New Delhi:
The “username” feature that Meta was planning to roll out soon, has been put on hold. In a notice to Meta, the government has asked that it furnish a detailed explanation on the “usernames” feature within three days. Until consultation on the matter is over, the feature cannot be rolled out, the government has directed. Sources said officials are examining whether the feature could be exploited by cybercriminals to impersonate government departments, public officials, banks and other trusted institutions. Authorities are also assessing its impact on tracing individuals involved in cybercrime and financial fraud.
Sources said the government will take a view on the matter after examining Meta’s response and holding further consultations on the security implications of the proposed feature.
Government’s Concern
The government, though, had concern. Government sources indicated that the feature is being reviewed from the perspective of user safety, accountability and compliance with India’s digital regulations. Meta has been asked to explain the safeguards built into the system and how it plans to prevent impersonation and misuse.
In its notice today, the government said, “It is felt that the feature may materially increase the incidence of online fraud, phishing, digital arrest scams and impersonation attacks, by enabling bad actors to solicit and message victims”.
“Furthermore, this feature may facilitate impersonation and identity spoofing, including impersonation of individuals, public authorities, financial institutions, and government agencies, by permitting the adoption of usenames closely resembling those of genuine persons or institutions,” the notice added.
What WhatsAPP said
In a statement, Meta said the new feature is “designed to protect the privacy of your phone number”.
WhatsApp said that it has put in place multiple layers of defence to address the concerns. A WhatsApp spokesperson told NDT Profit that the really high-profile names — public figures, government entities and celebrities — have been withheld so they can be claimed by legitimate owners. Lookalike derivatives of known names have been withheld as well.
Among the multiple layers of defence are systems that would show common impersonation, abuse patterns and block them. The system will also limit how many new people an account can contact and block attempts to guess someone’s username, the spokesperson said.
Users need to know the exact username to message anyone. Also, when a user is pinged via username, information on whether they are a new account, a contact, common groups, or country of origin will be displayed.
All About Username Feature
The “username” feature will allow users to pick a username and connect without sharing their phone numbers. This is expected to make interactions more private and less intrusive. Currently another person’s phone number is enough to connect with them on the messaging platform.
The rollout is expected to take place in stages. Starting this week, users can reserve a username, though the feature will be launched later this year. WhatsApp, which has more than 3 billion users globally, said it opened early reservations because of this large base.
The username feature is meant to be a privacy feature rather than a social media identity. This is why there is no searchable directory or suggestions and one has to know the exact username to contact anyone for the first time. A user can also set a “username key” to control who can contact them. First-time messages via their username require this key, adding an extra layer of protection. The key can be changed at any time, WhatsApp has said.
The scrutiny comes at a time when India has witnessed a sharp rise in cyber crime, including phishing attacks and digital arrest scams. Officials said any new platform feature must be evaluated carefully to ensure that it does not create additional vulnerabilities for users.
