The Indonesian National Police, in coordination with the Federal Bureau of Investigation (FBI), has dismantled a cybercrime syndicate involved in selling phishing tools. Two suspects, identified as GWL and FYTP, were arrested in Kupang.
Authorities estimate the group generated up to Rp 25 billion (around $1.5 million) through its illegal operations. The case began when a cybercrime unit detected a suspicious website offering phishing scripts. Investigations traced the activity to w3llstore.com, which was linked to distributing tools via Telegram bots, indicating a structured online marketplace for cybercrime tools.
“The tools obtained were proven to be usable for phishing activities, including stealing credentials and taking over victims’ accounts,” said National Police spokesperson Johnny Eddizon Isir.
Officials revealed that the tools were capable of capturing login details when users entered usernames and passwords. In some cases, they could also extract active login sessions, allowing access to accounts without requiring one-time password (OTP) verification.
The FBI supported the investigation by identifying victims in the United States and mapping the broader user network connected to the tools.
“This shows that cybercrime has cross-border impacts. Police will continue to take firm action and strengthen international cooperation,” Johnny said.
According to investigators, GWL managed the development and distribution of the phishing tools, while FYTP handled financial transactions through cryptocurrency and bank accounts. The syndicate reportedly shifted from website-based transactions to Telegram, using crypto payments for operations.
The group is believed to have been active between 2021 and 2025 before being arrested on April 9. Police have seized assets worth Rp 4.5 billion, including property, vehicles, and electronic devices.
Authorities confirmed that investigations are ongoing to identify more individuals involved, including buyers and users of the tools.
“This success further strengthens global confidence in Indonesia’s ability to maintain the stability and security of the international digital ecosystem,” Johnny added.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.
