In a discussion with CNBC-TV18, Nikhil Pahwa, the Founder of MediaNama, and Mishi Choudhary, a Tech Lawyer and the Founder of SFLC, stated that the feature offers significant privacy advantages by enabling users to communicate without sharing their mobile numbers. They contended that the government’s fears about impersonation and fraud are not exclusive to username use and should not lead to regulatory suppression.
These remarks followed the Indian government’s notice to WhatsApp, which instructed the company to provide reasons against potential action under the IT Act regarding the feature, believed to heighten cybercrime risks. The government has also requested that the company delay the rollout until further discussions are concluded.
Usernames enhance privacy, experts claim
Pahwa mentioned that the feature tackles a long-standing privacy issue, particularly for individuals whose phone numbers are visible in group chats.
“This is a vital privacy feature, especially for women who are often in groups where their mobile numbers are exposed,” he explained.
He noted that analogous username systems are already in place on platforms like Signal and Telegram, although he criticized Telegram’s approach for allowing user discovery without sufficient consent.
Pahwa emphasized that WhatsApp has introduced additional safeguards by necessitating a username key or PIN for new users to initiate contact, thereby enhancing privacy protections.
Choudhary aligned with this sentiment, describing the feature as “a net privacy gain” because it diminishes dependence on phone numbers, which serve as key identifiers for banking, government services, and financial transactions.
“The username in itself represents a net privacy advantage as it lessens the need to share phone numbers that expose us to risks like SIM swapping, phishing, and account takeovers,” she noted.
Fraud concerns are not new
While acknowledging the risks of impersonation and scams, both experts argued that usernames do not introduce fundamentally new issues.
Pahwa stated that scammers have historically impersonated business figures by leveraging publicly available profile images and fake numbers to solicit funds from employees.
“I don’t believe this is a new issue or creates new problems, based on my understanding,” he remarked.
He suggested that WhatsApp could enhance protections against similar usernames but noted that differentiating users with common names would remain a practical challenge.
Choudhary added that scams are prevalent across digital platforms, whether involving phone numbers or usernames.
“I do acknowledge that there are concerns. Scams, whether financial or otherwise, are widespread in India, remaining irrespective of the platforms we utilize,” she stated.
Traceability worries misplaced
Addressing concerns from law enforcement regarding traceability, Pahwa clarified that every WhatsApp account still requires a mobile number for registration.
“The traceability issue raised by the government stems from a misunderstanding, as you cannot obtain a WhatsApp username without registering with a mobile number. Traceability is indeed present, though it’s not publicly accessible,” he said.
He additionally highlighted that WhatsApp already manages verified business accounts and suggested the company should better educate users to trust only verified accounts while improving anti-spam efforts.
Government should not dictate product features
Both experts criticized the government’s stance, asserting that mandating companies to seek approval for new features would hinder business operations.
Choudhary argued there is no legal justification for requiring tech firms to secure government authorization before launching product updates.
“When the government asserts that every company must obtain permission for each feature, it undermines the notion of ease of doing business,” she emphasized.
She mentioned that while WhatsApp should enhance transparency regarding safeguards, verification processes, and data-sharing approaches, the government should not control platform design choices.
“This line of reasoning—’Get permission from the government’—initiates a slippery slope wherein the executive decides on design features businesses can or cannot introduce,” Choudhary warned.
Advocating for stronger safeguards instead of a halt
Rather than pausing the rollout, the experts suggested WhatsApp concentrate on fortifying spam controls, verification measures, and user education.
Pahwa argued that users should have greater control over who can contact them using usernames, akin to existing privacy settings for phone numbers. He also called for enhancements to prevent unsolicited messages and abuse from business accounts.
Choudhary pointed out that users always have alternative options if platforms fail to adequately protect them, citing Signal as an example of a service with stronger privacy protections.
What prompted the government’s notice?
The notice from the Centre posits that WhatsApp’s username feature could enable online fraud, phishing, identity theft, and digital scams by allowing users to connect without disclosing their phone numbers.
The government has given WhatsApp three days to respond and requested the feature rollout to be paused pending the outcome of discussions.
WhatsApp stated that the feature is not yet active and will be rolled out later this year. Additionally, the company has reserved usernames of public figures and government entities to prevent impersonation, asserting that these can be claimed only by their legitimate owners.
Moreover, WhatsApp indicated plans to implement safeguards, including limits on new user contacts, protections against repeated attempts to guess username keys, and systems for detecting and addressing impersonation and abuse.
Under the proposed system, users will need the exact username of another individual to initiate communication, with no public directory or search recommendations available.
