Tangerang, 13 February 2026 – The rise of various online crimes utilizing phishing and social engineering methods has prompted PT Bank Central Asia Tbk (BCA) to aggressively strengthen its security systems. Beyond internal fortification, BCA consistently communicates with affected customers and conducts thorough investigations into every reported incident.
BCA SVP IT Security Ferdinan Marlim, stated that there are three focal points serving as BCA’s foundation in protecting its systems against online threats such as Phishing, Distributed Denial of Service (DDoS), and Social Engineering. These three pillars are People, Process, and Technology. This was shared by Ferdinan during a podcast session at BCA Expoversary 2026 on Saturday (7/2).
“In the People aspect, BCA consistently socializes awareness to employees, management, and the board of directors by continuously reminding them of the dangers of phishing and other cybercrime modes. Because we know how dangerous phishing is, we conduct simulations to test our employees, tracking how many people click on and are lured by fake sites within the simulation,” said Ferdinan.
These tests are designed to gauge employee awareness regarding cyber threats. Following the results, BCA implements targeted efforts to ensure that alertness levels regarding phishing continue to rise.
Moreover, still in the People aspect, BCA also enhances the capabilities of its security team by acquiring professional certifications and adhering to international cybersecurity frameworks. Specifically, the bank follows the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), which focuses on strategic risk management through six key pillars such as identify, protect, detect, respond, recover, and govern.
In regards to the Technology and Process aspects, Ferdinan added: “We also obtain ISO certifications related to information security management systems, including those for payment services and data privacy. We follow all these standards to ensure that BCA’s management processes remain top-tier.”
BCA also operates a Security Monitoring Center, a dedicated team that oversees the company’s cybersecurity around the clock. From a technological standpoint, BCA implements multi-layered protection to ensure no loopholes exist for criminals. Ferdinan noted that the bank allocates significant resources toward security, particularly in the cyber domain.
Optimizing Customer Support
In addition to preventive measures, BCA ensures that its Process for transactions strictly follows established procedures. This includes a commitment to customer support, BCA does not abandon customers who fall victim to phishing or other online crimes. When a report is received, BCA takes several systematic steps.
As an initial step, BCA conducts an investigation and verification to confirm the reports received. Subsequently, BCA will strive to assist the customer as optimally as possible. For instance, BCA will coordinate with other financial institutions if the funds of a victimized customer have been transferred by the perpetrator to an account outside of BCA.
“Perpetrators are usually very skilled, they immediately send stolen funds to other banks to be withdrawn quickly,” said BCA SVP Wholesale Transaction Banking Product Development Martinus Robert Winata, during the same session.
Robert urged customers to remain vigilant and avoid being lured by fake web addresses through search tools or sharing sensitive data. He emphasized that BCA will never ask for confidential data such as PINs, Appli 1 and Appli 2 codes from the KeyBCA token, or passwords.
Furthermore, customers are expected to understand correct transaction procedures and the specific functions of KeyBCA, particularly the use of Appli 1 and Appli 2, when using BCA solutions like KlikBCA Bisnis. If a customer is asked to enter a code to receive an OTP from Appli 2, it means they are authenticating a transaction. Therefore, customers must be conscious not to provide Appli 2 codes to any requesting party.
“We also urge companies or KlikBCA Bisnis users to utilize user functions as they are intended. Ideally, there should be double control through a Maker and a Releaser. We advise customers not to entrust the functions and roles of multiple users to just one person, as this eliminates the double control function,” Robert added.
He also reiterated that no fake website links can be found on the official BCA website. Customers are encouraged to remain meticulous and never trust parties attempting to solicit confidential data.
Picture Information 1 & 2:
BCA Educates Customers on Cybercrime – BCA SVP IT Security Ferdinan Marlim (left) and BCA SVP Wholesale Transaction Banking Product Development Martinus Robert Winata (center) explain data protection strategies and online crime mitigation during a podcast session at the Mini Studio, BCA Expoversary 2026, ICE BSD, Tangerang, Saturday (7/2). During the session, Robert emphasized the importance of rapid reporting from phishing victims so that BCA can immediately investigate and coordinate between banks via the Indonesia Anti-Scam Centre program to block the flow of the perpetrator’s funds.
*****
About PT Bank Central Asia Tbk (as of 31 December 2025)
BCA is one of Indonesia's leading banks, focusing on transaction banking and providing credit facilities and financial solutions for corporate, commercial, SME, and consumer segments. As of the end of December 2025, BCA serves 43 million customer accounts and processes more than 115 million transactions daily, supported by 1,270 branch offices, 20,163 ATMs, as well as internet & mobile banking services and the Halo BCA contact center, which is accessible 24 hours a day. BCA's presence is supported by a number of subsidiaries that focus on vehicle financing, Sharia banking, securities, general and life insurance, digital banking, and venture capital. BCA is committed to building long-term relationships with customers, prioritizing mutual interests, and creating a positive impact on society at large. With more than 27,000 employees, BCA's vision is to become the main bank of choice for the community, serving as an important pillar of the Indonesian economy.
PT BANK CENTRAL ASIA TBK
Group Corporate Communication and Social Responsibility - CCR
Corporate Communication
Address : Jl. MH Thamrin No.1, Menara BCA Lt. 22. Jakarta 10310
Phone : (021) 2358-8000
Fax : (021) 2358-8339
Email : corcom_bca@bca.co.id
