Phishing Emails Claiming to Be from Indonesian Immigration (December 2025). How to Identify a Fake and Protect Yourself – Visa Agency

Phishing Emails Claiming to Be from Indonesian Immigration (December 2025). How to Identify a Fake and Protect Yourself

Phishing Emails Claiming to Be from Indonesian Immigration (December 2025). How to Identify a Fake and Protect Yourself

Phishing Emails Claiming to Be from Indonesian Immigration (December 2025). How to Identify a Fake and Protect Yourself

Introduction

On December 5, 2025, Flado Indonesia recorded a new phishing scheme targeting foreigners applying for Indonesian electronic visas, KITAS, and KITAP.
Fraudsters are imitating the style of official emails from Indonesian Immigration and sending false payment notifications. This leads to financial losses and delays in visa processing.

Below is a detailed breakdown of the phishing scheme and practical guidance on how to protect yourself.

The Only Official Website for Indonesian Visa Applications

The official government platform

https://evisa.imigrasi.go.id

Only the .go.id domain belongs to the Immigration Directorate General of Indonesia.

Any other domains — including .online, .global, .world, .idnglobal, .asia, .com — are not connected to Indonesian Immigration and may be used by scammers.

How a Legitimate Email from Immigration Looks

The correct sender

Official emails are sent exclusively from:

no-reply@notif.imigrasi.go.id

This address uses the verified government domain imigrasi.go.id.
All official links inside such emails lead only to https://evisa.imigrasi.go.id.

This is the primary indicator of authenticity.

How the Phishing Email Works

Fake sender address

The fraudulent email is sent from:

noreply-imigrasigoid@evisaidnglobal.online

Fraudsters insert “imigrasigoid” into the address to visually mimic the official domain.
However, the presence of the .online extension immediately indicates that the email is fake.

Fake payment website disguised as e-Visa Indonesia

Victims are redirected to:

evisaidinglobal.online

This site imitates the e-Visa payment portal but is built using a generic WordPress/WooCommerce template and hides internal pages with messages like:

“You are not allowed to access this page”

This is a common masking technique used on phishing sites.

Payment in USD: A Major Legal Red Flag

Why USD payments indicate fraud

The phishing website requests a payment of:

USD 77

According to Indonesian law and Bank Indonesia regulations:

  • All government-related payments must be made only in Indonesian Rupiah (IDR)
  • Visa fees cannot be charged in USD, EUR, or any foreign currency
  • Payments cannot be processed through third-party international gateways

Indonesian Immigration never accepts visa payments in USD or cryptocurrencies.

Final Step of the Scam: Redirecting to Cryptocurrency Purchase

How the payment redirection works

After clicking “Pay”, the user is redirected to:

app.ramp.network

Where they are asked to purchase USDC cryptocurrency worth approximately USD 80.82.

This has no connection to visa fees.
The user is effectively transferring money to the scammer’s crypto wallet, making refunds impossible.

Who Is Most at Risk

Vulnerable categories

  • Foreigners applying for visas independently
  • First-time travelers
  • Students
  • Remote workers and digital nomads
  • Visa agencies without strict domain and sender verification systems

How to Verify If an Immigration Email Is Authentic

Key authenticity criteria

  1. The sender must always be @imigrasi.go.id
  2. All links must point only to https://evisa.imigrasi.go.id
  3. Payments must be made only in IDR via official government gateways
  4. Immigration does not use .online, .global, .world, .asia or other commercial domains
  5. Immigration never requests cryptocurrency payments

If even one of these points is violated, the email is fraudulent.

Recommendations from Flado Indonesia

Use verified channels only

  • Do not follow links from suspicious or unfamiliar domains
  • Never pay visa fees in USD
  • Ignore any messages redirecting you to cryptocurrency payment platforms
  • Carefully check the full email address of the sender

We will verify your email for free and help you avoid any risks

If you have even the slightest doubt, forward the email to us — we will verify its authenticity for free and advise you on the correct next steps.

We help ensure your holiday in Indonesia is not disrupted.

WhatsApp: https://wa.me/6281239134485
Telegram: https://t.me/visabyflado
Phone: +62 812-3913-4485
Email: visa@flado.id

Conclusion

In December 2025, a new wave of phishing attacks targeted users of the Indonesian e-Visa platform. Fraudsters are sending fake payment emails, using deceptive sender addresses, cloned websites, and cryptocurrency payment schemes.

Understanding how legitimate Immigration emails look and recognizing key warning signs will help applicants avoid financial loss and ensure safe visa processing.

Flado Indonesia will continue to monitor developments and share updates to protect foreign nationals applying for Indonesian visas.