The Indian government is poised to thoroughly examine WhatsApp’s forthcoming username feature, driven by apprehensions that it could be exploited for online fraud. Sources familiar with the matter told India Today that officials will conduct a detailed review of the feature’s privacy and security implications. Should any discrepancies or vulnerabilities be uncovered during this assessment, Meta, the parent company of WhatsApp, could face an official notice from the government.

This proactive stance by the Centre emerges amidst a notable increase in online scams across India, where fraudsters frequently leverage messaging platforms to target unsuspecting individuals. The government’s review aims to determine whether the new username-based system might inadvertently create fresh avenues for scammers or if it effectively enhances user privacy without compromising essential security measures. Officials are particularly keen to ascertain if sufficient safeguards are embedded within the feature to deter cybercriminals.

WhatsApp has announced its intention to gradually roll out this significant privacy change globally over the coming months. The feature will enable users to initiate conversations by sharing a unique username, thereby eliminating the need to disclose their mobile numbers. This design choice, according to WhatsApp, empowers users with greater control over their personal information, especially in group chats or when interacting with new contacts.

Alice Newton-Rex, WhatsApp’s Head of Product, explained to the BBC that the feature is intended to "give users control over how they choose to show up" on the platform. Users will have the option to reserve a username through the app, and the creation of one will remain entirely optional. The company also states that usernames can be modified or removed at any time, and existing options like blocking or reporting suspicious accounts will continue to be available.

However, the government’s scrutiny highlights a critical tension between user privacy enhancements and the imperative of combating digital fraud. While WhatsApp emphasizes the privacy benefits of not sharing phone numbers, authorities are concerned about the potential for impersonation and other fraudulent activities that a username system might facilitate. The review will specifically assess how the feature impacts the identification of malicious actors.

Usernames can be up to 35 characters long, and certain high-profile names, including those of public figures, will be protected from being claimed by others. WhatsApp plans to allow creators, businesses, and organizations to claim usernames consistent with their existing handles on Instagram or Facebook. Other users seeking matching usernames across Meta’s platforms will need to link their accounts via Meta’s Accounts Centre.

Despite WhatsApp’s assurances that it has "multiple layers of defense in place" to detect and prevent abuse, some experts and users have voiced concerns about the potential for scammers to exploit usernames for impersonation. In response to these worries, WhatsApp intends to offer optional username keys – short numeric codes that users can share alongside their username – to make it more difficult for fraudsters to mimic legitimate accounts.

WhatsApp maintains that all private messages remain protected by end-to-end encryption and are not utilized for advertising purposes. Nevertheless, the platform does collect certain account information and metadata, such as general location and basic profile details, for other operational uses. The government’s examination will proceed as the feature rolls out, with the outcome potentially dictating further actions or demands for corrective measures from Meta.

This development underscores the ongoing challenges faced by tech companies in balancing user privacy with regulatory demands for safety and security, particularly in markets like India experiencing rapid digital adoption and a corresponding rise in cybercrime. The government’s assessment will be a crucial step in shaping how such features are implemented and regulated in the future.