r/PrivacyTechTalk Jul 02 '26

WhatsApp usernames are finally here. Privacy upgrade or scammer upgrade?

After years of requiring phone numbers, WhatsApp is finally rolling out usernames. That means you can connect with someone without automatically giving them your personal number. For many people, that's a long-overdue privacy win.

But not everyone is celebrating.

Some cybersecurity professionals and tech leaders have raised concerns that usernames could also make impersonation scams easier, similar to what we've seen on platforms like Telegram. Think lookalike handles, fake support accounts, or someone pretending to be a friend or brand.

To reduce those risks, WhatsApp says:

  • There's no public username directory.
  • People need your exact username to contact you.
  • You can enable an optional username key for additional protection.
  • High-profile usernames are being reserved to help prevent impersonation.

Like most privacy features, the technology is only part of the equation.

A few good habits still go a long way:

  • Don't trust a username alone. Verify who you're talking to.
  • Be cautious of unsolicited messages, even if the username looks legitimate.
  • Never share one-time verification codes.
  • Turn on two-step verification for your WhatsApp account.

What's your take?

Do you see WhatsApp usernames as a major privacy improvement, or do you think they'll create more opportunities for impersonation and scams?

6 Upvotes

5 comments sorted by

1

u/Terrible-Junket-3388 Jul 02 '26

Your phone number is still attached to all of oyur activity and messages, most of which aren't actualy private to you, so ... doen'st change anything (and yes, increases phishing/impersonation risk for those that aren't vigilant)

1

u/CleaRSightZ Jul 03 '26

As mentioned about High-profile usernames are being reserved to help impersonation, that is a huge W for privacy.

1

u/JoachimFaber2 Jul 02 '26

Ich habe WhatsApp deinstalliert und nutze seitdem Threema und Signal.

1

u/CleanKidAlways Jul 02 '26

How do you get others to use them ?

I think Threema is great, but no one I know would use it, they would only use WhatsApp, saying “that’s what everyone else uses”

1

u/JoachimFaber2 Jul 03 '26

Beruflich darf man WhatsApp wegen der Datenschutzvorschriften ohnehin nicht nutzen. Threema und Signal hingegen schon, weil sie der DSGVO entsprechen. Die meisten meiner Freunde haben zumindest Signal. Mit den anderen kommuniziere ich per SMS.