Indonesia is a dream destination for many, offering stunning landscapes and vibrant culture. But as digital conveniences like cashless payments become common, so do the risks. A recent alert warns travellers about specific online and payment frauds.
Understanding the QRIS Threat
One
of the biggest conveniences for travellers in Indonesia is the QRIS (Quick Response Code Indonesian Standard) payment system. It's a unified code used by almost every vendor, from high-end restaurants to street-side stalls, allowing for easy cashless transactions. However, its popularity has also made it a target for fraudsters. Cybersecurity experts have issued warnings about scams where criminals place a fake QR code sticker over a legitimate merchant's code. When a tourist scans the fake code, the payment is redirected to the scammer’s account instead of the merchant's. Another tactic involves using malicious QR codes to direct users to phishing websites that steal personal and financial data. These scams rely on travellers being in a hurry or less attentive while on holiday.
The Classic Dangers: Phishing and Fake Bookings
Beyond QR codes, tourists are also prime targets for more traditional online scams. Phishing remains a significant threat, with criminals creating fake websites that mimic official airline, hotel, or tour booking platforms. Unsuspecting travellers might click on a link from a 'too good to be true' deal in an email or social media message, only to enter their payment details on a fraudulent site. Similarly, there has been a rise in fake travel agents and booking scams. Groups of tourists have reportedly been left stranded after paying for tours or accommodation with fraudulent agents who never secured the actual bookings. These scams often occur on social media platforms or through websites that look legitimate but lack proper registration or have fake reviews. Always book directly through official company websites or highly reputable booking platforms.
How to Use QRIS Payments Safely
Despite the risks, QRIS is a useful tool. To use it safely, always take a moment before you pay. When you scan a code, your payment app will display the merchant's name. Pause and confirm that the name on your screen matches the shop or restaurant you are in. Be suspicious of any QR code that looks like it has been tampered with or has a sticker pasted over it. A legitimate QRIS payment will never ask you to enter personal data like a password or PIN directly from a web link. All transactions should happen within your official payment app, such as GoPay, or a compatible international app. Also, enable transaction notifications on your phone to immediately spot any unauthorized payments.
Protecting Yourself from Booking and Travel Scams
The best defence against booking fraud is diligence. Be wary of deals that seem exceptionally cheap or demand urgent payment via unusual methods like a direct wire transfer. Verify the legitimacy of any travel agent or booking site by searching for independent reviews, checking for a physical address, and ensuring the website uses secure 'https' protocol. For tours and activities, book through your hotel, a trusted agency, or the official provider. Fake tour guides and fraudulent entrance ticket sellers are also common near popular attractions. Always aim to buy tickets directly from official counters. When using ride-hailing apps, double-check that the vehicle's license plate and driver's details match what's shown in your app before getting in.
General Digital Security for a Safer Trip
A few general habits can significantly boost your digital security while travelling in Indonesia. Avoid using public Wi-Fi for sensitive transactions like banking or booking travel. If you must use it, a virtual private network (VPN) is recommended to encrypt your connection. Use strong, unique passwords for all your travel-related accounts and enable multi_factor authentication whenever possible. Before your trip, inform your bank of your travel dates to avoid legitimate transactions being flagged as suspicious. Finally, while digital payments are convenient, it's wise to carry a modest amount of local currency (Indonesian Rupiah) for situations where digital payments aren't an option or don't feel secure.
