WhatsApp usernames: privacy upgrade or scammer’s new toy?
WhatsApp usernames are a new privacy feature that lets first-time contacts see a chosen username instead of a phone number, allowing people and businesses to connect without exposing their number while still requiring a phone number behind the account for registration and ongoing use. This sounds like a win for privacy, but it immediately raises a hard question: does hiding numbers make it easier to hide bad intentions too? Regulators are not convinced the balance is right, and they’re right to be skeptical. Any feature that changes how identities are displayed changes how scams will look in the chat window. The core issue is simple: usernames strip away a familiar trust signal—the visible phone number—yet they don’t give users an equally strong way to verify who is on the other side.
How the username feature works—and why it worries regulators
The username feature is being rolled out in phases; for now, users can only reserve a unique name before it becomes widely available later this year. Once enabled, first-time contacts will see your username instead of your phone number, which is useful for group chats, creators, and small businesses that want more WhatsApp privacy features without revealing personal numbers. There is no searchable directory or suggestion engine; anyone who wants to message you must know your exact username, and there is an optional username key that you can require before people send you a message. Yet governments are reviewing WhatsApp usernames security because of impersonation fraud risks: officials are worried usernames can be misused to mislead users, mimic organisations, and spread false information, and that scammers will hide behind anonymous identities rather than traceable numbers.
WhatsApp’s anti-scam protections: useful, but not a magic shield
In response to the scrutiny, WhatsApp claims it has designed the feature with anti-scam protections baked in. The company will reserve usernames belonging to public figures, government entities, celebrities, and verified Meta accounts so that only legitimate owners can claim them, and lookalike variants of known names are held as well to reduce impersonation. There will be technical limits: you must know a person’s exact username to contact them, the platform will cap how many new people an account can reach, and it will block repeated guessing of usernames, using automated systems to flag impersonation and other suspicious patterns. According to a WhatsApp spokesperson, "the ability to use a username is not yet live and will roll out slowly later this year". These safeguards are sensible, but they focus mainly on high-profile names and obvious abuse, not on the everyday scams that imitate your local business or colleague with believable but unfamiliar usernames.
What users should do right now: treat usernames like email addresses
The username system is not available for public use yet, so the risk today is more about future preparedness than immediate damage. You can, however, reserve a username through the latest app version by going to Settings > Account > Username. That step is worth taking: it prevents others from grabbing a name closely associated with you or your brand. When usernames go live, behave as you would with email—be suspicious of first-contact messages, especially those claiming to be a business, official, or friend with a name you have never seen them use. Use existing context clues: WhatsApp will tell you if the sender is a new account, in your contacts, in a shared group, or from a different country, giving you more information before you reply. If anything feels off, don’t respond, and report or block instead of trying to “check” the person inside the same chat.
Conclusion: anonymity is coming—your skepticism is the real defense
Regulators are right to review WhatsApp usernames security, because impersonation fraud risks increase whenever platforms make it easier to appear as someone new. WhatsApp’s privacy features—removing visible phone numbers, hiding directories, limiting outreach, and reserving high-profile usernames—are thoughtful, but they cannot fully solve the social problem of trust in digital conversations. In the end, usernames will make WhatsApp look more like other messaging and social apps, where identity is fluid and scammers thrive on that looseness. That shift is inevitable, but it doesn’t have to be reckless. The platform can keep tuning its anti-scam protections, and regulators can keep asking hard questions; yet the most important layer of security will be users treating every new username with healthy doubt. Don’t assume a familiar-sounding handle equals a familiar person—the username era demands more verification, not less.
