India Halts WhatsApp Username Rollout Over Digital Arrest Scam Fears — What You Must Know

Photo by Dima Solomin on Unsplash

WhatsApp Usernames: A Privacy Win or a Scammer's Dream?

On June 29, 2026, WhatsApp announced that users could soon reserve unique usernames — a feature designed so people can connect without sharing their phone numbers. Within 48 hours, India's government hit the brakes. MeitY issued a formal notice to Meta's Chief Compliance Officer, ordering an immediate halt to the feature's rollout in India and demanding a detailed justification within three days.

The concern? That scammers could weaponise lookalike usernames to impersonate police officers, judges, government agencies, and public figures — further fuelling India's already catastrophic digital arrest scam epidemic. To understand your digital exposure and check what personal data may be floating online, visit ScanMyShadow.com for a free privacy check.

What Is the WhatsApp Username Feature?

• On June 29, 2026, WhatsApp announced users could reserve a unique username to connect with others without revealing their phone number, similar to Telegram and Signal.
• The feature was billed as a major privacy upgrade — fewer SIM swap attacks and less number harvesting from group chats.
• India's MeitY reviewed it not as a privacy product, but through the lens of the country's exploding cybercrime landscape and ordered it halted pending consultations.
• TechCrunch's testing found that lookalike usernames mimicking Prime Minister Modi, Bollywood actors, and the Reserve Bank of India were still claimable during the rollout window.

Why India Is So Alarmed: The Digital Arrest Scam Crisis

India is experiencing one of the worst cyber fraud epidemics of any major economy. Understanding the scale helps explain why the government acted so swiftly:

• Cybercrime incidents more than doubled in 2024 — rising to nearly 2.3 million cases, up from 1 million in 2022.
• Indians lost an estimated ₹22,495 crore (roughly US $2.7 billion) to cyber fraud in 2025, with complaint volumes jumping 24% year-on-year.
• Investment scams alone account for approximately 75–77% of all money stolen.
• Over 50% of cyber frauds targeting Indians originated from Southeast Asian countries — Cambodia, Myanmar, Vietnam, Laos, and Thailand — operated from high-security compounds.
• Digital arrest scams have surged — from 40,000 reported cases in 2022, to 60,000 in 2023, to nearly 124,000 in 2024.

How Digital Arrest Scams Work

Digital arrest scams are among India's most psychologically devastating frauds. Fraudsters impersonate CBI officers, customs officials, and judges — sometimes on video calls while dressed in uniforms in fake-office setups — to convince victims they are under criminal investigation. Victims are pressured to remain isolated, transfer money, and not contact family. A retired South Delhi doctor couple was defrauded of nearly ₹15 crore after being kept under a prolonged digital arrest. Even a sitting High Court judge was targeted using a fake challan SMS and a cloned government portal.

The WhatsApp Username Risk: Why the Government Is Worried

• MeitY warned the feature could allow bad actors to create handles closely resembling those of genuine government agencies, public figures, and financial institutions.
• If phone numbers are no longer the primary identifier at first contact, law enforcement loses its most reliable tool for tracing suspects — especially those operating from abroad.
• Cybersecurity experts warned that lookalike usernames could be exploited unless robust verification and anti-impersonation safeguards are introduced before launch.
• Meta's own Adversarial Threat Report in March 2026 found that online scam syndicates targeted users in India more frequently than any country other than the United States.

What Meta Says in Its Defence

• Meta says users still need a phone number to create a WhatsApp account, so the feature does not remove the phone-number layer entirely.
• The company says it will limit the number of new people an account can contact, block repeated attempts to guess usernames, and detect common impersonation patterns.
• Meta has reserved high-profile usernames for verified public figures and government entities so only legitimate owners can claim them.
• The username feature is not yet live — it will roll out slowly later in 2026 pending regulatory approval.

India's Broader Cyber Fraud Crackdown

The WhatsApp username notice is not India's first move against a messaging platform this year. In June 2026, India temporarily banned Telegram after the app was used to spread fake exam paper leaks during a crucial national test, with channel operators demanding money from students for access. The government also blocked over 9.42 lakh SIM cards and 2,63,348 IMEIs linked to cyber fraud operations nationwide.

India's national 1930 cybercrime helpline and the National Cyber Crime Reporting Portal (cybercrime.gov.in) have helped save ₹7,130 crore across 23 lakh complaints. For deeper reading on how your personal data is harvested and misused to enable scams like these, check out the ScanMyShadow blog — it covers data privacy risks in plain language. If you want to audit your own digital footprint right now, head to ScanMyShadow.com.

How to Protect Yourself Right Now

• Never trust a username alone. Always verify identity through an official channel before sharing any personal or financial information on WhatsApp.
• Real government agencies do not arrest you over a phone or video call. If you receive such a call, hang up and dial 1930 immediately.
• Enable two-step verification on WhatsApp and all financial apps.
• Do not join stock tip or task-based groups on WhatsApp or Telegram — guaranteed-return advisory groups are the single largest source of losses in India.
• Check the URL: Official Indian government websites always end with the .gov.in domain.
• Report suspicious messages at cybercrime.gov.in or call 1930 without delay.

Stay ahead of India's evolving cyber threat landscape. Share this article to warn friends and family — especially those who may not be aware of digital arrest scam tactics. Report any suspicious contact to 1930 or cybercrime.gov.in immediately.