WhatsApp is set to roll out one of its most significant privacy updates in recent years by allowing users to connect through usernames instead of sharing their phone numbers. While the feature is intended to offer greater privacy and control, it has also drawn the attention of the Indian government. Sources said the Centre plans to closely examine the new system, particularly from the standpoint of cybersecurity, online fraud and user safety. If any concerns emerge during the review, the government may issue a notice to Meta, WhatsApp's parent company.
The development comes amid a surge in digital fraud cases across India, where scammers increasingly use messaging platforms to target unsuspecting users. Officials are expected to assess whether the username-based system could make it more difficult to identify fraudsters or whether it strikes an appropriate balance between user privacy and platform security.
According to sources, the Centre will evaluate WhatsApp's upcoming 'User ID' feature before or alongside its phased rollout. The review will primarily focus on the privacy and security implications of the update, with particular attention to whether adequate safeguards are in place to prevent misuse by cybercriminals. If shortcomings are identified, Meta could be asked to explain the feature or implement corrective measures.
The government's scrutiny follows WhatsApp's announcement that it will gradually introduce usernames for users worldwide over the coming months. The feature will enable people to initiate conversations by sharing a unique username rather than revealing their mobile number. Users will be able to create and reserve a username within the app, although adopting one will remain entirely optional.
WhatsApp has also said users will be free to modify or remove their usernames whenever they choose. Once the feature is fully available, users will be able to communicate using usernames alone while retaining existing safety tools such as blocking and reporting suspicious accounts.
Also read: New deadlines in place for income tax returns
The company says the primary objective of usernames is to strengthen user privacy, especially for those who do not wish to disclose their phone numbers in group chats or during conversations with new contacts. Explaining the rationale behind the feature, WhatsApp Head of Product Alice Newton-Rex said the aim is to "give users control over how they choose to show up" on the platform.
Usernames can be up to 35 characters long, and certain high-profile names, including those of prominent public figures and celebrities, will be protected from being claimed by others. Users will be able to reserve their preferred username through the account or profile settings in the mobile app once the feature becomes available. However, the reservation process will initially be limited to the mobile application and will not be supported on WhatsApp Web or the desktop app.
For businesses, creators and organisations, WhatsApp will allow the use of the same username already associated with their Instagram or Facebook accounts to maintain consistency across Meta's platforms. Other users seeking matching usernames across Meta services will be required to link their accounts through Meta's Accounts Centre.
The feature will be introduced gradually, meaning availability will vary by account. WhatsApp has advised users to keep the app updated to the latest version and wait until the feature is enabled for them.
While WhatsApp maintains that usernames will enhance privacy by reducing the need to share phone numbers, some cybersecurity experts and users have expressed concerns that fraudsters could exploit the feature by impersonating legitimate individuals. In response, the company says it has implemented "multiple layers of defense" to identify and prevent abuse. It also plans to introduce optional username keys—short numerical codes that users can share alongside their username to make impersonation more difficult.
WhatsApp has reiterated that personal messages will continue to be protected by end-to-end encryption and will not be used for advertising purposes. However, like other digital platforms, it collects certain account information and metadata, including general location data and basic profile details, to support various platform functions and services.