If fraudsters are already exploiting phone numbers, can restricting WhatsApp’s username move really protect users from abuse?