WhatsApp usernames could open the door to new scams, experts warn
Using a username instead of a phone number is beneficial for your privacy. However, WhatsApp users should be aware that this could also lead to new scams.
Last week, Meta announced that WhatsApp is introducing usernames. It’s a new way to connect with people without giving away your phone number and to protect your privacy.
“Usernames are our latest step to make WhatsApp even more private. There’s no directory to browse and no suggestions; people will need to know your exact username to contact you for the first time,” Meta stated.
As of writing, this feature isn’t available. However, WhatsApp users can now reserve their unique username for when it launches later this year.
Sounds like the perfect way to protect your private information and privacy. But WhatsApp users should be careful as new scams lurk around the corner.
Previously, scammers needed to have a victim’s phone number in order to launch a scam campaign against their target. A WhatsApp username offers a new way to deceive someone.
Meta is actually aware of this, privacy expert at the Consumentenbond Peter Kulche says. “After all, when choosing a username, WhatsApp requires you to generate a secret code. New contacts, including criminals, must enter this code before they can start a conversation with you,” he explains.
But unfortunately, the username code feature isn’t enabled by default. WhatsApp users can activate this by going to Settings > Account > Username and changing the default setting “Everyone” to “People who know my code.”
In addition, Kulche is warning people that using your Facebook or Instagram name as your WhatsApp username is detrimental to your privacy. Meta’s fine print says that by doing so, you’ll allow Meta to link more of your data together, including location data.
In early testing, TechCrunch found that several WhatsApp usernames resembling prominent Indian politicians, celebrities, business leaders, and public institutions were free to register and could potentially be used for impersonation.
“Impersonation and fraud are real risks, but they are met by enforcing the criminal law against those who commit them, and by open processes that rest on identified legal powers,” the Internet Freedom Foundation (IFF) said on X when Meta announced WhatsApp’s upcoming username feature.
The Mozilla Foundation told the tech site that the introduction of usernames is likely to bring new tradeoffs.
“Increased scams and impersonation from fake handles are potentially a big one. Checking a phone number can be a useful verification tool, but these harms are also permitted by the platform’s fundamental design choices.”