WhatsApp Username – Privacy Concerns Raised Over Proposed India Rollout
WhatsApp Username – The proposed introduction of usernames on WhatsApp has triggered fresh debate over privacy protections, identity misuse and regulatory compliance in India. Cyber law expert Pawan Duggal has cautioned that the feature could create serious privacy risks unless it follows the country’s expanding data protection framework.
Duggal, who chairs the International Commission on Cyber Security Law, said the feature must be assessed carefully before it is made available to Indian users. He noted that platforms handling personal information at a large scale are expected to comply with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and the DPDP Rules, 2025.
Privacy Rights Could Be Affected
Speaking to ANI on Thursday, Duggal said a username may appear to be a simple communication tool, but it can also become a form of personal data. He said the introduction of such identifiers could affect how users are found, contacted or impersonated online.
He referred to the Supreme Court’s Justice K.S. Puttaswamy judgment, which recognised privacy as part of the fundamental right to life. According to Duggal, technology companies should not treat Indian users as testing grounds for new digital products without ensuring adequate safeguards.
He said any username system must be designed with strong privacy controls, clear consent mechanisms and protection against misuse. The feature, he added, should not weaken the safeguards already available to users through phone-number-based communication.
WhatsApp Faces Higher Compliance Standards
Duggal also pointed to WhatsApp’s status as a Significant Social Media Intermediary under Indian law because of its large user base. Such platforms are subject to stricter compliance duties and cannot rely on broad legal protection if they fail to meet required standards.
Under Section 79 of the Information Technology Act, intermediaries are required to exercise due diligence while operating in India. Duggal said this obligation has become more significant after updates to the Information Technology Rules, 2021, including changes notified on February 20, 2026.
He said the government has the authority to issue directions to significant social media platforms, and compliance with those directions becomes part of their legal duty. Any failure to follow government instructions could raise questions about whether the platform has fulfilled its statutory responsibilities.
Government Seeks Consultation Before Launch
The concerns were raised after the government reportedly asked Meta not to introduce the username feature until consultations are completed to its satisfaction. Authorities are examining whether the system could create additional opportunities for online fraud, phishing attempts and so-called digital arrest scams.
On Wednesday, the government issued a notice to Meta seeking further details about the proposed feature. It warned that usernames may increase the risk of impersonation and identity spoofing, especially if fraudsters use similar-looking account identifiers to mislead users.
Meta has been asked to submit a detailed response within three days, according to the notice. The company is expected to explain how it plans to prevent misuse and what safety measures would be put in place for users.
How WhatsApp Usernames Would Work
Meta describes a WhatsApp username as an optional and unique identifier linked to a user’s account. The username would begin with the “@” symbol, such as @Name123, and could allow others to message or call a person without seeing their phone number.
The company has said usernames would be different from profile display names. While multiple users can have the same display name, each username would need to be unique.
Supporters of the idea believe it could offer an additional layer of privacy by reducing the need to share phone numbers. However, regulators and cyber law experts are focused on whether the feature could also make it easier for scammers to create misleading identities.