Jakarta Residents Discover Photos Stolen, Swapped in Growing Digital Image Theft Crisis

Warga in Tebet didn't know her identity documents had been used to create a fake marketplace profile until a Tokopedia fraud alert landed in her inbox last March. By then, her profile photo had been replaced with an image of someone else entirely, the classic signature of a duplicate-image replacement scam, where fraudsters lift a legitimate account, swap the photograph, and use the shell to deceive buyers. She is one of dozens of residents across South Jakarta who have filed complaints with the Polda Metro Jaya cybercrime unit in the first half of 2026.

The issue is not new, but it has sharpened in urgency. Indonesia's e-commerce sector, anchored by platforms including Tokopedia, Shopee, and Bukalapak, processes tens of millions of transactions monthly, and the Kementerian Komunikasi dan Digital has been under sustained pressure to tighten identity verification rules for seller accounts. The government's push to formalise digital commerce under the 2024 Peraturan Pemerintah on electronic trading has created a regulatory window, but enforcement at street level remains uneven.

From Tanah Abang to Kelapa Gading, the Pattern Repeats

The complaints heard at community forums in Tanah Abang and Kelapa Gading follow a recognisable script. A seller builds a legitimate reputation over months, accumulates positive reviews, then finds the account has been cloned, their own face replaced with a stock photo or an image scraped from another platform. The original seller loses their trading history; buyers are defrauded. In Tanah Abang's dense fabric market district, where hundreds of small traders have moved business online since 2022, the damage can mean months of lost income.

At a community meeting held at the Kelapa Gading civic centre in late June, residents described a gap between the speed of the scams and the speed of platform responses. One trader from Jalan Mangga Besar said she waited eleven days before her cloned account was taken down, by which point the fraudster had completed at least four transactions under her name. Platform operators are not legally required to respond within a fixed window under current rules, a gap that community advocates have flagged to the Yayasan Lembaga Konsumen Indonesia, the country's oldest consumer protection body.

Yayasan Lembaga Konsumen Indonesia logged a rise in digital identity complaints through its Jakarta hotline in the first quarter of 2026, though the organisation has not yet published a full breakdown by complaint type. Indonesia's National Cyber and Encryption Agency, known by its acronym BSSN, reported in its 2025 annual threat landscape review that image-based social engineering attacks were among the fastest-growing categories of digital fraud targeting individual users, up from a lower baseline in 2023.

What Victims Are Being Told to Do

Police at Polda Metro Jaya's cybercrime unit advise victims to file a Laporan Polisi immediately and to preserve screenshots, transaction logs, and any platform correspondence before an account is deleted. The process is free but time-consuming, residents in Cempaka Putih and Menteng have described waits of up to three weeks before an investigator makes first contact.

Platform operators, for their part, point to their in-app reporting tools. Tokopedia's trust and safety page directs users to a dedicated fraud report form, though critics note the form requires the victim to already know the fraudulent account's URL, information that is not always easy to retrieve once an account has been taken down.

The most practical near-term advice circulating in Jakarta's digital literacy community, including through programs run by the Serikat Pekerja Digital Indonesia, is threefold: enable two-factor authentication on all marketplace accounts, register a secondary contact number separate from the one linked to your KTP, and conduct a reverse image search on your own profile photo every few weeks using tools available at no cost. It is unglamorous work. But for the traders of Tanah Abang and the residents of Tebet watching their faces appear on strangers' accounts, it may be the most reliable defence available right now.