India's Ministry of Electronics and Information Technology has issued a formal notice to WhatsApp, demanding it halt the global launch of its new username feature. The move is unprecedented: it targets a design choice before launch, citing harms that have not yet occurred.
The feature, which allows users to message without exchanging phone numbers, was slated for a phased rollout. Parallel notices were sent to Telegram and Signal, which already offer similar functionality. India's homegrown app, Arattai, voluntarily disabled its username feature to align.
The government cites concerns over phishing, impersonation, and digital arrest scams. However, privacy advocates note the absence of data showing that existing username features on other platforms have fueled a notable increase in cybercrime. Telegram and Signal's long-standing models provide a control group for this claim.
WhatsApp argues the feature protects vulnerable users-journalists, abuse survivors, activists-who need to separate online and offline identities. The platform has built in protections like rate limits and impersonation detection. Law enforcement access remains unchanged.
India is WhatsApp's largest market with over 850 million users. The regulatory pressure forces a difficult choice: create a regional version, delay globally, or weaken privacy standards for everyone. Conceding sets a precedent where one jurisdiction's demands can dictate global design.
This action fits a broader Indian regulatory arc asserting state influence over digital infrastructure. While framed as fraud prevention, critics warn it represents a discretionary veto over engineering decisions, potentially creating a patchwork of national security standards that prioritizes political convenience over user protection.