The Indian government has intensified its oversight of messaging platforms, extending its scrutiny to Telegram and Signal after raising concerns about WhatsApp’s planned username feature. The Ministry of Electronics and Information Technology (MeitY) has sent formal notices to both Telegram and Signal, requesting detailed information on how their username features operate and what safeguards are in place to prevent fraud, impersonation, and misuse.
Why the Government is Concerned
Username features allow users to communicate without revealing their mobile phone numbers. While this enhances privacy, it also reduces traceability and makes it easier for fraudsters to create fake identities. The government’s primary worry is impersonation of public figures, government officials, banks, and trusted institutions. Officials are also alarmed by the potential rise in phishing, online fraud, and so-called “digital arrest” scams, which have become a growing cybercrime threat in India.
Earlier, MeitY had asked Meta to delay the launch of WhatsApp’s username feature in India, citing security concerns. The ministry gave WhatsApp a three-day deadline to provide information on its security measures and to refrain from introducing the feature until consultations are complete. India is WhatsApp’s largest market, with over 500 million users, making any new feature a major regulatory concern.
Major Security Risks
- Reduced traceability: Anonymity makes it harder for law enforcement to track cybercriminals who hide their phone numbers.
- Increased impersonation risks: Usernames can mimic those of government agencies, celebrities, or financial institutions.
- Facilitation of digital arrest scams: Fraudsters can contact users without revealing phone numbers.
- Phishing attacks: Fake profiles can send harmful links or fraudulent messages at scale.
- Undermined SIM identity association: Reduced traceability weakens the link between SIM identity and messaging activity.
WhatsApp’s Safeguards
WhatsApp has stated that usernames will be used for public accounts, government bodies, celebrities, and verified Meta accounts. It has also proposed an optional “Username Key” feature, requiring a four-digit number along with the username before unknown contacts can reach the user.
The government will review responses from WhatsApp, Telegram, and Signal before taking any action under Indian IT laws.