Residents In East Java Fooled By MBG's Lure, Personal Data Misused For Shopee Accounts

The police when releasing the disclosure of a syndicate of personal data manipulation at the East Java Police Headquarters, Surabaya, Monday (23/6/2025). ANTARA/Willi Irawan

The East Java Regional Police's Cyber Directorate revealed a syndicate of personal data manipulation under the guise of nutritious food assistance through digital platforms in order to reap profits.

"You named one of the main suspects with the initials TD and confiscated hundreds of pieces of evidence," said Head of Public Relations of the East Java Police, KombesJules Abraham Abast in Surabaya, Monday, June 23, as reported by ANTARA.

This case was revealed from a report received by the police on April 28, 2025. TD and his colleague with the initials Kmenipu residents with the lure of free food assistance for the owner of the Taxpayer Identification Number (NPWP).

Instead of being directed to the tax office, residents are only asked to submit their ID cards, family cards, and selfies. After obtaining the data, the perpetrator created an electronic NPWP, registered a SIM card, and opened an online account-wallet.

"Well, these data were then used by the suspect to register an online store account in the Shopee Affiliate program without the knowledge of the data owner," he said.

A total of 130 Shopee accounts were created with fake identities and used for live streaming products at Kailasop online store in Prambon District, Nganjuk Regency.

The suspect employs seven admins with a shift system to broadcast product promotions to earn a Shopee Affiliate commission of between 5'25 percent. All profits go to TD's account-wallet.

The confiscated evidence includes 105 units of Oppo phones, 82 special live streaming phones, 129 Shopee accounts, 100 SiBank accounts, 129 fake electronic NPWPs, and 129 other people's ID cards.

The suspect was charged with Article 51 paragraph 1 in conjunction with Article 35 paragraph 1 of the ITE Law and Article 67 paragraph 3 in conjunction with Article 65 paragraph 3 of the Personal Data Protection Law, with a threat of 12 years in prison and/or a fine of IDR 12 billion.

"This case is a strong warning for the public not to carelessly submit personal data to unknown parties, even if it is wrapped in offers of social assistance," he said.