Voice / vishing

Phone Scams: Fake Police, Tax and Courier Calls

Voice is the channel where impersonation works best, because a confident caller supplies authority that an email cannot. In Indonesia these calls most often claim to be police, tax officials, a courier, or a bank's fraud team.

How the scam runs

The call opens with an identity and a problem: a package held at customs, an unpaid tax obligation, a case file with the recipient's name on it, or a suspicious transaction on their account. The problem is always real enough to be plausible and serious enough to demand attention.

The caller then positions themselves as the only route to resolution, and keeps the victim on the line. This is deliberate: staying connected prevents the victim from calling the organisation back on a real number, which is the single action that would collapse the scam.

The ask follows. It might be a one-time passcode read aloud, a transfer to a holding account, remote access to a device, or personal details to verify identity. Fake bank fraud teams are the most effective variant, because warning someone about fraud is a credible reason to ask security questions.

Signals that give it away

You are told not to hang up, or discouraged from calling back

No legitimate institution needs you to stay on one continuous call. Real organisations expect you to verify them and will happily let you call their published number. Pressure to stay connected exists only to block verification.

Anyone asks for a one-time passcode

No bank, police force or tax office will ever ask for an OTP. The code exists to prove you authorised something. Reading it aloud is authorising the caller's transaction, not confirming your identity.

The caller already knows some of your details

Partial knowledge of your name, address or bank is used to manufacture credibility, and it is cheap to obtain from breaches. Knowing something about you is not evidence of legitimacy.

The one rule that stops it

Hang up and call back on a number you looked up yourself. Every version of this scam fails at that single step, which is exactly why the caller works so hard to keep you on the line.

These pages describe fraud tactics for defensive awareness and staff briefing purposes. They are general information, not legal or financial advice. If you have lost money, report it through official channels: the police cyber crime unit, your bank, and for investment or lending matters, OJK.

Frequently asked questions

  • Vishing, a combination of voice and phishing. It is the same social engineering as email phishing, delivered by phone call, where a confident tone supplies authority that written messages struggle to convey.

Turn awareness into measured behaviour

Reading about scams does not change what people click. Claro runs bilingual simulations across email, WhatsApp, SMS and voice, then measures who is actually resilient.

See how Claro measures it