WhatsApp's New Username Feature: What You Need to Know
As WhatsApp rolls out its new username-based feature, designed to let users connect without sharing their phone numbers, concerns arise about the effectiveness of this feature in preventing scams and impersonation. Security experts warn that while this feature improves privacy, it does not verify identity and cannot, by itself, prevent impersonation.
The username feature is designed to give users more control over personal information by enabling connections without sharing phone numbers.
For individuals who value their privacy, the new username feature may seem like a welcome update. However, security experts caution that this feature may not be enough to prevent scams and impersonation. As one expert notes, “The practical impact: lower friction for first contact can also lower friction for fraud.” This means that while the feature may make it easier for users to connect with each other, it may also make it easier for scammers to mimic trusted accounts.
For businesses and organizations that rely on WhatsApp for communication, the new feature may pose a significant risk. As security experts warn, “Lookalike usernames and social-engineering scripts can still drive payment fraud, credential harvesting, and ‘urgent request’ scams, especially where teams rely on messaging for approvals.” This means that businesses must be vigilant in verifying the identity of users and taking steps to prevent scams and impersonation.
WhatsApp said the username system is designed to help curb impersonation by reserving unique handles, though it does not constitute identity verification and cannot on its own stop fraud or social-engineering scams. WhatsApp said usernames can be up to 35 characters long, allowing users to reserve a unique handle to chat without revealing their phone number.
Usernames can be reserved on a first-come, first-served basis, meaning popular names may be claimed quickly and users may need to choose alternative spellings to secure a unique handle.
