India tells WhatsApp to pause rollout of new “usernames” feature, citing cybersecurity and impersonation risks

India has instructed Meta Platforms’ WhatsApp to pause a planned rollout of usernames until the government reviews and approves the change, according to reports describing a letter from India’s Ministry of Electronics and Information Technology (MeitY). The government’s concern centers on how usernames could be exploited for impersonation and related cybercrime, including phishing and fraud schemes that rely on convincing users they are contacting legitimate entities.

The intervention comes after WhatsApp announced in late June that it would let users reserve usernames that can be used instead of phone numbers once the feature launches later this year. The intent, as previously described by WhatsApp, is to let people communicate without automatically disclosing their phone numbers to every contact, including in situations like local communities, professional contexts, and family group chats.

In the reported government correspondence, MeitY reportedly asked WhatsApp to justify why it should proceed with the usernames rollout despite security concerns and to respond within a short window, with reporting saying the company was given three days to address the concerns raised in the letter sent on July 1. The cited legal framework in the reporting includes India’s Information Technology Act 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021.

Regulators’ specific worry, as described in the same reporting, is that usernames could increase opportunities for impersonators, including attackers posing as public authorities, financial institutions, or government departments. The concern is that a mechanism that makes identities easier to reference could also make it easier for bad actors to craft convincing, person-to-person contact attempts.

Separately, Meta has publicly defended the concept of WhatsApp usernames and said the feature includes safeguards intended to reduce scam and abuse risk. Reporting also frames the dispute as part of a broader pattern of scrutiny of online platforms by Indian regulators, with authorities weighing security benefits against potential misuse.

WhatsApp’s usernames feature matters because it touches two sensitive parts of user trust in messaging services, identity and spam resistance. Phone numbers can be used as a direct announcement of contactability, but they also create privacy exposure for users who do not want their numbers visible. Usernames could improve privacy, yet they can also shift the balance toward “discoverable” handles that criminals may try to counterfeit, making moderation, verification, and reporting tools central to any rollout.

What is still unclear from the public reporting is the precise end state of India’s demand. The reports indicate a halt pending consultation or approval, but they do not lay out the specific conditions MeitY may require, such as verification standards, impersonation mitigation requirements, or changes to how usernames are displayed and searchable.

For WhatsApp and Meta, the next steps likely hinge on how quickly the company responds to MeitY’s letter and what the government ultimately requires for approval. Market watchers will also look for whether Meta adjusts the product design or rollout schedule for India, or applies a policy across regions to reduce the chance of uneven regulatory outcomes.