WhatsApp has started allowing users to reserve usernames before the feature becomes widely available later this year. However, the rollout is already raising concerns that scammers could create fake usernames to impersonate public figures, banks, and government institutions.
The feature will allow users to find and message other people through usernames instead of sharing phone numbers. Meta says this will improve privacy, but security experts and Indian regulators warn that it could also create new opportunities for fraud.
India is WhatsApp’s largest market, with more than 500 million users.
The introduction of usernames changes how WhatsApp users identify and contact one another.
Phone numbers have traditionally served as the main identifier on the platform. Under the new system, users will increasingly be able to communicate through usernames managed by WhatsApp.
During early testing, TechCrunch found that several usernames resembling the names of Indian politicians, celebrities, companies, and public institutions were available to reserve.
The examples included “indiamodi,” referring to Indian Prime Minister Narendra Modi; “shahrukh.actor,” referencing Shah Rukh Khan; and “teamamitabh,” resembling actor Amitabh Bachchan’s name.
Other available handles included “ambanijio,” which resembled the name of billionaire Mukesh Ambani’s telecom company Jio, and “rbi_verify,” which appeared similar to the Reserve Bank of India.
Binance founder Changpeng Zhao also said on X that he could not reserve “cz_binance,” despite already using that username on the social media platform.
Meta said it has reserved usernames belonging to public figures, government organizations, and some variations of their names.
The company said only legitimate owners would be allowed to claim protected usernames. However, it did not explain how it determines which similar-looking names should be reserved and which should remain available.
WhatsApp says the feature will be optional and that usernames will not appear in a public, searchable directory.
India’s Ministry of Electronics and Information Technology sent WhatsApp a notice on Wednesday, July 1, asking the company to pause the rollout until consultations with the government are completed.
The ministry warned that allowing people to contact others without displaying their phone numbers could increase online fraud, phishing, digital arrest scams and impersonation attacks.
It also said attackers could create usernames closely resembling those of individuals, public authorities, financial institutions and government agencies.
The ministry asked WhatsApp to explain why it should not face regulatory action under India’s information technology laws. It reportedly gave the company three days to respond.
A senior Indian government official separately said the ministry was aware of the concerns and was discussing the feature with WhatsApp.
The Indian government’s intervention also received criticism from the New Delhi-based Internet Freedom Foundation.
The digital rights group said the ministry’s notice lacked a clear legal basis and could give the government broad authority to privately control how companies design their products.
It acknowledged that fraud and impersonation were genuine risks but argued that authorities should address them by taking legal action against offenders rather than privately deciding which features Indian users can access.
The discussion has also revived comparisons with an earlier Delhi High Court case involving Telegram.
In that case, the court observed that usernames could make it easier for users to hide their identities and spread illegal content more quickly than systems based on phone numbers.
The case did not involve WhatsApp, but the comparison has returned as the Meta-owned platform prepares to launch a similar identification system.
Rachel Tobac, chief executive of SocialProof Security, described usernames as an overall improvement for privacy because people would no longer need to give their phone numbers to strangers.
Sharing a phone number can expose users to phishing, SIM-swapping, and account takeover attempts. However, Tobac warned that similar-looking usernames could still support impersonation scams.
She advised most users to choose usernames that are difficult to guess. This could make it harder for attackers to find them, send unsolicited messages, harass them or target them with spam.
WhatsApp has advised most people to choose a username that is unique to the messaging platform.
However, users will also be able to claim usernames already associated with their Instagram or Facebook accounts by linking those accounts.
WhatsApp says this option will help creators, companies, and organizations maintain a consistent identity across Meta’s platforms while reducing impersonation.
WhatsApp says it is introducing username reservations gradually and will consider feedback before releasing the full feature later this year.
The company said it is taking additional time to ensure that the system works properly before making it broadly available.
Get the latest tech news, telecom insights, and product launches wherever you prefer.
Add ProPakistani to Preferred Sources and see more of our stories in Google Search and Top Stories.
Shares
