LEGAL ASPECTS OF CONSUMER PROTECTION AGAINST PHISHING CRIMES IN DIGITAL BUSINESS
DOI:
10.54443/morfai.v5i6.4677Published:
2025-12-09Downloads
Abstract
The development of digital business in Indonesia has brought significant impacts on the increase of cybercrime, particularly phishing. This research aims to analyze the legal aspects of consumer protection against phishing crimes in the context of digital business in Indonesia with a case study in Medan City. The research method used is normative juridical with statutory and case approaches. The research findings indicate that the legal framework for consumer protection against phishing crimes in Indonesia has been regulated in various regulations, including Law Number 8 of 1999 concerning Consumer Protection, Law Number 19 of 2016 concerning Amendment to Law Number 11 of 2008 concerning Electronic Information and Transactions, and Law Number 27 of 2022 concerning Personal Data Protection. However, the implementation of legal protection still faces various obstacles, such as low digital literacy among the public, limited cyber law enforcement infrastructure, and complexity of evidence in phishing cases. This research recommends strengthening more specific regulations regarding phishing, increasing law enforcement capacity, and continuous public education.
Keywords:
Consumer Protection Phishing Digital Business Cybercrime Indonesian LawReferences
Anti-Phishing Working Group. (2024). Phishing Activity Trends Report Q2 2024. Retrieved from https://apwg.org/trendsreports/
Arifin, R., Kambuno, J. A., Waspiah, & Latifiani, D. (2021). Protecting the consumer rights in the digital economic era: Future challenges in Indonesia. Jambura Law Review, 3(3), 135-160.
National Cyber and Crypto Agency. (2024). Laporan Tahunan Keamanan Siber Indonesia [Indonesian Cybersecurity Annual Report]. Jakarta: BSSN.
Gulo, A. S., Lasmadi, S., & Nawawi, K. (2021). Cyber crime dalam bentuk phising berdasarkan Undang-Undang Informasi dan Transaksi Elektronik. PAMPAS: Journal of Criminal Law, 1(2), 68-81.
Hamzah, A. (2005). Aspek-aspek pidana di bidang komputer [Criminal aspects in the computer field]. Sinar Grafika.
Indonesia Anti-Phishing Data Exchange. (2024). Monthly number of phishing attacks recorded in Indonesia in 2023. Statista. Retrieved from https://www.statista.com/statistics/1411333/indonesia-monthly-number-of-phishing-attacks/
Irawan, F., Habsy, M., & Hosnah, A. (2025). Pertanggungjawaban pidana pelaku phishing dan efektivitas penegakan hukum berdasarkan UU Nomor 19 Tahun 2016 tentang Informasi dan Transaksi Elektronik. Jurnal Komputer, Informasi dan Teknologi, 5(2), 11.
Kadir, M. Y. A., Arifin, M., Disantara, F. P., Mac, Thuong, T. H., & Nutakor, B. S. M. (2024). The reform of consumer protection law: Comparison of Indonesia, Vietnam, and Ghana. Jurnal Suara Hukum, 6(2), 255-278.
Lasmadi, S. (2014). Pengaturan alat bukti dalam tindak pidana dunia maya. Jurnal Ilmu Hukum, 2(4).
Mansur, D. M. A., & Gultom, E. (2005). Cyber law: Aspek hukum teknologi informasi [Cyber law: Legal aspects of information technology]. PT Refika Aditama.
Naqvi, B., Perova, K., Farooq, A., Makhdoom, I., Oyedeji, S., & Porras, J. (2023). Mitigation strategies against the phishing attacks: A systematic literature review. Computers & Security, 132, 103387.
Priliasari, E. (2023). Perlindungan data pribadi konsumen dalam transaksi e-commerce menurut peraturan perundang-undangan di Indonesia. Jurnal Rechts Vinding Media Pembinaan Hukum Nasional, 12(2), 261-279.
Republic of Indonesia. (1945). Constitution of the Republic of Indonesia 1945 [Undang-Undang Dasar Negara Republik Indonesia Tahun 1945].
Republic of Indonesia. (1999). Law Number 8 of 1999 on Consumer Protection [Undang-Undang Nomor 8 Tahun 1999 tentang Perlindungan Konsumen]. State Gazette of the Republic of Indonesia Year 1999 Number 22, Supplement to the State Gazette of the Republic of Indonesia Number 3821.
Republic of Indonesia. (2008). Law Number 11 of 2008 on Electronic Information and Transactions [Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik]. State Gazette of the Republic of Indonesia Year 2008 Number 58, Supplement to the State Gazette of the Republic of Indonesia Number 4843.
Republic of Indonesia. (2016). Law Number 19 of 2016 on Amendments to Law Number 11 of 2008 on Electronic Information and Transactions [Undang-Undang Nomor 19 Tahun 2016 tentang Perubahan atas Undang-Undang Nomor 11 Tahun 2008 tentang Informasi dan Transaksi Elektronik]. State Gazette of the Republic of Indonesia Year 2016 Number 251, Supplement to the State Gazette of the Republic of Indonesia Number 5952.
Republic of Indonesia. (2022). Law Number 27 of 2022 on Personal Data Protection [Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi]. State Gazette of the Republic of Indonesia Year 2022 Number 196, Supplement to the State Gazette of the Republic of Indonesia Number 6820.
Shaik, D., & Poojasree, V. (2021). Consumer protection in e-commerce: A legal and compliance framework in the digital market. In Proceedings of the 1st International Conference on Law and Human Rights 2020 (ICLHR 2020) (pp. 18-23).
Sidobalok, J. (2014). Hukum perlindungan konsumen di Indonesia [Consumer protection law in Indonesia]. Citra Aditya Bakti.
SOCRadar. (2024). Indonesia Threat Landscape Report 2024. Retrieved from https://socradar.io/wp-content/uploads/2024/08/SOCRadar-Indonesia-Threat-Landscape-Report-2024.pdf
Statista. (2024). Estimated annual cost of cyber crime in Indonesia from 2018 to 2028. Retrieved from https://www.statista.com/forecasts/1411153/indonesia-cost-of-cyber-crime
Subekti, R. (2001). Hukum perjanjian [Contract law]. Intermasa.
License
Copyright (c) 2025 Dahlan, Erniyanti, Henry Aspan, Etty Sri Wahyuni
This work is licensed under a Creative Commons Attribution 4.0 International License.
Downloads
How to Cite
