<![CDATA[The development of information technology has brought significant changes in digital activities, including the use of Virtual Private Networks (VPNs), which, on the one hand, are used to protect user privacy but, on the other hand, have significant potential for misuse in cybercrime. VPNs allow perpetrators to disguise their identities, obscure their digital footprints, and illegally access systems using encryption and IP masking techniques, complicating law enforcement. This study aims to examine the issues of law enforcement against cybercrime using VPNs in Indonesia, highlighting aspects of substance, structure, and legal culture. From a substantive aspect, existing regulations such as Law Number 1 of 2024 concerning the Second Amendment to the ITE Law, Law Number 27 of 2022 concerning Personal Data Protection, and the new Criminal Code (Law Number 1 of 2023) do not explicitly regulate the use of VPNs, creating a legal vacuum. From a structural aspect, law enforcement officials face limited technical capacity and digital forensic equipment, as well as suboptimal coordination between institutions such as the Indonesian National Police (Polri), the National Cyber ??and Information Technology Agency (BSSN), and the Ministry of Communication and Informatics. From a cultural perspective, low public awareness of the risks of VPN misuse and the dilemma between privacy protection and national security pose particular challenges. This study emphasizes the importance of regulatory revisions, increased law enforcement capacity, international cooperation, and public education so that VPNs can be used for their intended purpose without becoming a vehicle for cybercrime.]]>
