Indian Government Warns WhatsApp Over Username Feature, Citing Cyber Fraud Risks

The government has issued a stern warning to WhatsApp over its upcoming ‘username’ feature, cautioning that messaging platforms will be held legally responsible if new updates create loopholes for cyber fraud and public deception/ impersonation. Citing people familiar with the matter, news agency PTI reported that the government will assess potential risks and that the Meta-owned platform's latest announcement raises concerns. The feature may allow users to adopt usernames resembling those of real entities, potentially enabling impersonation and fraud, sources told the new agency.

The Meta-owned application recently announced that it will allow users to connect via unique usernames rather than sharing their private phone numbers. However, the announcement has put authorities on high alert with the Ministry of Electronics and Information Technology (MeitY) elevating cybersecurity to its highest priority.

According to an official, no system can be declared permanently secure. The official said, “When you have so much digital infrastructure, data gets centralised and the risk of disruption through cyberattacks also rises”, adding that cybersecurity had to be built into systems from the design stage and could not be treated as an afterthought. Govt also indicated that messaging platforms would be held responsible if new features created room for fraud, clarifying on WhatsApp's proposed username feature: “It is WhatsApp that has to worry, not us.” Officials said any misuse, whether through usernames, would invite action similar to that taken against Telegram during NEET, making it clear that the burden of safety falls squarely on the tech giants. “Platforms must ensure their architecture is not used to create mischief. If it is, the response will be calibrated but firm,” an official added.

In response to the government’s growing friction, a WhatsApp spokesperson defended the incoming feature, arguing that usernames are intended to significantly enhance user privacy by keeping personal phone numbers hidden from strangers. The company added that it has built safeguards to detect impersonation and abuse, limits how many new people an account can contact through usernames, blocks repeated attempts to guess usernames and reserves high-value usernames, including those of public figures, govt entities and celebrities, to prevent misuse.