WhatsApp usernames seemed like a good idea. Then the shadow of identity theft appeared

Almost all of us know that it is not a good idea to trust an unexpected message that asks for money, personal information or a verification code. But we also know how these scams work: they arrive at the right time, use the name of a well-known company and rely on a profile photo that looks official. A supposed shipping company, a package held, a small fee to pay. There is identity theft, in that mixture of legitimate appearance, urgency and misplaced trust. The new piece. The change that WhatsApp has begun to prepare now comes to that familiar terrain. The application has started username reservation ahead of a broader rollout planned for this year. The idea is simple: that we can find and write to each other using an identifier instead of always depending on the phone number. On paper, it makes a lot of sense from a privacy standpoint, but there are nuances to this. Privacy with fine print. The discussion isn’t about whether usernames are a good or bad idea. In fact, reducing phone number exposure can provide a clear benefit for millions of people. The point is another: every new way of identifying ourselves also becomes a new way of recognizing ourselves. And when that identifier resembles that of a company, a bank or an institution, the line between a legitimate identity and a fake one may be less obvious to some users. The first alert. TechCrunch put the system to the test at an early stage and found several usernames available reminiscent of Indian figures, companies and institutions. Among the examples he cited “indiamodi”, “shahrukh.actor”, “teamamitabh” and “rbi_verify”, references to Prime Minister Narendra Modi, Bollywood actors and the Indian central bank. The nuance is important: the outlet did not claim that these identifiers were already being used to scam, but rather that they appeared available for reservation and, therefore, raised a reasonable doubt about the scope of the preventive reservations announced by Meta. The Binance case. The conversation took a step further when another user showed on X that “cz_binance” appeared as unavailable when trying to reserve it on WhatsApp. Changpeng Zhao, founder of Binance, He then responded that he had tried it too. and that he had not been able to do it: “I tried, I couldn’t reserve that name. So, it definitely wasn’t me.” His comment clears up only one mystery: it was not he who booked it. Everything else, from a possible preventive reservation of Meta to any other internal criteria, remains unconfirmed. India asks to stop deployment. Doubts about the new function took a step further when they arrived at the offices of the Indian Government. In a notification sent Regarding WhatsApp, the Ministry of Electronics and Information Technology maintained that usernames could facilitate the impersonation of citizens, public organizations, financial entities and government agencies. For this reason, it asked WhatsApp to justify the function and demanded that its deployment in India, the application’s largest market, be paused while consultations with the authorities continued. Meta’s response. Faced with the doubts raised in recent days, the company defends that the system incorporates measures to limit the risk of identity theft. These include the preventive reservation of names of public figures, governments and certain variants, in addition to the possibility for creators, companies and organizations to claim the same username on WhatsApp that they already use on Instagram or Facebook. It’s not a new idea. The discussion about usernames didn’t start with WhatsApp either. Telegram and Signal already allow you to contact other users using identifiers without sharing that input data, while WeChat combines formulas such as your own ID and QR codes. What changes now is the scale. If WhatsApp completes the deployment planned for this year, this way of identifying will reach a platform with billions of users, expanding both its advantages and the questions that accompany it. The underlying problem. There is no reason to think that cybercriminals will ignore WhatsApp usernames. If a new tool can help them appear more credible, it is logical to assume that they will try to take advantage of it, just as they have been taking advantage of for years unknown numbers, profile photos, visible names, company accounts or leaked data. The question, therefore, is not whether there will be attempts at abuse, but to what extent Meta’s measures and user attention will be sufficient to reduce their impact. Images | Xataka with Nano Banana In Xataka | The new WhatsApp usernames have a reason for being. Advertising, specifically

The new WhatsApp usernames have a reason for being. Advertising, specifically

WhatsApp launched a couple of days ago usernamesone of the most important innovations when it comes to contacting people. Until now, talking to someone on WhatsApp was synonymous with having their phone number, but not now. Now just know (or guess, we’ll come back to this later) your username. To pave the way, WhatsApp now allows reserve your usernamethat @ that you have been using for so long on other social networks. And what can happen? That it is not available because someone has claimed it (shout out to the beast that @josedextro has reserved). That’s when WhatsApp puts a solution on the table: if you already use that user on Instagram, You can link your WhatsApp account with said social network and try to claim it. Basically, reading is different. Because, in essence, this is still a mechanism to promote the unification of accounts and have more data to show targeted advertising in an app that, by design, does not allow that option. Your @ is more than a name Last year, precisely around this time, WhatsApp announced the arrival of advertising to the application. The proposal had three branches: Promoted channels. Paid subscriptions for channels. Advertising in the States. WhatsApp confirmed that it was not going to touch the chats screen or the chats themselves, but that the ads would be limited to the “News” tab. According to the platform, 1.5 billion people access the content of that section every day. The question, however, is obvious: how can Meta, the world’s largest targeted advertising platform along with Google, show personalized ads in an app whose content is encrypted? If our user is not available, but we use it on Instagram, WhatsApp allows us to unify accounts to be able to claim it | Image: Xataka Last year, Nikila Srinivasan, VP of Business Messaging at Meta, explained that would use data that they do have access to, such as the country, city, device language, channels we follow and interactions with ads in the “News” tab. But he also explained something else, and that is that if a person decides, voluntarily, link your WhatsApp account with the Meta account center (Instagram, Facebook and Threads), information could be cross-referenced to target ads. Coincidentally, now, practically a year after this announcement, WhatsApp launches the ability to have a username and be able to claim it if you already use it on Instagram. Platform that, by the way, disabled end-to-end encryption in private messages just a few weeks ago. By linking the accounts through the Meta account center, and always on paper, Zuckerberg’s firm would have the ability to link your activity on Instagram, Threads and Facebook with WhatsApp. That would allow, in theory, Advertising could be directed to the user while maintaining end-to-end encryption how popular it made the app in its day. Based on creating a system that allows us to talk to other people without sharing the phone number, WhatsApp has devised a mechanism to unify accounts and expand the reach of advertisements. It is not mandatory, far from it, but the temptation to have the same @ in all apps is strong. And dangerous, because anyone could try to guess your username to contact you. What’s more, when you reserve your username, it is activated by default so that anyone who knows it can write to you. This must be changed manually, although privacy concerns maybe you would like to know that you can set a key so that, if someone wants to write to us, they not only need the @, but also a four-digit password that you must give to the contact at the time. By activating the password, we will prevent anyone from writing to us if they guess our username WhatsApp, for its part, fences which has “multiple layers of defense: username keys limit who can contact you, we restrict how many new people any account can contact, and our systems detect and block patterns of abuse.” If you wish, you can access the Meta account center from here and unlink your accounts. Another option is to opt for an app without ads, as encrypted as WhatsApp and less popular like Signal. Curiously, WhatsApp Plus subscription does not include the ability to remove ads. breaking a spear The reservation system has a positive point, and that is to guarantee that public figures or well-known users can have the same @ on WhatsApp. Best of luck to ElRubius trying to book @elrubiusWTF, or to Ibai Llanos trying to get @ibaillanos. There are personalities who may have a genuine interest in making their symbol recognizable and the same as on other social networks. This system allows it. Image | Xataka In Xataka | We have turned WhatsApp into an “emotional pacifier”. And science warns that it is making us more fragile

Log In

Forgot password?

Forgot password?

Enter your account data and we will send you a link to reset your password.

Your password reset link appears to be invalid or expired.

Log in

Privacy Policy

Add to Collection

No Collections

Here you'll find all collections you've created before.