Usernames on WhatsApp Spark Debate Between Privacy and Fraud Risks

SadaNews - WhatsApp has begun allowing the reservation of usernames in preparation for launching a feature that enables communication without displaying the phone number when starting a new conversation. The company presents the change as a step to enhance privacy, but it has raised concerns that usernames could become a new means for individuals and organizations to impersonate others.

The feature allows the user to choose a unique name that can be shared instead of their phone number. When initiating a conversation with a person or business for the first time, the number will not be visible to the other party if the username is activated. However, the phone number will still be required to register the account; this means that WhatsApp is not entirely abandoning the number system but adding a new identity layer on top of it.

Greater Privacy for the Number

This feature addresses the problem users face when communicating with people they do not know well or with businesses and service providers; in the current system, starting a conversation requires sharing the phone number, which is a personal identifier that could be used in spam calls and messages or linking the account to other services and data.

WhatsApp states that usernames will not be searchable within a public directory, and account suggestions will not appear. The sender will need to know the exact name before starting communication. The company has also added the "username key" option, which is an optional code that the other party must know in addition to the name to be able to send the first message.

Additionally, the company allows content creators, businesses, and organizations the option to claim a name they already use on Facebook or Instagram to maintain unified identity across Meta platforms.

Concerns Over Similar Names

Despite these controls, there are concerns about the ability of fraudsters to choose names similar to those of banks, companies, or public figures, with only slight changes in letters or the addition of a barely noticeable symbol.

A convincing name and a professional profile picture may appear more trustworthy than an unfamiliar phone number. A fraudster can publish the fake name through an advertisement, text message, or social media, and then ask the victim to continue the conversation via WhatsApp under the guise of technical support, investment, or customer service.

Researchers and security experts say that hiding the number enhances privacy but may also remove a signal that some users relied on to verify the identity of the sender, such as the country code or comparing the number with the number published on the official website of the entity. Usernames may also increase attempts to impersonate friends, executives, businesses, and public figures using names and images close to the original.

The Name Does Not Eliminate Existing Fraud

The fraud problem does not start with usernames. WhatsApp is already facing operations impersonating family members, banks, and employment and investment entities, often relying on social engineering rather than hacking the account itself. However, the username system may change the way trust is built within the app. Previously, the number represented the starting point, even if it was not sufficient proof of identity. In the future, the visible name and account picture might become the most prominent elements before the user, increasing the importance of verified badges, reporting mechanisms, and restrictions on new accounts.

WhatsApp indicates that it has implemented several layers to combat abuse, such as limiting the number of new people the account can communicate with and preventing repeated attempts to guess usernames. It also assures that the sender must know the name precisely and that the feature does not provide a public tool for searching accounts.

India Temporarily Halts the Rollout

Concerns have led to regulatory action in India, WhatsApp's largest market with over 500 million users. The government has asked the company to freeze the rollout of usernames in the country until consultations are concluded and additional justifications and guarantees are provided. Authorities stated that hiding numbers could increase phishing, identity theft, and fraud risks, making it more difficult to identify some users. WhatsApp clarified that the feature has not yet been fully launched and will be rolled out gradually over the year. The Indian decision does not mean a global halt to the feature. WhatsApp announced that it would gradually introduce usernames in different countries over the coming months, notifying users when they become available in each market.

A Trade-off Between Identity and Protection

Usernames provide individuals a way to communicate without revealing their numbers and offer businesses a name easier to remember than a series of numbers. However, they shift part of the identity verification process from the number to the displayed name and other authentication and verification methods. Therefore, the success of the feature will not depend solely on hiding phone numbers but on WhatsApp's ability to prevent misleading names, clarify verified accounts, curb spam messages, and help users verify entities before sharing money or sensitive data.