MeitY Demands Uniform Messaging Standards as WhatsApp Username Rollout Sparks Fraud Fears

The Ministry of Electronics and Information Technology (MeitY) has initiated a coordinated regulatory push to establish uniform technical standards across messaging platforms operating in India, directly targeting features like usernames that could complicate fraud investigations. This move comes amid rising digital arrest scams in states such as Uttar Pradesh and Maharashtra, where impersonation tactics have already victimised thousands of citizens. The absence of explicit feature-level rules in existing legislation has created an enforcement vacuum that MeitY now seeks to fill.

MeitY Demands Uniform Messaging Standards as WhatsApp Username Rollout Sparks Fraud Fears

New Delhi – July 13, 2026 — MeitY has issued formal notices to WhatsApp, Telegram and Signal after raising concerns that username-based messaging could accelerate impersonation, online fraud and digital arrest scams while hindering law enforcement probes coordinated through the Indian Cyber Crime Coordination Centre (I4C). India remains one of WhatsApp’s largest markets within its global base of more than three billion users. The regulatory intervention highlights a long-standing gap in the IT Act, 2000 and IT Rules, 2021, neither of which prescribes permissible platform features.

The Regulatory Gap: Why MeitY is Acting Now

The IT Act, 2000 and the IT Rules, 2021 together govern WhatsApp, Telegram and Signal in India, yet neither statute defines which technical features messaging platforms may or may not introduce. This omission has allowed companies to roll out username systems without prior government consultation, creating an enforcement blind spot for agencies tasked with tracing fraudulent accounts. MeitY’s recent notices explicitly cite this regulatory silence as the reason for demanding common standards across all major platforms.

Without prescriptive language on feature design, platforms have operated under broad intermediary-liability provisions that focus on content removal rather than structural safeguards. Digital arrest scams, which have surged in Uttar Pradesh and Maharashtra, exploit exactly this flexibility by allowing fraudsters to create anonymous or easily impersonated identities. The Indian Cyber Crime Coordination Centre (I4C) has documented how such gaps delay real-time tracing, prompting MeitY to treat feature-level uniformity as a public-safety necessity rather than an optional guideline.

Policy analysts note that the current framework was drafted when messaging apps primarily handled text and basic media, not persistent usernames that persist across devices and jurisdictions. This technological evolution has outpaced the law, leaving Indian citizens exposed to sophisticated social-engineering attacks that leverage the very features MeitY now seeks to standardise. The ministry’s action therefore represents an attempt to retrofit regulatory clarity onto an industry that has grown faster than legislative updates.

WhatsApp's Username Feature: Safeguards vs. Government Concerns

Meta first announced username reservations on 29 June 2026 through an official blog post, signalling an imminent global rollout that would allow users to message strangers without sharing phone numbers. The company outlined seven specific safeguards: usernames tied to existing Facebook or Instagram accounts, protection for public figures and verified accounts, automated impersonation detection systems, caps on new contacts initiated via username, limits on how frequently usernames can change, proactive banning of abusive accounts, and on-screen indicators showing whether a sender’s account is new, shares mutual groups, or originates from another country.

Despite these measures, MeitY argues that username functionality could still facilitate digital arrest scams by enabling fraudsters to impersonate officials or relatives without revealing verifiable phone numbers. In Uttar Pradesh and Maharashtra, where such scams have already extracted crores from victims, investigators rely heavily on phone-number linkages that usernames would obscure. The ministry maintains that even sophisticated detection algorithms cannot fully compensate for the structural anonymity usernames introduce.

WhatsApp’s additional transparency features—flagging new accounts or cross-border senders—have been deemed insufficient by officials because they activate only after contact is established. Government sources emphasise that prevention must occur at the account-creation stage, not through post-facto warnings. This position directly conflicts with Meta’s claim that its layered safeguards strike an appropriate balance between usability and security for India’s hundreds of millions of users.

Legal Authority Debate: Can MeitY Mandate Feature Design?

The Internet Freedom Foundation has labelled MeitY’s approach “license raj for software features,” arguing that compelling platforms to disable or redesign specific functionalities exceeds the scope of the IT Act and risks stifling innovation. Critics contend that the ministry lacks explicit statutory power to dictate product architecture, potentially exposing its notices to judicial challenge on grounds of overreach.

Dhruv Garg, partner at the policy advisory firm IGAP, offered a more measured assessment, stating that uniform standards across platforms are acceptable provided they do not force wholesale redesigns of existing services. He emphasised that any new rules should focus on interoperability and safety outcomes rather than prescribing exact user-interface elements. This distinction matters for Indian startups seeking to compete without bearing disproportionate compliance costs.

Signal received a parallel notice on 3 July 2026 alongside Telegram but has yet to issue a public response, leaving uncertainty about whether it will align with Arattai’s compliance decision or mount a legal challenge. The varied reactions underscore the absence of clear precedent for MeitY’s authority over feature-level decisions, setting the stage for potential litigation that could reshape intermediary regulation in India.

Industry Compliance and Market Impact

On 2 July 2026, Zoho founder Sridhar Vembu announced that Arattai would disable username-based accounts to comply with MeitY’s expectations, illustrating how smaller Indian platforms are prioritising regulatory alignment over feature parity with global competitors. This swift concession highlights the leverage MeitY holds over domestic companies that lack Meta’s global negotiating power.

The Bengaluru startup ecosystem, home to numerous messaging and collaboration tools, now faces pressure to redesign core functionalities or risk enforcement actions. Uniform standards could level the playing field by preventing foreign platforms from offering features that Indian firms must withhold, yet they may also raise entry barriers for new entrants lacking resources for complex compliance engineering.

Market observers note that Meta’s dominance in India—where WhatsApp serves as the default communication channel for everything from family coordination to small-business transactions—gives it unique leverage in any future negotiations. However, sustained regulatory scrutiny could accelerate the growth of compliant domestic alternatives, reshaping competitive dynamics in the country’s digital communication sector.

What Uniform Standards Mean for Indian Citizens

With more than 500 million active WhatsApp users in India, any change to core messaging features carries immediate implications for daily communication, commerce and access to services. Uniform standards could reduce the attack surface for digital arrest scams that have already devastated families in Uttar Pradesh and Maharashtra, yet they may also limit user convenience by restricting the ability to connect without sharing phone numbers.

Privacy advocates warn that mandatory feature restrictions could erode end-to-end encryption norms if platforms are compelled to build additional tracing mechanisms. At the same time, citizens bear the direct cost of fraud when regulatory gaps persist, creating a policy tension between individual privacy and collective security that MeitY must navigate.

The Indian Cyber Crime Coordination Centre (I4C) has reported improved coordination across states when platforms provide consistent data formats, suggesting that technical uniformity could enhance investigative efficiency. For ordinary users, this translates to faster victim support and potentially lower incidence of impersonation-based extortion.

The Broader Digital Governance Landscape

MeitY’s messaging standards initiative forms part of a wider effort to strengthen intermediary liability and data-protection frameworks ahead of full implementation of the Digital Personal Data Protection Act. By addressing feature design at the platform level, the ministry signals its intent to move beyond reactive content moderation toward proactive architectural oversight.

India’s position as a major global technology market gives these decisions international resonance, particularly as other jurisdictions watch how New Delhi balances innovation incentives against citizen protection. Domestic policy choices could influence global platform strategies and set precedents for emerging economies facing similar fraud challenges.

Coordination between MeitY, the Ministry of Home Affairs and state cyber cells through I4C demonstrates an increasingly integrated governance model. This approach reflects broader trends in Indian digital policy that prioritise inter-ministerial collaboration to address cross-cutting risks such as financial fraud and identity theft.

The Bottom Line

MeitY’s demand for uniform messaging standards represents a decisive attempt to close regulatory gaps that have enabled sophisticated scams targeting Indian citizens. While Meta’s seven safeguards address some concerns, the ministry maintains that structural changes are required to protect users in high-risk states such as Uttar Pradesh and Maharashtra. The coming months will test whether platforms comply voluntarily or challenge the government’s authority in court.

For Indian startups and the Bengaluru tech ecosystem, the outcome will shape competitive conditions and compliance costs for years ahead. Citizens stand to gain improved fraud protection if standards are implemented effectively, yet they may also experience reduced functionality in the apps they rely on daily. The balance between security, privacy and innovation will define India’s digital governance trajectory.