Perlindungan Hukum Korban Phishing: Analisis Kriminologi dan Efektivitas Regulasi di Indonesia: Legal Protection for Phishing Victims: Criminological and Regulatory Effectiveness Analysis in Indonesia

Moh. Havidz Nevoso; Wahab Aznul Hidaya; Kadi Sukarna; Muhammad Junaidi; Cita Tsaabiethah Agustria Sasti

doi:10.26623/jj.v4i1.12221

Authors

Moh. Havidz Nevoso Magister Hukum, Universitas Semarang
Wahab Aznul Hidaya Fakultas Hukum, Universitas Muhammadiyah Sorong
Kadi Sukarna Magister Hukum, Universitas Semarang
Muhammad Junaidi Magister Hukum, Universitas Semarang
Cita Tsaabiethah Agustria Sasti Fakultas Hukum, Universitas Semarang

DOI:

https://doi.org/10.26623/jj.v4i1.12221

Keywords:

Cybercrime, Kriminologi, Perlindungan Data Pribadi, Phishing

Abstract

This study aims to analyze the criminological factors underlying phishing cybercrime and to assess the effectiveness of legal protection for victims of personal data theft in Indonesia. The core issue lies in the persistence of phishing despite existing legal instruments, indicating a gap between crime etiology and regulatory effectiveness. Academic discourse has largely focused on normative and technical aspects, while criminological analysis of offender motivation and opportunity structures remains limited. This research employs a normative juridical method with statutory and conceptual approaches. Criminological analysis applies strain theory to explain socio-economic pressures as offender motivations and routine activity theory to examine the interaction between motivated offenders, suitable targets, and weak digital guardianship. The findings reveal that phishing expands due to low-risk economic rationality, digital system vulnerabilities, and limited public literacy and supervision. Although regulated under the Electronic Information and Transactions Law and the Personal Data Protection Law, legal protection remains suboptimal due to evidentiary challenges and low enforcement probability. Integrating criminological perspectives is essential to strengthen both preventive and repressive strategies.

Penelitian ini bertujuan menganalisis faktor kriminologis penyebab phishing cybercrime serta menilai efektivitas perlindungan hukum bagi korban pencurian data pribadi di Indonesia. Permasalahan terletak pada masih maraknya phishing meskipun instrumen hukum telah tersedia, yang menunjukkan kesenjangan antara etiologi kejahatan dan efektivitas regulasi. Kajian akademik selama ini cenderung normatif dan teknis, sementara analisis mengenai motivasi pelaku dan struktur peluang kejahatan masih terbatas. Metode yang digunakan adalah yuridis normatif dengan pendekatan peraturan perundang-undangan dan konseptual. Analisis kriminologis menggunakan strain theory untuk menjelaskan tekanan sosial-ekonomi sebagai motif pelaku serta routine activity theory untuk mengkaji interaksi antara pelaku termotivasi, target rentan, dan lemahnya pengawasan digital. Hasil penelitian menunjukkan bahwa phishing berkembang karena rasionalitas ekonomi berisiko rendah, kerentanan sistem digital, serta rendahnya literasi dan pengawasan. Meskipun telah diatur dalam UU ITE dan UU Perlindungan Data Pribadi, efektivitas perlindungan hukum belum optimal akibat kendala pembuktian digital dan rendahnya probabilitas penindakan. Integrasi pendekatan kriminologi diperlukan guna memperkuat pencegahan dan penegakan hukum.

References

Adisa, Artanti Zahra, and Andriyanto Adhi Nugroho. “Legal Protection for Phishing Victims Regarding the Transmission of APK Files.” JUSTISI 10, no. 1 (2024). https://doi.org/10.33506/js.v10i1.2980.

Ahadi, Lalu M. Alwin. “Efektivitas Hukum Dalam Perspektif Filsafat Hukum: Relasi Urgensi Sosialisasi Terhadap Eksistensi Produk Hukum.” Jurnal USM Law Review 5, no. 1 (2022): 110. https://doi.org/10.26623/julr.v5i1.4965.

Anjheli, Devi. “Privasi Digital Dan Kejahatan Phishing Di Indonesia: Evaluasi Kritis Terhadap Efektivitas UU ITE Dan UU PDP.” Staatsrecht Jurnal Hukum Kenegaraan Dan Politik Islam 4, no. 1 (2024). https://doi.org/10.14421/990epf27.

Budhijanto, D. Revolusi Cyberlaw Indonesia: Pembaruan Dan Revisi Undang-Undang Informasi Dan Transaksi Elektronik 2016. Jakarta: PT Refika Aditama, 2018.

Kaendo, Karen Eklesia Gabriella, and Ade Adhari. “Comparison of The Right to Be Forgotten Regulations in Indonesia and European Union Countries.” Rechtidee 20, no. 1 (2025). https://doi.org/10.21107/ri.v20i1.30287.

Luthiya, A. N., Irawan, B., & Yulia, R. “Kebijakan Hukum Pidana Terhadap Pengaturan Pencurian Data Pribadi Sebagai Penyalahgunaan Teknologi Komunikasi Dan Informasi.” Jurnal Hukum Pidana Dan Kriminologi 2, no. 2 (2021): 14–29.

Parti, Katalin, and Thomas Dearden. “Cybercrime and Strain theory: An Examination of Online Crime and Gender.” International Journal of Criminology and Sociology 13 (2024). https://doi.org/10.6000/1929-4409.2024.13.19.

Rumlus, M. H., & Hartadi, H. “Kebijakan Penanggulangan Pencurian Data Pribadi Dalam Media Elektronik.” Jurnal Ham 11, no. 2 (2020): 285–299.

Rustam, S. “Analisa Clustering Phishing Dengan K-Means Dalam Meningkatkan Keamanan Komputer.” ILKOM Jurnal Ilmiah 10, no. 2 (2018): 175–81.

Sahfitri, Afifah, and Rosmalinda Rosmalinda. “Penipuan Digital Melalui Tautan Phishing.” Jurnal Dialektika Hukum 6, no. 2 (2024). https://doi.org/10.36859/jdh.v6i2.2881.

Sari, Ratih Mega Puspa. “Criminal Responsibility in Cybercrime: An Analysis of Phishing Crimes in Indonesia.” JHK-AUGUST 2, no. 5 (2025). https://doi.org/10.61942/jhk.v2i5.418.

Suharto, B., & Kurniawan, A. B. “Tindak Pidana Cybercrime Bagi Pelaku Pemalsuan Data Pada Situs E-Commerce (Phishing).” JHP 17 (2020): 57–61.

Sujamawardi, Lalu Heru. “Analisis Yuridis Pasal 27 Ayat (1) Undang-Undang Nomor 19 Tahun 2016 Tentang Perubahan Atas Undang-Undang Nomor 11 Tahun 2008 Tentang Informasi Dan Transaksi Elektronik.” Dialogia Iuridica 9, no. 2 (2018). https://doi.org/10.28932/di.v9i2.974.

Suzuki, Ai. “Routine Activities and Consumer Fraud Victimization: Findings from a Social Survey in Chiba Prefecture, Japan.” Crime Prevention and Community Safety 26 (2024): 373–84. https://doi.org/10.1057/s41300-024-00219-2.

Tampubolon, K. E. A. “Perbedaan Cyber Attack, Cybercrime, Dan Cyber Warfare.” Jurist-Diction 2, no. 2 (2019): 539–554.

Utami, Tanti Kirana, Salsa Octaviani Suryanto, Kayla Andini Putri, and Fina Asriani. “Personal Data Breach Cases in Indonesia : Perspective Of Personal Data Protection Law.” Customary Law Journal 2, no. 2 (2025): 1–21. https://doi.org/10.47134/jcl.v2i2.3742.

Wiraguna, Sidi Ahyar. “Metode Normatif Dan Empiris Dalam Penelitian Hukum : Studi Eksploratif Di Indonesia.” Jurnal Sosial Politik, Pemerintahan Dan Hukum 3, no. 3 (2024). https://doi.org/10.59818/jps.v3i3.1390.