads and Meta partnership ads?

Spark Ads is TikTok's system for promoting an organic post, authorized per post with a video code that lasts 7 to 365 days, with engagement credited to the original post. Meta partnership ads (formerly branded content ads) put a creator's account, the brand's, or both in the ad's header, authorized per post with an ad code or for the whole account, and the advertiser can edit the content for the ad without changing the original post. Both need the creator's permission, and both sit alongside each platform's branded content and AI labeling rules.

Is this page legal advice?

No. It is general information about platform rules and US law as their own pages stated them on 2026-10-02. Check the current sources below and ask a lawyer about your campaign and the countries it runs in.

Sources


Whitelisting is a distribution layer on top of creative you still have to make. Build your UGC on 8frame first, run AI-generated variants from your own account, and reserve whitelisting for the real creators producing your validated hero concepts.

Try it without signing up: the 8frame canvas opens on a real board. The canvas is free and unlimited; generation is paid from $19/month.

Written with AI assistance. Corrections are noted on the page. Editorial policy

Related articles

use caseHow to Storyboard a UGC Aduse caseUGC Briefs That Work: For Creators and AIuse caseHow to Become an AI UGC Creator in 2026

Make it
move.

Stay in the loop

Be the first to hear about our launch and get product updates