Avoiding ATM Scams in Indonesia: Essential Tips for Travelers

QRIS codes are on almost every counter in Indonesia in 2026, but most short-term visitors still can’t use them. Indonesian e-wallets usually want a local phone number, so the ATM remains the main way to get money. That makes it the place where tourists are most exposed. The good news is that a few simple habits remove most of the risk. This guide covers how the scams work, how to check a machine, what withdrawals cost, and how to need fewer ATM visits.

How ATM Scams Work in Indonesia

Indonesian banks keep upgrading their machines, but criminals adapt too. Knowing the five main tricks makes them easy to spot.

• Skimming: A device is attached to the card reader or PIN pad to steal your card data and PIN.
• Shoulder surfing: Someone stands close and watches you type your PIN.
• Fake or tampered ATMs: A whole fake machine, or a real one fitted with a false keypad or a hidden camera.
• Card trapping: A device in the card slot stops your card coming back. A “helpful” stranger then appears nearby.
• Distraction scams: One person distracts you while another takes your card or cash.

Most of these need you to be rushed, alone or careless. Everything below is about taking that advantage away.

Where to Withdraw: Choosing the Safest Machines

Location matters more than the bank name. Use ATMs inside bank branches, major shopping malls or reputable hotels. These are watched by staff and cameras, and tampering is much harder to hide.

Avoid isolated machines, especially at night. A lone ATM on a dark road outside a tourist strip is where a skimmer can sit for days unnoticed. Stand in the cool, bright lobby of a BCA or Mandiri branch instead, and you’ll hear the guard’s radio and see staff walking past. That calm is a good sign.

You can also plan ahead. Visa and Mastercard offer online ATM locators, and so do the Indonesian banks BCA, Mandiri, BRI and BNI. Search for a machine near your hotel before you leave, so you are never hunting for one in the dark.

Inspecting an ATM Before You Insert Your Card

This takes about ten seconds. Do it every time.

1. Look at the card reader, keypad and surroundings. Check for unusual attachments, loose parts, mismatched colours or a hidden camera pointing at the keypad.
2. Tug the card slot gently. If it moves, feels loose or has a strange attachment, walk away.



3. Check the keypad. A false keypad often sits slightly raised or feels different from the rest of the panel.
4. Switch machines if anything feels off. There is usually another ATM within a short walk.

Behaviour at the Machine: PIN, Strangers and Stuck Cards

Even a clean machine can be unsafe if someone is watching you. Cover the keypad with your hand or body every time you type your PIN, even if you feel alone. Cameras and onlookers don’t announce themselves.

Look around before and during the transaction. If someone stands too close, or a group seems to be hovering, stop and use another ATM. Be most careful when something goes wrong. If your card gets stuck or the transaction fails, do not accept help from strangers. Card trapping scams depend on a friendly person appearing at exactly that moment. Step away from the machine and call your bank, or go into the branch and ask the staff.

2026 Budget Reality: Limits, Fees and How Much Cash to Hold

Knowing the numbers helps you plan fewer, smarter withdrawals.

Withdrawal limits

Most ATMs in Indonesia allow IDR 2,500,000 to IDR 5,000,000 per transaction, depending on the bank (BCA, Mandiri, BRI, BNI) and the machine type. Your home bank’s daily limit also applies, so the lower of the two wins.

Fees

• Indonesian bank fee for foreign cards: around IDR 25,000 to IDR 50,000 per transaction.
• Home bank fees: often an international transaction fee of 1-3% plus a currency conversion fee.

Because the local fee is a flat amount, bigger withdrawals cost less in percentage terms. A fee of IDR 25,000 to IDR 50,000 on IDR 2,500,000 is 1-2%. On IDR 5,000,000 it is 0.5-1%. This needs balancing against safety advice: withdraw smaller amounts more often to limit your losses if something goes wrong. A sensible middle path is to take moderate sums from trusted bank-branch ATMs, and not to carry a huge wad around.

Daily cash on hand

A reasonable amount of rupiah to carry is around IDR 300,000 to IDR 1,000,000 for daily expenses, especially outside big cities. Here is how that splits by travel style:

• Budget: about IDR 300,000, enough for warung meals, small market purchases and short rides.
• Mid-range: around IDR 500,000, which also covers tips and entry fees.
• Comfortable: up to IDR 1,000,000, useful if you are heading to rural areas, markets or places where cards are rare.

What to Do If You Are Scammed

Act quickly and keep it simple.

1. Call your bank immediately and block the card. Save the emergency number in your phone and on paper before you travel, because you can’t phone it from a card-less ATM lobby if your phone is dead.
2. File a police report if you think a crime has happened. Recovery is often difficult, but the report is needed for insurance claims.
3. Check your account and report any unauthorised transactions straight away.

Tell your bank about your travel plans before you leave. This stops your card being flagged as suspicious, and it also means a real problem is easier to spot. Review your statements regularly during the trip, not only when you get home.

Cutting ATM Trips: Cash, Money Changers, Cards, QRIS and E-wallets

The fewer times you visit an ATM, the fewer chances for something to go wrong.

Cash and money changers

Cash is still king in traditional markets (pasar tradisional), street stalls and warung. The smell of garlic frying in a roadside wok at dusk usually means a cash-only dinner. Banknotes come in 1,000, 2,000, 5,000, 10,000, 20,000, 50,000 and 100,000, and coins in 100, 200, 500 and 1,000. If you exchange foreign cash, banks give competitive rates but have longer queues. Authorised money changers, especially those linked to banks or inside malls, are a good choice, and you should count your money carefully before you leave the counter. Airport changers are convenient but give worse rates. Avoid unofficial street changers.

International cards

Visa and Mastercard are widely accepted, then American Express. Major hotels, upscale restaurants, big supermarkets, department stores and urban tourist attractions generally take cards. Smaller businesses, traditional markets and rural places rarely do. Make sure your card has an EMV chip, as contactless (NFC) is increasingly available at terminals. If a terminal offers to charge you in your home currency, choose IDR instead to avoid dynamic currency conversion markups.

QRIS

QRIS is the national QR standard set by Bank Indonesia. Any compatible bank or payment app can scan any merchant’s QRIS code, and it is accepted from big retailers to street vendors. Consumers generally pay no fee, as merchants cover a small one. Transaction limits typically go up to IDR 10,000,000, though your bank or e-wallet may set daily limits.

For visitors, the useful news is cross-border linking. Bank Indonesia has been expanding QR payment links, and travellers from countries with bilateral agreements, such as Thailand, Malaysia, Singapore and the Philippines, may be able to scan with their home banking or e-wallet app. Check with your own provider before you travel to confirm that your app supports QRIS scanning. Some multi-currency accounts such as Wise or Revolut may also offer QRIS payments from an IDR balance, but confirm this in the app first and don’t rely on it.

Indonesian e-wallets

GoPay, OVO, DANA and ShopeePay dominate daily life. The catch is registration. Most require an Indonesian phone number. Some may allow a basic, limited account with a foreign passport, but full functions such as higher limits and bank transfers usually need a KTP and sometimes an Indonesian bank account. If you do manage to register, you can top up at ATMs with an Indonesian bank card, by bank transfer, or at convenience stores like Indomaret and Alfamart for a fee of around IDR 1,000 to IDR 2,500 per transaction.

For rides and food, you don’t need a local wallet. Gojek and Grab let you pay in cash or link an international card. GoPay is built into Gojek and OVO into Grab. Linking an international card is generally reliable and a good alternative to cash.

Tipping: Why Small Notes Matter

Tipping is appreciated but not required. Having small notes ready means you won’t need an extra ATM trip for tips. Many mid-range and upscale restaurants add a service charge (typically 5-10%) and government tax (10-11%) to the bill. If service is included, you don’t need to add more. If not, rounding up or leaving 5-10% is a kind gesture.

• Gojek/Grab drivers: IDR 5,000 to IDR 10,000 extra on a short trip, or IDR 20,000 and up for longer trips and tours. You can tip in the app or in cash.
• Tour guides: IDR 50,000 to IDR 100,000 per person per day, depending on service and duration.
• Hotel porters and housekeeping: IDR 10,000 to IDR 20,000.

Cash in rupiah, handed directly to the person, is the best way to tip.

Common Mistakes to Avoid

• Using a quiet roadside ATM at night because it was the first one you saw.



• Skipping the slot tug. It takes two seconds and catches trapping devices.
• Accepting “help” from a stranger when the card is stuck.
• Not covering the keypad because the street looked empty.
• Forgetting to tell your bank about your trip, then getting blocked in a remote area.
• Taking out very large sums in one go, which raises your loss if something happens.
• Agreeing to pay in your home currency at a card terminal.
• Using unofficial street money changers and not counting the cash.
• Relying only on cards or apps when you head to markets or rural areas.

Frequently Asked Questions

Are ATMs in Indonesia safe for tourists?

Yes, if you choose carefully. ATMs inside bank branches, major malls and reputable hotels are the safest. Inspect the card reader and keypad, cover your PIN and avoid isolated machines at night. Most problems come from tampered or poorly located machines, not the banks themselves.

How much can I withdraw from an Indonesian ATM?

Most ATMs allow IDR 2,500,000 to IDR 5,000,000 per transaction, depending on the bank and machine type, including BCA, Mandiri, BRI and BNI. Your home bank’s daily withdrawal limit also applies, so the lower limit decides how much you can actually take out.

What fees will I pay to use my foreign card at an ATM?

Indonesian banks commonly charge around IDR 25,000 to IDR 50,000 per withdrawal on foreign cards. Your home bank may add an international transaction fee, typically 1-3%, plus a currency conversion fee. Check your own bank’s terms before travelling.

What should I do if my card gets stuck in an ATM?

Don’t accept help from strangers, as card trapping scams rely on a “helpful” person nearby. Step away and call your bank straight away to block the card. If the ATM is inside a branch, speak to staff. Keep your bank’s emergency number saved before you travel.

Can tourists use QRIS or Indonesian e-wallets instead of ATMs?

Sometimes. Visitors from countries with bilateral agreements, such as Thailand, Malaysia, Singapore and the Philippines, may be able to scan QRIS with their home apps. Indonesian e-wallets like GoPay, OVO, DANA and ShopeePay usually need a local phone number, so cash and cards remain necessary backups.

📷 Featured image by Abdul Ridwan on Unsplash.