BCA Reveals The Strategy Behind Its Robust Security System and haloBCA Service

Tangerang, 25 February 2025 - As a banking institution that handles nearly 100 million transactions per day from more than 41 million customers, PT Bank Central Asia Tbk (BCA) is committed to keeping every financial transaction secure. In the midst of an ever-evolving digital landscape, robust and adaptive cybersecurity is required. BCA upholds this commitment through a comprehensive approach that covers three main aspects: people, process, and technology.

Despite efforts to strengthen security, cyber threats are also growing with more complex attack patterns. BCA Senior Executive Vice President of Strategic Information Technology Group David Formula revealed that the trend of cybercrime is growing rapidly in line with society's increasing dependence on digital connectivity, especially post-pandemic.

In a talk show session at the BCA Expoversary 2025 mini studio, David outlined four types of cybercrime that currently dominate the digital security landscape. “First, ransomware that encrypts the victim's data and demands a ransom so that the data can be accessed again. Second, Distributed Denial of Service (DDoS) attacks that attempt to paralyze systems by flooding servers with excess traffic. Third, social engineering, including phishing, which targets customers with fraudulent schemes to obtain personal information. Finally, malware that is spread through unauthorized links or applications and can take over customer accounts,” said David.

In response to this challenge, BCA has implemented a people, process, and technology-based strategy. On the people's side, BCA has a dedicated team of experts who monitor the system 24/7 and analyze attack patterns to prevent and proactively respond to threats. On the process side, BCA adopts strict security standards that refer to national regulations, international standards such as ISO and NIST, and best practices from various countries. On the technology side, BCA implements advanced security systems, including the use of artificial intelligence (AI).

BCA also promotes a collaborative approach, contributing to strengthening industry resilience by sharing data related to recent security breaches with regulators, including lists of malicious IPs, to alert other banks to potential cyber threats. This reflects the collective efforts that must be made together by all parties to eradicate cyberattacks and create a safer digital ecosystem.

BCA is also increasing its Capital Expenditure (Capex) budget allocation for IT. BCA's IT spending will grow by 8% by 2025. This investment is aimed at developing the latest technology infrastructure to provide increasingly secure, reliable and trusted banking services for all our beloved customers.

On the other hand, research from Oxford shows that 88% of data leakage incidents are caused by human error, including social engineering. BCA's Head of Contact Center & Digital Services Adrianus Wagimin, who is responsible for handling halo BCA customer service, sees an alignment between the pattern of social engineering crimes that occur within customers and the threat trends described by David. To address this, Adrianus emphasized that BCA consistently prioritizes education, innovation, and collaboration.

“Education is a crucial aspect in preventing digital fraud. We continue to urge customers to be careful in their transactions and not share personal data, including SMS OTP, to any party. In terms of innovation, we present various features designed to prevent fraud modes, such as QRIS Customer Presented Mode (CPM) in BCA mobile and myBCA applications that help avoid fake QRIS payment fraud. Most recently, in early 2025, we updated the haloBCA application independently through the Apps Store or Playstore (version 2.4.1) which introduced a number of new features, including a report status track ('Report Status'), updating account and credit card data, and the development of the Halo BCA Chat service where customers can make requests and complaints about problems experienced through Halo BCA Chat. In addition, we actively collaborated with various work units to launch the educational campaigns 'Tolak Dengan Anggun' and 'Don't Know? Kasih No!',” Adrianus concluded.

To protect customers from cyber attacks and digital fraud, BCA also urges customers to implement the following five preventive measures:

• Only download official apps from trusted
• Regularly update your operating system and apps to the latest
• Always verify parties claiming to be BCA before providing any
• Do not share personal data, including PIN, password, CVV and SMS OTP, with
• Do not click on suspicious links received via text message or

If there is any indication of fraud, BCA customers can immediately report it to the HaloBCA contact center via 1500888 or the Halo BCA application, which features free calls and chat banking to enhance customer preferences for real-time information.

Picture Information:

Secrets Behind BCA's Security and Customer Service - BCA's Senior Executive Vice President of Strategic Information Technology Group David Formula (left) and BCA's Head of Contact Center & Digital Services Adrianus Wagimin (center) reveal strategies to anticipate the rampant cybercrime, starting with a comprehensive approach that covers people, process, and technology, as well as improving haloBCA services for customers. BCA is also increasing its Capital Expenditure (Capex) budget allocation in IT by 8% in 2025. This investment is aimed at developing the latest technology infrastructure to deliver banking services that are increasingly safe, reliable and trusted.