Government flags impersonation risks in WhatsApp username rollout
The Indian government has formally raised concerns with Meta over its plan to introduce a username feature on WhatsApp, warning that it could lead to a surge in online fraud, phishing, and digital arrest scams. The Ministry of Electronics and Information Technology issued a notice on July 1, 2026, demanding a detailed explanation within three days and directing the company not to roll out the feature until consultations with the government are satisfactorily concluded.
According to the notice, the username feature may materially increase the incidence of cybercrimes by enabling bad actors to directly solicit and message victims. The government stated that it could facilitate impersonation and identity spoofing, including impersonation of individuals, public authorities, financial institutions, and government agencies, by permitting the adoption of usernames closely resembling those of genuine entities.
Notice cites IT Act and IT Rules 2021
The notice, issued under the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, asked Meta to explain why regulatory action should not be initiated for launching a feature that may increase cybercrimes. The government demanded a detailed explanation supported by relevant documents within three days of receipt of the notice.
Meta had earlier described the username feature as an optional unique identifier starting with the @ symbol (e.g., @Name123) that allows users to be messaged or called without revealing their phone number. The company stated that usernames are unique to each account and different from display names. If a desired username is already taken, the user must choose another. Certain usernames are reserved for businesses, governments, and public figures.
How the username feature works
Meta explained that users who do not have a person's number saved will see their username by default in group chats, direct messages, and calls. The username always appears with an @ symbol to differentiate it from the display name and phone number. The company emphasized that usernames are unique across the platform.
However, the government fears that this very uniqueness and the ability to choose usernames resembling official entities could be exploited by fraudsters. The notice specifically mentioned digital arrest scams, where callers impersonate law enforcement to extort money, as a key concern.
The development underscores the ongoing tension between tech companies introducing privacy-focused features and government efforts to curb cybercrime. The government has directed Meta not to proceed with the rollout until a satisfactory consultation is achieved.
