Perlindungan Hukum Korban Phishing: Analisis Kriminologi dan Efektivitas Regulasi di Indonesia: Legal Protection for Phishing Victims: Criminological and Regulatory Effectiveness Analysis in Indonesia

Moh. Havidz Nevoso (Magister Hukum, Universitas Semarang)
Wahab Aznul Hidaya (Fakultas Hukum, Universitas Muhammadiyah Sorong)
Kadi Sukarna (Magister Hukum, Universitas Semarang)
Muhammad Junaidi (Magister Hukum, Universitas Semarang)
Cita Tsaabiethah Agustria Sasti (Fakultas Hukum, Universitas Semarang)

Journal Juridisch
Vol. 4 No. 1 (2026): MARCH

This study aims to analyze the criminological factors underlying phishing cybercrime and to assess the effectiveness of legal protection for victims of personal data theft in Indonesia. The core issue lies in the persistence of phishing despite existing legal instruments, indicating a gap between crime etiology and regulatory effectiveness. Academic discourse has largely focused on normative and technical aspects, while criminological analysis of offender motivation and opportunity structures remains limited. This research employs a normative juridical method with statutory and conceptual approaches. Criminological analysis applies strain theory to explain socio-economic pressures as offender motivations and routine activity theory to examine the interaction between motivated offenders, suitable targets, and weak digital guardianship. The findings reveal that phishing expands due to low-risk economic rationality, digital system vulnerabilities, and limited public literacy and supervision. Although regulated under the Electronic Information and Transactions Law and the Personal Data Protection Law, legal protection remains suboptimal due to evidentiary challenges and low enforcement probability. Integrating criminological perspectives is essential to strengthen both preventive and repressive strategies.   Penelitian ini bertujuan menganalisis faktor kriminologis penyebab phishing cybercrime serta menilai efektivitas perlindungan hukum bagi korban pencurian data pribadi di Indonesia. Permasalahan terletak pada masih maraknya phishing meskipun instrumen hukum telah tersedia, yang menunjukkan kesenjangan antara etiologi kejahatan dan efektivitas regulasi. Kajian akademik selama ini cenderung normatif dan teknis, sementara analisis mengenai motivasi pelaku dan struktur peluang kejahatan masih terbatas. Metode yang digunakan adalah yuridis normatif dengan pendekatan peraturan perundang-undangan dan konseptual. Analisis kriminologis menggunakan strain theory untuk menjelaskan tekanan sosial-ekonomi sebagai motif pelaku serta routine activity theory untuk mengkaji interaksi antara pelaku termotivasi, target rentan, dan lemahnya pengawasan digital. Hasil penelitian menunjukkan bahwa phishing berkembang karena rasionalitas ekonomi berisiko rendah, kerentanan sistem digital, serta rendahnya literasi dan pengawasan. Meskipun telah diatur dalam UU ITE dan UU Perlindungan Data Pribadi, efektivitas perlindungan hukum belum optimal akibat kendala pembuktian digital dan rendahnya probabilitas penindakan. Integrasi pendekatan kriminologi diperlukan guna memperkuat pencegahan dan penegakan hukum.