WhatsApp username rollout hits pause in India amid impersonation uproar and privacy push

In June 2026, Vodafone Idea and Meta collaboratively launched Silent Mobile Verification (SMV) across WhatsApp, Facebook, and Instagram for Vi subscribers in India, marking a significant leap in password-less authentication. This technology leverages Vi’s mobile network to silently verify users’ phone numbers in the background, streamlining the registration, login, and account recovery processes by eliminating manual number entry and reducing onboarding friction. As Vi CEO Abhijit Kishore emphasized, telecom networks are pivotal in creating safer digital experiences, while Meta’s India head Arun Srinivas highlighted SMV as a crucial step toward simpler and more secure user verification, aligning with India’s broader push for trusted digital authentication.

On June 29, 2026, Meta Platforms initiated a groundbreaking shift in WhatsApp’s identity system by opening username reservations to its entire user base of 3 billion, enabling users to communicate without revealing phone numbers. This move not only enhances privacy by decoupling messaging from sensitive phone number identifiers but also introduces strict username criteria—handles must be 3 to 35 characters long and are neither searchable nor suggested, requiring exact knowledge of the username and optionally a 'username key' to initiate contact. By reserving usernames for celebrities and public figures and allowing businesses and creators to claim their existing Instagram or Facebook handles, Meta is fostering cross-platform consistency and streamlining brand identity across its ecosystem.

The rollout strategy includes a proactive reservation period that began on Monday, June 29, 2026, inviting users to secure their preferred WhatsApp usernames ahead of the full feature launch later that year. This early reservation window underscores Meta’s intent to smooth user adoption by mitigating username squatting and ensuring a seamless transition from phone number-based messaging to a username-driven model, marking a major evolution in how users connect on the platform.

By mid-2026, Indian regulators and cybersecurity experts raised alarm over WhatsApp’s new username feature, warning it could become a hotbed for impersonation, fraud, and phishing affecting its 600 million users. Entrepreneurs like Vijay Shekhar Sharma and Ankur Warikoo underscored the dangers of fake or lookalike usernames, with Warikoo cautioning that without robust anti-abuse mechanisms, the rollout 'could be a disaster.' This scrutiny was fueled by concerns that usernames, while protecting phone number privacy, shift trust to easily imitated digital identities, thereby enabling scams ranging from fake customer care accounts to deepfake-assisted fraud.

The Indian government’s response was swift and decisive: on July 2, 2026, the Ministry of Electronics and Information Technology ordered Meta to halt the WhatsApp username rollout, citing heightened risks of online fraud and political impersonation. Authorities emphasized that the feature could disproportionately endanger less tech-savvy users by facilitating phishing and other cybercrimes, despite Meta’s reassurances. This intervention highlights the ongoing tension in India between embracing privacy innovations and safeguarding a massive user base—over 500 million strong—from evolving digital threats.

In response to government scrutiny and concerns over fraud and impersonation risks, Meta's WhatsApp paused the rollout of its new username feature in July 2026, issuing detailed FAQs to clarify its privacy and security intentions. The company emphasized that usernames are optional and designed to protect user privacy by allowing contacts without revealing phone numbers, with usernames always appearing with an '@' symbol to clearly distinguish them from display names and phone numbers. Additionally, Meta introduced controls such as 'username keys' to give users greater authority over who can reach them via their username, reflecting an ongoing effort to balance innovative privacy features with robust security safeguards amid regulatory pressures.