QRIS is widely misused for online gambling and fraud. This policy explains what you may not do with Konek QR, how we detect it, and what happens if the rules are broken. It is part of the Terms of Service.
1. What is not allowed
You may not use Konek QR, including its QRs, payment pages, payment links, API and Listener, for:
- Online gambling in any form: slots, togel lotteries, casinos, sports betting, online cockfighting and the like, including taking deposits, chip or coin top-ups or payments for gambling agents and sites, and promoting them.
- Fraud: fake shops, bogus investments, ponzi or chain-savings schemes, fake prize draws, phishing, fake transfer receipts, or asking for money under someone else's identity.
- Selling or paying for goods and services that Indonesian law prohibits: narcotics and psychotropics, weapons and explosives, pornography, above all sexual content involving children, prescription drugs without a distribution permit, protected wildlife, stolen goods, counterfeit or pirated goods, and other people's personal data.
- Illegal online lending, debt collection by threats, money laundering or terrorist financing.
- Using a QRIS that is not yours: someone else's QRIS, a rented QRIS, a QRIS from a bought or sold account, or a QRIS registered under a business category that does not match your real business.
- Covering or faking a QRIS, such as sticking your QRIS over another shop's, or making a payment page that imitates another merchant.
- Serving other merchants from your account. An account is only for the QRIS of the account holder.
- Gaming Konek QR's systems: creating multiple accounts to get around limits or our actions, pairing one phone with several accounts, sending fake notifications or events, taking the Listener apart to forge signatures, overloading the API, or testing security outside the rules on the Security page.
- Using words, names or domains that disguise any of the above in display names, labels, link titles, descriptions,
referenceId,metadata, webhook domains orreturnUrl.
2. How we detect it
Each signal below adds to an account's risk score. We set the score thresholds, and they may change.
- Transaction patterns: many identical amounts in a short time, repeated round amounts that look like deposits, spikes in the small hours (00:00–05:00 WIB), volume far above the account's usual, or volume that does not fit the QRIS business category.
- Content: online-gambling keywords and their variants in names, labels, descriptions, metadata, webhook domains or
returnUrl. - Account behaviour: many accounts from the same address, disposable email, or one Listener phone paired with several accounts.
- Payer reports through the "Laporkan" (report) button on payment pages, or by email.
3. What happens
| Level | Action |
|---|---|
| Medium score | the account joins the admin review queue; the service keeps running |
| High score | live invoices are limited or stopped automatically until reviewed; test mode keeps running |
| Proven violation | the account is closed, and the NMID is blacklisted so it cannot be registered at Konek QR again |
For clear and serious violations, such as online gambling or fraud in progress, we may stop live invoices at once without waiting for a score.
When an account is closed, any remaining balance is settled under the Balance Policy. We may hold that settlement while there is a lawful request from law enforcement. We may also give information to law enforcement, or to the QRIS provider concerned to stop fraud, when the law requires it or on a lawful request.
Every decision is written to an audit log. Closing an account and blacklisting an NMID are always decided by a person.
4. Objections
If you believe we got it wrong, email [email protected] with the subject "Keberatan" within 14 days of our notice, with an explanation and, if you have it, evidence about your business, such as photos of your shop or the transaction history in your merchant app. Send it only by email from your account address to [email protected]; we never ask for a photo of your ID card, and never ask for documents through a chat. A person reviews your objection, and we tell you the outcome by email.
5. Reporting abuse
Seen a Konek QR QRIS or payment page used for online gambling or fraud, or a QRIS covered by another? Press Laporkan on the payment page, or email [email protected] with the subject "Laporan". Include the payment page link or NMID, the time, the amount and screenshots if you have them. You can read a QRIS's NMID with Check a QRIS.
Money already paid sits in the payee's account, not at Konek QR. To ask for a refund, also contact the app you paid with.
6. Language
This policy is written in Indonesian and English. If the two differ, the Indonesian version applies.