Bank Indonesia orders DANA investigation into QR code credit card fraud

Bank Indonesia (BI) has ordered the digital wallet provider DANA to conduct a comprehensive investigation following reports of unauthorized credit card transactions via QR code payments. The central bank is monitoring the situation closely and has urged DANA to address system vulnerabilities and strengthen transaction security to ensure authentication standards are met.

Users have reported unrecognized transactions labeled as ‘DANA QR’ occurring without One-Time Password (OTP) verification, even in cases where the victims do not possess DANA accounts. Cybersecurity experts suggest that rather than a direct hack of the DANA application, the issue likely stems from stolen credit card data being linked to perpetrators' accounts. This data may have been obtained through methods such as phishing, web skimming, or infostealers.

Bank Indonesia emphasized that protecting consumer rights is a priority and will continue to oversee the process until affected users are compensated according to legal regulations. Authorities advise the public to monitor transaction histories regularly and report suspicious activity immediately to their issuing banks.