Beware of Surge in Digital Fraud Ahead of Holiday Allowance Disbursement
The public is urged to increase vigilance against potential cyber attacks targeting Tunjangan Hari Raya (THR) holiday allowance funds. Data from VIDA throughout 2025 shows a significant surge in digital fraud cases occurring just before and during the period of annual allowance disbursement.
This momentum is marked by increased transaction activity and public mobility. Such conditions inadvertently create more opportunities for cybercriminals to carry out their activities amid the bustle of Ramadan preparations.
Niki Luhur, Founder and Group CEO of VIDA, emphasised that current fraud techniques continue to evolve in line with strengthened digital security systems. Perpetrators are known to continuously monitor weak points in user behaviour, particularly in terms of digital literacy.
“Fraud always adapts. Every time defensive systems are strengthened, perpetrators test again, adjust techniques, and return with more complex and systematic methods. They exploit security gaps, weaknesses in public digital literacy, and specific moments to carry out their actions,” Niki stated in a written statement.
Based on VIDA’s findings, there are at least two main modus operandi that the public should be wary of during this THR period:
The first is phishing or smishing. This method is carried out by luring victims to click on illegal links in order to steal personal data such as usernames, passwords, and One-Time Passwords (OTP). Perpetrators often impersonate logistics companies or offer fake Ramadan promotions. This modus has also evolved through the use of fake BTS (base transceiver stations), which allows fake messages to be sent in bulk and appear as if they originate from official institutions.
The second is malware distribution. This modus tricks victims into downloading dangerous applications in the form of APK files. Perpetrators typically send documents that appear relevant, such as package delivery status or digital wedding invitations. Once downloaded, the application can install automatically and allow perpetrators to control the device remotely, including accessing sensitive financial information.
Niki emphasised that in this complex digital era, using passwords alone is no longer sufficient. As a preventive measure, he mentioned two main aspects that the public must protect: physical devices (mobile phones/laptops) and biometric identity. This step is crucial given that electronic devices are now the main gateway to financial services. Additional protection on devices is very necessary to ensure that important access is not easily breached by outsiders.
As part of education efforts, VIDA continues to promote the #DontJustClick movement. The public is urged to be more careful, not to carelessly click on links from unknown numbers, and not to share personal information with anyone in order to avoid falling into the trap of digital fraud during the holidays.