{"id":997115,"date":"2022-03-11T11:17:00","date_gmt":"2022-03-11T03:17:00","guid":{"rendered":"https:\/\/geetests.com\/article\/web-security-a-make-or-break-point-for-indonesian-e-commerce"},"modified":"2025-09-15T10:07:17","modified_gmt":"2025-09-15T02:07:17","slug":"web-security-a-make-or-break-point-for-indonesian-e-commerce","status":"publish","type":"post","link":"\/en\/article\/web-security-a-make-or-break-point-for-indonesian-e-commerce","title":{"rendered":"Web Security: A Make-or-Break Point for Indonesian E-commerce"},"content":{"rendered":"<div class=\"vgblk-rw-wrapper limit-wrapper\">\n<h2 class=\"ql-align-justify\"><\/h2>\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Indonesia has been an overlooked e-commerce market since the pandemic, with roughly one-half of the population shopping online and $59billion predicted sales revenue in 2022. Meanwhile, cyberattacks targeting Indonesia have increased nearly six times in 2020 and cost the country&#8217;s online businesses dearly. Indonesian e-commerce firms are now at the make-or-break point for the continuous boom of their business.\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\">\n<h2 class=\"ql-align-justify\"><span style=\"background-color: transparent;\">The boom of Indonesian e-commerce<\/span><\/h2>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">The pandemic might be a changing point for Indonesia&#8217;s e-commerce market. According to Redseer, a consulting company, Indonesian online shoppers increased from 75 million before the covid outbreak to 85 million during the pandemic. Another good news is that <\/span><span style=\"color: #000000;\">Indonesia&#8217;s e-commerce market is believed to have a 23.8% growth in 2022 and the sales revenue will reach $30 billion, predicted by GlobalData.\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/PR15113.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">With the fourth largest population in the world, Indonesia has 273.5 million people waiting to transfer to the digital ecosystem. Not to mention that 20% of the population is middle-class and has strong purchasing power. It is reasonable to believe that e-commerce growth will benefit Indonesia and its population in foreseeable future.\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Not only does Indonesia have great spending potential, but it also has considerable e-commerce platforms to support consumption. You must have heard about or shopped on e-commerce marketplaces like Shopee, Tokopedia, Lazada, Blibli, etc. These are among Indonesia&#8217;s most popular online shopping platforms. Although they enjoy awesome web traffic, these platforms are significantly short in web security.<\/span><\/p>\n<p class=\"ql-align-justify\">\n<h2 class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Insufficient web security in Indonesia<\/span><\/h2>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">ecommerceDB, a division of Statista, did a survey to find out the top 5 most visited Indonesian e-commerce marketplaces, and they are Tokopedia, Shopee, Bukalapak, Lazada, and Blibli. I&#8217;m sorry to say this, but only one of them has been deployed CAPTCHA verification for users at registration. I tried to register in the platforms mentioned above, it turns out that only Lazada requires CAPTCHA verification and the rest only ask for a real-time verification code, except Shopee, the second-largest marketplace there in terms of traffic asks for nothing.<\/span><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-center\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/lazada-signup.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\"><span style=\"color: #000000; background-color: transparent;\">Image source: Lazada<\/span><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-center\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/signup.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\"><span style=\"color: #000000; background-color: transparent;\">Image source: Tokopedia<\/span><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-center\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/bukalapak-signup.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\"><span style=\"color: #000000; background-color: transparent;\">Image source: bukalapak<\/span><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-center\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/screenshot-20220311-105157.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\"><span style=\"color: #000000; background-color: transparent;\">Image source: Blibli<\/span><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-center\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/shopee-signup.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\"><span style=\"color: #000000; background-color: transparent;\">Image source: Shopee<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Websites with high traffic. Poor web security. When you put the two things together, usually there would not be a happy ending. Actually, the harm has been done already. Tokopedia, an Indonesian e-commerce unicorn, suffered a database breach in March 2020, resulting in a data leak of 91 million users which was put up for sale on the dark web later.<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">At this make-or-break point, Indonesian e-commerce firms have to take a reliable user verification process into consideration, or else fraudulent actors will keep exploiting those unguarded websites by coming in and out freely, taking as many sought-after products or user data as possible.<\/span><\/p>\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Currently, CAPTCHA is one of the most direct solutions that e-commerce companies have at their disposal in their fight against account fraud, such as account takeover and fake user registrations. But CAPTCHAs are so commonplace across the Internet that many don&#8217;t recognize just how efficient they are. Like every other product, sometimes CAPTCHA needs to be sharpened and serviced to become a security service while delivering a better user experience.<\/span><\/p>\n<p class=\"ql-align-justify\">\n<h2 class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Outsmart attackers with Adaptive CAPTCHA<\/span><\/h2>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">The reason why many think CAPTCHA is an annoying and time-consuming necessity of the internet is that they came across too many times deciphering distorted words and proving they know what a car looks like by clicking boxes. That&#8217;s illy sharpened and serviced CAPTCHAs or legacy CAPTCHAs.\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">With machine learning, artificial intelligence, behavior analysis, and so many new technologies, CAPTCHA has been a reassuring security measure while still offering good users a delight interaction or no interaction at all. <\/span><a style=\"color: #000000; background-color: transparent;\" href=\"https:\/\/www.geetest.com\/en\/adaptive-captcha?utm_source=blog\" target=\"_blank\" rel=\"noopener noreferrer\">GeeTest Adaptive CAPTCHA<\/a><span style=\"color: #000000; background-color: transparent;\"> is a brand new approach provided by GeeTest.\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Ways of cyber attacks may change over time, but the underlying principles have not. All sorts of bot-driven attacks can be categorized into two types: <\/span><strong style=\"color: #000000; background-color: transparent;\">web simulator bypass<\/strong><span style=\"color: #000000; background-color: transparent;\"> and <\/span><strong style=\"color: #000000; background-color: transparent;\">API bypass<\/strong><span style=\"color: #000000; background-color: transparent;\">.\u00a0<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Whether bypassing CAPTCHA via web simulators or APIs, attackers can not avoid a key step, that is, to obtain CAPTCHA challenges and solve them, which is the core of the CAPTCHA attack and defense.<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">The unique point of GeeTest Adaptive CAPTCHA is the <\/span><strong style=\"color: #000000; background-color: transparent;\">7-layer dynamic security strategy<\/strong><span style=\"color: #000000; background-color: transparent;\">. It makes GeeTest Adaptive CAPTCHA an evolving solution that does not weaken over time, as it can adapt to the changing data it analyzes.<\/span><\/p>\n<p class=\"ql-align-center\">\n<p class=\"ql-align-center\"><img decoding=\"async\" src=\"https:\/\/geetests.com\/wp-content\/uploads\/2025\/09\/Frame-7697-1.png\" alt=\"\"><\/p>\n<p class=\"ql-align-center\">Try <a href=\"https:\/\/www.geetest.com\/en\/adaptive-captcha-demo?utm_source=blog\" target=\"_blank\" rel=\"noopener noreferrer\">demo<\/a><\/p>\n<p class=\"ql-align-justify\">\n<h3 class=\"ql-align-justify\"><strong style=\"color: #434343; background-color: transparent;\">\u00a07-layer dynamic security strategy<\/strong><\/h3>\n<p class=\"ql-align-justify\">\n<ol>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">JS dynamic obfuscation update<\/span><\/li>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Dynamic update of data<\/span><\/li>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Risk database matching<\/span><\/li>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">CAPTCHA types<\/span><\/li>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">CAPTCHA difficulty<\/span><\/li>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Behavior algorithm model<\/span><\/li>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Parameter encryption<\/span><\/li>\n<\/ol>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">The first layer: JS dynamic confusion update<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: when users request CAPTCHA, the CAPTCHA resource will be loaded, that is, JS script loading, and JS will be dynamically updated.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: cybercriminals may reversely decode the JS script to crack CAPTCHA, and GeeTest uses JS obfuscation technology to regularly obfuscate and update the JS invoked by the user.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Update frequency: Once a day<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: The front-end JS is regularly obfuscated and transformed to invalidate the reversed script, which greatly increases the cost of attackers.\u00a0<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">Second layer: dynamic update of data<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: After CAPTCHA resources are loaded, JS will collect and return necessary data, and GeeTest will dynamically update the data in this step.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: GeeTest carries different dynamic data in each version of JS to achieve a dynamic update of the data link.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Update frequency: Once a day<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: front-end dynamic data changes regularly, increasing the cost of attackers.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">Third layer: risk database matching<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: After data is collected, GeeTest will assess the risk based on its global risk database.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: GeeTest&#8217;s global risk database is supported by 320,000 enterprises worldwide, and 1.4 billion daily CAPTCHA requests.\u00a0<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Update frequency: Once a day<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: The global risk database will be updated regularly.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">Fourth layer: dynamically changed CAPTCHA types<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: After risk assessment, GeeTest will present different types of CAPTCHA according to the user&#8217;s risk level. Currently, it provides up to 5 types of CAPTCHA types, and these types can be customized at a given time.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: balance security and user experience with different types of CAPTCHA.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: different types of CAPTCHA can be switched flexibly to increase security without sacrificing user experience.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">Fifth layer: CAPTCHA difficulty changes<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: CAPTCHA difficulty can be configured at a given timetable.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: CAPTCHA difficulty and CAPTCHA frequency can be customized in accordance with different business demands.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Levels of difficulty: 3<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: Different CAPTCHA types have different difficulty levels.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">Layer 6: Behavior algorithm model update<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: After users submit CAPTCHA answers, the GeeTest behavior algorithms will be updated based on new behavioral trajectories and abnormal behavior samples across its global database.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: GCN model<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Update frequency: Once a day<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: Improve the ability to identify abnormal behavior trajectory, and greatly improve the cost of web simulator bypass.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><strong style=\"color: #000000; background-color: transparent;\">Seventh layer: Parameter encryption<\/strong><\/p>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Trigger timing: After users <\/span>submit CAPTCHA answers<span style=\"background-color: transparent;\">, the &#8220;verify&#8221; request will encrypt the credential data of CAPTCHA interaction, and GeeTest can dynamically change the encryption algorithm.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">How it works: multiple encryption methods<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Encryption types: 2<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<ul>\n<li class=\"ql-align-justify\"><span style=\"background-color: transparent;\">Value: flexible change of parameter encryption algorithm, increase the cost of attackers.<\/span><\/li>\n<\/ul>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">All in all, the battle between attackers and security vendors is not defeating each other permanently. It is a dynamic contest, as both of them are testing each other&#8217;s bottom line. GeeTest turns CAPTCHA from a static tool into an ever-changing security solution that enables businesses to make more accurate fraud and risk decisions at speed and scale, with minimal manual intervention to update the fraud management system.<\/span><\/p>\n<p class=\"ql-align-justify\">\n<p class=\"ql-align-justify\"><span style=\"color: #000000; background-color: transparent;\">Get your GeeTest Adaptive CAPTCHA <\/span><a style=\"color: #000000; background-color: transparent;\" href=\"https:\/\/www.geetest.com\/en\/Register_en?utm_source=blog\" target=\"_blank\" rel=\"noopener noreferrer\">free version<\/a><span style=\"color: #000000; background-color: transparent;\"> now. <\/span><\/p>\n<p class=\"ql-align-justify\">\n<h2 class=\"ql-align-center\"><\/h2>\n<\/div>\n<p><!-- .vgblk-rw-wrapper --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Indonesia has been an overlooked e-commerce market since the pandemic with roughly one-half of the population shopping online and $59billion predicted sales revenue in 2022. However, cyber attacks targeting Indonesia have increased nearly six times in 2020 and cost the country\u00a1\u00afs online businesses dearly. Indonesian e-commerce firms are now at the make-or-break point for the continuous boom of their business.<\/p>\n","protected":false},"author":8,"featured_media":996292,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[89],"tags":[],"class_list":["post-997115","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fraud-prevention"],"_links":{"self":[{"href":"\/en\/wp-json\/wp\/v2\/posts\/997115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"\/en\/wp-json\/wp\/v2\/comments?post=997115"}],"version-history":[{"count":2,"href":"\/en\/wp-json\/wp\/v2\/posts\/997115\/revisions"}],"predecessor-version":[{"id":997577,"href":"\/en\/wp-json\/wp\/v2\/posts\/997115\/revisions\/997577"}],"wp:featuredmedia":[{"embeddable":true,"href":"\/en\/wp-json\/wp\/v2\/media\/996292"}],"wp:attachment":[{"href":"\/en\/wp-json\/wp\/v2\/media?parent=997115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"\/en\/wp-json\/wp\/v2\/categories?post=997115"},{"taxonomy":"post_tag","embeddable":true,"href":"\/en\/wp-json\/wp\/v2\/tags?post=997115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}