Indian travellers should stay alert to cyberthreats while exploring Indonesia, Kaspersky warns
Indonesia: As Indonesia continues to attract travellers from India, Kaspersky researchers highlight the importance of digital safety while abroad. According to Kaspersky data, tourists visiting Indonesia may face various cyber risks, including threats targeting online activity.
To help people explore the world with greater confidence, Kaspersky presents Kaspersky’s insights on safe travel — a project that brings together the company’s cybersecurity expertise and the local knowledge of its international team. The project offers practical advice on staying safe online while travelling, alongside first-hand tips on destinations, experiences and places worth discovering in over 20 countries.
Cyberthreats targeting tourists in Indonesia
According to Kaspersky data, between Q3 2025 and Q2 2026, users in Indonesia encountered various cyberthreats that may affect travellers, including:
●12,926,883 general web threats detections — malicious websites and other online risks that users may encounter while searching for travel information, booking services or using public networks;
● 559,924 password stealer detections — threats designed to collect credentials from browsers, applications and accounts;
● 481,008 spyware detections — malicious software that can monitor user activity and access sensitive information;
● 2,847,403 backdoor detections — threats that may allow attackers to gain unauthorised access to infected devices.
Experts highlight the key cyber risk for tourists in Indonesia
Beyond general threat statistics, Kaspersky’s Global Research and Analysis Team (GReAT) identifies fraud targeting Indonesia’s QRIS payment system as one of the key cybersecurity risks for travellers visiting Indonesia. Tourists should pay particular attention to fraudulent QR codes that scammers use to replace legitimate ones at merchants and payment points.
This threat is particularly relevant in Indonesia, where QRIS is the country’s widely used national QR payment system, accepted by shops, restaurants and vendors throughout the country. Its near-universal adoption also makes it an attractive target for scammers, who sometimes replace or cover legitimate merchant QR codes with fraudulent ones designed to redirect payments or steal financial information.
Tourists should verify merchant details before confirming any payment, avoid scanning QR codes from unknown or unofficial sources, check that codes have not been altered or covered, and keep transaction notifications enabled so unauthorised payments can be spotted quickly. Before entering payment details, travellers should always check that they have been redirected to the correct website. Security solutions with anti-phishing protection, such as Kaspersky Premium, can help detect phishing pages and malicious links before sensitive financial information is shared.
To ensure advanced protection against increasingly complex cyber threats, Kaspersky actively amplifies its consumer solutions with AI-powered scam protection – a unified suite of technologies that combines machine learning-based anti-phishing algorithms, real-time behavior monitoring, accompanied by Data Leak and Identity Theft checkers. In 2025, Kaspersky Premium once again received the annual “Approved” certification in Anti-phishing tests by the leading testing lab AV-Comparatives, highlighting the product’s strong, AI enhanced antiphishing capabilities.
“Travel is a time when people naturally focus on discovering new places, not on cybersecurity. This is exactly what makes tourists attractive targets: they use unfamiliar digital services, connect from new locations and often make quick decisions. Our research shows that cybercriminals actively exploit these situations. By understanding the most relevant threats in each destination, travellers can take simple steps to protect their data and enjoy their journey with greater confidence,” said Noushin Shabab, Lead Security Researcher at Kaspersky’s Global Research and Analysis Team (GReAT).
For more travel inspiration, visit Kaspersky’s insights on safe travel, where Kaspersky employees share first-hand perspectives on the places, food and experiences worth discovering in their home countries. The project also highlights the digital threats travelers may encounter in different destinations — from travel-related phishing and payment scams to unsafe public Wi-Fi — and provides practical advice on staying protected while planning, booking and enjoying a trip.
To avoid falling victim to travel-related scams, Kaspersky recommends:
● Book directly through official websites or apps. Avoid following booking or “your reservation” links from emails, texts, or social media messages — go to the airline, ride-sharing, or booking platform directly instead.
● Double-check the URL before entering payment details. Phishing pages disguised as airline, transport, or booking sites often use lookalike domains that are easy to miss at a glance.
● Be wary of “too good to be true” deals, especially those requiring urgent action or unusual payment methods like wire transfers or gift cards.
● Use strong, unique passwords for travel and transport accounts, and enable multi-factor authentication (MFA) wherever it’s offered.
● Only download travel and transport apps from official app stores, and check reviews and permissions before installing.
● Monitor bank and card statements after booking travel, and report any unrecognized charges immediately.
● Only scan QR codes from trusted and verified sources. Carefully check website addresses and payment details before proceeding, and avoid downloading applications or files from QR code links unless their legitimacy has been confirmed. In Kaspersky Premium, you can use our Secure QR Scanner feature. The scanner checks links to websites encrypted in QR codes and will notify you when a link to a malicious or phishing website is detected.
● Kaspersky Premium uses AI‑powered scam protection to identify phishing websites and fraudulent payment pages before you share sensitive data. Combines machine learning, real‑time monitoring, and identity theft checks.
● If you need to use public Wi-Fi, the VPN included with Kaspersky Premium helps encrypt your internet connection, providing additional protection while accessing travel services, email or online accounts.
