Government warns messaging apps over username features enabling cybercrime

India's Ministry of Information Technology has escalated its regulatory scrutiny of major messaging platforms by issuing formal notices to WhatsApp, Telegram, and Signal, expressing serious concerns over how username features on these services are being exploited for criminal purposes.

The government's position, communicated through official notices, argues that the ability for users to create and operate under usernames rather than phone numbers or verified identities creates significant gaps in cybersecurity oversight. According to the ministry, this design choice enables criminals, fraudsters, and bad actors to operate with minimal accountability, making it difficult for law enforcement agencies to track and apprehend perpetrators of online crimes.

The notices represent an escalation in the government's broader push to regulate messaging platforms and social media services operating in India. Authorities have consistently raised concerns about how encryption and anonymity features, while valuable for user privacy, can be weaponised for illegal activities including fraud, harassment, extortion, and other cybercrimes. The username feature, the ministry contends, removes a basic layer of identification that phone number-based systems traditionally provided.

These platforms—WhatsApp with over 500 million Indian users, Telegram with millions of active accounts, and Signal with a smaller but growing user base—face mounting pressure from Indian regulators to implement stricter identity verification protocols. The government has been pushing technology companies to balance privacy protections with its demand for greater surveillance capabilities and law enforcement access.

The notices likely demand explanations from these platforms regarding their policies on username creation, verification processes, and measures taken to prevent misuse. Industry observers expect the companies to respond with detailed information about their current safeguards and compliance procedures under India's Information Technology Rules.

This move signals the government's determination to tighten controls over digital communication channels, even as global privacy advocates argue that username features are legitimate privacy tools for protecting users from unwanted contact and harassment.