The Director of Special Criminal Investigation at the Jambi Regional Police, Senior Commissioner Taufik Nurmandia, stated in Jambi on Monday that investigators have coordinated with numerous parties to track down and arrest the Bulgarian national, who has been placed on the wanted list (DPO).
"We have coordinated with relevant parties to hunt down the main Bulgarian national in this Bank Jambi customer account theft case," Nurmandia said.
In uncovering this case, based on a Police Report dated April 2, 2026, police have arrested three suspects who acted as account collectors and recipients of the crime funds.
The three suspects are DD (32), a resident of Lima Puluh Kota Regency, West Sumatra, who acted as coordinator and liaison for the Bulgarian national; TAS (33), an online driver from Bandung Regency, who was tasked with gathering people to open bank accounts; and AA (35), whose job was to help verify identities through "know your customer" procedures and record all created accounts.
"Their role was to collect people's accounts and crypto asset accounts used to hold the funds from the hack. All of these accounts were then handed over to a network of Bulgarian foreign nationals controlled from North Jakarta," Nurmandia said.
Based on the investigation, the system hack occurred on Sunday, February 22, 2026. Funds belonging to thousands of customers were gradually transferred, converted into crypto assets, and then sent to overseas digital wallets within hours.
A week before the hack, Nurmandia said, suspect DD admitted to receiving information from a Bulgarian national with the initials Alcaz regarding the planned cyberattack.
After the successful hack, the foreign national contacted DD again to inform him that the attack had succeeded.
Based on an intensive investigation, including digital forensic analysis, tracing the flow of funds, and expanding the search to West Java, investigators from the Cyber Sub-Directorate of the Special Criminal Investigation Directorate of the Jambi Regional Police successfully froze Rp18.94 billion (around US$1.16 million) in assets from the crime.
In addition to freezing the assets, Nurmandia said, police also secured evidence in the form of customer transaction data, electronic documents, and digital forensic evidence.
The suspects are charged under articles related to illegal access to electronic systems, money laundering, and other cybercrime provisions.
Nurmandia urged the public not to provide personal banking information to unknown parties and not to be tempted by offers of compensation for buying and selling personal accounts.
Related news: Russian hacker admits guilt in $10 mln cyber theft
Related news: Indonesia to deport 27 Chinese nationals over cybercrime scheme
Related news: Police hunt two foreigners over extortion via illegal loan apps
Translator: Arie Novarina
Editor: Azis Kurmala
Copyright © ANTARA 2026
