AI-driven bank account fraud using deepfake verification in Indonesia
Indonesian police arrested two suspects in February 2025 for creating bank accounts using others' personal data without permission and AI-generated deepfake facial verification videos. The fraud occurred from May to June 2024 in Jakarta; a bank employee detected anomalous transaction patterns during loan application verification.
What happened
Between May and June 2024, suspect PM and MR orchestrated fraudulent bank account creation in Jakarta Selatan using others' personal data without consent.
PM used an AI-powered website to create deepfake facial verification videos, then submitted these with stolen identity data to appear as legitimate account owners during bank verification processes.
MR supplied PM with the personal data, including full names, dates and places of birth, gender, employment, addresses and mothers' names, which was obtained without authorization from the actual data owners.
Reported impact
A bank employee responsible for detecting anomalous transaction patterns discovered the fraud through suspicious activity on multiple accounts during loan application verification.
The bank filed a report with Polda Metro Jaya, leading to the investigation and discovery of fraudulent accounts created through this method.
Index analysis
The case reveals vulnerability in bank account verification systems that relied on facial recognition without sufficient safeguards against deepfake videos and identity spoofing.
Governance controls
Suspects PM and MR were charged under Articles 51(1) and 35 of Indonesia's Information and Electronic Transactions Law (Law No. 11 of 2008, as amended by Law No. 1 of 2024), carrying maximum penalties of 12 years imprisonment or Rp 12 billion in fines.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.