Lianhe Zaobao, WhatsApp用户名功能上线 保护隐私升级还是诈骗新漏洞？

(Summarised translation)

WhatsApp, the messaging app with 3 billion users worldwide , has launched a new feature that allows users to create their own usernames and contact other users without having to disclose their phone numbers, further enhancing personal privacy protection.

WhatsApp’s parent company, Meta, announced on Monday (June 29) that it will roll out the new username feature globally in phases over the next few months. Lianhe Zaobao found that some Singaporean users are already able to create their own usernames.

But what exactly is this new feature? Does it truly enhance privacy and account security, or could it be exploited by criminals as a new tool for crime?

Dr Victor Keong, a senior lecturer in Information Systems Technology and Design at the Singapore University of Technology and Design, pointed out that this feature does indeed help improve security, making it more difficult for fraudsters to find victims on a large scale. “They can no longer simply purchase a database of phone numbers and send fraudulent messages to tens of thousands of users as they did in the past.”

Dr Keong suggests that usernames should be simple and easy to remember, but should not contain any real identity information, such as real names, company names, or phone numbers; otherwise, the purpose of protecting privacy is lost. Ideally, a random and easy-to-remember combination of letters and numbers should be used, such as sg_client_4729. If you are worried about forgetting, you can save the username in a password manager.

Although social media platforms Facebook, Instagram, and WhatsApp are all owned by Meta, Dr Keong suggests that users should not directly use their Facebook or Instagram account names as their WhatsApp usernames to reduce the risk of their accounts being linked across different platforms, thus increasing the risk of personal information exposure and identity verification.

Dr Keong also pointed out that since usernames may not necessarily correspond to real names, new cybersecurity issues may arise, and criminals may use this to trade contraband, drugs, or other illegal goods in the future.