2026 Indonesia survey of banking leaders on fraud risk

Indonesia’s rapid shift toward real-time, cashless payments is transforming the country’s banking landscape. Quick Response Code Indonesian Standard (QRIS) has unified QR payments under a single standard, while Bank of Indonesia Fast Payments (BI-FAST) has made instant, 24/7 transfers the norm. But as digital payments grow, so do the opportunities for fraudsters.

Social engineering scams and authorized push payment (APP) fraud are among the leading threats, with social media the leading channel for targeting victims. For banks, one of the biggest challenges is distinguishing legitimate customer activity from transactions made under the influence of scammers.

Based on a survey of 100 fraud and financial crime leaders at banks across Indonesia, this report explores where fraud teams are feeling the greatest pressure, which threats concern them most, and how prepared they feel for the regulatory and technological shifts ahead.

In these results, you’ll discover:

• Fraud attempts and losses are rising: More than two in five Indonesian respondents report increasing fraud attempts (43%) at their institution, while a similar share (42%) report rising fraud losses.
• Social engineering tops the list of fraud concerns: Nearly three in five respondents (59%) rank social engineering among their top three fraud threats, with almost a quarter (23%) identifying it as their single biggest concern.
• Indonesia reports some of the lowest annual fraud losses globally: Indonesian banking leaders report among the lowest fraud losses of any country surveyed, with just 34% estimating their institution loses more than $10 million annually.
• Banks are investing in fraud prevention despite confidence in existing controls: While 83% of respondents say their current fraud controls are effective, more than half (55%) are actively evaluating, procuring, or implementing new fraud prevention solutions, and another 40% are considering upgrades.
• Banks report readiness for evolving payment requirements: Nearly two-thirds (63%) of respondents say their institution is fully or mostly prepared for QRIS/BI-FAST security requirements and increasing fraud-liability expectations, while 35% describe their organization as only partially prepared.