All guides
26 September 2026Flycher Editorial

Cash vs. Card in Jakarta & Bali: Scam Reality Check

Most travel guides tell you to "just use your card everywhere" or "ATMs in Bali are totally safe." Neither is true. Jakarta and Bali run on a mix of safe ATMs and predatory card cloners, and carrying the right amount of Indonesian Rupiah alongside cards is not…

Cash vs. Card in Jakarta & Bali: Scam Reality Check

Cash vs. Card in Jakarta & Bali: Scam Reality Check

Most travel guides tell you to "just use your card everywhere" or "ATMs in Bali are totally safe." Neither is true. Jakarta and Bali run on a mix of safe ATMs and predatory card cloners, and carrying the right amount of Indonesian Rupiah alongside cards is not paranoia—it's the difference between a smooth trip and fighting fraud from Delhi to Denpasar.

1. The Card Cloning Reality in Bali & Jakarta

Bali's tipping culture, beachfront restaurants, and nightlife drag your card across more counters than a Gurgaon mall outing. Card cloning happens. Not everywhere, but enough that Indian travelers report 2–3 unauthorised transactions per week during peak season. Jakarta's sprawling shopping districts and petrol pumps are even worse offenders.

The real risk isn't the machine—it's the terminal operator. Skimming devices are slim, nearly invisible, and often installed on ATMs in less-monitored areas (suburban Jakarta, beach shacks in Canggu, money changers near Ubud). A cloner captures your card data and PIN in one tap. Your bank may reverse the charge, but you spend three weeks on hold with HDFC or ICICI staff who've never heard of Bali.

Here's where the scam usually starts:

  • A restaurant or tour operator runs your card through a portable terminal (handheld card reader) in front of you—looks normal, is completely compromised.
  • The operator keeps a copy of your card details.
  • Two days later, micro-transactions (₹10–50 each) drain your account, or a large charge hits in a country you've never been to.
  • Your Indian bank freezes your card for "suspicious activity abroad," leaving you stranded.

The safest move: limit card use to major chains and ATMs run by recognisable banks. More on that below.

2. Which ATMs Are Actually Safe (& Which Ones to Avoid)

Not all ATMs in Indonesia are equal. Slot-machine ATMs in 7-Elevens are not the same as a BCA (Bank Central Asia) standalone machine at an airport or mall.

Safe ATM networks in Bali & Jakarta:

  1. BCA (Bank Central Asia) – Indonesia's largest bank. ATMs are inside malls, at airports, and on main streets. Low skimming risk. Withdrawals capped at 2.5 million IDR (~₹12,500 per transaction).
  2. Mandiri Bank – Second-largest. Widely available. Safer than random kiosks.
  3. Airport ATMs (Denpasar, Jakarta CGK) – Heavily monitored. Use these on arrival.
  4. Shopping mall ATMs – Inside air-conditioned malls (Bali Collection, Mal Bali Galeria), not roadside convenience stores.

Avoid these:

  • Small convenience-store ATMs (7-Eleven, Indomaret) in quiet areas—unmanned, poorly monitored.
  • ATMs in tourist alleys or night-market zones (Kuta Beach strip, Ubud central market).
  • Petrol-pump ATMs, especially outside city centres.
  • Any machine with a loose card slot or a bezel you can wiggle.

Cost reality: Most Indonesian banks charge 20,000–50,000 IDR (~₹100–250) per withdrawal, regardless of amount. Your Indian bank may add 1–2% currency conversion markup. Withdrawing 2.5 million IDR at once (₹12,500) is cheaper per rupee than five 500,000 IDR withdrawals.

Safe ATM checklist before you tap:

  • Is it inside a bank branch, airport, or major mall?
  • Does it have a bank logo you recognise?
  • Is the card slot visibly intact (no overlay, no loose plastic)?
  • Are people withdrawing money in daylight (not isolated)?

3. Why ₹15,000 in Cash Is Your Smarter Move

Carrying 15,000–20,000 Indian Rupees in Indonesian Rupiah (converted before arrival, or withdrawn at the airport) protects you. This is not paranoia. This is friction.

What ₹15K covers in Bali (daily budget breakdown):

ExpenseDaily Cost (IDR)Weekly Cost (IDR)
Budget guesthouse250,000–400,0001.75–2.8 million
Meals (local warung)100,000–150,000700K–1 million
Scooter rental60,000420,000
Activities/temple entry50,000–100,000350K–700K
Total (budget traveller, 5 days)460K–650K2.3–3.25 million

₹15,000 converts to roughly 2.8–3 million IDR (at 185–190 IDR/INR), covering 4–5 days of independent travel. This isn't your entire trip budget—it's your card-fraud buffer.

Why this breaks the scam cycle:

  1. You're not card-dependent. Cloning won't leave you stranded.
  2. You can pay for taxis, street food, and small lodging in cash—the most-cloned transaction types.
  3. If your card is compromised, you switch to cash while banks dispute charges.
  4. You avoid ATM fees on micro-withdrawals (₹1,000–2,000 multiple times = you lose ₹500–1,000 in fees alone).

Cash is invisible to fraud algorithms. No one clones your pocket.

4. Card Strategies: Which Card to Bring (& How to Use It Safely)

Bring two cards. Not one. Not three. Two.

Card 1: Primary (HDFC/ICICI/Axis travel card, or primary debit card)

  • Use this for pre-booked hotels, flights, activities (Klook, GetYourGuide).
  • Notify your bank before travel (yes, they still ask).
  • Never let it out of your sight for payment.

Card 2: Backup (an old credit card or secondary account)

  • Kept separate from Card 1 (different wallet, hotel safe).
  • Used only if Card 1 is compromised or lost.
  • Prevents you being card-less if one is cloned.

The golden rules for using cards in Bali & Jakarta:

  • Restaurants & shops: Only swipe at major chains (Starbucks, malls, franchises). Never hand your card to a waiter or shopkeeper for an off-counter payment terminal.
  • Petrol/travel: Pay by cash. Petrol pumps and small travel agents are hotspots for cloning.
  • Taxis: Uber/Grab only (card on file, driver never sees it). Avoid negotiated cash taxis unless you trust the driver.
  • Money changers: Never use unregistered changers. Use PT Central Kuta or official exchange booths at airports/malls.
  • Online payments: Booking platforms (Agoda, booking.com) are generally safe. Local boutique sites are not.

Use the Trip reality check tool to see which payment methods work best for your specific destinations.

Payment MethodSafety (Bali)Safety (Jakarta)Best For
Major chain restaurants (Visa)⭐⭐⭐⭐⭐⭐⭐⭐⭐⭐Meals, certainty
ATM withdrawal (BCA)⭐⭐⭐⭐⭐⭐⭐⭐Bulk cash, fewer fees
Grab/Uber (card on file)⭐⭐⭐⭐⭐⭐⭐⭐Transport, no card sightings
Local warung (cash)⭐⭐⭐⭐⭐⭐⭐⭐⭐⭐Food, authenticity, no scams
Portable terminal (waiter-held)⭐⭐⭐⭐Avoid entirely
Petrol pump card payment⭐⭐⭐⭐Avoid—use cash

5. What to Do If Your Card Is Cloned (Before You Leave)

It happens. Your HDFC app shows a ₹50,000 charge in Hong Kong. You're still in Canggu. Panic is normal. Action is faster.

Immediate steps (within 1 hour):

  1. Block the card. Call your bank's 24/7 number (HDFC: +91-1800-180-1111 from Bali, or use WhatsApp with +91 prefix). Don't email—call.
  2. Dispute the transaction. The bank will file a "not present" fraud claim. This usually reverses the charge within 3–5 days, though full settlement takes 2–3 weeks.
  3. Request a new card. It takes 7–10 days to ship to India, but you don't need it right now—you have backup card 2 and cash.
  4. Don't panic about your hotel bill. Most hotels pre-authorise cards on arrival, not at checkout. You can pay the final bill with Card 2 or cash.
  5. Alert your travel insurance. File a claim if you've bought trip reality check coverage. Some policies reimburse fraud losses.

What happens next (don't worry about these—your bank handles it):

  • The bank investigates the merchant or ATM network.
  • If the charge is verified as fraudulent, it's reversed.
  • Your card issuer may contact you for statements or photos of receipts.
  • Keep records of where you last used the card.

6. The Smart Carry Strategy for Jakarta & Bali

Here's what experienced Indian travellers carry:

Cash breakdown:

  • 2–3 million IDR in physical notes (₹15,000 value), split across two locations.
    • ₹10,000 in your wallet (for daily spending, taxis, temple donations).
    • ₹5,000 in your hotel safe or money belt (emergency buffer).
  • A photo of your passport ID page (not the original; stored separately).

Cards:

  • Primary debit/credit card (in wallet).
  • Backup card (in hotel safe or separate pouch).
  • Never carry both in the same wallet or pocket.

Before you leave India:

  • Withdraw cash at your bank (Delhi, Mumbai, or Bangalore). You'll get slightly better rates than Bali money changers.
  • Notify your bank of travel dates and destinations.
  • Photograph both sides of each card (stored in encrypted phone notes or email, not cloud photo albums).
  • Write down your bank's emergency fraud number and WhatsApp contact (many banks now offer WhatsApp support).

Use the Forex & bargain check tool to lock in today's IDR rates before you fly.

Frequently Asked Questions

How much cash should I carry for a 5-day trip to Bali?

Carry 2.5–3 million IDR (₹15,000–18,000) for independent travellers. This covers accommodation (budget guesthouse), food (local warung), transport (Grab, scooter), and activities. If you're booking everything pre-arrival (hotels, tours), carry half this amount. Keep ₹5,000–10,000 in a separate location (hotel safe) as an emergency buffer.

Are Bali ATMs safe to use at night?

No. Only use ATMs inside malls, airports, or bank branches during daylight or busy hours. Standalone ATMs on quiet streets or in tourist alleys should be avoided after dark. Skimming devices are harder to install on actively-monitored machines, and you're less likely to be followed for robbery in busy areas.

What's the difference between using Grab payment (card on file) vs. handing my card to a taxi driver?

Grab's payment is tokenised—the driver never sees your card number, expiry, or CVV. You're not susceptible to cloning. A cash taxi or a traditional taxi where you hand over your card is a direct opportunity for the driver to copy your details on a skimming device or simply note your card information. Always use Grab or Uber in Indonesia instead of street taxis.

If my card is cloned, will my bank refund the fraudulent charge?

Yes, Indian banks will refund fraudulent charges if you report them within 7 days. However, the investigation takes 2–3 weeks, and the refund may not post until 15–21 days after your claim. File a formal complaint via your bank's mobile app or website (not just a phone call) to start the clock. Keep receipts and merchant details.

Can I use my phone's digital wallet (Google Pay, Apple Pay) in Bali instead of a physical card?

Partially. Google Pay and Apple Pay work at major chains, malls, and some restaurants in Jakarta and Bali's touristy areas, but coverage is spotty. Many local warung, smaller hotels, and transport operators won't accept contactless payments. You'll still need cash and a physical backup card. Treat digital wallets as a bonus convenience, not your primary method.


You don't need to fear Bali's payments—you just need a plan. Combine cash, a safe ATM strategy, and a secondary card, and fraud becomes a minor inconvenience, not a trip-killer. Generate your free AI itinerary → and we'll map out the safest spots to withdraw money, the best guesthouses with card-safe checkout, and exactly where to spend cash vs. card for each day of your trip.

Ready to plan?

Build your itinerary in 60 seconds

Free AI travel planner for Indians. INR pricing, real visa rules, honest budgets.

Open AI Planner

New here?

Tap Plan to build your first AI itinerary

Day-by-day boards with stays, food & deep-linked deals — in under a minute.