Govt directs Meta to stall rollout of WhatsApp usernames over cyberfraud risks
The Ministry of Electronics and Information Technology (MeitY) has instructed Meta not to proceed with the rollout of the username feature on messaging app WhatsApp due to potential impersonation and cyber fraud issues, people aware of the matter said.
“The government has asked Meta to provide a detailed statement on the username feature within three days,” said a person familiar with the matter, adding that the company has been instructed not to roll out the feature until consultations on the issue are concluded.
The directive against Meta comes amid government concerns that the feature on WhatsApp could be misused to create deceptive identities, increase the risk of fraud and other threats to public safety. Some tech experts also warned that malicious actors could impersonate users and commit fraud by using similar-looking usernames.
state control
Quick answers to important questions
•5 QUESTIONS
The Indian government has expressed concern that the new username feature could increase the risks of impersonation, cyber fraud and online fraud, leading Meta to request that it not move forward until consultations are complete.
This feature allows users to adopt usernames that closely resemble the usernames of real people or organizations, which can facilitate impersonation and fraud, making it easier for bad actors to commit fraud.
WhatsApp has stated that it will implement multiple layers of defense, including limiting contact attempts, requiring full usernames to send messages, and providing users with information about who is contacting them (such as whether the account has been newly created).
While usernames increase privacy by eliminating the need to share phone numbers, they also raise concerns about the ease of impersonation and potential for abuse that users should be wary of.
Users can reserve usernames in the latest version of the WhatsApp app when the feature is fully launched by going to “Settings”, then “Account” and selecting “Username”.
“This feature could significantly increase the incidence of online fraud, phishing, digital capture fraud and impersonation attacks by allowing bad actors to solicit and send messages to victims,” the government said in a letter to Meta. A copy of the letter was seen Mint.
According to the letter, the government also sought an explanation from the company as to why it should not take regulatory action under the Information Technology Act, 2000 and IT Rules, 2021 “due to the launch of a feature that may increase cybercrime”.
While announcing the feature on Monday, WhatsApp said its users will now be able to reserve usernames and use them to connect without having to share their phone number. The proposed feature is not yet available globally. So far, users have only received notifications asking them to reserve their username.
“Usernames are our latest step to make WhatsApp even more private. There’s no directory to browse and no suggestions; people will need to know your exact username before they can contact you for the first time,” the company wrote in a blog post on its site. WhatsApp said the feature is particularly useful for connecting strangers, people who met through businesses, communities or online marketplaces, and who may not want to disclose their personal mobile numbers.
However, officials at the department of telecommunications (DoT) also warned that the feature could allow bad actors abroad to create fake profiles for impersonation and spoof calls.
WhatsApp’s response
In response to Mint’s questions, a WhatsApp spokesperson said: “To protect against impersonation, we retain the most high-profile names – for example, public figures, government agencies, celebrities, verified Meta accounts – so they can only be claimed by legitimate owners, and similar derivatives of known names are also retained.”
“The ability to use a username has not yet been released and will be rolled out gradually towards the end of this year,” the spokesperson said, adding that users will still need a phone number to use WhatsApp and that it creates multiple layers of defense against potential scams involving usernames.
“Other users need to know the full username before they can message you, we will limit the number of new people an account can contact, we will block repeated attempts to guess someone’s username key, and we will have systems in place to detect and remove activity that shows common patterns of impersonation and abuse,” the spokesperson said. he added.
The company also said that once the feature is available, it will provide users with more information about the person contacting them, including their country, whether the account is newly created, whether the user is in contacts, and their partner groups.
Criticism on social media
In a post published on “I have fought a legal case against Meta’s failure to attempt to remove AI-generated ads that show my face and attract people to WhatsApp investment groups. I understand how big this scam is and how easy it is to carry it out in our country. So, from the perspective of a public figure, forgive me if this feature raises some serious concerns,” Warikoo wrote.
Paytm founder and CEO Vijay Shekhar Sharma also warned that similar-looking usernames could become a major channel for impersonation and fraud without adequate protection.
