Ethical Hacking News
India has given WhatsApp three days to defend its new username rollout amid security fears, citing concerns over impersonation and phishing attacks. The country's Ministry of Electronics and Information Technology has expressed concerns over the potential risks associated with allowing users to reserve usernames on the platform.
India's Ministry of Electronics and Information Technology (MeitY) has asked Meta-owned WhatsApp three days to respond to its concerns over the platform's new username feature. The government is worried that usernames could be used for impersonation and phishing attacks, potentially leading to increased cybercrimes. WhatsApp claims to have implemented measures to keep users safe with the new username feature, but MeitY remains unconvinced about its safety. India is not alone in its concerns over WhatsApp's new feature, as many cybercriminals use the platform to commit fraud and impersonate public figures or family members.
India, the world's largest market for WhatsApp, has taken a firm stance on the messaging platform's latest feature – usernames – citing security concerns that could lead to increased cyberattacks. The country's Ministry of Electronics and Information Technology (MeitY) has given Meta-owned WhatsApp three days to respond to its July 1 letter, requesting an explanation for the new username rollout amid fears of impersonation and phishing attacks.
The MeitY has expressed concerns over the potential risks associated with allowing users to reserve usernames that could be used instead of phone numbers on the platform. The government believes that this feature may provide opportunities for attackers to pose as public authorities, financial institutions, or government departments, thereby increasing the risk of cybercrimes such as phishing and digital arrest scams.
According to MeitY, India's Information Technology Act 2000 and Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 serve as the legal basis for its concerns. However, the Internet Freedom Foundation has argued that the department lacks a clear legal basis for halting WhatsApp's usernames rollout, calling it an example of "attempted regulatory overreach."
WhatsApp claims to have implemented numerous measures designed to keep users safe with the new username feature. The platform allows users to reserve their preferred username on WhatsApp and will display information about any new account that sends them a message via their username. Additionally, users will not be able to register lookalike derivatives of existing usernames.
In an effort to restrict fraudulent misuse, WhatsApp has already reserved high-profile usernames for legitimate organizations and individuals. Users will also need to know the exact username to message someone on WhatsApp, with systems in place to detect and remove activity showing common impersonation and abuse patterns.
Despite these measures, MeitY remains concerned about the potential risks associated with the new feature. The department has asked Meta to explain how it plans to stop impersonators and to halt the rollout of usernames until approval is given by the government.
The ban on Telegram in India in June was also cited as an example of the government's growing efforts to address cybersecurity concerns in the country. The platform allowed users to set public usernames, which is frequented by scammers, including those posing as public figures or family members.
India is not alone in its concerns over WhatsApp's new feature. Many cybercriminals use the platform to commit fraud, impersonating public figures, authorities, and family members to carry out financially motivated attacks. This highlights the need for regulators to stay vigilant and take proactive measures to address emerging threats.
The situation serves as a reminder of the ongoing cat-and-mouse game between regulators and tech companies. While WhatsApp claims to have taken steps to keep users safe with its new feature, MeitY remains unconvinced, citing concerns over the potential risks associated with usernames on the platform.
As regulators continue to grapple with the complexities of cybersecurity in the digital age, it is essential to recognize the importance of collaboration between governments and tech companies. By working together, they can develop effective solutions that balance user safety with business needs.
The rollout of new features like WhatsApp's username feature highlights the need for ongoing dialogue between regulators and tech companies. The consequences of not doing so are evident in the growing concerns over cybersecurity, which can have far-reaching implications for individuals and society as a whole.
In conclusion, India's regulatory reckoning serves as a reminder of the importance of addressing emerging cybersecurity threats head-on. By taking proactive measures to address these risks, regulators and tech companies can work together to create safer online environments for users around the world.
Related Information:
https://www.ethicalhackingnews.com/articles/Indias-Regulatory-Reckoning-WhatsApps-Username-Rollout-Under-Scrutiny-Amidst-Growing-Concerns-Over-Cybersecurity-ehn.shtml
https://www.theregister.com/security/2026/07/02/india-writes-to-whatsapp-over-usernames-security-concerns/5265744
Published: Thu Jul 2 07:18:43 2026 by llama3.2 3B Q4_K_M
