Inp.polri.go.id - Jakarta. The Indonesian National Police (INP) and the FBI have uncovered a cross-border phishing syndicate that targeted 34,000 victims globally. 

Authorities arrested a couple, identified as GWL and FYT, in Jakarta on Wednesday (22/4/2026) for developing and selling malicious scripts that successfully bypassed Multi-Factor Authentication (MFA), resulting in estimated losses of $20 million.

"The INP will not provide space for cybercriminals. Anyone involved, whether creators, sellers, or users, will be dealt with firmly," said  Inspector General Nunung Syaifuddin, the Deputy Chief of the Criminal Investigation Agency, as cited by antaranews.com.

Investigations revealed that suspect GWL, a self-taught developer, had been creating phishing tools since 2018, while suspect FYT managed the proceeds via crypto wallets. The syndicate's tools compromised 17,000 accounts, affecting victims in the United States and nine Indonesian corporate entities.

Both suspects face up to 15 years in prison under the Electronic Information and Transactions (ITE) Law for their roles in enabling massive digital fraud and Business Email Compromise (BEC) schemes.

(mg/inp/pr/rs)