WhatsApp's New Privacy Feature: A Double-Edged Sword Against Scams

Singapore, Singapore Jul 16, 2026 ALN: Later in 2026, WhatsApp will be rolling out a new feature that lets users hide their phone numbers and show only their preferred usernames. This move is part of the platform’s ongoing efforts to enhance user privacy and security in an increasingly digital world where personal information is often at risk.

On June 29, WhatsApp started letting its three billion global users reserve a username ahead of the operational roll-out. This change is designed to allow individuals to protect their privacy by making it more difficult for their phone numbers to be accessed and exploited by malicious actors. With the growing prevalence of scams and unsolicited communications, this feature aims to create a safer environment for users.

By making phone numbers less readily visible, WhatsApp reduces the odds of them being stored in external databases. These databases are often compiled by commercial entities that have been contacted, which can lead to unsolicited calls from marketers and, more alarmingly, from scammers. The potential for phone numbers to be harvested for nefarious purposes has prompted many users to seek greater privacy controls, and WhatsApp’s initiative is a significant step in that direction.

However, users should not be lulled into a false sense of security. While the new feature aims to enhance privacy, scammers can still exploit the username system. For instance, a scammer looking to impersonate Singapore’s Health Minister Ong Ye Kung can reserve a username similar to his, as reported by The Straits Times. Although WhatsApp has implemented measures to prevent the reservation of certain usernames, it may be impossible to lock down all permutations of a name, leaving room for impersonation.

Similarly, a scammer attempting to impersonate Singapore’s Defence Minister can still reserve usernames that closely resemble his official name. This opens the door for fraudsters to create a facade of legitimacy, which can be further augmented by using official portraits or images readily available online. The ease of access to these images allows scammers to craft convincing identities that can mislead unsuspecting users.

The rise of generative artificial intelligence tools has further complicated the landscape of online scams. These tools enable scammers to create highly convincing images of lookalikes of well-known figures with just a few simple prompts. The sophistication of AI-generated content makes it increasingly challenging for users to distinguish between legitimate communications and fraudulent ones. As a result, the potential for identity-based scams remains a significant concern, even with the introduction of phone-number masking.

Andy Prakash, the founder and chief executive of information technology security firm Privacy Ninja, emphasized that identity-based scams are unlikely to disappear but will evolve and become more sophisticated, even with the implementation of privacy features. He stated that user education is the best defense against such threats. "As AI-generated impersonation becomes increasingly sophisticated, trust should be built through verification rather than appearance alone," he remarked, underscoring the importance of critical thinking in the digital age.

Awareness, verification, and a healthy skepticism are more crucial than ever, he added. Users must remain vigilant and question the authenticity of communications they receive, particularly when they involve requests for sensitive information or money. To aid in this effort, WhatsApp will be rolling out new features to help users discern the legitimacy of messages. For instance, the platform will flag new WhatsApp account holders who contact users via their usernames for the first time. This notice will include additional information, such as whether the WhatsApp account holder shares any groups with the message recipient and whether the message sender is based overseas.

However, the effectiveness of these warning signs hinges on users' ability to recognize and respond to them appropriately. A message claiming to be from a government official, especially if it includes links that prompt users to click, should raise alarm bells. If the message involves the solicitation of money or sensitive information, or demands urgent action, users should be particularly cautious and verify the requests independently.

Verification is essential, regardless of whether the message comes from a phone number or a username. Users are encouraged to conduct independent verification, such as calling an official phone number listed on official websites or reaching out to family members for assessments. Scammers often impersonate legitimate businesses, including logistics firms, banks, or tech support services, making it imperative for users to remain alert and skeptical.

While usernames may change how individuals identify or look up one another on WhatsApp, they do not alter the underlying psychology behind impersonation scams. A recent case involving an individual who lost at least $4.9 million to scammers impersonating senior government officials highlights the critical need for vigilance and verification. In this case, the victim was invited to a Zoom video conference call that appeared to involve Prime Minister Lawrence Wong, along with other local and overseas government officials. The police reported that the appearances of PM Wong and the officials were created using deepfake AI technology, showcasing the advanced techniques scammers are employing to deceive their targets.

Authorities have noted that scammers often target business professionals who have had prior interactions with government officials, leveraging this familiarity to create a false sense of trust. The use of sophisticated technology in these scams underscores the importance of taking a moment to verify information before taking any action. A simple, independent check could potentially halt scams in their tracks, reinforcing a timeless lesson: while technology can enhance security, it cannot replace the fundamental need to verify information before acting on it.

As WhatsApp prepares to implement its new privacy features, users are urged to remain informed and proactive in protecting themselves against scams. The introduction of usernames may provide an additional layer of privacy, but it is crucial for users to recognize that this is not a foolproof solution. The evolving landscape of online threats necessitates ongoing education and awareness, as well as a commitment to verifying the authenticity of communications in an increasingly complex digital world.