What we see in scam data, malware campaigns and bank controls, written for fraud and security teams. Every post is published in English and Bahasa Indonesia.
We cite every figure and correct errors when we find them. Tell us at contact@mosecure.id.
Indonesia's financial intelligence unit says criminal networks are moving to smaller, more frequent and more ordinary-looking transactions. When every transaction looks normal, detection has to look beyond the transaction.
ReadEach of these beliefs is partly true, which is why they survive. Here is where each one stops holding, and what to do instead.
ReadPhishing arrives, the customer responds, the device is compromised, credentials are stolen, the transaction is submitted. By the time the fraud engine sees step five, the first four have already happened out of sight.
ReadA fake base station puts a convincing bank SMS straight onto the victim's phone. The message is only the first step; the losses come from what attackers do with the data next.
ReadIndonesia's Anti-Scam Centre has blocked hundreds of billions of rupiah. Set against reported losses, it is still a small fraction, and the reason is timing.
ReadA campaign reported this month runs a copy of the victim's banking app in a hidden Android work profile. Malware checks in one profile never meet the fraud happening in the other.
ReadIn 2023 the fake wedding-invitation APK stole SMS codes. By 2026, malware drives the phone itself. SMS OTP was built for the first threat, not the second.
Read
MoSecure