WhatsApp is introducing one of its biggest changes in years, allowing people to connect using usernames instead of sharing their phone numbers.
The feature, which is rolling out globally over the coming months, is being promoted as a major privacy improvement. But while it could make it easier to protect your personal information, security experts and regulators have already raised concerns that it could also create new opportunities for scammers and impersonators.
How will WhatsApp usernames work?
Once the feature is available on your account, you’ll be able to reserve a unique username in your WhatsApp settings.
Rather than giving someone your mobile number, you can simply share your username. That means they’ll be able to message you without ever seeing your phone number.
According to WhatsApp:
- Usernames will be optional
- You can change or remove your username at any time
- Phone numbers will still be needed to create a WhatsApp account
- There won’t be a public directory of usernames
- You can still block or report unwanted messages
- Some usernames linked to high-profile public figures and organisations will be reserved to help prevent impersonation.
For many people, particularly those joining community groups, buying and selling online or networking professionally, this could offer a welcome extra layer of privacy.
Why are people worried?
Although hiding your phone number reduces one privacy risk, some experts believe usernames could introduce another.
Fraudsters may be able to create usernames that closely resemble legitimate businesses, banks, government organisations or individuals in an attempt to trick people into starting conversations.
This could make impersonation scams, including Authorised Push Payment (APP) fraud, where criminals trick people into sending money to them by pretending to be someone they trust, more convincing.
India, WhatsApp’s largest market, has already asked the company to pause the rollout while it considers whether the feature could make online scams easier. The Indian government has warned that lookalike usernames could be used to impersonate banks, public authorities and other trusted organisations.
Meta has defended the feature, saying users will still need a verified phone number to create an account and that multiple safeguards are designed to detect abuse and remove accounts that impersonate others. Nevertheless, some security experts expect criminals to test the new system once it launches.
Could scams become more convincing?
Unfortunately, cybercriminals are quick to exploit any new technology. Many existing WhatsApp scammers already pretend to be:
- A family member with a new number
- Your bank
- A delivery company
- A government department
- Technical support.
If usernames make it easier to create convincing identities, scammers may use it to their advantage.
That doesn’t necessarily mean the feature is unsafe, but it does mean users should remain cautious when receiving unexpected messages, even if they appear to come from a familiar name.
How to stay safe
To stay safe, it’s worth following a few simple precautions:
- Never trust a username alone
- Be cautious of unexpected requests for money or personal information
- Verify someone’s identity through another method if you’re unsure
- Block and report suspicious accounts
- Keep WhatsApp updated so you receive the latest security protections.
Remember, legitimate organisations will rarely ask you to share passwords, verification codes or banking details through WhatsApp.
Users can also choose to add an extra layer of protection by enabling a unique four-digit username key. This means someone would need to know both your username and your four-digit key before they can contact you. While this offers greater protection against scammers, it also makes it less convenient for people who genuinely want to get in touch.
In summary
Giving people the option to hide their phone number is a genuine privacy improvement, particularly when interacting with people you don’t know well. However, privacy isn’t just about keeping information hidden. It’s also about ensuring people can trust who they’re talking to.
Whether WhatsApp’s new safeguards are enough to prevent widespread impersonation remains to be seen. As the feature rolls out globally, security experts, regulators and cybercriminals alike will be watching closely.
