WhatsApp usernames roll out in Zimbabwe, bringing privacy benefits and new scam risks

WhatsApp has started rolling out usernames, allowing users to communicate without sharing their phone numbers while raising new concerns over impersonation scams.

HARARE – WhatsApp has begun rolling out its long-awaited username feature, allowing users in Zimbabwe to reserve unique handles that can be shared instead of phone numbers when starting new conversations. The optional feature is designed to enhance privacy by allowing users to communicate without revealing their mobile numbers. However, cybersecurity experts warn that it could also create new opportunities for scammers to impersonate businesses, banks, and government institutions.

Unlike social media platforms, WhatsApp usernames are not searchable. Someone must already know your username before they can initiate a conversation, reducing the chances of unsolicited messages from strangers. The messaging platform is also introducing an optional username key, an additional layer of security that requires anyone wishing to contact you via your username to know both your handle and a unique verification key. Users can reset the key at any time without changing their username.

WhatsApp has also confirmed that when someone contacts a user through a username, the recipient's phone number remains hidden. The company says usernames are entirely optional, and users who prefer to continue using their phone numbers can do so without any changes to their accounts.

For businesses, organisations and public figures, the rollout presents both an opportunity and a challenge. Companies can now promote a memorable WhatsApp handle on websites, advertising material and social media instead of publishing personal or business phone numbers. However, businesses that delay registering their preferred usernames could find them claimed by third parties.

Technology publication TechCrunch recently reported that during early testing, usernames resembling well-known brands, politicians and public institutions, including a handle mimicking the Reserve Bank of India, were available for registration. The report prompted India's Ministry of Electronics and Information Technology to ask Meta, WhatsApp's parent company, to pause the rollout while concerns over impersonation and online fraud are addressed. Meta has said it reserves well-known names and certain variations for legitimate owners but has not publicly explained how that system works or which organisations qualify for protection.

The feature could have significant implications for Zimbabwe, where WhatsApp has become one of the country's most widely used communication platforms for businesses, churches, schools, transport operators and informal traders. Cybersecurity specialists warn that fraudsters could attempt to register usernames closely resembling trusted organisations to deceive unsuspecting users. Possible examples include fake customer support accounts impersonating mobile money providers, banks, utility companies or government departments in an effort to obtain passwords, PINs or payments.

While a username may appear more credible than an unfamiliar phone number, experts stress that users should verify the identity of any account requesting sensitive information or money before responding. Businesses are therefore encouraged to reserve their official usernames as soon as the feature becomes available to reduce the risk of impersonation.

The rollout also reflects Meta's strategy of creating a more unified identity across its platforms.

Users who already own matching usernames on Instagram or Facebook may be able to claim the same identity on WhatsApp, providing greater consistency across Meta's services. Digital rights advocates have welcomed the added privacy offered by usernames but continue to raise questions about platform interoperability, noting that identities created within Meta's ecosystem cannot easily be transferred to competing messaging services.

WhatsApp says users can change their username later if their preferred alternative is available. For added security, users should avoid sharing their username publicly unless necessary, enable the username key once it becomes available, and remain cautious of accounts claiming to represent businesses or government institutions.

As the feature rolls out globally, cybersecurity experts say awareness will be just as important as technology in preventing fraud. In Zimbabwe's increasingly digital economy, where WhatsApp plays a central role in commerce and communication, verifying the identity of anyone requesting personal information or payments remains the best defence against scams.

WhatsApp usernames Zimbabwe