Two days after WhatsApp introduced ‘usernames’ a feature allowing users to create a unique handle instead of sharing their phone numbers the Ministry of Electronics and Information Technology (MeitY) has issued a notice directing the messaging platform to furnish a detailed explanation within three days, people familiar with the matter said on Wednesday.
The ministry has also directed WhatsApp not to roll out the feature “until the consultation on this point is achieved to the satisfaction of the government.” HT has reviewed a copy of the notice.
What WhatsApp announced
WhatsApp announced the feature on Monday, saying it would give users the option to go by usernames instead of phone numbers, addressing what it described as a privacy blind spot. It has already begun letting users reserve unique usernames, which can be used to contact them once the feature launches later this year.
The MeitY notice said there was apprehension that the feature could materially increase online fraud, phishing, digital arrest scams and impersonation attacks, by making it easier for bad actors to solicit and message victims. “This feature may facilitate impersonation and identity spoofing, including impersonation of individuals, public authorities, financial institutions, and government agencies, by permitting the adoption of usernames closely resembling those of genuine persons or institutions,” the notice said.
Separately, the Department of Telecommunications (DoT), under the Ministry of Communications, has raised concerns over how the feature would affect its SIM-binding directive, which requires messaging platforms including WhatsApp, Signal, Telegram, Arattai and Snapchat to link user accounts to physical SIM cards to curb cyber fraud and improve traceability.
A DoT official, speaking on condition of anonymity, said the larger concern was that usernames would make it harder for law enforcement agencies to establish whether a perpetrator was even based in India — someone could register a WhatsApp account on a foreign number, adopt a username resembling a public figure such as the NIA chief, and run fraudulent messaging campaigns with no Indian phone number to trace. The official said an Indian (+91) number currently gives agencies a starting point for action, which a foreign-registered, username-based account would not provide.
Web-based versions logged out periodically
The directive also mandates that web-based versions of these apps be logged out at least once every six hours, requiring users to re-authenticate typically via QR code to continue access. The DoT official also flagged WhatsApp’s response time to law enforcement requests, saying it currently takes the platform a minimum of five days, and sometimes an indefinite period, to respond, calling this a further complication.
Meta says the SIM directive is unaffected
A Meta executive, speaking to HT on condition of anonymity, said the new feature would not affect the SIM-linking directive. “Usernames do not replace your phone number on WhatsApp you will need your phone number to register and use the service. Usernames is an additional privacy feature that enables you to connect with someone on WhatsApp without giving away your phone number,” a Meta spokesperson said, adding that accountability would be maintained since a person’s identity can still be traced back through existing law-enforcement processes even when a username is used.
Also Read:Centre Worried About Fraud, May Issue Notice To Meta Over WhatsApp Username Feature
A senior Delhi Police cybercrime official said the move would make it harder to narrow down suspects because of the anonymity usernames provide, adding that WhatsApp appeared to be following the path taken by Telegram and Signal, both of which already offer usernames.
The feature will be rolled out gradually later this year, including in India. “With over three billion people on WhatsApp a lot of names overlap, which is why we’re opening reservations early so everyone has the opportunity to select the username that matters to them,” WhatsApp said in a blog post.
Responding to the concerns raised in New Delhi, a WhatsApp spokesperson said the feature was not yet live and would roll out slowly later this year, adding that Meta had built several layers of defence against scams into it. “To protect against impersonation, we’ve held the highest-profile names think public figures, government entities, celebrities, verified Meta accounts — so they can only ever be claimed by their legitimate owners, and lookalike derivatives of known names are held as well,” the spokesperson said.
“Users still require a phone number to use WhatsApp, and we’ve built multiple layers of defence against scams into usernames: other users need to know the exact username to message you, we will limit how many new people an account can contact, block repeated attempts to guess someone’s username, and have systems to detect and remove activity showing common impersonation and abuse patterns. When the feature becomes available and someone messages you for the first time via your username, we will show you if they’re a new account, if they’re your contact, if you have groups in common, and if they’re based in a different country, so you can decide whether to respond,” the spokesperson added.
-
-
-
-
