WhatsApp began rolling out the feature of user names this week, before officially launching it to all users later in the year. However, the new feature has raised growing concerns about identity theft and cyber fraud, especially in India, which is the largest market for the app with over 500 million users.

A major shift in how users are identified

The user names feature represents an important shift in how WhatsApp is used. It will allow users to communicate and find each other through a username instead of relying on phone numbers as the main means of identification. Meta sees this step as enhancing user privacy by reducing the need to share phone numbers, while cybersecurity experts warn that it could open the door to new methods of impersonation by public figures and institutions.

Names of celebrities and institutions still available for booking

During initial tests, technical reports noted the possibility of booking user names similar to those of well-known personalities and institutions, such as Indian Prime Minister Narendra Modi, a number of Bollywood stars, along with government and banking institutions. This has raised questions about WhatsApp's ability to prevent fraudsters from using similar names to deceive users or impersonate official entities and public figures.

In contrast, Meta confirmed that it pre-registers the usernames of public figures and government entities and some similar names, which can only be booked by their true owners. However, it did not fully explain how it determines which names are protected in advance.

Indian Authorities Intervene

Concerns have reached regulatory bodies in India. The Ministry of Electronics and Information Technology in India sent an official notification to WhatsApp warning that the new feature could lead to increased cyber fraud, phishing, and identity theft. The ministry believed that allowing the creation of usernames similar to those of real people or institutions might facilitate exploitation through messages that appear to be from government agencies, banks, or well-known companies. Indian authorities requested clarification from WhatsApp regarding the measures taken to mitigate these risks and called on the company not to expand the feature's launch before completing regulatory consultations.

Privacy vs. Security: A Debate

In contrast, digital rights organizations in India criticized the government's stance, arguing that addressing fraud issues should be done by enforcing laws against violators rather than through direct intervention in the design of digital products and services. Some experts believe that usernames already provide significant privacy benefits because they reduce the need to share phone numbers that could be used in SIM-swapping attacks or account hacking attempts. However, they also emphasize that similar or fake names could become a new means of identity theft if effective verification systems are not implemented.

Tips to Avoid Identity Theft Risks

Cybersecurity experts advise users to choose unique and hard-to-guess usernames, while ensuring they verify the identities of individuals or entities they communicate with on WhatsApp, especially when receiving messages related to money or personal data. It is also recommended not to rely solely on the username as a means of identity verification, particularly as the feature's use expands in the coming period.

WhatsApp: We are gradually rolling out the feature

WhatsApp confirmed that it is taking a gradual approach to rolling out user names, noting that it continues to gather feedback and listen to the opinions of users and experts before fully launching the feature. The company also explained that users will be able to link their WhatsApp usernames to their Instagram and Facebook names, which may help content creators and businesses maintain a consistent identity across Meta’s various apps.