NEW DELHI — The Ministry of Electronics and Information Technology (MeitY) has extended the deadline for Meta Platforms to answer questions about its new WhatsApp “username” feature to March 13, 2026, three days beyond the original cut‑off. The extension follows a regulator‑issued notice that sought clarification after a petition alleged the feature could undermine privacy safeguards and fuel impersonation scams.
What happened
WhatsApp rolled out a global “username” option in early 2026 that lets users create a custom handle for contacts to reach them without revealing their mobile numbers. MeitY’s notice, dated March 10, 2026, gave Meta until March 10 to submit a detailed response. After reviewing the initial filing, the ministry granted an additional three days, moving the final deadline to March 13. The regulator’s request was prompted by a petition from the Internet Freedom Foundation (IFF), which argued that the username system may breach India’s Personal Data Protection Bill and could exacerbate existing fraud on messaging platforms.
Why it matters
The feature is marketed as a privacy safeguard, but cybersecurity experts warn it could become a new vector for social‑engineering attacks. A senior researcher at the Indian Computer Emergency Response Team (CERT‑India), who asked to remain unnamed, said, “By decoupling a phone number from an identity, the username becomes a new vector for social engineering.” If fraudsters register handles that mimic celebrities, public officials or other trusted figures, they could lure victims into conversations that appear authentic and then solicit money or personal data.
India’s National Crime Records Bureau reported a 22 percent rise in cyber‑fraud cases in 2025, underscoring the potential economic impact of any surge in impersonation scams on a platform that serves hundreds of millions of Indian users.
Background and context
WhatsApp is a dominant messaging app in India, with a user base that spans urban and rural areas. The introduction of usernames is part of Meta’s broader effort to reduce reliance on phone numbers, which have traditionally been the primary identifier for contacts on the platform. Under India’s Personal Data Protection Bill, personal identifiers such as mobile numbers are subject to strict handling requirements, and any feature that alters how these identifiers are used must demonstrate adequate safeguards.
The IFF petition contended that the username system could violate the bill by allowing users to hide a key personal identifier without sufficient verification mechanisms. It also raised concerns that the feature could be abused to create “look‑alike” handles that confuse recipients, thereby facilitating fraud. In response, MeitY asked Meta to explain how it will prevent the registration of usernames that could be confused with official or celebrity identities and what verification processes will be employed.
Meta’s spokesperson declined to provide a detailed comment ahead of the response deadline, reiterating only that the company “prioritises user safety and privacy.” The company has previously signaled plans to introduce a verification badge for official accounts, but the rollout timeline remains unclear.
Competing claims and uncertainty
Meta maintains that usernames are a privacy‑enhancing tool that gives users control over who can contact them. The company argues that removing the need to share a phone number reduces exposure to unwanted calls and messages, a common complaint among Indian users.
Conversely, cybersecurity analysts caution that the removal of phone numbers eliminates a layer of verification that recipients often use to assess authenticity. The unnamed CERT‑India researcher warned that “if a fraudster can register a handle that resembles a well‑known personality, they can lure victims into a conversation that appears authentic, then request money or personal data.”
The regulator’s notice does not specify the exact verification mechanisms Meta proposes, leaving uncertainty about whether the company will link usernames to government‑issued IDs, impose similarity checks against existing public figures, or rely on a badge system. The three‑day extension suggests MeitY expects a more detailed technical response, but it also indicates the regulator’s willingness to give the company a brief window to address the concerns.
What to watch next
1. Meta’s formal response – The content of Meta’s submission to MeitY on or before March 13 will reveal whether the company plans to implement stricter verification, limit similarity to known public figures, or introduce other safeguards.
2. Regulatory follow‑up – Depending on Meta’s answers, MeitY may issue further directives, impose fines, or require a rollback of the username feature under the Personal Data Protection framework.
3. Industry reaction – Technology and consumer‑rights groups are likely to comment on the adequacy of any proposed safeguards, potentially filing additional petitions if they deem the response insufficient.
4. Scam trends – Law‑enforcement agencies and cyber‑crime monitoring bodies will track whether impersonation attempts rise after the feature’s wider adoption, providing real‑world data on the risk highlighted by CERT‑India.
Conclusion
The extension granted by MeitY underscores the delicate balance Indian regulators are trying to strike between encouraging privacy‑enhancing innovations and preventing new avenues for fraud. While Meta portrays usernames as a user‑centric privacy option, cybersecurity experts warn that the feature could inadvertently aid scammers by obscuring a key identifier— the phone number. The regulator’s request for a detailed response, and the brief additional window to comply, signals heightened scrutiny of tech‑platform changes that may have unintended security consequences. How Meta addresses the verification and impersonation concerns will shape not only the future of WhatsApp’s user experience in India but also set a precedent for how global tech firms align privacy tools with India’s evolving data‑protection regime.
Sources
– NDTV, “Meta gets 3 more days to submit response on its WhatsApp username feature,” March 10, 2026, https://www.ndtv.com/india-news/meta-gets-3-more-days-to-submit-response-on-its-whatsapp-username-feature-11736601#publisher=newsstand
Story synopsis gathered from: NDTV – India News — source
Corrections
If you believe this article contains an error, contact Herald Express with the source URL and supporting evidence.
