Beware of Vishing-Phishing, BNI Urges Customers to Safeguard Personal Data

PT Bank Negara Indonesia (Persero) Tbk or BNI is enhancing education for the public regarding the proliferation of cybercrimes, particularly vishing, phishing, and social engineering that target users of digital services such as BNIdirect. Customers are urged to be more cautious and not readily share sensitive data with unverified parties. BNI Corporate Secretary Okki Rushartomo stressed that technological advancements are accompanied by increasingly diverse fraud methods. “The public needs to understand these various fraud tactics to be more vigilant and not easily provide personal data to irresponsible parties,” Okki stated in a written release on Friday (24/4/2026). He explained that one common method is vishing or voice phishing, which involves scams via telephone where perpetrators impersonate bank officials. In practice, perpetrators usually mention the victim’s identity and create an urgent situation, such as a suspected suspicious transaction, to request important data like company IDs, user IDs, passwords, and token codes. This information is then used to access accounts and conduct unauthorised transactions. Additionally, there is the phishing method carried out through fake websites resembling official banking portals. Victims are directed to enter sensitive data, which is then misused by the perpetrators. Another method to watch out for is social engineering, a psychological manipulation technique where perpetrators disguise themselves as bank officials to obtain confidential information such as OTP codes, tokens, or passwords. BNI emphasises the importance of vigilance and verification in every interaction related to digital services. Customers are advised to access services only through official sites like bnidirect.bni.co.id or directbisnis.bni.co.id, and to avoid clicking suspicious links sent via text messages, emails, or chat applications. Furthermore, customers are asked not to store passwords on devices, to regularly change passwords, and never to share OTP codes or tokens with anyone, including those claiming to represent the bank. These steps are considered crucial to prevent account access misuse. BNI also reminds the public to always check information through the company’s official channels, including the official website at https://www.bni.co.id, to ensure the validity of received information and avoid potential scams. Through this enhanced digital security literacy, BNI hopes the public will better understand cybercrime patterns and protect themselves from potential financial losses. Ongoing education is seen as key to maintaining digital transaction security while strengthening customer trust in banking services.