Bukuwarung logo

Financial Crime, Fraud & Abuse Associate

Bukuwarung
3 hours ago
Full-time
On-site
Special capital Region of Jakarta, Java, Indonesia
Associate

Role Summary

The Financial Crime, Fraud & Abuse Associate protects BukuWarung’s merchants, funds, and platform integrity from fraud and abuse across three payment and credit businesses: BukuAgen, BukuPay, and BukuModal. This is a hands-on, first-line operational role: monitoring alerts in real time, investigating suspicious activity end to end, and continuously improving the detection rules and models that catch bad actors before they cause loss. The Specialist is the day-to-day early-warning system for the business — close enough to the data to spot emerging typologies, and disciplined enough to document every decision to a standard that survives regulator and partner-bank scrutiny.

Key Responsibilities

Alert & Transaction Monitoring

  • Review fraud and abuse alerts daily across BukuAgen, BukuPay and BukuModal, triaging by risk and clearing the queue within agreed SLAs — including the Monday-morning batch monitoring cycle.

  • Monitor real-time and near-real-time signals from the risk decisioning and monitoring stack (Internal Tool, RTTM, Device Intelligence and KYC/KYB signals) and act on straight-through-processing exceptions.

  • Track transaction-velocity, value-structuring, device and geolocation anomalies, and flag patterns that indicate an emerging or coordinated attack.

Investigation & Case Management

  • Investigate suspicious accounts, agents, merchants and loan applications end to end — reconstructing the transaction trail, linking related entities, and reaching a documented, evidence-based disposition (clear, restrict, block, or escalate).

  • Take timely containment actions within delegated authority (hold, limit, suspend) to stop active loss, and hand off cleanly to Merchant Happiness, Operations or Collections where a customer or recovery touchpoint is needed.

  • Escalate confirmed or strongly suspected financial crime to the FinCrime Lead / L2 for Suspicious Transaction Report (STR) handling with PPATK, providing a clean, complete evidence pack. The Specialist prepares and documents; L2 files.

  • Maintain case records and audit trails to a “banking standard” — complete, timestamped, and defensible to partner banks (e.g. Nobu), BI and OJK.

Detection Rules, FDS & Model Feedback

  • Own the operational upkeep of the Fraud Detection System (FDS) — propose, test and update detection rules and thresholds as new typologies appear, keeping input formats and rule logic clean and version-controlled.

  • Tune rules to reduce false positives without letting real fraud through, measuring the trade-off (hit rate, precision, analyst effort) rather than adjusting by feel.

  • Feed confirmed fraud outcomes back to the Data team to improve fraud, bust-out, gestun and identity-graph models, and back to Product to close abuse loopholes in promotions and onboarding.

  • Contribute fraud signals to the Merchant Quality Score (MQS) and to risk-by-design reviews of new features before launch.

Reporting & Continuous Improvement

  • Produce daily/weekly monitoring summaries and periodic typology write-ups: what was caught, what leaked, loss avoided, and emerging threats to watch.

  • Refine investigation SOPs and playbooks, and help train first-line and field teams on new fraud patterns and red flags.

  • Support internal and external audits and thematic reviews with clean documentation and reproducible case evidence.

Requirements

Must-have qualifications and experience:

  • Experience: 4+ years in fraud operations, transaction monitoring, financial-crime investigations, or payments/lending risk — ideally in fintech, banking, e-money, or a payment institution.

  • Investigations: demonstrated ability to run a case end to end — from alert to reconstructed transaction trail to documented, defensible disposition.

  • Data analysis: hands-on comfort analysing large transaction datasets to find patterns and anomalies using spreadsheets/Google Sheets and at least one query or analytics tool; able to turn raw data into an investigative conclusion.

  • Regulatory knowledge: working knowledge of KYC / KYB / AML-CFT obligations in Indonesia (BI and OJK expectations; STR reporting to PPATK) and how they translate into day-to-day monitoring and escalation.

  • Rule / control mindset: experience writing, tuning or operating fraud-detection rules or monitoring scenarios, and reasoning explicitly about the false-positive vs. missed-fraud trade-off.

  • Rigour & integrity: meticulous documentation, sound judgment under time pressure, and the discretion to handle sensitive customer and financial data appropriately.

  • Communication: clear written English and Bahasa Indonesia; able to explain findings to Product, Engineering, Operations and Legal without jargon.

Preferred Skills

Nice-to-have; strengthens an application but is not required:

  • SQL or Python for self-serve querying and lightweight analysis of transaction and device data.

  • Anti-fraud / financial-crime certification — CFE (Certified Fraud Examiner), CAMS, or equivalent.

  • Direct fintech / e-money / agent-banking experience, especially with QRIS, EDC/ATM-rail cash-out, or digital lending in Indonesia or Southeast Asia.

  • Familiarity with specific typologies: gestun / cash-recycling, bust-out, transaction laundering, ATO, promo-abuse, and synthetic-identity fraud.

  • Exposure to fraud/risk tooling — device intelligence, RASP, behavioural biometrics, identity-graphing, or rules/decisioning engines.

  • Experience supporting regulator or partner-bank audits, or contributing to risk-by-design reviews in a product lifecycle.

How This Role Fits

This is a first-line (L1) operational role. The Specialist detects, investigates and disposes in near-real time, and prepares the evidence that the FinCrime Lead (L2) uses to file STRs and its own regulatory liaison. The Specialist works alongside Data (models), Product (risk-by-design and abuse loopholes), Operations and Merchant Happiness (customer and device touchpoints), and Collections (lending recovery). Success looks like fraud and abuse caught earlier, losses avoided, false positives falling, and every decision documented well enough to defend to a partner bank or regulator.