Publication Search

Background: The rapid development of financial technology and the increasing volume of cross-border transactions have led to the emergence of increasingly complex digital financial crimes, involving anonymous actors and exploiting regulatory gaps and jurisdictional differences. This condition poses serious challenges to legal systems, particularly in terms of digital evidence, the attribution of legal liability, and the effectiveness of cross-border law enforcement. Objective: This study aims to reconstruct the framework of civil and criminal liability in digital fraud cases to make it more adaptive, integrated, and responsive to technological developments. Method: The research employs a qualitative socio-legal approach, combining normative analysis of cybercrime regulations, case studies of international digital fraud, comparative analysis of legal systems across countries, and interviews with legal practitioners and fintech regulators. Results: The findings reveal significant legal gaps, regulatory fragmentation across jurisdictions, and weaknesses in electronic evidence systems that hinder effective law enforcement. Additionally, the complexity of actors and technologies within digital ecosystems complicates the accurate attribution of legal responsibility. Therefore, an integrated legal framework is required, incorporating both civil and criminal liability, international regulatory harmonization, and the utilization of technology to enhance law enforcement effectiveness.

This study analyzes online fraud as one of the most common forms of cybercrime in Indonesia, which has expanded alongside rapid advances in information and communication technology. These crimes utilize digital platforms such as social media, online marketplaces, and fraudulent websites to deceive victims for unlawful financial gain. The research aims to examine online fraud from a criminological perspective by identifying its causes, patterns, and relevance to routine activity theory and differential association theory. A normative juridical method is employed, using statutory, conceptual, and case-based approaches, with qualitative and descriptive analysis. The findings show that online fraud reflects a shift from conventional fraud to digital-based crimes, driven by low public awareness of cybersecurity, easy access to technology, and weak online supervision. Several fraud schemes were identified, including online investment scams, phishing, and identity impersonation. This study highlights the need for an integrated approach that goes beyond law enforcement by emphasizing digital literacy, public education, and cross-sector collaboration to reduce cybercrime in Indonesia.

The advancement of information technology has increased very rapidly, one of which can be seen from the use of cell phones as the main communication tool. However, this progress also creates a gap, for the emergence of cybercrime such as fraud through short messages or called Short Message Service (SMS). Fraud via SMS by offering prizes is one form of misuse of information technology that is increasingly prevalent in the digital era. This mode of fraud is often carried out because it takes advantage of the lack of public awareness of information security and tends to target individuals who do not understand how communication technology works. This article discusses how the mechanism of fraud carried out via SMS, the impact caused to victims, and how legal regulations in Indonesia handle prize fraud via SMS. This research uses normative research methods conducted through data collection from various references including journals and laws and regulations. This research is expected to provide a more comprehensive understanding of the role of law in tackling SMS-based fraud and offer solutions that can strengthen consumer protection in the digital era.

The rapid development of digital technology has increased the risk of privacy violations and cybercrimes targeting personal data. This study aims to analyze the role of criminal law in personal data protection and the prevention of cybercrimes in Indonesia, as well as to identify the challenges and strategies for strengthening law enforcement in the digital era. The research method used is a qualitative approach with a juridical-normative method through library research on regulations, particularly Law Number 27 of 2022 concerning Personal Data Protection (PDP Law), as well as related academic literature. The results of the study show that criminal law serves a dual function, acting as a repressive tool through the imposition of criminal sanctions on offenders, and as a preventive instrument in enhancing compliance with data security standards. Although the PDP Law provides a strong legal foundation, its implementation still faces challenges such as the suboptimal functioning of data protection institutions, limited capacity of law enforcement officers, and low public awareness of digital ethics. This study recommends institutional strengthening, enhancement of law enforcement human resource capacity, as well as public education and cross-sectoral synergy to create an effective and sustainable data protection system. Thus, criminal law plays a central role in safeguarding personal data and preventing cybercrimes in Indonesia.

The advancement of digital technology has created new opportunities for cybercrime, including revenge porn the non-consensual distribution of intimate content motivated by revenge. In Indonesia, such cases have surged significantly, predominantly affecting women of productive age, with multidimensional consequences including psychological trauma, social stigmatization, and job loss. This study analyzes the element 'without right' (tanpa hak) in Article 27 paragraph (1) of the Electronic Information and Transactions Law (UU ITE), which is both the core and the main source of legal uncertainty in prosecuting revenge porn cases. Through normative legal research using statute and case approaches, analyzing the Banten High Court Decision No. 96/Pid.Sus/2023/PT BTN, this research finds that the element 'without right' must be interpreted holistically by making a clear distinction between consent to create and consent to distribute. The appellate court decision demonstrates a progressive human rights-based approach, integrating the principle of reasonable expectation of privacy and victimological impacts. However, normative ambiguity continues to create disparities in rulings and disproportionate evidentiary burdens on victims. The research recommends legislative reform through amendment of the UU ITE or enactment of specific legislation on image-based sexual abuse to provide stronger legal certainty and substantive victim protection.

This research examines in-depth legal protection against cybercrime in Indonesia, with a specific focus on ransomware attacks. It also evaluates the 2025 Draft Cyber Security and Resilience Law (RUU KKS) as a measure to strengthen the national cyber defense system. The increase in ransomware cases targeting personal data, public institutions, and vital infrastructure has posed a serious threat to information security and national stability. Although the 2008 Electronic Information and Transactions Law (UU ITE) and the 2022 Personal Data Protection Law (UU PDP) serve as the legal basis, these two regulations do not yet specifically and comprehensively regulate ransomware. This results in challenges in law enforcement and victim protection, both in technical aspects, coordination, and human rights protection. The research method used is normative legal with a qualitative approach, which includes analysis of primary and secondary legal materials, as well as comparisons with regulations in several countries that have more mature ransomware handling mechanisms. The analysis of the 2025 Cyber Security Bill (RUU KKS) indicates that this draft regulation has the potential to strengthen the authority of cyber authorities, mandate reporting of cyber incidents, and impose stricter sanctions on perpetrators. However, implementing this policy requires effective cross-agency coordination, transparent oversight, and synergy between the public and private sectors. This study concludes that the 2025 Cyber Security Bill (RUU KKS) represents a strategic step in building a national cybersecurity system that is adaptive, integrated, and responsive to evolving cyber threats. However, its success will depend heavily on improving public digital security literacy, multi-sectoral collaboration, investment in detection and prevention technology, and guaranteeing human rights protection. These findings are expected to provide input for policymakers in formulating comprehensive and sustainable cybersecurity regulations as a bulwark of national defense in the digital era.

The development of information technology has brought about significant changes in the social, economic, and legal life of global society. On the one hand, digitalization creates efficiency and convenience in various activities, such as financial transactions, communications, and access to information. However, on the other hand, this progress has also given rise to a new form of crime known as cybercrime. Cybercrime differs from conventional crime in that it is committed through electronic systems that can cross national borders and involve a large number of victims. This crime encompasses various forms, such as data hacking, online fraud, and malware distribution. This research aims to examine the development of cybercrime as a form of modern crime in the digital era and to assess the response of Indonesian criminal law to these challenges. The method used is normative legal, with a statutory, conceptual, and case study approach. This research also examines existing regulations, such as Law Number 11 of 2008 concerning Electronic Information and Transactions (ITE) and Law Number 27 of 2022 concerning Personal Data Protection, in addressing cybercrime issues. The research results show that although Indonesia has several regulations related to cybercrime, their implementation still faces various obstacles. Some of the main obstacles include suboptimal law enforcement, limited technology and human resources, and low levels of public digital awareness. Therefore, regulatory reform, institutional capacity development, and increasing public digital literacy are essential. This is part of a national strategy to address cybercrime comprehensively and sustainably, in order to create a safer and more trustworthy digital environment.

This study aims to determine whether the Penal and Non-Penal Integral Policy can be implemented to increase the effectiveness of eradicating online gambling crimes and to determine the obstacles faced by the local government in implementing the Integral Policy on Online Gambling Crimes in Surakarta. This type of research uses empirical legal research, with a descriptive research nature. The research location is at the Surakarta Police, Surakarta City. The types and sources of data in the study consist of two types, primary data and secondary data. Data collection techniques are by observation, interview, and decision study techniques. The results of this study show that the causes of the rampant online gambling in the Surakarta Police area are economic problems, community disobedience to the law, morality factors, low Human Resources (HR), and tradition. The eradication of online gambling in the Surakarta Police area can be said to be effective, although in reality online gambling continues to grow, but during the last five years (2020-2025) there has only been one case file handled regarding online gambling, However, the role of the Police in handling online gambling cases is still limited, so that the perpetrators of gambling are only subject to Article 303 of the Criminal Code concerning gambling. and in handling online gambling cases, there are various obstacles found in the field, both in terms of time, costs and processes that are not easy to imagine.

Indonesia's digital transformation has accelerated dramatically, creating unprecedented opportunities alongside significant cybersecurity challenges. This article examines the current state (das sein) and normative expectations (das sollen) of Indonesia's cybersecurity and data protection legal framework through a comprehensive normative legal analysis. The study reveals critical gaps in existing legislation, particularly the Information and Electronic Transactions Law (UU ITE). It evaluates the potential impact of emerging regulatory frameworks, including the Draft Law on Personal Data Protection (RUU PDP). Using normative legal research methodology, this analysis draws from statutory regulations, policy documents, and comparative legal studies to assess Indonesia's legal preparedness for evolving cyber threats. The findings indicate that while foundational legal instruments exist, significant normative reforms are required to address sophisticated cybercrime, protect individual privacy rights, and maintain national digital security. The research concludes with actionable recommendations for legislative enhancement, institutional strengthening, and public-private collaboration to establish a robust, adaptive cybersecurity legal regime that meets international standards while addressing Indonesia's unique socio-legal context.

This research was conducted due to the rapid development of technology and social media, which have a significant impact, including the increase in cybercrime. Technology is now often misused to commit legal violations, such as extortion through social media. This research employs a Normative Juridical and Empirical approach. The normative approach is conducted by examining regulations and literature, while the empirical approach is through direct interviews with sources. Data is collected through literature studies and interviews. The results show that extortion on social media at the Yogyakarta Police is caused by economic factors and the perpetrators' confidence in technology. Law enforcement is carried out through the stages of reporting, investigation, arrest, inquiry, and the preparation of case files.

The development of digital technology has provided convenience in various aspects of life, but also presents new challenges in the form of cybercrime. One of the increasingly widespread modes in Indonesia is the spread of APK (Android Package Kit)-based malware via short messages offering fake job vacancies or fictitious package notifications. When the victim downloads and installs the application, the perpetrator gains access to personal data and banking accounts, which are then used for criminal acts. This phenomenon causes great financial and emotional losses for the community and tests the effectiveness of criminal law in dealing with technology-based cybercrime. This study uses a normative juridical approach with an analysis of laws and regulations, scientific literature, and actual case studies. The results of the study show that the perpetrators can be charged with Articles 30, 32, and 35 of the ITE Law, as well as provisions in the new Criminal Code. However, the implementation of law enforcement still faces challenges, such as digital evidence, limited investigator capacity, and minimal cross-country cooperation. Therefore, cyber law policy reform, increasing digital literacy in the community, and strengthening coordination between law enforcement agencies are needed.

This study uses a qualitative method to examine the criminal sanctions against phishing crimes under Indonesian criminal law. Phishing is a form of cybercrime committed by deceiving victims into disclosing personal or confidential information such as identity data, bank accounts, or other sensitive details. In Indonesian criminal law, phishing is not explicitly mentioned, but it can be prosecuted under several articles of the Electronic Information and Transactions Law (Law No. 19 of 2016), particularly Articles 35 and 36, which regulate manipulative acts that cause harm to others. Offenders may face imprisonment of up to 12 years and/or fines of up to 12 billion rupiah. Additionally, offenders may be charged under the Indonesian Penal Code (KUHP) if their actions meet the elements of fraud or data theft. This study highlights the need for legal reform to be more responsive to the rapid advancement of digital technology. More specific regulations are needed to ensure legal certainty and provide adequate protection for victims of phishing crimes in Indonesia.

Cyber crime is increasingly prevalent with various modes, one of which is fraud under the guise of lottery prizes. This crime not only causes financial losses but also complicates law enforcement officials in terms of jurisdiction, especially if the perpetrators and victims are located in different regions, even across countries. This research aims to analyze how jurisdiction is enforced in dealing with cyber-based fraud crimes and examine the effectiveness of national legal instruments against the digital fraud mode. The research method used is a normative juridical approach with secondary data analyzed descriptively-analytically. The results show that jurisdictional enforcement in this case still faces technical and legal challenges, especially in the aspect of inter-state coordination and the limitations of domestic legal instruments in reaching cross-border perpetrators. Strengthening international cooperation and updating national regulations are needed to anticipate the dynamics of cybercrime.

Along with the increasing threat of cybercrime, which is predicted to cause losses of up to US$10.5 trillion by 2025 , penetration testing (pentest) has become a crucial strategy for identifying security vulnerabilities. However, the manual pentest process is often time-consuming. This research aims to analyze the role, effectiveness, and challenges of Generative AI (GenAI), specifically GPT-4.1, in accelerating and optimizing the penetration testing process. This research method uses a qualitative approach with a case study on the "PumpkinFestival" VulnHub machine , where GPT-4.1 is integrated into the Kali Linux environment through the ShellGPT tool. The results show that GPT-4.1 can significantly accelerate all stages of the pentest, from reconnaissance to exploitation. GenAI proved effective in analyzing scan results, composing specific payloads, and creating decryption scripts quickly and accurately , while also filling a research gap by evaluating a newer AI model compared to previous studies. The implication is that the integration of GenAI in cybersecurity has great potential to increase the efficiency and effectiveness of security teams in facing increasingly complex threats.

Phishing is an evolving form of cybercrime that targets users' sensitive information through URL manipulation. Conventional detection methods such as blacklists and signature-based approaches have become increasingly inadequate in addressing the dynamic variations of modern phishing attacks. This study evaluates the effectiveness of Recurrent Neural Network (RNN) variants, such Long Short-Term Memory (LSTM), Bidirectional LSTM (Bi-LSTM), and Gated Recurrent Unit (GRU), in detecting phishing threats based on URL data. The methodology involves a Systematic Literature Review (SLR) of scholarly publications from the past ten years, complemented by experimental implementation of the models using a public dataset from Kaggle. Literature findings show that Bi-LSTM consistently achieves the highest accuracy, up to 99%, while GRU stands out for its computational efficiency. Experimental results support these findings, with Bi-LSTM achieving an accuracy of 96.22%, GRU 96.29%, and LSTM 95.43%. Classification metrics indicate that RNN-based models perform very well in detecting benign and defacement URLs, although their performance on phishing URLs remains challenged, particularly in terms of recall. These results confirm that RNNs remain a promising approach for phishing detection systems, especially when integrated into hybrid models with complementary architectures. This study is expected to provide a foundation for developing precise and adaptive AI systems to combat increasingly sophisticated phishing threats.

This article examines the prohibition of gambling from the perspective of the Hadith narrated by Bukhari No. 5787 and its relevance to the practice of online gambling in the digital era. The study employs a qualitative approach with descriptive-analytical methods focusing on the analysis of hadith texts and Indonesian positive law, particularly Article 27 Paragraph (2) of Law No. 11 of 2008 on Electronic Information and Transactions (ITE Law). The findings reveal that online gambling has destructive impacts on individual morality, family resilience, and the economic stability of society. Bukhari’s Hadith strictly forbids all forms of gambling, including invitations to gamble, and offers charity as an alternative act of purification. Although Indonesian positive law regulates online gambling prohibition, challenges remain in its effective enforcement. This article highlights the need for a synergistic approach between religious normative values and state law enforcement to address the phenomenon of online gambling comprehensively.  

This abstract analyzes the urgency of criminal law policy in tackling the rapidly evolving transnational cybercrime. The rapid advancement of information and communication technology has created increasingly complex, cross-border, and difficult-to-detect cybercrime modus operandi. Indonesia, as part of the global community, faces serious challenges in formulating and implementing effective regulations to combat these crimes. This research aims to identify the challenges of criminal law in Indonesia in dealing with transnational cybercrime and to formulate adaptive strategies to strengthen the existing legal framework. Normative-empirical research methods are employed with a case study approach, legislative analysis, and international legal comparison. The findings indicate that the harmonization of national laws with international standards, enhancement of law enforcement capacity, and strengthening of inter-state cooperation are key. Innovation in criminal law approaches is also needed, focusing not only on prosecution but also on prevention and recovery of losses. The conclusion of this study emphasizes the necessity of comprehensive reform in criminal law policy, encompassing substantive, procedural, and institutional aspects, to create a system responsive to the dynamics of transnational cybercrime.

Personal data dissemination is a new type of crime that has emerged in the digital world. The rapid development of technology has led to various innovations in data storage, one of which is through barcode technology. Although it provides convenience, this technology also opens up new gaps in cybercrime, especially the misuse and dissemination of personal data stored in barcodes. The impacts of the spread of personal data include damage to personal reputation due to the widespread dissemination of personal data on the internet, the emergence of cyber bullying and sexual harassment, personal data that has the potential to be sold, and the distress and psychological trauma experienced by victims of personal data dissemination. The purpose of this study is to analyze how law enforcement against perpetrators of abuse of the spread of personal data stored in barcodes is reviewed from the ITE Law and the PDP Law, and identify preventive efforts that can be made to prevent these crimes. This research uses a normative juridical approach method used to examine applicable legal norms related to personal data protection. With a statute approach, books, scientific journals, and the internet. The results showed that, although the ITE Law does not specifically regulate barcode technology, the protection of personal data stored in barcodes is still subject to the provisions of the ITE Law and Law Number 27 of 2022 concerning Personal Data Protection.

The rapid development of digital technology has increased the potential for cybercrime, including cyber scams, which cause major losses to victims both materially and psychologically. In this context, the state is obliged to provide legal protection to victims, but in practice there are still many legal gaps and suboptimal implementation. This study aims to analyze the form of legal protection for victims of cyber scam crimes and the impact of these crimes in triggering secondary victimization. This study uses an empirical legal method with a descriptive-analytical approach that combines primary data from observations and interviews as well as secondary data from legal literature and laws and regulations. The results of the study show that although there is a legal umbrella such as the ITE Law and the Witness and Victim Protection Law, the victim protection mechanism has not been running effectively. The contribution of this study provides urgency for improving regulations and implementing victim-oriented legal protection, as well as the importance of digital literacy and empathy for law enforcement in handling cybercrime cases.

Along with the development of the era, the virtual world or the internet is also growing rapidly. In its development, there must be positive and negative things. The term cyberbullying is the use of technology to intimidate, intimidate, or victimize a person or group and this is one of the negative things from the development of the virtual world or the internet. This study uses a normative legal research method, which examines related issues from a human rights perspective and uses laws and regulations and doctrines as study materials for cases that will be classified as cybercrime/stalking or commonly referred to as cyber harassment. Cyberbullying has various forms and approaches. When viewed from a human rights perspective, cyberbullying is strictly prohibited from being carried out on fellow cyberspace users, which in human rights is regulated in Article 30 of Law No. 39 of 1999 concerning Human Rights which reads: "everyone has the right to a sense of comfort and peace and protection against the threat of fear to do or not do something". In this article it is clearly stated that everyone has the right to obtain a sense of comfort in their lives and peaceful conditions and protection from the threat of fear, which refers to cyberbullying which can share the threat of fear against one person and another.