Police Uncover International Phishing Tool Sales Syndicate, Losses of Rp 350 Billion
The Cyber Crime Directorate of the National Police Headquarters (Polri) has uncovered a network providing cyber fraud software or phishing tools. This illegal network operates across borders.
Deputy Chief of the National Police Criminal Investigation Agency, Inspector General Nunung Syaifudin, stated that Polri arrested two suspects with initials GWL and FYTP in Kupang, East Nusa Tenggara (NTT). The global losses from this illegal practice amount to Rp 350 billion.
“Investigators have successfully uncovered an international phishing tools sales network. The suspects’ actions have caused global losses of around USD 20 million, or approximately Rp 350 billion,” said Inspector General Nunung Syaifudin during a press conference at the National Police Criminal Investigation Agency building in South Jakarta on Wednesday (22/4/2026).
Nunung explained that the case was uncovered through cyber patrols. The site was found to be trading software for illegal activities.
“This case was uncovered starting from cyber patrols that found the site www.3ll.cc, which trades phishing tools,” he clarified.
According to Nunung, investigators then conducted in-depth investigations using undercover buy methods or covert purchases using crypto assets to verify the software’s functionality. The results showed that the tool was used for phishing or illegal access to other people’s personal data.
Based on investigators’ data, this network has a very wide reach. From 2019 to 2024, thousands of people have been recorded as purchasing the illegal tools.
“In this uncovering, investigators have successfully exposed an international phishing tools sales network. Investigators have also identified 2,440 buyers during the period from 2019-2024,” said Nunung.
Victims are estimated to number 34,000 globally. From the suspects, investigators seized evidence and criminal proceeds worth Rp 4.5 billion.
“Other activities by investigators include seizing evidence and criminal proceeds worth Rp 4.5 billion,” he stated.
Nunung said that phishing tools pose a serious threat. They serve as an entry point for various larger cybercrimes.
“Cybercrime today has evolved into organised cross-border crime. Phishing tools traded by perpetrators become entry points for various other digital crimes, such as online fraud, data theft, and Business Email Compromise (BEC),” he remarked.
The National Police Criminal Investigation Agency is also collaborating with the Federal Bureau of Investigation (FBI). This is done due to the organised and cross-border nature of cybercrime. Nunung emphasised that Polri will not tolerate cybercrime perpetrators in Indonesia.
“Increase vigilance against cybercrime. Never provide personal data to unclear parties, and report immediately if suspicious activities are found in the digital space. We, Polri, are committed to continuing to protect the public and maintain security in Indonesia’s digital space. There is no more room for cybercrime perpetrators in Indonesia,” he concluded.