In the wake of a series of skimming cases last week, lenders have taken efforts to strengthen their security systems and advise customers to take precautions. (B1 Photo/David Gita Roza)

Credit Card Skimming in Indonesia: What to Do When Your Bank Account Gets Compromised


MARCH 21, 2018

Jakarta.  In the wake of a series of credit card skimming cases last week, lenders have taken efforts to strengthen their security systems and advise customers to take precautions.

On March 12, at least 87 customers of state-controlled lender BRI in Kediri, East Java, reported funds ranging from Rp 500,000 to Rp 10 million ($700) had been withdrawn by third parties.

The unfortunate customers fell victim to skimming devices, installed at ATMs or electronic data capture machines, that can read and copy personal information from inserted credit and debit cards. This week, the National Police arrested six individuals implicated in the case from Bulgaria, Romania and Hungary, stoking concerns that the Southeast Asian country may now be targeted by international criminals.

"We continue to remind customers to change their ATM pins regularly," BRI corporate secretary Bambang Tribaroto said. The lender also sought to strengthen its security system by implementing biometric sensors to allow authentication by using a customer's fingerprint, or scanning his or her retinas.

BRI president director Suprajarto said the lender has paid back all of the stolen funds to victims, totaling Rp 100 million.

However, should you find out that your account has been compromised, follow these steps below to retrieve stolen funds and ensure security for your money.

1. Call Your Bank or Visit One of Their Branches

Customers must dial their lender's call center to block their cards upon learning that their accounts have been compromised. Appropiate phone numbers can typically be found on the back of your credit or debit card.

Bring relevant documents with you to prove your identification, and remember to report the fraudulent activity to your bank no more than 20 days after the incident.

2. Report to Bank Indonesia or OJK

Customers can report their cases to Bank Indonesia's Consumer Protection Payment System division on the eighth floor of the central bank's offices in Central Jakarta and bring required documents. Bank Indonesia is able to reimburse funds up to Rp 500 million in losses.

Bank Indonesia also has the authority to impose sanctions on lender or banks that do not have adequate safety systems. Sanctions range from a mere warning to the suspension of banking permits.

Customers can dial 1-3-1 or send an email to

Customers are also able to visit the Financial Services Authority (OJK) office in Central Jakarta, call 15-00-655, or send an email to to report any fraudulent activity.

3. Report to BPSK

If the central bank or OJK cannot resolve a case, customers can contact and report to the Consumer Dispute Resolution Agency (BPSK). The agency aims to monitor and protect consumers against irresponsible lenders and business players.

BPSK operates under the directorate general of standardization and quality control at the Ministry of Trade.

4. Seeking for legal counsel

Customers are able to seek legal assistance by hiring a lawyer, who can file a legal notice to lenders.

5. Report to Police

Customers can also file a police report within three months after an incident. Most telecommunications information and data ARE only stored on bank servers for up to three months.

After filing A report, customers must obtain a report letter from the police as a receipt.