Indonesia has four reporting routes for online fraud, and they are genuinely different services rather than four doors into one office. Which one to use depends on whether money moved, whether you want a police case, and whether the thing you want stopped is a bank account or a web page.
If money moved: IASC
The Indonesia Anti-Scam Centre at iasc.ojk.go.id is the route for scams in the financial sector where you have lost money. It sits with the financial services authority, which is what makes it useful: it can reach the banks and payment providers holding the account your money went into, and accounts tied to a reported fraud can be blocked.
Speed is the whole point. Report on the day it happens if you can. Have the transfer details ready — the destination account number and bank, the amount, the date and time, and the reference from your own transfer receipt — plus screenshots of the conversation that led to the payment.
If you want a police case: Patroli Siber
Patroli Siber at patrolisiber.id is the police route, run by the criminal investigation agency. Use it for the crime itself rather than the money: fraud, account takeover, blackmail, the sale of things that never arrive.
One warning that belongs at the top rather than the bottom. Report through the site itself. There are social media accounts and WhatsApp numbers using the cyber crime unit’s logo and offering to “process” your report faster; they are part of the fraud, and a second scam aimed at people who have already lost money is one of the most common patterns there is. The police do not take online fraud reports through WhatsApp.
Before you pay anyone: CekRekening
cekrekening.id does two things, and the first one is the one more people should use. Periksa Rekening checks whether a bank account or e-wallet has already been reported for fraud. It takes fifteen seconds, and it is worth doing before any transfer to someone you have not met, whether that is a marketplace seller, a rental deposit or an investment.
The second is Laporkan Rekening: reporting an account you believe was used for fraud, with the transfer evidence attached. That is what makes the first half work for the next person who checks the same number.
For the link, the profile or the content: AduanKonten
aduankonten.id handles illegal content — the fraudulent page, the fake shop, the impersonating profile. You have to register before you can file, and a report is processed when it carries three things: the address of the content, a screenshot, and your reason for reporting it.
Keep the ticket code you are given. It is the only way to follow what happened to the report.
What to have ready, once, for all four
Every one of these asks for the same core evidence, so gather it once. Screenshots of the whole conversation, including the profile name and number. The destination account or e-wallet number. Your transfer receipt. The address of any web page involved, copied rather than retyped. The date and time of each step.
Take the screenshots before you block anyone. Blocking first feels right and destroys the evidence you are about to be asked for.
What these routes do not cover
None of them takes a scam page offline. A page that is still loading is being served by a hosting provider under a domain name sold by a registrar, and those two are the ones who can remove it. An abuse report to the host, with the exact address and one line about what the page does, is usually the fastest takedown there is — and it is entirely separate from any government complaint.
And none of them will call you back with a verdict. A ticket code and a status is what you get. That is worth having anyway: a bank asking why you are disputing a transfer wants a reference number, not a story.
If you gave them something
Change the password on the real service immediately, and anywhere you reused it. If you passed on an OTP, treat the account as already open to somebody else and go through the provider’s recovery process rather than just changing the password. If you installed an APK sent to you in a chat, the phone itself is the problem now: uninstall it, check for apps with accessibility or SMS permissions you did not grant, and change your mobile banking credentials from a different device.
Leave a Reply