Two digital fraud methods to watch out for as the THR disbursement approaches

Jakarta — Ahead of the THR disbursement week for many workers as Eid approaches, digital fraud aimed at it is rising. Data such as VIDA’s findings throughout 2025 show a spike in digital fraud cases occurring most around the lead-up to and during THR disbursement. This momentum is marked by increased transaction activity and mobility, indirectly opening more opportunities for perpetrators to carry out their actions. Therefore, VIDA founder and Group CEO Niki Luhur, in a statement received in Jakarta on Sunday, urged the public to be more vigilant and to familiarise themselves with the types of digital fraud that may occur to avoid being ensnared. “Fraud always adapts. Each time defence systems are strengthened, perpetrators re-test, adjust techniques, and return with more complex and systematic methods. They exploit security gaps, weaknesses in digital literacy among the public, and certain moments to carry out their actions,” said Niki.

The first is phishing or smishing. This method involves various ways of tempting victims to click links and enter personal data such as usernames, passwords, and One-Time Passwords (OTPs) via SMS. For example, perpetrators may impersonate a logistics authority or send messages from unknown numbers offering fake Ramadan promotions.

This modus operandi has also evolved through the so‑called fake BTS method, which last year was widely reported and identified by the Government. This fraud method allows mass-distributed fake messages that appear to originate from official institutions, making them convincing to recipients and therefore something to be wary of.

Next, the second fraud method is malware. This method lures victims into downloading malicious apps in the form of APK files. The techniques used vary, with the most common being that perpetrators send documents that appear to be important, such as package delivery status documents, wedding invitations, or other documents that seem relevant to the victim.

Both methods share a similar pattern in that they seek access to passwords or user credentials. This shows that passwords alone are no longer sufficient as a security defence in an increasingly complex digital era.

To prevent these frauds from entangling the public during the Eid period this year, Niki notes there are two aspects to protect: the devices in use and biometric identity. Both are closely linked because the devices—smartphones, tablets, or laptops—may store access to digital identities that today are essential as gateways to crucial services such as financial services.

Therefore, providing extra protection for the devices is important so that these frauds do not breach crucial access.

VIDA also promotes a movement called #JanganAsalKlik so the public can be more careful in the lead-up to the THR disbursement, when receiving digital messages. The public should not click links indiscriminately, download apps, or share personal information to avoid falling prey to these fraud patterns.