Intelligence Agency and OJK Tips to Prevent Mobile Phone Hijacking and Bank Account Theft
Cybercrime threats against mobile phone users and bank accounts are increasingly evolving. Perpetrators are now exploiting vulnerabilities that often go unnoticed, including public Wi-Fi networks available in various locations such as shopping centres, cafes, stations, and airports.
This modus operandi can cause victims to lose millions or even tens of millions of rupiah. This situation does not always occur because victims ignore security, but also because many people are unaware that simple habits when using digital devices can provide access to criminals. As Indonesian society’s dependence on mobile phones continues to rise—for everything from shopping and paying bills to transferring money to family—securing the phone is no longer just about protecting personal data, but is a vital part of maintaining family financial security.
A single small oversight, such as leaving Bluetooth enabled or charging via a public socket without a second thought, can have fatal consequences. This is why security guidelines from the US National Security Agency (NSA), which have been summarised and adapted to the Indonesian context, are essential for all levels of society to understand. The ‘Mobile Device Best Practices’ guide released by the NSA contains simple, proven steps to close loopholes exploited by cybercriminals. These steps can be applied to both Android and iPhone devices without the need for additional applications.
Based on NSA findings and experience handling cases in Indonesia, cybercriminals most frequently exploit negligence in matters considered trivial. They do not attack with unimaginable advanced technology, but rather exploit bad habits we perform every day unconsciously. Therefore, the best protection is simple: change habits, tighten security settings, and never feel safe just because a phone is protected by a password.
The Financial Services Authority (OJK) has also summarised specific guidelines so that the Indonesian public can not only protect their devices but also understand how to transact safely. The combined guidance from the NSA and OJK serves as a complete toolkit to protect against almost all types of current cyberattacks. Here is the complete guide:
How to Protect Your Phone:
Use a six-digit PIN and enable the feature to automatically wipe data after 10 failed attempts. Do not use birthdays, sequential numbers, or patterns easily guessed by others.
Turn off Bluetooth after use. Do not leave it on in public places, as it can be used to inject data-stealing programmes from a short distance.
Avoid public Wi-Fi for all financial transactions. Free networks in malls, cafes, airports, and stations are breeding grounds for data theft. Also, delete saved Wi-Fi networks so the phone does not automatically connect to foreign networks.
Avoid charging in public sockets. Public sockets can inject malicious data through the cable. Use only your own cables and chargers.
Install applications only from official stores like Google Play Store or the App Store. Delete unused applications to prevent security loopholes.
Update your operating system as soon as it becomes available. Updates are not just for new appearances, but to patch known security vulnerabilities.
Avoid opening attachments from unknown senders. Ignore pop-up messages that suddenly appear asking you to download something.
Do not modify your phone’s system via rooting or jailbreaking, as this disables all factory-installed protections.
Restart your phone once a week. This simple step clears spyware hiding in the phone’s memory.
Safe Methods for Mobile Banking Transactions:
Never disclose your PIN, password, or OTP code to anyone, including those claiming to be from the bank. Legitimate banks will never ask for them.
Do not store PINs or passwords on your phone in the form of notes, photos, or messages. Memorise them or store them in a place not connected to the internet.
Carefully check the recipient’s name and the amount of money before pressing the confirmation button. A single wrong digit could mean money goes to a criminal’s account.
Always wait for a notification from the bank after a transaction, then read the contents carefully. If there is a transaction you did not perform, immediately contact the bank via the official number on the back of your ATM card, not a number sent via text message.
If your SIM card is lost or falls into the wrong hands, immediately report it to the bank so the number can be blocked from banking access. Criminals can steal your mobile number to take over your entire account.
Always press the ‘Log Out’ button after using a banking application. Do not leave a transaction session open.
When changing phones, ensure all banking application data has been completely deleted before the device is passed to someone else.
Customer Service Numbers for Major Banks in Indonesia:
If you notice suspicious activity in your account or mobile banking app, you can contact:
Bank Mandiri: 14000
BRI: 14017
BNI: 17000
BCA: 1500888
Mobile and account security is ultimately not determined by the price of the phone or the sophistication of the application, but by the user’s discipline in maintaining daily habits.