India's IT Secretary has flagged serious cybersecurity risks linked to messaging platforms' username features, prompting official notices to WhatsApp, Telegram, and Signal and a temporary halt to WhatsApp’s rollout of this functionality.
- Username feature lets users communicate without sharing phone numbers.
- Government warns of increased impersonation and cybercrime potential.
- WhatsApp’s rollout paused pending regulatory consultations.
What happened
India's Ministry of Electronics and Information Technology has issued formal notices to WhatsApp, Telegram, and Signal over their use of a username feature, which allows users to connect without revealing their phone numbers. This action comes shortly after WhatsApp announced plans to introduce usernames for users in India.
The government has directed WhatsApp to pause the feature’s implementation until a full review and consultations are completed to the government's satisfaction. Telegram and Signal, which have already made usernames available, have also been asked to provide detailed explanations regarding the feature.
Why it matters
The IT Secretary, S Krishnan, emphasized the serious threat the username feature poses as it opens new avenues for impersonation and expands opportunities for cybercriminal activities. The government’s concerns reflect broader worries about digital safety and identity fraud in India’s vast messaging user base.
Given WhatsApp’s 500 million users in India, any vulnerabilities linked to usernames could impact a large population. This feature adds complexity to law enforcement efforts and regulatory oversight, particularly as the Supreme Court is already examining issues linked to digital arrests and cybercrime.
What to watch next
Stakeholders will be closely monitoring how WhatsApp and other platforms respond to the government’s demands and whether they can enhance security controls around the username feature to mitigate fraud risks. The outcome could shape the future of user identity management across Indian messaging platforms.
Regulatory responses and potential legal frameworks might evolve as the government balances innovation with cybersecurity. There is also an ongoing focus on how this issue interacts with broader digital governance and privacy norms within India’s fast-growing technology ecosystem.