India Halts WhatsApp Usernames Rollout Due to Fraud Concerns

Key Takeaways

• The Indian government has intervened to halt WhatsApp’s global rollout of its new “usernames” feature within India.
• The Ministry of Electronics and Information Technology (MeitY) cites significant concerns regarding potential increases in online fraud, phishing, and impersonation scams.
• WhatsApp (Meta) has been directed to provide a detailed explanation of its safeguards within three days and must not activate the feature in India until government concerns are fully addressed.
• The primary concern is that usernames would obscure phone numbers, making it easier for malicious actors to operate anonymously and harder to trace fraudulent activities.

India Halts WhatsApp Usernames Rollout Amidst Fraud Fears

The Indian government has issued a stern directive to WhatsApp LLC, a subsidiary of Meta, demanding a justification for its recently announced “usernames” feature and explicitly forbidding its rollout within India until regulatory concerns are adequately resolved. This move highlights a proactive stance by Indian authorities to mitigate potential cybersecurity risks associated with new platform functionalities.

Regulatory Scrutiny Intensifies

A formal communication, dispatched to WhatsApp’s Chief Compliance Officer for India Operations, directly references Meta’s public announcement on June 29, 2026. This announcement detailed a phased global introduction of usernames, designed to allow users to secure unique handles and eventually communicate without exposing their phone numbers.

The Ministry of Electronics and Information Technology (MeitY) has mandated that WhatsApp furnish a comprehensive explanation, supported by relevant documentation, within three days of receiving the notice. Crucially, the directive strictly prohibits the activation of the username feature in India until all government concerns are fully appeased.

Concerns Over Anonymity and Fraud

Officials from the Ministry have voiced significant apprehension, pointing out that the proposed feature would render a recipient’s phone number invisible to new contacts, with an optional “username key” serving as the sole additional layer of identification. This anonymity, they warn, could dramatically escalate the prevalence of online fraud, sophisticated phishing campaigns, “digital arrest” scams, and various impersonation attacks.

The core worry is that malicious actors could leverage this feature to solicit and message victims while effectively masking their true identities, making it exceedingly difficult for law enforcement to trace their activities. A Department of Telecommunications official further elaborated on this danger, noting that an assailant could register using a foreign phone number, adopt the profile picture of a public official, and create a similar username. This setup would enable them to initiate fraudulent calls that would be nearly impossible to trace, a stark contrast to the previous system where numbers often began with the easily identifiable +91 country code for India.

MeitY had previously indicated its close examination of the feature, signaling that a notice would be issued if the rollout were found to pose digital security risks. This current action underscores those initial concerns.

Potential Legal Ramifications

WhatsApp’s failure to respond within the stipulated three-day period with adequate documentary evidence explaining its proposed safeguards could lead to further action. The Ministry has reserved the right to pursue legal measures under the IT Act, IT Rules, and any other pertinent laws.

Consequently, the phased activation of usernames, which is already underway in several international markets, remains suspended for Indian users until the consultation process concludes to the Indian government’s full satisfaction.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.