Cybercrime Grows More Complex, AI Becomes the New Guardian of Digital Wallet Security

The rise in digital transaction activity has made account and personal data security a primary concern for digital financial service providers, including OVO. Amid the evolution of various cybercrime methods, OVO is leveraging artificial intelligence (AI) technology as an additional security layer to help protect users from digital threats. The use of AI in OVO’s security system is not only directed at detecting suspicious transactions. The technology is also used to recognise digital document manipulation, map indications of fraud networks, and identify evolving social engineering patterns. Threats to digital service users are now increasingly diverse. Methods frequently exploited by cybercriminals include misuse of one-time passwords (OTP), account takeover, distribution of fake links, and malware that infects user devices. This situation means transaction protection cannot rely solely on user vigilance. A multi-layered security system that works automatically behind the scenes is also necessary so that potential risks can be detected more quickly. To address these challenges, OVO has developed a security system based on three main layers: user authentication, a Fraud Detection System (FDS), and the use of AI as an additional layer of protection. These three components are designed to help maintain account security, protect personal data, and ensure transactions take place more safely within the OVO ecosystem. In OVO’s security system, the use of AI is focused on detecting various forms of digital manipulation that are increasingly difficult to recognise manually. This technology can identify indications of document or image forgery uploaded by users, such as fake transfer receipts or identity manipulation. AI is also designed to recognise images engineered using Generative AI. With this capability, potential fraud can be prevented from the initial verification process. The AI capabilities developed by OVO do not stop at the document verification process. The technology is also used to analyse transaction patterns and relationships between accounts to identify indications of organised fraud networks. Through anomaly mapping, the system can help accelerate restriction or mitigation measures against activities deemed risky. Thus, user protection can be carried out more effectively. AI also helps OVO recognise the development of constantly changing social engineering methods. Through analysis of reporting trends and activity patterns, the system can identify new fraud scenarios, including methods impersonating customer service, the spread of fake links, and attempts to obtain PINs, OTPs, or confidential user data. This approach enables prevention and education measures to be implemented more quickly before similar methods spread more widely. Although relying on AI, OVO still places user authentication as the first layer of protection. The application implements the use of a PIN as a secret code for every transaction, OTP as additional verification for login activity or certain access, and biometric authentication via fingerprint or facial recognition on supported devices. The combination of these mechanisms helps ensure account access is performed by the legitimate owner while minimising the risk of unauthorised access. Meanwhile, OVO’s FDS works automatically to monitor activity behind the scenes to recognise unusual transaction patterns. If the system finds indications of suspicious activity, OVO can request additional verification, restrict certain access, or execute other security measures according to the detected risk level. This system can also recognise access from new or unrecognised devices as an effort to prevent account takeover. OVO’s FDS is also equipped with the ability to detect devices that have been modified through rooting or jailbreak processes, as well as devices indicated to be infected with malware. Under certain conditions, access to the application can be restricted or halted as a protective measure. This step is taken to help prevent data theft, account takeover, or unauthorised transactions. OVO’s commitment to information security is also reinforced through the achievement of international certifications ISO 27001:2022 for Information Security Management System, and ISO 27701:2019 for Privacy Information Management System. These certifications are recognition that OVO implements information security governance and privacy protection referring to international standards, while aligning with applicable cyber security and personal data protection regulations in Indonesia. Although supported by increasingly sophisticated security technology, account protection still requires the active role of users. OVO urges the public to maintain the confidentiality of PINs and OTPs, avoid suspicious links, not download applications from unofficial sources, and ensure devices are not illegally modified. Users also need to be wary of parties impersonating customer service and requesting personal data, PINs, OTPs, passwords, or access to devices. OVO asserts that it never requests such confidential information via telephone, short messages, chat, or links outside official channels. Going forward, OVO stated it will continue to develop the use of AI, strengthen application security systems, and enhance digital security education. This effort is aimed at making the public more confident in utilising digital financial services for various daily needs.