WhatsApp username feature: India issues notice to Meta over impersonation and fraud concerns

The Centre issued a notice to Meta on Wednesday over WhatsApp’s planned username feature in India. The government flagged risks of impersonation and online fraud linked to usernames. Meta was also told not to launch the feature until consultations end. The notice sought details and documents within three days.

Representative image

The notice warned that usernames could make it easier for criminals to contact victims. Authorities said the change could raise cases of phishing and digital arrest scams. It also raised concern about identity spoofing involving officials and institutions. The notice went to the Chief Compliance Officer, WhatsApp India Operations.

WhatsApp username feature notice and fraud concerns

"It is felt that the feature may materially increase the incidence of online fraud, phishing, digital arrest scams and impersonation attacks, by enabling bad actors to solicit and message victims. Furthermore, this feature may facilitate impersonation and identity spoofing, including impersonation of individuals, public authorities, financial institutions, and government agencies, by permitting the adoption of usernames closely resembling those of genuine persons or institutions, said the notice addressed to Chief Compliance Officer, WhatsApp India Operations.\"

The Centre asked Meta to clarify why action should not start under the IT Act and rules. It reminded Meta that WhatsApp is a significant social media intermediary. The notice said such platforms must follow due diligence duties. Authorities also directed Meta to pause any rollout until talks satisfy the Government.

WhatsApp username feature and IT Act rules cited

The notice referred to the Information Technology Act and the IT Rules, 2021. It cited Section 79 on intermediary due diligence duties. It also pointed to parts of rules 3 and 4. These cover intermediary tasks and lawful identification of the first originator.

Authorities also cited Sections 66C and 66D on identity theft and cheating by impersonation. The notice also mentioned intermediary liability under Section 793a. This relates to aiding, abetting, or inducing unlawful acts. The government asked Meta to answer with supporting papers.

\"In this regard, you are directed to furnish a detailed explanation, supported by relevant documents, on this new feature, within three days of its receipt, it said.\"

WhatsApp username feature and Meta safeguards explained

WhatsApp defended the feature on Wednesday and pointed to built-in protections. India is WhatsApp’s largest market, with more than 500 million users. A WhatsApp spokesperson said the username option is not live yet. The spokesperson added that it will roll out slowly later this year.

\"To protect against impersonation, weve held the highest-profile names - think public figures, government entities, celebrities, verified Meta accounts - so they can only ever be claimed by their legitimate owners and lookalike derivatives of known names are held as well, a WhatsApp spokesperson said.\"

Meta said users will still need a phone number to use WhatsApp. It also said usernames will include several scam checks. The company said others must know the exact username to send a message. It also said it will limit how many new people an account can contact.

\"Other users need to know the exact username to message you. We will limit how many new people an account can contact, block repeated attempts to guess someones username key, and have systems to detect and remove activity showing common impersonation and abuse patterns, the company said.\"

WhatsApp said it will show context about a first-time sender before a user replies. This includes whether the sender is new or already a contact. It also shows mutual group links and country signals. WhatsApp said this aims to help users judge whether to respond.

\"When the feature becomes available, and someone sends a message for the first time via your username, we will show you if theyre a new account, if theyre your contact, if you have groups in common, and if theyre based in a different country, so you can decide whether to respond, WhatsApp said.\"

WhatsApp username feature and expert warnings in India

Government sources earlier indicated authorities would review the legal framework for the feature. They said officials would check if laws allow limits on rollout. This review would apply if risks to public safety or national security emerge. The Centre’s notice followed growing debate on the change.

WhatsApp plans to add usernames later this year so users can chat without sharing numbers. The platform said the change is meant to improve privacy. It cited group chats and new contacts as key cases. WhatsApp had already started letting users reserve usernames.

Cybersecurity experts and startup founders warned about lookalike usernames. They said scammers could copy trusted names without strong checks. Paytm founder and Chief Executive Vijay Shekhar Sharma wrote on X about the risk. Jasveer Singh of KnotDating also raised concerns about privacy and accountability.

The government’s notice kept focus on fraud risks and compliance duties for intermediaries. Meta said protections will apply when usernames launch later this year. Officials said the feature should not roll out until consultations satisfy the Government. Meta must submit its detailed response with documents within three days.

With inputs from PTI