Inside our investigations
Full write-ups of the cases we have worked: what happened, how the attackers operated, and what to fix. Client data always stays confidential, because at DFI integrity comes first.
Regional bank · Indonesia
The first BI-FAST fraud in Indonesia: Rp100+ billion in 3 hours. We solved it.
How our forensic investigation traced unauthorised BI-FAST transfers at a participating bank back to the people behind them.
They used the bank's own tools: inside an internal RTGS fraud
A 7-stage compromise, from a development server and a phishing email to illegal RTGS transfers, reconstructed from forensic evidence.
Minutes of BI-FAST API fraud through a payment aggregator. No bypass, all authenticated.
Forensic reconstruction of high-velocity automated transfers via compromised partner API keys, identifying token leaks and authentication flaws.
Unauthorised card transactions through EDC terminals: approved while the bank slept.
Investigating nocturnal batch settlement anomalies across merchant POS networks, recovering terminal logs and establishing insider complicity.
Showing 4 of 4 case studies
Trusted with Indonesia's most sensitive cases since 2006.
Handled for law enforcement, prosecutors, law firms, banks and corporations. Every client's data stays strictly confidential, because at DFI integrity comes first.