Legal Protection for Customers in Digital Banking Transactions: A Case Study of Bank Syariah Indonesia (BSI)

Angga Praditya Suhendar

Authors

Angga Praditya Suhendar Faculty of Law and Political Science Author

Keywords:

Industrial Digitization, Digital Banking, Personal Data Protection, Effectiveness, Phishing

Abstract

The objective of this study is to investigate the transition to industrial digitalization, with a specific focus on the transition of bank security to digital banking. However, this growth is also accompanied by risks arising from a lack of personal data protection, which can negatively impact the development of digital banking services. This includes phishing attempts. This is a method used to steal user information with the aim of obtaining user IDs and passwords. Therefore, a qualitative legal approach is used in this study. Data sources for this study include primary and secondary data. The research findings indicate that, according to Lawrence M. Friedman’s theory, a legal system consists of three main components: legal structure, legal substance, and legal culture. These three elements interact with one another to shape the effectiveness of the legal system. Theoretically, legal restrictions on phishing in Indonesia have not yet been fully effective. This is evident from existing regulatory and law enforcement factors; while they play a crucial role in the administration of justice, they have not yet been able to reduce the number of phishing cases in Indonesia.

Downloads

Download data is not yet available.

References

Akbar, M. R. (2023). Perkembangan yang Pesat dan Tantangan yang Dihadapi oleh Perbankan Digital di Indonesia. Ecobankers : Journal of Economy and Banking, 4(2), 95–111. https://doi.org/10.47453/ecobankers.v4i2.989

Astutik, S., Subekti, S., Prawesti, W., Handayati, N., binti Ghapa, N., & Alifia Fernanda, M. (2025). Legal Protection of Consumer Personal Data in Digital Banking Services in Indonesia. E3S Web of Conferences, 657, 07002. https://doi.org/10.1051/e3sconf/202565707002

Az-zahra, A., Marpaung, Z. A., Rohmansyah, R., & Hanan, R. A. (2025). Legal Protection against Phishing Crimes in the Banking Industry (Case Study of a State-Owned Bank). Al-Qanun: Jurnal Kajian Sosial Dan Hukum Islam, 6(1), 1. https://doi.org/10.58836/al-qanun.v6i1.23538

Bernanda Gunawan, A. (2024). Protection of Children Personal Data in Digital Financial Services in Indonesia. Journal of Law, Politic and Humanities, 4(5), 1801–1807. https://doi.org/10.38035/jlph.v4i5.705

Candra, N., Mochtar, D. A., & Indrayanti, K. W. (2024). Banking Customer Data Security Protection in the Era of Financial Technology in Indonesia. EAS Journal of Humanities and Cultural Studies, 6(03), 117–122. https://doi.org/10.36349/easjhcs.2024.v06i03.009

Darnela, L., & Rusdiana, E. (2025). Public Legal Awareness and the Effectiveness of Indonesia’s Personal Data Protection Law: Bridging Normative Framework and Privacy Paradox. Supremasi Hukum: Jurnal Kajian Ilmu Hukum, 14(1), 1–28. https://doi.org/10.14421/2gg2rp29

Devi Anjheli. (2025). Privasi Digital dan Kejahatan Phishing di Indonesia: Evaluasi Kritis terhadap Efektivitas UU ITE dan UU PDP. Staatsrecht: Jurnal Hukum Kenegaraan Dan Politik Islam, 4(1), 165–189. https://doi.org/10.14421/990epf27

Faisal, F., & Zuliarti, W. O. (2024). The Awareness Gap in Personal Data Privacy in Indonesia’s Cyberspace. International Journal of Social Science and Human Research, 7(07). https://doi.org/10.47191/ijsshr/v7-i07-84

Fauzia, A., Hamdani, F., & Octavia, D. (2021). THE REVITALIZATION OF THE INDONESIAN LEGAL SYSTEM IN THE ORDER OF REALIZING THE IDEAL STATE LAW. Progressive Law Review, 3(01), 12–25. https://doi.org/10.36448/plr.v3i01.46

Gana, F., Lay, E., Dethan, F. M., & Foeh, R. (2024). Service digitalization innovation model as development strategy and policy at Bank NTT Indonesia. Journal of Infrastructure Policy and Development, 8(8), 3053. https://doi.org/10.24294/jipd.v8i8.3053

Ginting, L. W. (2025). The Digital Literacy for Personal Data Protection. Sultan Agung Notary Law Review, 7(1), 1. https://doi.org/10.30659/sanlar.v7i1.43462

Hani Harlan. (2025). Perkembangan Financial Technology (Fintech) dalam Digital Perbankan di Indonesia. Al-Kharaj: Jurnal Ekonomi, Keuangan & Bisnis Syariah, 7(5). https://doi.org/10.47467/alkharaj.v7i5.7529

Harlina Hamid, & Muhammad Fadli Faisal Rasyid. (2025). Criminal Policy in Combating Digital Banking Crime: Challenges and Prevention Strategies. International Journal of Law and Society, 2(4), 95–106. https://doi.org/10.62951/ijls.v2i4.781

Ida Ayu Putu Megawati, & Ni Nengah Rupadi Kertiriasih. (2024). DAMPAK LAYANAN PERBANKAN DIGITAL TERHADAP KINERJA PERBANKAN DI INDONESIA. JURNAL LENTERA BISNIS, 13(3), 1578–1591. https://doi.org/10.34127/jrlab.v13i3.1205

Imelia Damai Agusthin, Dinda Christy Nada, & Nadia Ananda Putri. (2024). Perlindungan Hukum Nasabah dari Kejahatan Phising dalam Layanan Perbankan Digital di Indonesia. Deposisi: Jurnal Publikasi Ilmu Hukum, 2(4), 132–148. https://doi.org/10.59581/deposisi.v2i4.4214

Jumantoro, T. R. P., & Firdausy, M. K. (2025). Transhumanistic cybercrime analysis using a posthuman criminology approach to digital identity threats in artificial intelligence era. Priviet Social Sciences Journal, 5(9), 1–16. https://doi.org/10.55942/pssj.v5i9.558

Lestari, Y., & Mujib, M. M. (2022). Optimizing Personal Data Protection Legal Framework in Indonesia (a Comparative Law Study). Supremasi Hukum: Jurnal Kajian Ilmu Hukum, 11(2), 203–234. https://doi.org/10.14421/sh.v11i2.2729

Marune, A. E. M. S., & Hartanto, B. (2021). Strengthening Personal Data Protection, Cyber Security, and Improving Public Awareness in Indonesia: Progressive Legal Perspective. International Journal of Business, Economics, and Social Development, 2(4), 143–152. https://doi.org/10.46336/ijbesd.v2i4.170

Nurmansyah, G., Natamiharja, R., & Setiawan, I. (2025). Legal Protection of Personal Data Against Phishing in Indonesia: A Pancasila-Based Approach. Pancasila and Law Review, 6(1), 15–44. https://doi.org/10.25041/plr.v6i1.4138

Pian, M., Medan, K. K., & Manafe, D. R. C. (2024). Penanggulangan Tindak Pidana Cyberbullying Terhadap Anak Di Indonesia Perspektif Sistem Hukum Lawrence Meir Friedman. Artemis Law Journal, 2(1), 149–162. https://doi.org/10.35508/alj.v2i1.16936

Putri, B. M. L., Rohaini, Nhung, P. H., & Putri, R. W. (2025). Analysis of Consumer Rights Protection Against the Misuse of Personal Data in Fintech Services. Lex Publica, 12(1), 32–62. https://doi.org/10.58829/lp.12.1.2025.286

Putri Ramadhani Rangkuti, Muhammad Aldi Khoiri, Sumantri Ritonga, & Putri Nabila Sitorus Pane. (2025). Sanksi Pidana terhadap Kejahatan Pishing Menurut Hukum Pidana Indonesia. Konstitusi : Jurnal Hukum, Administrasi Publik, Dan Ilmu Komunikasi, 2(3), 291–305. https://doi.org/10.62383/konstitusi.v2i3.908

Qonitatin Abidah, S., Reza Faturrahman, M., Khoirunnisa, N., Saptoadji Wicaksono, S., & Wulandari, S. (2025). Criminal Policy of Indonesian Criminal Law in Combating the Crime of Phishing. SHS Web of Conferences, 221, 03006. https://doi.org/10.1051/shsconf/202522103006

Risqiana, R., Hayfa, J., Rani, R., & Wungkana, S. R. (2024). Implementation of Data Protection Authority (DPA) in Indonesia: The Urgency of Legal Protection of Customer’s Personal Data in E-Banking Service Transactions. Jurnal Penelitian Ilmu-Ilmu Sosial, 5(1), 19–33. https://doi.org/10.23917/sosial.v5i1.2375

Sasea, E. M., & Sakmaf, M. S. (2023). DIGITAL BANK LEGAL CHALLENGES: SECURITY PROTECTION AND LEAKAGE OF CUSTOMER PERSONAL DATA. Awang Long Law Review, 6(1), 245–250. https://doi.org/10.56301/awl.v6i1.989

Solikhah, M. (2025). Personal Data Protection in the Era of Digital Transformation: Challenges and Solutions in the Indonesian Cyber Law Framework. Indonesian Cyber Law Review, 2(1), 1–11. https://doi.org/10.59261/iclr.v2i1.15

Sriono, Risdalina, Kusno, Kumalasari M, I., & Syahyunan, H. (2024). LEGAL PROTECTION FOR DIGITAL BANK CUSTOMERS IN INDONESIA: ANALYSIS OF DATA CONFIDENTIALITY REGULATIONS AND BANK RESPONSIBILITY. LITIGASI, 25(2), 301–330. https://doi.org/10.23969/litigasi.v25i2.18538

Sudarwanto, A. S., & Kharisma, D. B. B. (2022). Comparative study of personal data protection regulations in Indonesia, Hong Kong and Malaysia. Journal of Financial Crime, 29(4), 1443–1457. https://doi.org/10.1108/JFC-09-2021-0193

Sugihyanto, T., & Jansen Arsjah, R. (2023). The Effect of Digital Banking, Digital Transformation on the Efficiency of Commercial Banks in Indonesia. International Journal of Islamic Education, Research and Multiculturalism (IJIERM), 5(2), 387–408. https://doi.org/10.47006/ijierm.v5i2.242

Suharbi, M. A., & Margono, H. (2022). Kebutuhan transformasi bank digital Indonesia di era revolusi industri 4.0. Fair Value: Jurnal Ilmiah Akuntansi Dan Keuangan, 4(10), 4749–4759. https://doi.org/10.32670/fairvalue.v4i10.1758

Sulthanah, M. Y., & Ginting, R. (2025). Analisis Problematika Penegakan Hukum Terhadap Tindak Pidana Perjudian Online di Indonesia. Jembatan Hukum : Kajian Ilmu Hukum, Sosial Dan Administrasi Negara, 2(2), 01–15. https://doi.org/10.62383/jembatan.v2i1.1438

Undang-Undang (UU) Nomor 1 Tahun 2024 Tentang Perubahan Kedua Atas Undang-Undang Nomor 11 Tahun 2008 Tentang Informasi Dan Transaksi Elektronik, Pub. L. No. 11 (2024).

Undang-Undang (UU) Nomor 19 Tahun 2016 Tentang Perubahan Atas Undang-Undang Nomor 11 Tahun 2008 Tentang Informasi Dan Transaksi Elektronik, Pub. L. No. 19 (2016).

Undang-Undang (UU) Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi, Pub. L. No. 27 (2022).

Undang-Undang (UU) Nomor 27 Tahun 2022 Tentang Pelindungan Data Pribadi, Pub. L. No. 27, Indonesia, Pemerintah Pusat (2022).

Undang-Undang (UU) Nomor 8 Tahun 1999 Tentang Perlindungan Konsumen, Pub. L. No. 8 (1999).

Walters, R., Trakman, L., & Zeller, B. (2019). Data Protection Law. Springer Nature Singapore. https://doi.org/10.1007/978-981-13-8110-2

Wan, G., & Ye, X. (2025). East Asian Personal Data Protection Laws and International Medical Data Sharing: Pathways for Coordination. International Journal of Multidisciplinary Research and Growth Evaluation, 6(5), 109–113. https://doi.org/10.54660/.IJMRGE.2025.6.5.109-113

Yuspin, W., Wardiono, K., Nurrahman, A., & Budiono, A. (2023). Personal Data Protection Law in Digital Banking Governance in Indonesia. Studia Iuridica Lublinensia, 32(1), 99–130. https://doi.org/10.17951/sil.2023.32.1.99-130