OJK Orders Banks to Halt Suspicious Transactions as Cyber Incident Response Team Activates
The directive covers transaction suspension for clarification, penetration testing, IT audits, and the activation of the OJK-BI Cyber Incident Response Team (TTIS).
Indonesia's Financial Services Authority (OJK) has instructed banks to temporarily suspend transactions showing indications of anomaly for clarification, alongside enhanced monitoring of high-value transactions. The directive was confirmed in a written response by Dian Ediana Rae, Chief Executive of Banking Supervision at OJK, on 9 November 2026. Banks must also conduct penetration testing, cyberattack simulations, and IT audits.
OJK and Bank Indonesia have activated a joint Cyber Incident Response Team (TTIS). The matter has risen to government level: Coordinating Minister for Political and Security Affairs Dudung Abdurachman met the banking industry and the National Cyber and Crypto Agency (BSSN) on 9 November, while Coordinating Minister for Economic Affairs Airlangga Hartarto urged banks to strengthen cyber defenses.
Threat context is vendor-reported: FortiGuard Labs recorded approximately 1.9 million blocked attack attempts within 24 hours to 9 November, around 999,000 targeting banking, finance, and insurance. Experts noted these are blocked attempts, not successful breaches. The instruction currently takes the form of a supervisory letter; no new POJK regulation has been issued.