WhatsApp Usernames Spark Impersonation Concerns
Original: WhatsApp usernames are already raising impersonation red flags
Why This Matters
WhatsApp username feature raises critical security risks in markets with high fraud incidence, triggering regulatory intervention.
WhatsApp began rolling out username reservations, allowing users to message by handle instead of phone number. Security experts and Indian regulators flagged risks of impersonation affecting the app's 500+ million Indian users.
WhatsApp this week started rolling out username reservations ahead of a planned broader launch later in 2026. The feature enables users to find and message each other using platform-managed usernames rather than phone numbers, marking a significant shift in user identification. Meta stated the change improves privacy, but critics argue it creates new impersonation opportunities. During early testing, TechCrunch found usernames resembling prominent figures and institutions still available for reservation, including "indiamodi" (Indian PM Narendra Modi), "shahrukh.actor" (Bollywood actor Shah Rukh Khan), "teamamitabh" (actor Amitabh Bachchan), "ambanijio" (billionaire Mukesh Ambani's Jio), and "rbi_verify" (Reserve Bank of India). Binance founder Changpeng Zhao reported inability to reserve "cz_binance," his X platform handle. Meta told TechCrunch it reserves usernames for public figures, government entities, and "some variations" for legitimate owners only, but declined to explain its criteria for determining which lookalike usernames receive proactive protection. India's Ministry of Electronics and Information Technology (MeitY) sent a notice to WhatsApp on Wednesday, warning the feature could "materially increase" online fraud, phishing, digital arrest scams, and impersonation attacks by enabling contact without phone number exposure. The ministry directed WhatsApp to explain why regulatory action shouldn't proceed under Indian IT laws and requested the company pause rollout pending consultations. India's digital rights group Internet Freedom Foundation criticized the notice for lacking clear legal basis.