JAMBI | INDATANEWS.COM - The Cyber Investigation Unit of the Special Criminal Investigation Directorate (Ditreskrimsus) of the Jambi Regional Police has uncovered an alleged attack on the digital system of regional bank PT Bank Pembangunan Daerah (Bank Jambi). The attack allegedly resulted in funds belonging to thousands of customers being diverted, with a total value of Rp144.82 billion, before being converted into crypto assets.
During the investigation, police arrested three suspects who allegedly acted as providers of bank accounts and automated teller machine (ATM) accounts to support the operations of a cybercrime network. The three suspects, identified by the initials DD, AA, and TAS, are believed to be from West Java, according to investigators.
The Director of the Special Criminal Investigation Directorate of the Jambi Police, Kombes Pol Taufik Nurmandia, said the investigation began on April 2, 2026, after unauthorized transactions were detected in thousands of customer accounts. The suspicious transactions occurred on Sunday, February 22, 2026.
"Based on the investigation so far, funds belonging to 6,609 Bank Jambi customers were gradually withdrawn from their accounts, converted into crypto assets, and transferred within hours to several wallets located outside Indonesia," Taufik said.
INVESTIGATION PROGRESS: The Director of the Special Criminal Investigation Directorate of the Jambi Police, Kombes Pol Taufik Nurmandia, explains the latest developments in the investigation into the alleged digital attack on Bank Jambi. (PHOTO: Dalil Harahap)
Customer Funds Moved Through Crypto Platforms
The discovery of the case began with a comprehensive investigation conducted by the Cyber Investigation Unit of the Ditreskrimsus of the Jambi Police. Investigators questioned numerous witnesses, carried out digital forensic analyses, and traced the movement of funds through various crypto platforms.
The investigation revealed indications of a network involving several individuals, including foreign nationals, who are suspected of being the main actors behind the attack on Bank Jambi's digital system.
Investigators found that suspect DD played a central role as a coordinator and liaison with two Bulgarian nationals identified by the initials Alcaz and Tsevetanov.
"DD was responsible for recruiting individuals whose identities were used to open bank accounts and crypto accounts. These accounts were later handed over to the foreign nationals and used to manage and conceal funds obtained from criminal activities," Taufik explained.
In carrying out his role, DD was allegedly assisted by TAS, who recruited 45 individuals whose identities were used to establish bank accounts and crypto accounts.
Meanwhile, suspect AA allegedly assisted with administrative procedures, including identity verification, data collection, and the creation of bank and crypto accounts that were later used within the network.
Dozens of Accounts Prepared Since 2025
Investigators found that the suspects had prepared numerous bank accounts and crypto accounts since August 2025. The accounts were created using other people's identities and later transferred to the network operated by the Bulgarian nationals, who were reportedly staying in North Jakarta.
According to Taufik, the perpetrators had planned the attack long before it occurred. Approximately one week before the cyberattack, DD allegedly received information from the foreign nationals regarding the planned attack on a bank.
"About one week before the incident, DD was informed by the foreign nationals that an attack on a bank would take place. After the breach was successfully carried out on February 22, 2026, they contacted DD and informed him that the attack had succeeded," Taufik said.
Following the successful attack, customer funds were gradually transferred through multiple intermediary accounts before being converted into crypto assets. Police believe this method was used to conceal the origin of the illegally obtained funds.
The Jambi Police continue to expand the investigation, including efforts to identify other individuals who may have been involved in the cybercrime network.
SECURING DIGITAL EVIDENCE: Cyber investigators from the Ditreskrimsus of the Jambi Police seize digital evidence and freeze suspected criminal assets worth Rp18.9 billion. (PHOTO: Dalil Harahap)
Police Freeze Rp18.9 Billion in Suspected Assets
During the investigation, the Cyber Investigation Unit of the Ditreskrimsus of the Jambi Police succeeded in freezing assets suspected to have originated from criminal activities, with a total value of Rp18.9 billion.
In addition to securing the assets, investigators confiscated various pieces of evidence related to the digital crime. The evidence included digital forensic documents, several flash drives containing customer transaction data and investigation records, as well as other electronic evidence.
The suspects are facing multiple alleged violations, including Article 32 Paragraph (2) in conjunction with Article 48 Paragraph (2) of Indonesia's Electronic Information and Transactions (ITE) Law, Article 67 Paragraph (3) of the Personal Data Protection (PDP) Law, as well as Articles 20 and 21 of the Indonesian Criminal Code (KUHP).
"The maximum penalty is nine years of imprisonment and a fine of up to Rp5 billion. The investigation will continue to expand, including efforts to locate the two foreign nationals suspected of being the main actors in this case, as well as tracing further financial flows linked to the crime," Taufik emphasized.
The Jambi Police confirmed that the investigation remains ongoing to uncover the entire network behind the digital attack on Bank Jambi, including efforts to track down the two foreign nationals who allegedly played a key role in the attack. (IDNC)
REPORTER: Dalil Harahap | EDITOR: Fik Sagala