Back to blog
Scam Prevention
9 min

Pinjol Ilegal: How Illegal Loan Apps Scam Indonesians and What to Do

Understand how illegal online lending apps (pinjol ilegal) in Indonesia work — from excessive permissions to contact harvesting and blackmail — and how to protect yourself.

LOCK.PUB
2026-03-16

Pinjol Ilegal: How Illegal Loan Apps Scam Indonesians and What to Do

Indonesia's illegal online lending industry — commonly known as "pinjol ilegal" — is one of the most destructive digital scams affecting millions of citizens. These unlicensed lending apps offer quick cash with minimal requirements, but they come with astronomical interest rates, aggressive collection tactics, and systematic privacy violations that can destroy lives.

The scale is staggering. OJK (Otoritas Jasa Keuangan) has shut down thousands of illegal lending platforms, yet new ones appear constantly. Understanding how these operations work is critical for protecting yourself and your family.

How Pinjol Ilegal Works: The Full Playbook

Stage 1: The Lure

Illegal lending apps advertise on social media, WhatsApp groups, and SMS with promises like:

  • "Instant loan approval in 5 minutes"
  • "No collateral required"
  • "Only need KTP photo"
  • "Low interest — just 0.5% per day"

They target people who cannot access traditional banking — gig workers, students, small traders, and those with no credit history.

Stage 2: Excessive Permissions

When you install the app, it requests permissions far beyond what a legitimate financial app needs:

Permission Requested Legitimate Need Actual Purpose
Contacts None Harvest your entire contact list
Camera KTP photo Capture personal photos for blackmail
Gallery/Storage None Access personal photos
SMS None Read OTP codes, monitor communications
Location Basic verification Track your movements
Call logs None Identify relationships and contacts
Microphone None Potential recording

Stage 3: The Trap

The loan is approved instantly, but the terms are predatory:

Advertised Reality
Interest: 0.5% per day Actual APR: 182% or higher
Loan amount: Rp 1,000,000 You receive Rp 700,000 (admin fees deducted upfront)
Repayment: 7 days Auto-renewed with compounding interest
Late fee: Small Doubles the outstanding amount
Processing fee: 5% Hidden fees of 20-30%

Stage 4: The Collection

This is where pinjol ilegal becomes truly dangerous. When borrowers cannot repay (which is by design — the terms make repayment nearly impossible), the collection tactics include:

  1. Contact harvesting — The app uses the contacts it collected to message your family, friends, colleagues, and even your boss
  2. Public shaming — Collectors send messages to your contacts saying you are a deadbeat debtor
  3. Threats — Threatening to report you to police, seize assets, or take legal action (none of which they can actually do)
  4. Photo manipulation — Using your gallery photos to create humiliating or defamatory content
  5. Continuous harassment — Dozens of calls and messages daily from multiple numbers
  6. Fake debt increases — Claiming the debt has grown far beyond the original amount

Stage 5: The Cycle

Many victims, desperate to stop the harassment, borrow from another illegal pinjol to pay the first one. This creates a debt spiral that can result in loans from 5, 10, or even 20 different platforms simultaneously.

How to Check If a Lending App Is OJK-Registered

Before using any online lending platform, verify its legitimacy:

Method 1: OJK Website

  1. Visit ojk.go.id
  2. Navigate to the fintech lending section
  3. Search for the company name
  4. Confirm it appears in the list of registered and licensed providers

Method 2: OJK Hotline

  • Call 157 (OJK Consumer Hotline)
  • Ask whether a specific platform is registered

Method 3: Check These Details

Indicator Legitimate (OJK-Registered) Illegal
Registration number Displayed in app and website Not shown
Interest rate Max 0.4% per day (OJK regulation) Often exceeds 1% per day
App permissions Minimal (camera for KTP, location) Requests contacts, gallery, SMS
Collection practices Regulated hours, professional conduct 24/7 harassment, contact spamming
Customer service Official channels, responsive No clear contact, or only WhatsApp
Company address Verifiable physical office No address or fake address
Loan agreement Clear terms, digital signature Vague terms or no formal agreement

Legitimate OJK-Registered Platforms (Examples)

  • Akulaku
  • Kredivo
  • Home Credit
  • Investree
  • Modalku
  • Danamas
  • Amartha
  • KoinWorks

Always verify directly with OJK, as the registered list changes over time.

What to Do If You Are Already a Victim

If You Installed the App

  1. Revoke all app permissions immediately through your phone settings
  2. Uninstall the app — this does not delete your data from their servers, but prevents further data collection
  3. Change passwords on any accounts that may have been accessible from your phone
  4. Warn your contacts — Let your family, friends, and important contacts know that they may receive harassing messages. A brief explanation removes the shame leverage that collectors rely on

If You Are Being Harassed by Collectors

Action Details
Do not pay additional amounts Illegal lenders have no legal standing to collect beyond the original loan
Block numbers Block collector numbers, but document the calls first
Screenshot everything Save all threatening messages as evidence
Report to OJK Call 157 or email konsumen@ojk.go.id
Report to police File a report at your local Polsek
Report to Kominfo Report the app at aduankonten.id
Contact LBH Legal Aid Institute (Lembaga Bantuan Hukum) offers free legal assistance
Report to SAFEnet Digital rights organization that helps victims of digital harassment

Critical: You Are NOT Legally Obligated to Repay Illegal Lenders

This is the most important thing victims need to understand. Unlicensed financial platforms operate outside the law. They cannot:

  • File legal claims against you in court
  • Report you to OJK's credit scoring system
  • Seize any of your assets
  • Have you arrested

The harassment is their only tool, and it becomes powerless once your contacts are informed and you stop responding.

Protecting Your Data Proactively

Before You Need a Loan

  • Research lenders through OJK's database before downloading any app
  • Read app permissions carefully — a legitimate lending app does not need access to your contacts or gallery
  • Use a separate phone or device for financial apps if possible
  • Maintain an emergency fund to avoid desperate borrowing situations

Sharing Financial Documents Securely

When applying for legitimate loans, you often need to share KTP photos, salary slips, bank statements, and other sensitive documents. Sending these through WhatsApp or email creates permanent copies that could be leaked.

LOCK.PUB lets you share sensitive financial documents through password-protected links with expiration times. When a legitimate lender requests your documents, you can send them through a secure link that expires after the lender has reviewed the information. This prevents your identity documents from being stored in chat histories or email threads that could be compromised later.

The Social Impact

Pinjol ilegal preys on Indonesia's most vulnerable populations. The shame-based collection tactics have led to documented cases of:

  • Family breakdowns when contacts receive humiliating messages
  • Job losses when employers are contacted
  • Mental health crises and, in extreme cases, self-harm
  • Social isolation as victims withdraw from communities

The Indonesian government and OJK continue to shut down illegal platforms, but the speed at which new apps appear makes individual awareness the most effective defense.

Warning Signs Someone Close to You May Be a Victim

  • They become secretive about phone calls and messages
  • They ask to borrow money urgently with vague explanations
  • Their contacts (including you) receive strange messages about debts
  • They express anxiety about their phone or digital privacy
  • They mention needing to make urgent payments to unknown entities

If you notice these signs, approach the person with compassion, not judgment. Direct them to OJK's hotline (157) and local legal aid services.

Building Financial Resilience

The best defense against pinjol ilegal is never needing to use one:

  1. Build an emergency fund — Even Rp 500,000 set aside can prevent desperate decisions
  2. Explore legitimate options first — BPJS, community savings (arisan), family support, OJK-registered microfinance
  3. Improve financial literacy — Free resources are available through OJK's education programs
  4. Use legitimate fintech — Verified platforms like Kredivo or Akulaku offer regulated credit with transparent terms

When sharing any financial documentation through digital channels, always use secure methods like LOCK.PUB rather than sending sensitive files directly through messaging apps. Protecting your data at every step reduces your exposure to the predatory ecosystem that pinjol ilegal depends on.

Keywords

pinjol ilegal
illegal loan app Indonesia
pinjaman online ilegal
OJK registered lending app
predatory lending Indonesia
pinjol blackmail
online lending scam
how to check OJK registered
pinjol data harvesting
debt collector harassment Indonesia

Create your password-protected link now

Create password-protected links, secret memos, and encrypted chats for free.

Get Started Free
Pinjol Ilegal: How Illegal Loan Apps Scam Indonesians and What to Do | LOCK.PUB Blog