Rising Cyberthreats for Travelers in Indonesia
Indian travelers planning trips to Indonesia are advised to exercise extreme caution due to a significant rise in cyberthreats. Cybersecurity firm Kaspersky has issued a warning regarding prevalent online payment scams, including fraudulent payment links, phishing websites, and malicious QR codes, targeting tourists utilizing digital services for bookings and transactions.
Data from Kaspersky reveals a substantial number of web threat detections in Indonesia between the third quarter of 2025 and the second quarter of 2026, totaling 12,926,883. This highlights the critical need for digital safety awareness among visitors who rely on online platforms and public networks during their travels.
Understanding the Scams: QRIS and Data Theft
A primary concern for tourists is fraud targeting Indonesia's national QR payment system, QRIS, which is widely adopted by local vendors. Kaspersky's Global Research and Analysis Team (GReAT) identified instances where scammers replace or cover legitimate merchant QR codes with fraudulent ones. These tampered codes can redirect payments to criminal accounts or steal sensitive financial details.
Beyond QRIS fraud, other threats detected by Kaspersky include 559,924 password stealer detections, 481,008 spyware detections, and 2,847,403 backdoor detections within the same period. Password stealers aim to collect login credentials, spyware monitors user activity and accesses confidential information, while backdoors provide unauthorized access to infected devices.
Noushin Shabab, Lead Security Researcher at Kaspersky's GReAT, emphasized that tourists are attractive targets because their focus is typically on discovery, not cybersecurity. She noted that cybercriminals exploit unfamiliar digital services, new locations, and the quick decisions travelers often make. Understanding destination-specific threats is crucial for data protection.
Essential Safety Measures for Tourists
To mitigate risks, Kaspersky recommends several protective measures:
- Direct Bookings: Always book flights, accommodation, and transport directly through official websites or applications. Avoid clicking links received via email, text messages, or social media, which could lead to phishing sites.
- Strong Security Practices: Use strong, unique passwords for all online accounts and enable multi-factor authentication (MFA) wherever possible. Download applications exclusively from official app stores to avoid malicious software.
- Vigilance Against Deals: Be wary of offers that seem too good to be true, especially those demanding urgent payments through unusual or unverified methods.
- Public Wi-Fi Security: When using public Wi-Fi networks, consider employing a virtual private network (VPN) to encrypt your internet connection and protect your data from interception.
- Transaction Monitoring: Regularly check your bank and credit card statements for any unrecognized transactions, especially after making bookings. Report any suspicious activity to your bank immediately.
- Verify QR Codes: Before confirming a QR code payment, carefully verify the merchant details displayed and physically inspect the QR code for any signs of tampering.
By adopting these precautions, travelers can significantly enhance their digital safety and enjoy their Indonesian experience without falling victim to prevalent online payment scams.