Meta ads for law firms: Facebook and Instagram without client-list audiences

Facebook and Instagram reach most American adults: in Pew’s 2025 survey, 71% said they use Facebook and 50% Instagram (Pew Research Center). For a law firm, that reach comes with two problems. Meta shows ads to people who weren’t looking for a lawyer, so it takes credit easily. And the usual way agencies sharpen Meta ads, by uploading customer lists and building “lookalikes,” is the wrong move for a firm that holds confidential client information. This guide shows what works inside a stricter policy. It sits under our personal injury marketing guide, where social ads are one channel of several.

Why no client-list audiences

Three reasons, in order of weight.

Confidentiality. The ABA’s model rule bars a lawyer from revealing “information relating to the representation of a client” without consent or an exception (ABA Model Rule 1.6). Who your clients are is information about the representation. Uploading a client list to build an audience tells a platform exactly that.

Hashing isn’t anonymizing. Platforms ask for hashed emails and phone numbers. The FTC’s technologists put it plainly: data “is only anonymous when it can never be associated back to a person,” and a hash is a consistent identifier that can be matched (FTC).

Meta’s own terms. Advertisers using Meta’s business tools promise not to share health information, financial information or “other categories of sensitive information” (Meta Business Tools Terms). An injury client list, a bankruptcy client list or a criminal defense client list is, by its nature, about one of those things.

So the policy across every practice is the same: no Customer Match, Custom Audiences or lookalike audiences built from client lists. Remarketing to website visitors runs only where Meta’s policies allow it, and it stays off for sensitive practices, because a follow-up ad about a DUI or a divorce can reveal something to whoever else uses the phone.

What Meta bars in the ad itself

Meta’s personal-attributes policy says ads must not assert or imply personal attributes, directly or indirectly. The list includes physical or mental health, vulnerable financial status, criminal record, disability, age, religion and others (Meta). Meta’s own examples are useful: “Are you a convicted felon?” is not allowed, while “Services to clean up any previous offenses” is; “Are you bankrupt?” is not allowed (same source).

For law firms, translate that into copy rules:

The right-hand column is also safer under most states’ advertising rules, because it describes the firm’s service and makes no claim about the reader.

The sensitive-practice settings checklist

Creative that follows the ad rules

On Meta, creative does the work that targeting used to do. A 20-second clip of a partner explaining what happens after a truck crash will find people for whom that’s relevant. That makes creative the most important lever, and the most regulated one.

• Use the firm’s own footage. Attorneys speaking to camera, the office, the team answering phones. No stock “accident scene” footage.
• No results without your state’s rules in hand. Most states limit past-result claims, and some require set disclaimers. Leave settlement figures out of social ads by default.
• No dramatizations without disclosure. California requires a disclosure for impersonations and dramatizations (§6157.2), and other states have similar rules. If an actor plays a client, say so on screen.
• Name and city in the ad. Our default is the responsible lawyer’s name and the office city in the ad itself.
• Filing. Florida lists internet ads among those that must be filed unless they contain only safe-harbor content (Florida Bar). Check your state in the lawyer advertising rules guide.

The Ad Library research method

Meta’s Ad Library lets anyone search all active ads running across Meta’s products (Meta; Ad Library). It is a useful free research tool. A one-hour method:

1. Search five firms in your practice and market by name, and note every active ad.
2. Record the format (video, image, carousel, lead form), the hook in the first three seconds, and the call to action.
3. Note how long each ad has run. An ad running for months is one the firm keeps paying for. That is not proof it signs cases, but it is a signal worth noting.
4. Mark claims that wouldn’t pass your state’s rules. Don’t copy them.
5. Write three ad ideas your firm could film this month with its own people.

Lead forms and intake speed

Meta’s instant lead forms are quick to fill on a phone, which makes them cheap and makes their leads weaker than a phone call. Two things decide whether lead-form leads sign:

• Callback speed. A person who filled a form while scrolling may have moved on within minutes. Route each lead to intake instantly and call within five minutes during staffed hours. Our law firm intake guide covers routing and scripts.
• Form friction. A single “higher intent” step, such as a review screen or one qualifying question about the type of matter (not the facts), filters out accidental taps.

Meta offers a CRM-based optimization for lead ads, called Conversion Leads, that learns from your later stages. Its prerequisites are at least 200 leads a month, uploads at least once a day, and a target stage that occurs within 28 days of the lead (Meta). Many firms don’t reach 200 Meta leads a month; if yours doesn’t, optimize to a “qualified” event from the Conversions API instead.

The Conversions API and the 7-day limit

The Conversions API sends events from your server or CRM to Meta, rather than relying only on the browser pixel. Its rules shape what a law firm can send (Meta):

• Seven days. An event’s time “can be up to 7 days before you send” it; if any event in a request is older, Meta returns an error for the whole request.
• Deduplication. Send an event ID with each event; Meta keeps only the first copy of a matching ID and name.
• Matching. Meta’s click ID (the fbc value from the _fbc cookie) and a lead ad’s lead ID are sent unhashed; emails and phone numbers must be hashed (Meta).

The 7-day limit matters because many signed cases arrive more than a week after the click. So send the early stages that do fall inside the window: “lead” at once, “qualified” after the intake call, “consult” when it’s held. Bidding learns from those. Signed cases are counted in your own CRM and report, not necessarily in Meta.

What we send: the click ID or lead ID, a neutral event name, a time and, where the attorney approves, a value band. What we never send: names, case types, injuries, charges or any notes. For criminal, family and immigration campaigns we send no hashed contact data at all.

Budget and pacing

Meta’s delivery system needs volume to learn, and law firm budgets are usually small next to retail advertisers. Three rules keep a small budget useful:

• Fewer ad sets, more money in each. One campaign per practice and language, with broad geography, beats a dozen narrow ad sets that each spend a few dollars a day.
• Optimize to the deepest event you can send often. If “qualified” events arrive several times a week, optimize to them; if they are rare, optimize to leads and judge quality yourself in the CRM.
• Refresh creative monthly. Social audiences tire of the same video. Film a few short clips each month with your own lawyers rather than one expensive production a year.

Set a monthly cap the partners accept losing if the holdout shows nothing, and don’t raise it until the holdout reads.

Geographic holdouts

Social ads reach people before they search. Someone sees your video on Monday, searches your firm’s name on Wednesday, and signs on Friday. Meta may count that case; so may your brand search campaign. A geographic holdout settles it.

1. Pair similar areas. Split your service area into counties or ZIP clusters with similar population and history of signed cases.
2. Run ads in one of each pair and hold the other out, for at least 8 to 12 weeks.
3. Compare signed cases per resident across all sources, not Meta’s conversions.
4. Use a tested method for the comparison. GeoLift, an open-source tool from Meta Open Source, estimates lift at a geographic level using synthetic controls; its own documentation says it is “not a Meta product” and for research use (GeoLift). The Probative Standard’s holdout test sets out the simpler paired-area version we report, and our holdout tests guide walks through the design step by step.

What this means for your firm

• Keep client lists off every platform. No Custom Audiences or lookalikes from clients, in any practice.
• Turn remarketing off for sensitive practices, and use it elsewhere only within Meta’s rules and with attorney approval.
• Spend on creative. Your own attorneys on camera, talking about one kind of case, with your state’s required statements.
• Write copy about the service, never the viewer. It satisfies Meta and most bar rules at once.
• Send neutral events within 7 days, keyed to the click ID or lead ID, with no case details.
• Run a geographic holdout before any budget increase, and judge Meta on cases it added.

Probative is AI-first SEO and ads for law firms. Our social ads service runs Facebook, Instagram and YouTube this way, with a flat fee shown on the pricing page. For measuring any channel against signed cases, see cost per signed case.

Marketing information, not legal advice. Social ads are lawyer advertising under your state’s rules; check with your bar and your own counsel.