WhatsApp’s Shift to Usernames: A New Era of Privacy and Concerns
WhatsApp is set to introduce a significant change by shifting from using phone numbers to usernames for user identification. This move, expected to roll out later this year, aims to enhance user privacy and reduce the risks associated with sharing personal phone numbers. However, it has also sparked concerns about data security, impersonation, and deeper integration into Meta's advertising ecosystem.
The new feature will allow users to connect with others using usernames instead of their phone numbers. While experts believe this reduces the exposure of personal phone numbers and lowers risks such as SIM-swapping and contact scraping, they also warn that the move raises fresh questions about data sharing, platform integration, and identity fraud.
Expert Opinions and Concerns
Paytm founder Vijay Shekhar Sharma expressed his concerns on X, stating, “Soon you will have verified username on WhatsApp, and then unverified similar-sounding usernames.” Similarly, Mobikwik CEO Bipin Preet Singh criticized the move, saying, “Not a good idea at all. Will lead to proliferation of fraud and impersonation. For example, I checked, most variations of my name already taken. Wonder what can it be used for.”
Nikhil Narendran, partner at Trilegal and a tech policy thought leader, noted that the shift is a welcome privacy enhancement. “It allows users to communicate without routinely exposing their mobile numbers,” he said. However, he also highlighted that numbers have increasingly become a universal identifier linked across multiple services.
Risks of Impersonation and Fraud
One of the biggest concerns is impersonation or name-squatting. Several users have pointed out that names like @KunalShahReal, @ArnabRepublicTV, and @PmNarendraModi are already reserved. Mark Zuckerberg-led Meta recently named Kunal Shah as WhatsApp’s next CEO, raising further concerns about potential exploitation by scammers.
Amit Jaju, partner and India head at Ankura Consulting Group, warned that the danger is acute on an encrypted platform because users inherently trust the identity behind the handle. “A fake government or CEO account can move markets, solicit funds or spread misinformation,” he said. He emphasized the need for “active verification badges and rapid takedown protocols, not just passive reservation lists.”
Meta's Advertising Ecosystem
The move has reignited concerns that WhatsApp could become more tightly integrated into Meta's advertising ecosystem. Ankura’s Jaju noted that Meta’s ad model still runs on metadata. “WhatsApp already shares account registration data, device information, IP addresses, and business-interaction patterns with Facebook and Instagram. While messages remain end-to-end encrypted, the metadata is more than enough to power targeted ads.”
Legal Troubles in India
WhatsApp has previously faced legal troubles in India. In 2024, the Competition Commission of India (CCI) fined Meta Rs 213 crore and banned WhatsApp from sharing user data with other Meta apps for advertising for five years. The National Company Law Appellate Tribunal set aside the ban in November 2025, but upheld the fine. Separately, the Supreme Court of India has warned WhatsApp that continued sharing of Indian user data with Meta could trigger a complete ban, describing the practice as a “decent way of committing private data theft.”
Huzefa Tavawalla, partner at Cyril Amarchand Mangaldas, emphasized the need for WhatsApp to ensure user consent is obtained "in a free, informed and fair manner" before any cross-sharing of data across Meta platforms. “Data security by design becomes paramount from a product architecture perspective,” he said.
Meta's Response
Meta has denied concerns that usernames would automatically lead to greater data sharing across its family of apps. A Meta spokesperson stated, “When the feature launches later this year, usernames will not change anything about how accounts centre works.” They added that linking WhatsApp with Facebook or Instagram through Accounts Center would remain entirely optional.
On impersonation, the company mentioned that it has built "layered protections" into the system. Existing Facebook and Instagram usernames will be reserved for their owners during the reservation period, while usernames of public figures, celebrities, government entities and verified Meta accounts will remain protected. Meta also said it has reserved certain lookalike derivatives and will use automated systems to detect impersonation, limit abusive account behavior, revoke usernames and ban offending accounts.
No comments:
Post a Comment