Meta defends WhatsApp usernames after India raises cybercrime and impersonation concerns

India has pressed Meta to explain and justify WhatsApp’s push to roll out usernames, arguing the feature could expand opportunities for cybercrime and impersonation. According to reporting tied to India’s communications regulator, the government asked WhatsApp to pause or slow the rollout while it seeks details on how Meta plans to prevent abuse.

The concern is rooted in how usernames work: instead of initiating chats by sharing a phone number, users can reserve a unique handle that others can use to reach them. MeitY’s worry, as described in secondary coverage, is that attackers could exploit the username mechanic to contact targets without the friction of phone-number visibility, making it easier to impersonate public authorities, banks, or government departments.

The government’s action followed WhatsApp’s announcement that it would allow users to reserve usernames that could be used in place of phone numbers when the feature is introduced later this year. WhatsApp also said it would restrict duplicate usernames, including preventing users from creating the same handle across other Meta services unless the user controls those other accounts.

In the dispute, Meta has defended the usernames feature and responded to the government’s request for an explanation. The Yahoo Finance report frames Meta’s position as a rebuttal to the cybercrime premise, while still acknowledging that regulators want clearer information on how WhatsApp will curb impersonation risks.

India’s regulatory approach points to a broader challenge for messaging platforms as they evolve from phone-number-first identity to handle-based discovery. Usernames can improve privacy and convenience by reducing phone number exposure in everyday communication, but they also create a separate identity layer that can be gamed if anti-impersonation controls are not sufficiently robust or transparent.

Other countries and regulators have shown similar sensitivity when identity features appear to lower the barrier for reaching users. For Meta, the stakes are not only compliance and legal risk, but also user trust, because messaging services compete on perceived safety and reliability as much as on product features like discoverability and contact management.

What remains unclear from the public reporting is the specific set of safeguards Meta would rely on to stop bad actors from impersonating institutions or individuals using usernames. The government has requested answers and, in coverage, set a short timeline to respond, but the details of enforcement outcomes or any required changes to the rollout were not spelled out in the available accounts.

The next development to watch is whether India’s government accepts Meta’s explanation as sufficient, requires modifications to WhatsApp’s rollout plan, or escalates regulatory action if it believes impersonation and fraud risks remain unresolved. Any decision could also shape how quickly WhatsApp extends the username feature across markets, and how other platforms anticipate regulatory expectations for identity and security.