'WhatsApp has to worry, not us': Govt warns messaging platform over fraud risks as username feature sparks privacy debate

Government officials have indicated that messaging platforms could be held accountable if new features create opportunities for fraud, amid growing debate over WhatsApp's recently announced username feature.

Speaking to The Times of India, officials said platforms must ensure that their products are not misused for impersonation, scams or misinformation.

“It is WhatsApp that has to worry, not us,” an official was quoted as saying.


Officials added that misuse through usernames, edited messages, fake groups or impersonation could invite regulatory action similar to the measures taken against Telegram during the NEET examination controversy.

“Platforms must ensure their architecture is not used to create mischief. If it is, the response will be calibrated but firm,” an official said.

Responding to the concerns, a WhatsApp spokesperson said the username feature is aimed at enhancing user privacy rather than weakening security. The company said it has built multiple safeguards to prevent abuse, including systems to detect impersonation, restrictions on how many new people an account can contact through usernames, protections against repeated username-guessing attempts, and reservation of high-profile usernames linked to public figures, government entities and celebrities.

However, government officials said platforms would ultimately be evaluated on outcomes rather than assurances. Officials from the Ministry of Electronics and Information Technology (MeitY) said the government is strengthening cyber defences through both technological and human resources, while noting that weak passwords, careless device usage and poor endpoint security continue to be major vulnerabilities.

“I will never say we are 100% cyber secure. This is something against which we have to be eternally vigilant,” a senior official said.

WhatsApp is expected to roll out the username feature later this year, which will allow users to communicate without sharing their phone numbers. While privacy advocates say the move could reduce exposure to risks such as contact scraping and SIM-swapping attacks, experts have raised concerns about identity fraud, impersonation and data-sharing implications.

Several industry leaders have voiced reservations about the feature.

Vijay Shekhar Sharma wrote on X, “Soon you will have verified username on WhatsApp, and then unverified similar-sounding usernames.”

Bipin Preet Singh also expressed concern, posting, “Not a good idea at all. Will lead to proliferation of fraud and impersonation. For example, I checked, most variations of my name already taken. Wonder what can it be used for.”

A key concern, however, is the possibility of impersonation and username squatting. Several users reported being able to reserve handles resembling those of prominent personalities and organisations, including names similar to Kunal Shah and Prime Minister Narendra Modi.

Cybersecurity experts warn that fraudsters could exploit lookalike usernames to impersonate banks, brands, government agencies, public figures and celebrities, potentially creating new avenues for scams and misinformation.