Fake e-Ticket SMS Scam Syndicate Impersonating the Attorney General's Office Uncovered, Mastermind is a Chinese National
JAKARTA, KOMPAS.com - The Indonesian National Police’s Criminal Investigation Unit (Bareskrim) has uncovered a syndicate involved in online fraud through phishing SMS blasts impersonating e-tickets.
In the investigation, the police have named five suspects who were found to be controlled by a foreign national from China.
The Directorate of Special Cyber Crimes (Dittipidsiber) of the Indonesian National Police’s Criminal Investigation Unit revealed that the perpetrators impersonated the Attorney General’s Office to deceive victims.
“The disclosure of this cybercrime case involving SMS blast modus operandi is through the use of fake phishing links using the e-ticket modus operandi, impersonating a government institution, namely the Attorney General’s Office of the Republic of Indonesia,” said the Director of Special Cyber Crimes of the Indonesian National Police’s Criminal Investigation Unit, Brigadier General Pol Himawan Bayu Aji, in a press conference at the Indonesian National Police’s Criminal Investigation Unit building, Jakarta, Wednesday (25/2/2026).
Himawan said that the phishing links were made to resemble the official website of the Attorney General’s Office’s e-ticket payment system.
This case was revealed after reports from the public and the Attorney General’s Office in December 2025.
From the results of cyber patrols, investigators found at least 124 phishing website links that looked very similar to the official e-ticket website of the Attorney General’s Office.
One of the victims reported losing funds from their credit card after clicking on a link from an unknown number.
According to Himawan, the victims were directed to a fake e-ticket website that looked like the official website.
Because they believed the website was genuine, the victims then entered their personal data and credit card data.
The police arrested five suspects in several locations in Central Java and Banten.
They are WTP (29), FN (41), RW (40), BAP (38), and RJ (29).
Himawan explained that WTP played the role of the main perpetrator who operated the devices and carried out SMS blasts since September 2025.