How To Report Online Fraud in Indonesia
Reporting is time-critical rather than merely procedural. Once funds move through several accounts they become very difficult to trace, so the order of the first few actions matters more than the thoroughness of any single report.
How the scam runs
Contact the receiving and sending banks first. Speed matters most here: if the money is still sitting in the destination account, a bank can potentially hold it, and that window closes as the funds are moved onward. Call the number on your card, not one supplied to you.
Then file a police report with the cyber crime unit. This creates the official record that banks and platforms need before they will act on anything substantial, and it is a prerequisite for most formal dispute processes.
Then report to the sector regulator or platform. Investment, lending and insurance matters go to OJK. Payment and e-wallet matters typically involve both the provider and Bank Indonesia's consumer channels. Fraud conducted through a marketplace or social platform should also be reported there, since they can suspend the account and preserve evidence.
Signals that give it away
Anyone offering to recover your money for a fee
Recovery scams specifically target people who have already been defrauded, because victim lists circulate. No legitimate service charges an upfront fee to retrieve funds. This is a second fraud aimed at the same person.
A recovery contact who found you rather than the reverse
Legitimate assistance comes from institutions you approached. Being contacted by someone who already knows you were defrauded means your details are on a list that has been sold.
Pressure to act before you have filed a police report
Anyone genuinely helping will want the official record to exist. Discouraging or bypassing a police report is a sign the intent is to extract more, not to recover anything.
The one rule that stops it
Bank first, police second, regulator third, and gather evidence as you go. Screenshot everything before you delete anything, including the account numbers, phone numbers and full message threads.
These pages describe fraud tactics for defensive awareness and staff briefing purposes. They are general information, not legal or financial advice. If you have lost money, report it through official channels: the police cyber crime unit, your bank, and for investment or lending matters, OJK.
Frequently asked questions
Your bank, immediately. If the money is still in the destination account there is a chance it can be held, and that possibility disappears as funds are moved on. Then file a police report, then go to the relevant regulator or platform.
Related pages
The Malicious APK Sent Over WhatsApp
A file arrives on WhatsApp looking like an invitation, a delivery receipt or a tax notice. Installing it hands an attacker your SMS, your notifications and often your banking access.
Learn moreYou Already Installed It: What To Do Now
The steps that matter in the first hour after installing a malicious APK, in the right order, and the mistakes that make the damage worse.
Learn moreThe Wedding Invitation That Is Not An Invitation
The single most successful disguise for a malicious APK in Indonesia, because a wedding invitation from an unknown number is socially plausible rather than suspicious.
Learn moreTurn awareness into measured behaviour
Reading about scams does not change what people click. Claro runs bilingual simulations across email, WhatsApp, SMS and voice, then measures who is actually resilient.
See how Claro measures it