WhatsApp username feature

 

Why India has asked WhatsApp to halt its username feature rollout ??

WhatsApp username feature rollout explained: 

impersonation and fraud

The government has asked Meta-owned WhatsApp to not roll out its upcoming username feature over concerns of impersonation and fraud. 

In a notice issued to the company Wednesday, the IT Ministry has given WhatsApp three days to furnish a detailed explanation on the username feature.

NEW RULES

Earlier this week, WhatsApp announced it would gradually allow users to 

• select a username
• hide their phone numbers when contacting another user for the first time. 

It is an optional unique identifier 

a user can choose for her WhatsApp account. It can also be used by others to 

• message 
• call people on WhatsApp, while keeping the phone number private.

contacting them if they do not  have their phone number

Though the company is billing the feature to make WhatsApp conversations more private as people would need to know the exact username of a person while contacting them if they do not already have their phone number

some are concerned 

that bad actors could misrepresent their identities by pretending to be someone they are not. 

Messaging services like Telegram and Signal already have their own versions of such a feature.

Why the government is concerned by WhatsApp’s username feature

CONCERNS OF GOV

In its notice, the government is understood to have told WhatsApp that the feature may materially increase the incidence of 

• online fraud, 
• phishing, 
• digital arrest scams 
• impersonation attacks, by enabling bad actors to solicit and message unsuspecting users. 

The government has also flagged that the feature may facilitate impersonation 

of 

• individuals, 
• public authorities, 
• financial institutions, 
• and government agencies, by permitting the adoption of usernames closely resembling those of genuine people and institutions.

risk assessment of the new feature

They said the government would undertake a risk assessment of the new feature, and see if it falls foul of the current legal architecture.

claim usernames, or close-enough variations related to prominent personalities

“As we understand right now, there is a possibility that bad actors may claim 

• usernames,
• close-enough variations related to prominent personalities, institutions, and organisations, and message other users while pretending to be someone they are not. 

For those who may not be technologically aware to make out the difference, it could be a huge challenge. 

We have already seen bad actors carry out impersonation-linked scams such as digital arrests through WhatsApp, and this feature could further help them,” a senior government official said, requesting anonymity.

should be stopped ?

 if we do not think there are enough guardrails to protect against impersonation, the government may also look into whether the feature’s rollout should be stopped altogether,” a second official said.

Some in the Indian tech community had also raised 

impersonation-related concerns on the username feature.

Paytm founder and CEO Vijay Shekhar Sharma -

 

warned that look-alike usernames could become a major vector for impersonation and scams if not properly protected. 

“Soon you will have verified username on WhatsApp, and then unverified similar-sounding usernames,” he said in a post on social media platform X.

Mobikwik’s CEO Bipin Preet Singh 

said on X, “Not a good idea at all. Will lead to proliferation of fraud and impersonation. 

For example, I checked, most variations of my name already taken. Wonder what can it be used for”.

WhatsApp’s defence

मशहूर हस्तियों के हाई-प्रोफाइल नामों को गुप्त रखा है

A WhatsApp spokesperson said that to protect against impersonation, the company has held high-profile names of public figures, government entities and celebrities.

“We’ve announced the option for people to reserve their preferred username on WhatsApp. 

The ability to use a username is not yet live and will roll out slowly later this year. 

To protect against impersonation, we’ve held the highest-profile names — think 

1. public figures, 
2. government entities, 
3. celebrities, 
4. verified Meta accounts — 
5. so they can only ever be claimed by their legitimate owners 
6. and lookalike derivatives of known names are held as well,” the spokesperson said.

“Users still require a phone number to use WhatsApp 

and we’ve built multiple layers of defense against scams into usernames: 

Other users need to know the exact username to message you, we will 

• limit how many new people an account can contact, 
• block repeated attempts to guess someone’s username key, 
• and have systems to detect and remove activity showing common impersonation and abuse patterns,” they added.

In an earlier blog post announcing the feature, WhatsApp said, “Usernames are our latest step to make WhatsApp even more private. 

SOME FEATURES FOR SAFETY

people will need to know your exact username 

to contact you for the first time”.

optional username key

the platform has also built an optional username key that others will need to know to message a user.

phone number is registered in a country different ?? 

When you message someone for the first time who doesn’t have you saved in their contacts, 

we might share whether your phone number is registered in a country different from theirs to help them know who they’re connecting with so they can stay safe and avoid unwanted contact,” WhatsApp said.

reserve  a username for themselves

The feature has not been yet rolled out, and WhatsApp is currently allowing users to “reserve” a username for themselves to avoid overlaps with other users. 

For 

• creators, 
• small businesses,
• organisations that may want to maintain a consistent presence online, WhatsApp will allow an option to claim their existing Instagram or Facebook username on WhatsApp.

action against users who may pretend to be someone

The company said it takes impersonation-related abuse “seriously,” and will take action against users who may pretend to be someone else.

“WhatsApp takes impersonation and abuse seriously. 

If you think someone is pretending to be you or someone else on WhatsApp in order to 

• scam other WhatsApp users, 
• or attempting to buy, 
• sell, or 
• trade WhatsApp usernames, 

you should report the user and any suspicious messages so we can review and take action to protect our users,” 

WhatsApp said in an update on its help centre, adding that it will remove usernames or ban accounts altogether that it believes violate its terms of service.

After review, the company may remove usernames or ban accounts that it believes are in violation of its terms of service.

SOURCE IE