Fraud Fears Over New WhatsApp Usernames

WhatsApp's plan to let people communicate without revealing their phone numbers has run into immediate regulatory opposition in India, turning what began as a new privacy feature into a much wider debate about online anonymity, fraud and how messaging platforms should balance privacy with security.

WhatsApp's plan to let people communicate without revealing their phone numbers has run into immediate regulatory opposition in India, turning what began as a new privacy feature into a much wider debate about online anonymity, fraud and how messaging platforms should balance privacy with security.

Give Your Username Instead Of Your Phone Number

WhatsApp has begun allowing users to reserve unique usernames ahead of a wider rollout planned for later this year. The idea is that, under a new system, WhatsApp users will be able to give someone a username instead of their mobile phone number, meaning they can communicate without revealing the number connected to their account.

WhatsApp explained the reason for the feature, saying: "Sometimes you just want to chat without handing over your digits."

That could be particularly useful, for example, when joining community groups, meeting someone at an event, communicating with a business or speaking to someone online for the first time.

WhatsApp says the reservation process is being opened gradually because the platform has more than three billion users and many people will inevitably want similar names. Once the option becomes available, users can reserve a name through the Account section of the app's settings.

How Will Usernames Work?

The feature is designed to provide greater privacy without making WhatsApp users publicly searchable. It's understood that there will be no directory of usernames and no suggestions showing people they might want to contact, and someone will need to know the exact username before they can start a conversation.

Users will also be able to create an optional username key, providing another layer of protection against unwanted contact.

Once the full feature launches, people who have enabled a username will be able to message a new person or business without their phone number being displayed. However, a mobile number will still be required to create a WhatsApp account in the first place.

For creators, businesses and organisations that want a consistent identity, WhatsApp has also created a way to claim an existing Instagram or Facebook username.

Why Has India Intervened?

However, it seems the rollout quickly attracted regulatory attention in India, WhatsApp's largest national market.

The Indian government has asked WhatsApp to pause the introduction of usernames in the country while consultations take place, amid concerns that the feature could make fraud, phishing and impersonation easier.

The main concern is that criminals could create usernames resembling those of banks, government departments, businesses or well-known individuals and then use them to contact potential victims without displaying a phone number.

This is particularly significant in India, where authorities have been trying to combat a growing problem with cyber fraud, including so-called digital arrest scams in which criminals impersonate police officers or government officials.

What Does WhatsApp Say About The Risks?

WhatsApp argues that it has already built several layers of protection into the system. Usernames will not be searchable in a public directory, and users must know the exact name to initiate contact. WhatsApp has also noted that its end-to-end encryption and spam detection systems remain in place regardless of whether users communicate by phone number or username.

What Does This Mean For Your Business?

For UK businesses, the WhatsApp username rollout is worth monitoring even if it seems distant from day-to-day operations. If your teams use WhatsApp for client communication, internal coordination or supplier contact, the shift away from phone numbers as identity anchors has practical implications.

It also reinforces a broader trend in which identity verification online is becoming harder, not easier. Businesses should ensure staff are alert to the risk of impersonation, particularly through messaging platforms, and that any sensitive communications are backed up by secondary verification steps.

The wider debate in India also serves as a reminder that major platform changes rarely arrive without compliance and regulatory dimensions, and that what begins as a product feature can quickly become a question of governance and risk.