Why has India halted WhatsApp’s username feature before launch?
India has halted WhatsApp’s planned username feature, citing concerns about cybercrime, impersonation, and law enforcement challenges. As Meta races to address security concerns, here’s why MeitY has paused the rollout, what the feature does, and how it could influence privacy and online safety in India
Following a major development on Wednesday (July 1, 2026), the Indian government has stepped in and placed a hard brake on WhatsApp’s rollout of its new username feature in the country.
The Ministry of Electronics and Information Technology (MeitY) issued an official notice to Meta, directing the company to pause the feature entirely and demanding a detailed explanation of its security implications within three days.
What is the WhatsApp username feature?
Essentially, WhatsApp is attempting to transition toward a model already used by platforms like Telegram and Signal.
Instead of being forced to hand out your personal phone number to a business, a casual acquaintance, or a public group coordinator, you can create a unique, optional identifier like @Name123.
More from ExplainersYour phone number remains hidden from anyone who doesn't already have it saved in their contacts. If a stranger or a business wants to contact you, they use your username.
But, a phone number is still mandatory to register and back your WhatsApp account behind the scenes, the username simply acts as a public mask.
Why has the Indian govt paused it?
While privacy advocates globally view this as a win for data protection, the Indian government and law enforcement agencies are looking at it through the completely different lens of India's ongoing cybercrime epidemic.
With over 500 million users, India is WhatsApp's largest market. Government officials argue that a feature built for global privacy could cause catastrophic security issues if deployed in India without massive localisation.
Their core concerns include:
Proliferation of "digital arrest" and phishing scams
India is currently battling a severe wave of sophisticated "digital arrest" scams (where fraudsters pretend to be police, CBI, or customs officials over video calls to extort money) and phishing.
MeitY's notice explicitly warns that allowing users to hide their numbers will provide bad actors with a perfect cloak of anonymity, making it significantly easier to target and solicit unsuspecting victims.
Impersonation of trusted authorities and public figures
If usernames become the default way to identify people, lookalike handles pose a massive threat. Indian entrepreneurs and tech figures — such as Paytm founder Vijay Shekhar Sharma and content creator Ankur Warikoo — have publicly flagged this on X.
In a country with varying levels of digital literacy, a user could easily fall victim to a scammer using a slight variation of a popular handle (eg, confusing @ankur_warikoo with @ankurwarikooo or @ankur_warikoo_official) to solicit money or data.
Traceability nightmare for police
A senior official from the Department of Telecommunications (DoT) highlighted a severe structural loophole regarding law enforcement.
Currently, a phone number provides an immediate geographical starting point; a +91 code confirms a domestic origin, allowing police to coordinate quickly with local telecom companies.
But a fraudster based anywhere globally can create a WhatsApp account using a cheap, foreign virtual number (like a +1 United States number or a +92 Pakistan number), set up an official-looking Indian government logo as their profile picture, and adopt a local-sounding username.
Because the number is hidden, a victim has no immediate visual cue that the call or message originates from overseas.
Cybercrime officials also noted that Meta already takes anywhere from 5 days to an indefinite period to respond to data requests from Indian law enforcement, meaning that losing the immediate visibility of a phone number could completely paralyse fast-moving investigations.
What is Meta's defence for WhatsApp?
Anticipating friction, Meta has stated that it has built a multi-layered defence strategy into the username architecture to prevent widespread abuse:
- No public directory: You cannot broadly search for random people. A user must know your exact, literal username to start a chat with you for the first time.
- High-profile reservation: Meta has preemptively locked down the usernames of public figures, government entities, celebrities, and verified accounts, alongside common lookalike derivatives, ensuring they cannot be claimed by bad actors.
- Contextual banners: When a stranger messages you via your username for the first time, WhatsApp will trigger an explicit safety prompt showing context clues: Is this a newly created account? Are they messaging from a different country? Do you share mutual groups?
- Username keys: Users can enable an optional PIN or "key." If a stranger tries to message your username for the first time, they must enter this key, acting as a barrier against automated spam and bulk targeting.
As of July 2, the feature is effectively frozen in India. The feature will remain blocked until Meta can conclusively demonstrate to MeitY how it will fulfil traceability requirements under Indian law and protect citizens from lookalike fraud.
Given the scale of the Indian market, Meta may be forced to introduce unique, India-specific validation guardrails before the feature ever goes live in the country.
Also Watch:
With inputs from agencies
Military drones & police check-ups: How Sri Lanka is fighting against worst dengue outbreak in a decade
How Facebook job ad lured 2 Karnataka men into Myanmar cyber scam camp
Why is India seeing 95% cloud cover despite a Super El Niño?
What is CJP’s fourth demand to the government as protests in Delhi intensify?
The new geography of war: Why the Houthis can no longer be ignored