WhatsApp Withholds High-Profile Usernames Amid Government Impersonation Concerns
WhatsApp, which has been directed by the Indian government not to roll out its username feature until clarifications are provided, stated on Thursday that it has implemented multiple layers of defence to address impersonation and abuse concerns. In an exclusive interaction with NDTV Profit, a WhatsApp spokesperson revealed that high-profile names—such as those of public figures, government entities, and celebrities—are being withheld to allow legitimate owners to claim them. Lookalike derivatives of known names have also been blocked.
The username feature, introduced by Meta (WhatsApp's parent company), allows users to select a unique username and communicate without sharing their phone numbers. According to Meta, this is intended to enhance privacy by keeping phone numbers confidential. The rollout is being conducted in phases; currently, users are only being asked to choose their usernames. However, users will still require a phone number to use WhatsApp, the spokesperson clarified.
Among the safeguards are automated systems that detect common impersonation and abuse patterns, limiting how many new contacts an account can message, and blocking attempts to guess another user's username. To initiate a conversation via username, the sender must know the exact username. Additionally, when a user is contacted through a username, information such as whether the sender is a new account, a contact, shares common groups, or the country of origin will be displayed.
Earlier in the day, the Indian government issued a notice to WhatsApp, demanding a detailed explanation of the username feature within three days. The notice stated that the feature cannot be rolled out until further consultations are completed. Sources told NDTV that officials are examining whether the feature could be misused to impersonate government departments, banks, and other trusted institutions. The feature is also being reviewed for compliance with India's digital regulations and user safety standards.
Meta has been asked to outline the safeguards built into the system and its plan to prevent impersonation and misuse. The government's notice expressed concerns that the feature 'may materially increase the incidence of online fraud, phishing, digital arrest scams and impersonation attacks, by enabling bad actors to solicit and message victims.' It further noted that the feature could facilitate impersonation and identity spoofing, including the impersonation of individuals, public authorities, financial institutions, and government agencies, by allowing usernames that closely resemble genuine entities.
Sources indicated that the government will take a final decision after reviewing Meta's response and conducting further consultations on the security implications of the proposed feature.
