The IT Secretary, S Krishnanu, stated that the deadline for Meta, the owner of WhatsApp, to respond to the official notification regarding the username feature expires on Thursday.
Last Wednesday, the government sent a notification to Meta expressing concerns about the proposed username feature in WhatsApp. The main concerns related to this feature potentially increasing online fraud, phishing, digital arrest schemes, and identity spoofing attacks.
The essence of the username feature is that platform users will be able to communicate without revealing their phone numbers. The government also demanded that the platform refrain from launching this feature until consultations on the matter are completed to the satisfaction of the government.
Following this, WhatsApp requested additional time to provide its response on the username feature and assured the government that it would not implement it in India until discussions were concluded. Krishnanu reported that this response is expected today during the CII GCC Business Summit.
When asked whether other messengers, such as Telegram and Signal, had provided responses to the notifications they received, Krishnanu noted that there was still some time remaining, so the responses had not yet been received and would be examined.
Last Friday, a team from Meta met with officials from the Ministry of IT after receiving the notification. In this notification, the government required Meta to explain why it should not initiate action under the IT Act and relevant rules concerning the new WhatsApp feature, which could potentially increase cybercrime.
The Ministry also reminded Meta that as a major social media intermediary, the company is obligated to comply with due diligence obligations under the IT Act and rules.
A WhatsApp representative stated last week that the ability to use a username is not yet active and will be gradually rolled out later this year. He added that to protect against impersonation, the most well-known names—including public figures, government bodies, celebrities, and verified Meta accounts—have been preserved so that only legitimate owners can claim them, and similar variations of famous names have also been retained.
The company clarified that users still require a phone number to use WhatsApp and announced that it has implemented multiple layers of anti-fraud protection in the username system. WhatsApp stated that other users will need to know the exact username to contact a person. The company plans to limit the number of new people an account can contact, block repeated attempts to guess the username key, and have systems to detect and remove activity showing common patterns of abuse and impersonation.
Furthermore, WhatsApp will display information about the first sender: whether they are a new account, a contact, a member of a group, or located in another country, before the user decides to reply.
After sending the notification to WhatsApp, the Ministry of IT also sent similar notifications to Telegram and Signal, raising questions about the existing username feature on these platforms and requesting information on how they address issues related to fraud and impersonation risks. Although WhatsApp has 500 million users in India, Telegram's reach is significantly smaller.
It is worth noting that in recent days, Meta and Telegram have also faced regulatory scrutiny on other matters. While the government sent a stern notification to Meta on Saturday regarding child sexual abuse material in Instagram ads, Telegram received a notification demanding action against the 'widespread distribution' of pirated films, OTT content, and other audiovisual material through its platform.
WhatsApp is preparing to introduce a username feature that many users have long awaited. The company has already provided the ability to reserve these names globally, although the feature itself has not yet been launched.
On June 30, WhatsApp announced that this feature will enhance user privacy. Users will be able to communicate using their nickname without revealing their phone number. Thus, chats can occur without displaying the phone number.
According to sources, the Indian government sent a notification to WhatsApp's parent company demanding that the feature not be temporarily launched in India. The government also required complete information about this feature within three days. The launch of the feature in India will only be possible after negotiations between the government and Meta are concluded.
Previously, a mobile number was required for communication on WhatsApp, and only those who knew your number could send messages. With the introduction of the new feature, a user can choose a unique nickname for their account. After this, new people will not need to know your phone number to start a chat with you; knowing your correct nickname will suffice.
WhatsApp claims that the main goal of this feature is to strengthen privacy by eliminating the need to share a phone number with every contact. However, the company clarified that if someone already has your number or you are in a group chat, your number will remain visible to those people. This service is primarily intended for new interactions.
According to Meta, users can reserve their nickname through WhatsApp settings: Settings > Account > Username. Each chosen nickname must be unique. If the desired nickname is taken, the user will have to choose another. Meta plans to gradually roll out this service in different countries, and users will receive a notification when the feature becomes active. Currently, it is not active worldwide simultaneously and will be released in phases over the coming months.
In addition to the username feature, WhatsApp is introducing an extra layer of protection called Username Key. A user can attach a separate key to their nickname. In this case, simply knowing the nickname will not be enough; the correspondent will also need this key to initiate a new chat. This is done so that even if your nickname becomes publicly available on the internet, no one can send you a direct message.
The government's main concern relates to cyber fraud and fake identities. If only a nickname is displayed instead of a phone number, malicious actors could create nicknames resembling the names of companies, government institutions, or famous personalities to mislead people. The government believes that launching such a feature without thorough verification is unacceptable.
Sources report that the government requested information from Meta on how fake accounts will be prevented, how criminals will be identified, and how law enforcement agencies can conduct investigations if necessary.
WhatsApp's username feature largely resembles the nickname system in Telegram. In Telegram, people have been able to connect with each other via nicknames for many years, often keeping their phone numbers hidden. During disputes over the leak of NEET exam materials, questions arose regarding Telegram, when the platform's founder stated that even if Telegram were shut down, criminals could use other applications like WhatsApp.
Now that WhatsApp is also implementing the username feature, the government seeks to understand whether the same problems might arise. Nevertheless, having only a nickname does not mean a criminal cannot be traced. According to the law, WhatsApp stores account information, and this information can be provided to investigative bodies through legal procedures. However, the absence of a phone number for an ordinary user may complicate initial identification, which is why the system is being closely examined by the government.
Cybersecurity experts believe that if protective measures are not strengthened, there is a risk of fraud using fake nicknames. For example, someone could create a nickname like 'rbi_help' or 'bank_help' that many might mistake for a real account. Similarly, people could be tricked by creating a nickname similar to a friend's name. However, Meta states that it has developed a number of measures to prevent such abuse, and the nicknames of high-ranking officials will be pre-reserved to avoid misuse of their identity.
From a privacy perspective, this feature can be beneficial for many: when making online purchases, communicating with businesses, or contacting strangers, there will be no need to share a phone number, protecting it from outsiders. On the other hand, simplifying identity concealment can facilitate the creation of fake profiles for cybercriminals. Therefore, the main task for both the government and Meta is to find the right balance between privacy and security.
The government has issued a directive prohibiting the Meta-owned WhatsApp from implementing the proposed user name feature until consultations on the matter are concluded. Furthermore, the company has been required to provide a detailed explanation within three days, according to PTI, citing sources.
This decision was made against the backdrop of growing government concern regarding potential risks associated with the user name feature. These risks include the possibility of fraud, spoofing, and financial deception, as the feature will allow users to communicate without disclosing their phone numbers.
Government sources previously told TOI that authorities are closely monitoring WhatsApp's plans and examining the legal implications of this feature. Officials noted that the government may consider legal options, including issuing a notification to the company and studying mechanisms to block the feature if it is determined to pose significant risks.
The development followed heightened concerns expressed by cybersecurity experts, lawyers, and users themselves. They express anxiety that the introduction of user names could trigger a surge in online fraud and impersonation.
Specialists argue that the shift from phone number identification to platform-managed user names could weaken an important level of accountability. Some users have already voiced their concerns during the early stages of user name reservation. For instance, MobiKwik CEO Bipinpreet Singh told PTI that several variations of his name have already been reserved.
WhatsApp announced plans to introduce user names that will allow users to communicate without needing to share phone numbers. The company opened a preliminary user name reservation, with a wider launch planned for the end of the current year. WhatsApp claims that this feature is intended to enhance user privacy, especially in group chats and when contacting new people.
According to government sources, authorities are carefully reviewing the legal framework regulating the proposed feature and will likely require WhatsApp to provide a detailed explanation of its consequences and protective measures. An official representative also mentioned that law enforcement agencies may look into this matter.
The government is particularly concerned about the possibility that users could be misled by user names that closely resemble those of public figures, companies, or trusted individuals. Faisal Kawusa, chief analyst and founder of Techarc, noted that while phone numbers provide a certain degree of verification, user names are easier to manipulate. He stated: 'Even though celebrity names have been reserved, it is still easy to impersonate them, and we have seen how verified accounts work on X. Scammers can easily use some variations that ordinary people might not notice.'
Kawusa added that public trust in WhatsApp as a secure communication platform could decrease if adequate safeguards are not implemented. Other experts warned that the feature could weaken identity verification mechanisms. They advised WhatsApp to internally link user names to basic phone numbers and implement robust identity verification systems to prevent abuse.
Several founders of Indian startups and public figures have also expressed concerns on social media regarding the potential misuse of the feature, warning that similar user names could become a serious channel for fraud and impersonation if proper guarantees are not provided. Currently, the user name reservation system is in the testing phase, and WhatsApp has not yet announced global launch dates.
WhatsApp recently launched a new Username feature. This capability allows users to communicate with each other without revealing their mobile phone number. The company asserts that this significantly enhances user privacy.
However, the Indian government has shown caution regarding this feature. There is concern that if misused, this capability could lead to an increase in online fraud and the use of fake identities.
According to government sources, the central government is preparing to conduct a thorough review of the privacy and security aspects of WhatsApp's new username feature. The government needs to determine whether this feature will become a new tool for cybercriminals.
Should serious shortcomings or security issues be found, Meta, WhatsApp's parent company, may receive a notification.
The WhatsApp feature functions similarly to Telegram. Previously, a mobile phone number was required to start a conversation with a new person on WhatsApp. Now, a user can initiate a dialogue using only their username. The advantage of this approach is that the user's phone number will not be visible to the recipient, which, according to the company, improves privacy and eliminates the need to exchange numbers with strangers.
Furthermore, the government is concerned that if someone creates a username similar to another's, or contacts people while hiding their true identity, new methods of online deception may emerge. Numerous cases of fraud via fake profiles and usernames have already been recorded on the Telegram platform, prompting the government to exercise heightened vigilance regarding the new WhatsApp feature.
Some users on social media have also expressed concern about this feature. They believe that increased privacy is good, but if it becomes easier to hide one's identity, fraudsters might exploit this. Those usernames that imitate the names of companies, celebrities, or other people are particularly vulnerable, as they can easily mislead the public.
WhatsApp itself has implemented several security measures. The company stated that every username will be unique, and some well-known names will be pre-protected against copying. Moreover, WhatsApp does not maintain a public directory of usernames; a username can only be used when the person is already known to the user.
