Jakarta, INTI - Facial recognition technology implemented to strengthen SIM card registration has revealed new vulnerabilities at the distribution level. Indonesia's Ministry of Communication and Digital Affairs (Komdigi) discovered cases where some SIM card sellers activated mobile cards using their own biometric facial data before handing them over to customers.
This practice resulted in SIM card ownership information being inconsistent with the actual user identity. After customers began using the cards, the sellers allegedly performed an unregistration process, causing the phone numbers to become disconnected from the verified user identity and potentially putting customers at risk.
Director General of Digital Ecosystem at Komdigi, Edwin Hidayat Abdullah, said the violation was discovered during a government inspection of biometric-based customer registration implementation at a shopping center in Yogyakarta.
"Some parties are still attempting this practice. The SIM card is activated using their own face, then given to the customer. After the customer uses it, the registration is removed, causing losses for the customer," Edwin said in a statement on Monday, July 20, 2026.
He emphasized that the practice contradicts the main purpose of biometric registration, which is to ensure that mobile numbers are used by individuals whose identities have been properly verified.
"These are practices occurring in the field that need attention. We are now entering an era where accountability matters. What we use should be registered under our own identity," he said.
Previously, biometric SIM registration was expected to close loopholes in mobile identity misuse, especially as phone numbers have become gateways to various digital services, including banking, e-wallets, and social media accounts.
However, Komdigi's findings highlight that digital security does not rely solely on verification systems but also on the behavior of parties involved in the SIM card distribution chain. If activation is carried out by unauthorized individuals, biometric data intended for identity verification could instead be misused to register numbers under someone else's name.
Edwin stressed that successful implementation of biometric registration requires cooperation among all stakeholders, including telecommunications operators, sales partners, and customers.
"We hope those who have not yet complied will immediately adjust to the regulations," he said.
Despite identifying violations, Komdigi stated that overall industry compliance with biometric registration requirements has improved. The government noted that more businesses are following the regulations compared with those still committing violations.
"There are already more compliant parties than non-compliant ones, and we hope the remaining violations will continue to decrease so the system can operate better," Edwin added.
Biometric Registration to Combat Online Crime
Komdigi recorded that 6.8 million SIM cards were registered using biometric verification between January and July 2026. The government has positioned the policy as an important measure to reduce opportunities for online gambling activities and other digital crimes.
Minister of Communication and Digital Affairs Meutya Hafid stated that biometric SIM registration ensures every mobile number is connected to the actual identity of its owner. This has become increasingly important as many digital services rely on mobile phone numbers for authentication.
"We encourage the public to ensure that every number is clearly associated with its rightful owner through a more responsible approach," Meutya said during the OJK Banking Forum 2026 in Jakarta.
The biometric registration system also aims to prevent national identity numbers (NIK) from being misused by criminals for illegal digital activities. According to Meutya, personal data leaks from previous years continue to be exploited by cybercriminals.
"Data leaks happened years ago, five to ten years ago. However, the leaked data continues to be used today for various digital crimes, including the misuse of other people's NIK," she explained.
The government has encouraged citizens to complete biometric SIM registration through their respective mobile operators to ensure their identities are not used by unauthorized parties.
Full biometric registration requirements for new mobile phone activations officially took effect on July 1, 2026, under Ministerial Regulation of Communication and Digital Affairs No. 7/2026 on Telecommunications Customer Registration through Mobile Networks.
Komdigi stated that the policy aims to strengthen digital identity security and protect citizens from crimes involving mobile numbers, including digital fraud, spam calls, phishing, OTP misuse, and anonymous SIM card usage for illegal activities.
Conclusion
Indonesia's biometric SIM registration policy represents a major step toward strengthening digital identity security and preventing cybercrime. However, the discovery of misuse at the sales level highlights the importance of strict compliance across the entire telecommunications ecosystem, ensuring that biometric technology serves its intended purpose of protecting users and improving accountability.
Read more: APINDO Sees Indonesia Open Network as a Catalyst for SME Digital Transformation