WhatsApp’s username feature appears to be getting mired in controversy. Reports suggest that the government may now send notices to Telegram and Signal, seeking detailed information about their username features.
WhatsApp’s username feature has come under the Indian government’s radar. After issuing a notice to WhatsApp regarding this feature, the Ministry of Electronics and Information Technology (MeitY) may now turn its attention to Telegram and Signal. According to sources, the IT Ministry could soon send notices to Telegram and Signal, seeking detailed information about their username features. The government seeks clarification regarding security, user identity, and the potential for misuse associated with this feature.
This development follows a notice issued by the government to Meta on Thursday, seeking clarification on the proposed username feature that the messaging app plans to launch. The government has asked Meta to halt the rollout of the feature and demanded a response within three days explaining how the platform would actually function, given the risks of impersonation and fraud associated with the feature.
Why is the government concerned about the username feature?
The Centre issued a notice to Meta regarding WhatsApp’s controversial username feature in India due to concerns about impersonation and fraud, warning the platform not to launch it until discussions on the matter are concluded. The government has requested a detailed report from Meta on the feature within three days.
In the notice, the government expressed concern that WhatsApp’s username feature could “significantly increase” incidents of online fraud, phishing, “digital arrest” scams, and impersonation attacks, as it would allow fraudsters to contact and message potential victims.
Explain why action should not be taken against a feature that could fuel cybercrime
The government has asked Meta to explain why action should not be taken under the IT Act and relevant rules regarding the new WhatsApp feature, which could potentially lead to an increase in cybercrimes. The Centre has also reminded Meta that, as a significant social media intermediary, WhatsApp is bound by due diligence obligations under the IT Act and rules. In a statement on Wednesday, WhatsApp defended the feature, asserting that safeguards are already in place to prevent incidents such as scams and impersonation, and to ensure user safety.
India is WhatsApp’s largest market, with over 500 million users.
“It is apprehended that this feature could lead to a significant rise in cases of online fraud, phishing, ‘digital arrest’ scams, and impersonation attacks, as it would provide malicious actors with the opportunity to contact and message potential victims.”
The notice sent to the Chief Compliance Officer of WhatsApp India operations states, “Furthermore, by allowing the use of usernames that resemble those of genuine individuals or entities, this feature could facilitate impersonation and identity spoofing. This includes impersonating individuals, government officials, financial institutions, and government agencies.”
The notice cites provisions of the Information Technology Act and the IT Rules, 2021. These include Section 79, regarding the due diligence obligations of intermediaries; Rules 3 and 4, concerning intermediary responsibilities and the legal identity of message originators; and Sections 66C and 66D, which deal with identity theft and impersonation using computer resources. It also cited the liability of intermediaries under Section 79(3)(a) of the IT Act for aiding, abetting, or promoting illegal activities.
It stated, “In this regard, you are directed to provide detailed information, along with relevant documents, concerning this new feature within three days of receipt of this notice.”
The notice further directed Meta not to launch the new WhatsApp feature until discussions on the matter were concluded to the “satisfaction of the government.”
Safety features in the WhatsApp username feature
A WhatsApp spokesperson stated that the username feature has not yet been launched and will be rolled out gradually later this year. The spokesperson said, “To prevent impersonation, we have reserved high-profile names—such as those of public figures, government bodies, celebrities, and verified Meta accounts—so that only their rightful owners can claim them. Additionally, names similar to well-known ones have also been reserved.”
Meta noted that users still require a phone number to use WhatsApp and that it has implemented various safeguards to protect against scams involving usernames. The company stated, “Other users must know the exact username to message you. We will limit the number of new people an account can contact, prevent repeated attempts to guess usernames, and maintain systems to detect and remove accounts involved in impersonation and abuse.”
Before a WhatsApp user responds, the app will indicate whether the sender is a new account, an existing contact, a member of a mutual group, or located in another country.
