Telegram, Signal asked by IT Ministry to explain anti-fraud measures in username features after WhatsApp notice

IT Ministry asks Telegram, Signal to explain anti-fraud measures in usernames

Theindiapostdaily.com – The Indian Ministry of Electronics and Information Technology (MeitY) has directed Telegram and Signal to provide detailed explanations regarding their username features, citing concerns about potential vulnerabilities related to online fraud and impersonation. This follows similar scrutiny of WhatsApp, where the government had previously raised issues about the platform’s planned username feature, prompting Meta to delay its launch. The move underscores MeitY’s growing emphasis on regulating messaging apps to safeguard user data and prevent misuse of digital identities.

Regulatory Focus on Username Vulnerabilities

The username system allows users to communicate without sharing their phone numbers, which has raised alarms about security risks. MeitY is particularly interested in how platforms like Telegram and Signal manage threats such as phishing, digital arrest scams, and impersonation attacks. By asking for detailed reports, the ministry aims to ensure that these apps have robust mechanisms to protect users from fraudulent activities. The feature has already drawn attention from other messaging platforms, including WhatsApp, which is under the same regulatory umbrella.

“Government has asked Telegram why the feature should be there,” said a PTI source, highlighting the ministry’s concern about platforms that already use similar identifiers. This directive is part of a broader effort to hold messaging services accountable for their security protocols and user authentication processes.

Implications of Username Features on User Security

The username system enables users to create unique identifiers, often prefixed with the @ symbol, which can be used for both personal and professional communication. While this adds convenience, it also opens avenues for misuse. The IT Ministry’s inquiries focus on how these apps detect and mitigate threats such as impersonation of individuals, public bodies, and financial institutions. With WhatsApp’s username rollout still in the proposal phase, the ministry’s proactive approach suggests a desire to preemptively address potential risks before they become widespread.

MeitY’s scrutiny extends beyond WhatsApp, targeting all platforms that offer username-based messaging. This includes services like Telegram and Signal, which have long supported the feature. The ministry’s concern is not just about the presence of usernames but their role in facilitating deceptive practices. For instance, a malicious actor could use a username to impersonate a user, leading to scams or misinformation campaigns. The requirement for detailed explanations aims to ensure that these apps have clear strategies to prevent such scenarios.

Responses from Telegram and Signal

Telegram and Signal are expected to respond to the ministry’s inquiries by outlining their security measures. The IT Ministry has emphasized the need for transparency in how these platforms address issues like fraud and digital impersonation. For example, Telegram has previously implemented features such as username verification and two-factor authentication to enhance user safety. Signal, known for its strong encryption, may highlight its protocols for validating usernames against user profiles. Both companies are likely to stress the optional nature of usernames and their built-in safeguards to minimize misuse.

Meta, the parent company of WhatsApp, has already defended its username feature, stating that it is optional and includes mechanisms to reduce fraud. However, the IT Ministry’s follow-up action with Telegram and Signal suggests a desire for more comprehensive security frameworks. The ministry may also be seeking insights into how these apps handle scenarios like account takeovers or fake identities, which could be exploited for targeted attacks. This is particularly relevant in a country where digital communication plays a critical role in daily life and business transactions.

Telegram has faced regulatory scrutiny in the past. In June, the platform was temporarily banned for a week due to allegations linking its username system to NEET exam paper leaks and fraudulent activities. This incident demonstrates the ministry’s willingness to take action against apps that fail to meet security standards. Meanwhile, the Zoho-backed app Arattai has disabled its username feature to comply with government expectations, setting a precedent for other platforms to follow. The IT Ministry’s current directives are likely part of an ongoing effort to standardize security practices across messaging services.