WhatsApp username rollout triggers Indian regulatory crackdown

The shift aims to bolster user privacy by decoupling accounts from personal phone numbers. However, early testing revealed that handles mimicking politicians, celebrities, and financial institutions—such as "rbi_verify" and "indiamodi"—remained available for reservation. This vulnerability prompted the Indian government to issue a formal notice, warning that the feature could facilitate "digital arrest" scams and unauthorized impersonation of public officials. Meta maintains that it proactively protects high-profile accounts, though the company has not disclosed the specific criteria used to determine which entities receive such protections.

Beyond government scrutiny, the update highlights the complex trade-offs inherent in Meta’s ecosystem. While cybersecurity experts like Rachel Tobac acknowledge that masking phone numbers can mitigate SIM-swap attacks, the ability to link handles across Facebook and Instagram raises concerns about platform consolidation. The Internet Freedom Foundation has criticized the ministry’s intervention as an opaque exercise of power, arguing that regulatory bodies should focus on criminal enforcement rather than dictating product design behind closed doors. As WhatsApp prepares for a broader launch later this year, the company faces the dual challenge of satisfying privacy advocates while navigating a tightening web of international digital oversight.