Indonesia: Phishing Scam Targeting Digital Social Security Registration Spreads on Social Media

Overview of the Scam

Indonesia's Kulon Progo District Social Welfare Office (Dinsos P3A) has issued a warning about phishing scams exploiting the Digital Social Security Protection Registration (Perlinsos Digital) program. The fraudsters take advantage of the credibility of the official 2027 social benefit recipient database registration initiative.

How the Scam Works

Fraudsters use the following methods to target victims:

Distribution Channels

• Fake links spread through WhatsApp, Facebook, Instagram, and TikTok
• Messages disguised as communications from trusted contacts

Information Targeted for Theft

• National Identity Number (NIK)
• Photographs of national ID cards
• One-Time Passwords (OTP)
• Bank account PINs
• Digital Identity System passwords

Once fraudsters obtain this information, victims risk unauthorized access to bank accounts, fraudulent loan applications filed in their names, and identity theft.

Warning Signs and Red Flags

Verify the Official Access Method

• The legitimate social security registration portal uses Indonesia's official government domain ending in .go.id
• Links sent via social media are not from the official program

Suspicious Requests to Watch For

• Government officials and program agents will never request OTP, PIN, or passwords via phone, SMS, or social media
• Messages creating false urgency (such as "register now or lose your benefits") are typical phishing tactics

Identifying Fraudulent Communications

• Check for grammatical errors or unnatural language in messages
• Compare the registration website's design and layout with known legitimate versions
• Be wary of unofficial sender accounts or unknown phone numbers

Prevention Steps

1. Access Only Through Official Channels

   • Never click links from social media
   • Always navigate directly to the official .go.id domain website
   • Bookmark the official registration portal to avoid clicking suspicious links

2. Protect Personal Information

   • Never share OTP codes, PINs, or passwords with anyone
   • Do not send copies of government-issued IDs through unsecured channels
   • Assume that official personnel will never request sensitive credentials

3. Verification and Confirmation

   • When in doubt, contact your local Social Welfare Office directly using verified contact information
   • Independently verify any important information received through unofficial channels
   • Ask questions before providing any personal data

4. Respond to Suspicious Messages

   • Do not click unknown links or attachments
   • Delete or report suspicious messages as spam
   • If you suspect phishing, close the page immediately without entering any information

Reporting and Support

Residents of Kulon Progo District can report suspected phishing activity through:

• Local Social Welfare Office (Dinsos P3A) directly
• Indonesian National Police (Polri) cybercrime units
• Local government administrative offices

Community awareness and prompt reporting are essential in reducing the impact of such fraud schemes.