Scrutiny Widens: India Issues Notices to Telegram and Signal Over Username Privacy Features Amid Cybercrime Fears

The Government’s Anonymity Crackdown

The Ministry of Electronics and Information Technology (MeitY) issued strict compliance notices on July 2, 2026. Consequently, authorities granted both messaging platforms a tight three-day window to justify their identity-concealing architectures. While usernames allow individuals to communicate globally without exposing phone numbers, ⁠Indian intelligence agencies harbour heavy security fears. Specifically, they worry that the feature has turned into a shield for international cybercriminals.

Furthermore, government officials are taking a particularly aggressive stance toward Telegram. As a result, they explicitly asked the Dubai-headquartered platform to justify why it should continue offering usernames within Indian jurisdiction. Ultimately, this move marks a dramatic escalation in New Delhi’s tech-regulatory approach. The ministry is shifting from simply reviewing upcoming apps to auditing long-standing, pre-existing features on mainstream software.

Why New Delhi Views Usernames as a Threat

While privacy advocates argue that hiding mobile numbers is essential for whistleblowers and journalists, Indian law enforcement agencies state that the anonymity serves as an operational vector for highly organized digital cartels:

• Scammers routinely create usernames that mirror those of high-ranking police officers, Central Bureau of Investigation (CBI) agents, or tax officials. Consequently, they use these fake profiles to execute psychological extortion scams known as the “Digital Arrest” epidemic.
• Lookalike Institutional Profiles: Bad actors build deceptive handles replicating major banks, public authorities, and government portals to pull unsuspecting users into phishing traps.
• The Shadow of Paper Leaks: The sudden regulatory heat follows a chaotic month for Telegram in India. The app faced a temporary, week-long blocking order ending June 22 after malicious channels actively used username distribution grids to monetise leaked national medical entrance exam (NEET) papers.

Pushback and Privacy Implementations

The sweeping regulatory sweep has split the tech industry. WhatsApp defended its upcoming rollout by uploading extensive security documentation and claiming its system mandates that text originators possess a target’s exact, letter-for-letter username before initiating contact.

Concurrently, civil liberties organizations, including the Internet Freedom Foundation, have publicly condemned the government’s approach. Activists argue that targeting Signal—a non-profit, end-to-end encrypted app relying entirely on donations—undermines basic secure communications for independent journalists under the unproven assumption of a criminal dragnet.

Conclusion

India’s aggressive probe into Telegram and Signal highlights an irreconcilable clash between digital user privacy and state national security demands. MeitY treats identity hiding as an active cybercrime liability rather than a personal protective tool. Consequently, the ministry signals a fundamental shift for foreign tech giants operating in India. These platforms must adapt to the world’s largest consumer market. However, failure to satisfy the ministry’s anti-fraud standards within response windows carries risks. Specifically, India may introduce strict verification mandates. This move could potentially alter username-based communication entirely.