WhatsApp swapped its six-digit PIN for a full alphanumeric password on 25 August. The same update began telling users what it knows about callers they have not saved. The technology press filed the change under account hygiene. In India, Brazil and Indonesia, where a brand’s shopfront is a chat account, it is a specification change to the shop.

The caller feature is the retail one. On Android, a call from an unsaved number now arrives with two facts attached: whether the number is from a different country, and whether the two of you have any groups in common. Sensible tests of a stranger. They are also the two tests a brand account fails by design.

Take the group test. Meta caps a business group at eight participants and ten thousand groups per number, and calling does not work inside them. The ceiling is tens of thousands of customers, which for a retailer is a rounding error. The signal was built for people who already know each other, and it will go on reading honest brands as strangers.

Meta’s calling rules put a price on the hesitation. A business may place a hundred calls per user per day; two unanswered in a row trigger a system message about reconsidering the permission, and four revoke it automatically. A phone left ringing is no longer a deferred sale. At four, it is a closed line.

A brand can buy the badge; it cannot buy the half-second before a customer decides to answer.

Meta sells the badge and the protection together, though the bundle predates this update by two years. Meta Verified for WhatsApp businesses bundles the verified mark with impersonation protection, and it launched in 2024 in Brazil, India, Indonesia and Colombia — the markets where the chat account is the business.

The retailer subscribes to being itself, from the company that also now runs a school for the brands it verifies.

June’s username rollout showed how the lease reads: Meta reserves handles for public figures and government entities so that only legitimate owners can claim them.

TechCrunch found “ambanijio” and “rbi_verify” still free to anyone who asked. Brands were not named on that list.

India’s IT ministry pushed back on the rollout, warning that usernames detached from phone numbers would widen impersonation; WhatsApp has filed a written response and the review is still open. Rest of World put the exposed base at more than 850 million users. Retailers whose entire shopfront is one of those accounts have no ministry filing on their behalf.