Kabar Gemerlap - Bank Indonesia (BI) is conducting a deep dive into the exploitation of Quick Response Code Indonesian Standard (QRIS) for illicit online gambling transactions, revealing a coordinated effort to safeguard Indonesia's digital payment ecosystem. This investigative report uncovers the gravity of the issue and BI's strategic response.

Deputi Gubernur BI Filianingsih Hendarta emphasized the urgency of addressing QRIS misuse, citing the need to preserve the integrity of Indonesia's digital payment infrastructure. "QRIS for gambling is a serious concern. As a national standard, we must ensure this ecosystem remains trustworthy," Hendarta stated during a recent briefing.

"QRIS for gambling is a serious concern. As a national standard, we must ensure this ecosystem remains trustworthy," Hendarta said.

Four Strategic Measures to Combat QRIS Exploitation

1. Enhanced KYC Verification
BI mandates that Payment Service Providers (PSPs) and aggregators implement rigorous Know Your Customer (KYC) protocols during merchant onboarding. This includes thorough background checks and verification processes to prevent illicit actors from infiltrating the system.

2. Advanced Transaction Monitoring
BI is pushing for upgraded transaction monitoring systems capable of detecting anomalous patterns. For instance, continuous transactions during non-business hours—such as midnight QRIS usage for street food vendors—trigger immediate investigations.

"If a QRIS merchant for street food shows continuous transactions at midnight, that's suspicious. Immediate action is required," Hendarta explained.

3. Strengthened Regulatory Oversight
BI will conduct regular audits of transaction records, blacklisting businesses found facilitating gambling. Non-compliant PSPs face severe penalties, including operational suspension and license revocation.

4. Interagency Collaboration
Collaboration with law enforcement and ministries aims to disrupt illegal gambling funds. "This is part of our commitment to national payment security," Hendarta affirmed.

"This is part of our commitment to national payment security," Hendarta said.

PPATK Data Reveals Alarming Trends
Pusat Pelaporan dan Analisis Transaksi Keuangan (PPATK) data from 2025 shows 78.5% of 305.35 million gambling deposit transactions used QRIS, totaling Rp19.35 trillion. Kepala PPATK Ivan Yustiavandana noted that 83.79 million transactions via banking and e-wallets amounted to Rp16.67 trillion.

"The remaining transactions occurred through bank transfers and e-wallets, totaling 83.79 million transactions worth Rp16.67 trillion," Yustiavandana said.

By Q1 2026, QRIS usage for gambling deposits surged to 88.6%, while traditional bank transfers fell to 11.4%. Despite this, Yustiavandana stressed that QRIS remains a legitimate payment method.

"QRIS and digital payment instruments are legal and vital to Indonesia's economy," Yustiavandana emphasized.

Modus Operandi and Systemic Vulnerabilities
PPATK identified sophisticated money laundering tactics, including third-party accounts, AI-generated deepfakes for identity fraud, shell companies, and fake micro-enterprise profiles on payment aggregators. Digital financial services like payment gateway, remittance, and voucher sales are also exploited.

"PPATK found exploitation of payment gateways, remittance services, foreign exchange, and digital voucher sales," Yustiavandana said.

This investigative report underscores BI's proactive stance against QRIS misuse, highlighting the critical need for sustained vigilance in Indonesia's evolving digital economy.