WhatsApp began rolling out username reservations this week, aiming for a broader launch later this year. This feature allows users to find and message one another using handles instead of phone numbers, raising concerns about impersonation and attracting scrutiny from security experts and regulators in India, where WhatsApp has more than 500 million users.
The launch marks a shift from phone numbers as the primary identifier, with Meta stating the change aims to enhance privacy. However, critics argue that it could increase opportunities for impersonation, with early testing revealing usernames similar to prominent figures, including “indiamodi” and “shahrukh.actor,” were available for reservation.
Binance founder Changpeng Zhao reported difficulties reserving his existing handle “cz_binance” on the platform. Meta indicated it reserves usernames for public figures and government entities to prevent impersonation but did not clarify the criteria for reserving lookalike usernames.
Concerns from regulators in India are notable, given the frequent exploitation of messaging platforms for cyber fraud. The Ministry of Electronics and Information Technology (MeitY) warned that the new feature could significantly increase online fraud and impersonation attacks. In a notice to WhatsApp, MeitY requested an explanation to avoid regulatory actions regarding the rollout.
A senior official from the ministry confirmed ongoing discussions with WhatsApp concerning the feature. The Internet Freedom Foundation criticized MeitY’s notice as lacking a legal basis, arguing that it could lead to excessive government control over product design.
Rachel Tobac, CEO of SocialProof Security, acknowledged that while usernames might reduce the need to share phone numbers, they still pose impersonation risks. She urged users to select unique, hard-to-guess usernames to mitigate risks of harassment.
WhatsApp is allowing users to link existing Facebook or Instagram usernames to maintain consistent identities across platforms. The Mozilla Foundation warned that the introduction of usernames might lead to increased scams and impersonation, highlighting the trade-offs inherent in this change.
WhatsApp noted it is approaching the rollout gradually and is considering user feedback to ensure a robust launch later this year.
