Peek at the Multi-Layered Security System in the OVO Digital Wallet

JAKARTA - In the midst of increasing digital transaction activity, account security and personal data are one of the important aspects that users need to pay attention to. Starting from daily payments, transfers, top ups, to transactions at merchants, the use of digital wallets needs to be supported by a security system that is able to protect users from various digital crime risks.

Various fraud methods such as social engineering, OTP abuse, account takeover, fake links, and malware on devices are still threats faced by digital service users. Therefore, transaction protection not only depends on user vigilance, but also on layered application security systems.

In response to this need, OVO continues to strengthen the application security system through three main pillars, namely authentication protection on the user side, Fraud Detection System (FDS), and artificial intelligence (AI) innovation that works behind the scenes. These three pillars are designed to help protect user accounts, personal data, and transaction smoothness in the OVO ecosystem.

OVO's commitment to comprehensively protecting customer data is also evidenced by the company's success in obtaining the highest international standard certification, namely ISO 27001:2022 for Information Security Management System (Information Security Management System) and ISO 27701:2019 for Privacy Information Management System (Privacy Information Management System).

This global recognition confirms that OVO applies strict and secure data governance standards, and is in line with the mandate of applicable cyber and personal data protection provisions in Indonesia.

Here are the three pillars of OVO security that users need to know, along with the protection features inside it:

1. User Authentication Protection

The first pillar is authentication protection on the user side. This system helps ensure that account and transaction access is carried out by the legitimate account owner. This protection step is crucial in preventing unauthorized access to user accounts and personal data. Some forms of authentication protection in the OVO application include:

● PIN as a secret code for transactions

OVO applies the use of Personal Identification Number (PIN) as a secret code to process transactions. PIN is one of the main security layers that users need to keep confidential. Users are urged not to share PINs with anyone, including parties claiming to be OVO representatives.

● OTP for account access verification

OVO also uses One-Time Password (OTP) as an additional verification step, especially when there is login activity or access to certain accounts. OTP is sent directly to the user's device and is confidential. Fraudulent modes that request OTP codes via phone, chat, text messages, or fake links are one form of social engineering that needs to be aware of.

● Biometrics for more practical authentication

To increase security while providing convenience, OVO supports biometric authentication through the user's device's built-in features, such as fingerprint or face recognition. This feature helps users verify their identity faster without reducing the security aspect.

2. Fraud Detection System: Smart Detection System Behind the Screen

In addition to user protection, OVO also has a Fraud Detection System (FDS) that works automatically behind the scenes to monitor and detect suspicious activities. This system is designed to recognize unusual transaction or activity patterns and help mitigate the risk of account and transaction abuse.

Some forms of FDS protection in the OVO application include:

● Detecting suspicious transactions

The system can analyze user transaction patterns and recognize activities that are outside of normal habits. If there are indications of suspicious transactions, OVO can request additional verification, limit certain access, or take other security measures according to the level of risk.

● Monitoring new or unknown devices

OVO can recognize the devices that users usually use. If there is an access attempt from a new or unknown device, the system can trigger additional security protocols to help prevent account takeover.

● Detects rooting, jailbreaking, and malware

OVO's security system can also detect risks on devices that have been forcibly modified, such as rooting or jailbreaking, as well as devices that are suspected of being infected with malware. In certain conditions, access to the application can be restricted or closed as a protection measure to help prevent the risk of data theft, account takeover, or unauthorized transactions.

3. Artificial Intelligence (AI) Innovation as an Additional Defense Guard

As digital crime tactics evolve, security systems also need to continue to adapt. Therefore, OVO also utilizes artificial intelligence (AI) technology as an additional layer of protection to help anticipate and mitigate increasingly complex fraud threats. The use of AI strengthens the system's ability to read patterns, detect anomalies, and recognize risks that are difficult to identify manually.

OVO ensures that the use of this AI technology is implemented responsibly, transparently, and still respects the rights of customers as data subjects. With this approach, OVO can take faster and more proactive preventive measures. Some forms of AI utilization in the OVO security ecosystem include:

● Detection of manipulation of images and digital documents

OVO utilizes AI technology to detect forgery on uploaded documents or images, such as indications of false transfer evidence or identity manipulation. The system can automatically detect digital anomalies that are difficult to see with the naked eye, including identifying Generative AI-generated images, so that potential fraud can be prevented from the early stages.

● Mapping and breaking up the network of fraud syndicates

AI also helps OVO map transaction anomalies involving fraud networks faster. This ability allows the system to recognize organized fraud patterns and identify suspicious account groups. Thus, restriction and prevention measures can be carried out more effectively to protect the user ecosystem.

● Rapid identification of the latest social engineering trends

Social engineering continues to evolve, ranging from fraud disguised as customer service, link manipulation, to fraudulent scenarios designed to make users share confidential data. Through analysis of reporting trends and activity patterns, AI helps OVO recognize new modes more quickly so that preventive measures and education for users can be carried out more timely.

Digital Security Still Requires Active User Role

Although the application has been supported with a layered security system, users still play an important role in maintaining account security. Users are urged to always keep PIN and OTP confidential, not click suspicious links, not download applications from unofficial sources, and ensure that the device is not modified illegally.

Users also need to be careful of parties who claim to be customer service officers and ask for personal data, PIN, OTP, password, or access to devices. OVO never asks for confidential information via phone, chat, or unofficial links. With a combination of user authentication, proactive fraud detection systems, and safe digital habits, OVO continues to strive to provide a practical, convenient, and protected digital transaction experience for users. In the future, OVO will continue to strengthen digital security education and develop application protection systems so that people are more confident in using digital financial services for daily needs.