India has asked Meta-owned WhatsApp to suspend the rollout of its proposed usernames feature until consultations with government authorities are completed, reflecting growing regulatory concerns over cybersecurity, online fraud and user safety in one of the messaging platform’s largest markets.
The directive was communicated through an official notice issued to Meta’s India operations, requiring the company to postpone the launch of the feature and provide a detailed explanation of how it will operate, including the safeguards designed to prevent misuse. Authorities have reportedly given the company three days to respond as officials assess the potential impact of the feature on digital security and consumer protection.
The usernames feature represents one of WhatsApp’s most significant product updates in recent years. Instead of sharing mobile phone numbers to initiate conversations, users would be able to create unique usernames that can be used to connect with others while keeping their phone numbers private. The feature is intended to improve privacy by allowing people to communicate without exposing their personal contact information, particularly when interacting with businesses, creators or individuals they do not know personally.
However, Indian authorities have raised concerns that the new system could unintentionally create opportunities for cybercriminals. Officials fear that fraudsters may exploit usernames to impersonate individuals, financial institutions, government agencies or well-known organisations, potentially making phishing attacks, identity theft and financial scams more difficult to detect. The government has therefore instructed WhatsApp to delay implementation until the feature’s security implications have been thoroughly reviewed.
The move comes against the backdrop of rising cybercrime across India, where online financial fraud and impersonation scams have become increasingly sophisticated. Investigators have repeatedly highlighted messaging platforms as common channels through which criminals contact potential victims. Regulators believe any new feature that changes how users identify one another must include strong verification and abuse prevention mechanisms before it can be introduced nationwide.
WhatsApp has defended the proposed feature, stressing that it has been designed with multiple layers of protection. According to the company, users will still be required to register with a valid phone number even if they choose to create a username. There will be no public directory of usernames, meaning other users must already know a person’s exact username before initiating contact. WhatsApp also plans to reserve usernames associated with public figures, government institutions and verified Meta accounts to reduce the risk of impersonation.

The company says additional security measures will include systems that detect suspicious behaviour, restrictions on the number of new users an account can contact, and mechanisms to identify repeated attempts to guess usernames. First-time messages will also display contextual information such as whether the sender is a new account, shares mutual groups or is contacting the recipient from another country allowing users to make more informed decisions before responding.
India is one of WhatsApp’s most important global markets, with more than 500 million users relying on the platform for personal communication, business transactions and customer engagement. Because of the platform’s scale, regulatory decisions taken in India often carry broader significance for how technology companies approach product launches in other jurisdictions.
The latest intervention also highlights India’s increasingly proactive approach to digital governance. In recent years, the government has introduced a series of measures aimed at strengthening online safety, improving accountability for digital platforms and enhancing protections against cybercrime. Technology companies operating in the country have faced growing scrutiny over issues ranging from user privacy and data security to content moderation and online fraud.
Industry analysts believe the consultations between Indian regulators and Meta are likely to focus on balancing privacy with accountability. While usernames could significantly improve user privacy by reducing the need to share phone numbers, authorities want assurance that the feature will not undermine efforts to identify malicious actors or investigate online crimes.
For WhatsApp, the delay is unlikely to affect its global rollout plans, but it underscores the importance of regulatory engagement when introducing major platform changes. As governments worldwide develop new rules for digital platforms, companies are increasingly expected to demonstrate that privacy-enhancing technologies are accompanied by robust safeguards against abuse.
The outcome of India’s review could shape how WhatsApp ultimately introduces the usernames feature in one of its largest user bases. More broadly, it reflects the evolving relationship between governments and global technology firms as regulators seek to encourage innovation while ensuring that new digital tools do not create additional risks for users or weaken existing protections against cybercrime.