InfoSecBulletin Cybersecurity for mankind
The Indian government issued a notice WhatsApp planned to roll out its new ‘username’ feature. They are worried about fake accounts and fraud. The company must discuss the issue before moving forward.
This week, WhatsApp said it will let users pick a username and hide their phone numbers when they first contact someone. Users can choose a unique name for their WhatsApp account. Others can use this name to message or call them without seeing their phone number.
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
Microsoft Reveals Project Zenith Windows PCs Able to Run 30B+ AI Models Locally
Google issues warning of new Chrome zero-day flaw exploited
CrowdStrike’s ‘FalconFlank’ zero-day allows SYSTEM privileges
727,000 data exposes: French hospital fined €500,000
153 Million Driver’s License Surfaced on Dark Web: FBI Starts Investigation
Google Unveils Gemini 3.8 Flash Cyber to Identify and Auto-Patch Security Flaws
SonicWall SMA1000 SSRF Hits 10, Exploiting CVE-2026-83548
Gartner
70% of SOCs Will Pilot AI Agents: Only 15% Will See Results
CVE-2026-62911
Nearly 22,000 Microsoft Exchange Servers are vulnerable to attack
Senior government officials said the Union Ministry of Home Affairs raised concerns with the Ministry of Electronics and IT. They said the government would undertake a risk assessment of the new feature, and see if it falls foul of the current legal architecture.
The government wants Meta to provide a full explanation of the username feature in three days. They also told the company not to launch the feature until discussions are finished, an official said.
“As we understand now, there is a possibility that bad actors may claim usernames, or close-enough variations related to prominent personalities, institutions, and organizations, and message other users while pretending to be someone they are not. For those who may not be technologically aware to make out the difference, it could be a huge challenge. We have already seen bad actors carry out impersonation-linked scams such as digital arrests through WhatsApp, and this feature could further help them,” a senior government official said, requesting anonymity.
In a statement, WhatsApp said it plans to roll out the features slowly later this year, but clarified it has built safeguards. “To protect against impersonation, we’ve held the highest-profile names — think public figures, government entities, celebrities, verified Meta accounts — so they can only ever be claimed by their legitimate owners and lookalike derivatives of known names are held as well.”
It said the users still require a phone number to use WhatsApp and that it has built multiple layers of defense against scams into usernames. “Other users need to know the exact username to message you, we will limit how many new people an account can contact, block repeated attempts to guess someone’s username key, and have systems to detect and remove activity showing common impersonation and abuse patterns,” the WhatsApp spokesperson said.
Further, it said, when the feature becomes available and someone sends a message for the first time via the username, WhatsApp will show if they are a new account, if they are in contact, if they are in common groups, and if they are based in a different country, so that one can choose whether or not to respond, the spokesperson said.
