Today, March 28, 2026, Indonesia’s sweeping social media ban for children under 16 officially takes effect — making it the first country in Southeast Asia, and the first non-Western nation, to enforce age-based restrictions on major platforms at this scale.

The regulation, known as PP Tunas (the Child Protection in Digital Space Regulation), targets what the government calls “high-risk” platforms: TikTok, Instagram, Facebook, YouTube, X (formerly Twitter), Threads, Bigo Live, and Roblox. An estimated 70 million children and teenagers are affected. Existing under-16 accounts on these platforms must be deactivated.

The Bottom Line: This isn’t just a child safety story. Online scams and fraud targeting young Indonesians were explicitly cited as a core justification for the ban. But the enforcement mechanism — age verification technology — creates a troubling privacy paradox that every parent, teen, and consumer should understand.

What Happened: The Ban in Detail

On March 5, 2026, Communications and Digital Affairs Minister Meutya Hafid signed the regulation into law. Implementation begins today and will proceed in stages until all platforms comply.

Here’s what the law actually does:

  • Under 13: Children may only create accounts on low-risk platforms specifically designed for kids. High-risk platforms are completely off-limits.
  • Ages 13–16: A tiered system applies. Access depends on the platform’s assessed risk profile, with significant restrictions on high-risk platforms.
  • 16 and over: No restrictions under this regulation.

Platforms that fail to comply face escalating sanctions — from formal warnings and fines to outright access termination, meaning the government can block non-compliant platforms entirely within Indonesia.

Several platforms have already started adapting. X raised its minimum account age to 16 for Indonesian users. TikTok pointed to its 50-plus pre-set safety features. Meta cautioned that the ban could push teens toward “unregulated, less-safe alternative platforms” — a warning that deserves serious consideration.

Why Scams Drove This Decision

Minister Hafid was blunt about the motivation: “Children face increasingly real threats from exposure to pornography, cyberbullying, online fraud and scams, and most importantly, addiction.”

That framing matters. Indonesia hasn’t positioned this as a moral panic about screen time. The government is explicitly responding to a measurable rise in online fraud targeting minors.

Here’s the scam landscape that pushed Indonesia to act:

Young people are prime scam targets. Teens on social media are disproportionately exposed to investment scams, fake giveaways, phishing links disguised as influencer promotions, and romance-adjacent manipulation schemes. In Indonesia — where mobile payments through platforms like GoPay and OVO are ubiquitous — a single successful scam can drain a family’s finances through a teenager’s phone.

Influencer-driven fraud is exploding. Social media platforms are ground zero for fraudulent endorsements, fake cryptocurrency schemes, and pyramid-style “business opportunity” scams that specifically recruit young users. The algorithm doesn’t distinguish between a legitimate business and a scam operation — it just amplifies whatever gets engagement.

Scam compounds have regional ties. Indonesia sits in the heart of Southeast Asia’s scam compound crisis. Neighboring Myanmar, Cambodia, and Laos host massive fraud operations that recruit victims and operators alike through social media. Indonesian nationals have been trafficked into these compounds. The government sees platform restrictions as one tool to disrupt the recruitment pipeline.

Minister Hafid framed the regulation as the government “stepping in so that parents no longer have to fight the algorithm giants alone.” Whether or not a social media ban is the right tool for this fight, the underlying problem — that platforms profit from engagement patterns that expose children to fraud — is real and documented.

The Privacy Paradox: Solving One Problem, Creating Another

Here’s where things get complicated — and where consumers need to pay close attention.

To enforce a ban on under-16 social media use, you need to verify every user’s age. That means collecting sensitive personal data, potentially including government-issued ID, biometric scans, or facial age estimation.

Indonesia is adopting the ISO/IEC 27566-1 Age Assurance Systems Framework — the same international standard that guided Australia’s Age Assurance Technology Trial. Tony Allen, who oversaw Australia’s trial, briefed Indonesian officials on the framework’s implementation.

The paradox is straightforward: to protect children’s privacy from platform exploitation, the government is requiring a system that collects even more sensitive data about children.

This creates several concrete risks:

Data breach exposure. Any centralized age verification database becomes a high-value target for hackers. Indonesia has experienced significant data breaches in recent years. A database containing children’s identity documents and biometric data would be extraordinarily attractive to identity thieves.

Function creep. Age verification infrastructure built for child protection can be repurposed for broader surveillance. Once the technical capability exists to verify every user’s identity, the temptation to expand its use beyond child safety is significant.

Disproportionate impact on vulnerable youth. Amnesty International raised this concern directly — LGBTQ+ youth, disabled teens, and children from marginalized communities often rely on social media as a vital support network. Requiring identity verification to access these spaces doesn’t just restrict access; it removes anonymity that may be protective.

Circumvention creates new risks. Australia’s experience is instructive. After implementing its own under-16 ban in December 2025 (affecting approximately 4.7 million accounts), Australian children quickly learned to use fake birthdates and VPNs to bypass restrictions. Education Minister Abdul Mu’ti has already flagged the “technical difficulty of detecting fake accounts” in Indonesia’s much larger population. When teens circumvent age gates, they may end up on less-regulated platforms with even fewer safety protections — exactly the outcome Meta warned about.

What Parents and Teens Should Know Right Now

Whether you’re in Indonesia or watching this policy spread globally, here’s what matters:

The ban is real but staged. Implementation starts today but will roll out gradually. Don’t expect every platform to flip a switch overnight. Watch for platform-specific announcements about compliance timelines.

Other countries are watching. Malaysia has expressed support and may follow suit. Singapore and the Philippines are considering similar measures. Australia already has its own version in place. This is not an isolated experiment — it’s the beginning of a potential regional (and global) shift toward age-gated social media.

A ban doesn’t eliminate scam exposure. Removing a teenager’s Instagram account doesn’t make them immune to phishing texts, scam emails, fake job offers, or fraud attempts through messaging apps. Scam literacy matters more than platform access restrictions.

The real impact depends on enforcement quality. A well-implemented age verification system with strong data protection could genuinely reduce children’s exposure to harmful content and scam operations. A poorly implemented one could create new vulnerabilities while failing to keep determined teens off platforms.

Global Implications: A Tipping Point

Indonesia’s decision is significant beyond its borders for one reason: scale. With 70 million affected young people, this is the largest implementation of social media age restrictions ever attempted — dwarfing Australia’s 4.7 million.

If Indonesia’s approach works — meaning measurable reductions in scam victimization and online exploitation of minors without catastrophic privacy failures — expect a wave of similar legislation across Asia, Africa, and Latin America. If it fails through mass circumvention, data breaches, or simply pushing teens onto more dangerous platforms, it could discredit the entire regulatory approach.

The tech industry’s response will also matter enormously. Platforms have a choice: invest in genuine safety-by-design features that protect young users, or fight age restrictions while continuing to profit from engagement models that expose children to fraud. The next 12 months will reveal which path they choose.

How to Protect Yourself and Your Family — 5 Actionable Steps

Regardless of where you live, the issues driving Indonesia’s ban are universal. Here’s what you can do today:

  1. Teach scam recognition before platform rules. Age bans are a blunt instrument. The most durable protection is teaching young people to recognize phishing, fake giveaways, impersonation schemes, and too-good-to-be-true investment pitches. Make scam literacy a household conversation — not a one-time lecture.

  2. Audit your family’s digital footprint. Check what personal information your children have shared on social media profiles — full names, school names, locations, birthdates. Every data point is ammunition for social engineering scams. Remove what you can.

  3. Use platform parental controls that already exist. Before (or alongside) government mandates, every major platform offers parental supervision tools, restricted modes, and content filters. Enable them. They’re not perfect, but they add a layer of protection.

  4. Be skeptical of age verification requests. As age verification systems roll out globally, scammers will inevitably create fake “verify your age” phishing pages designed to harvest identity documents and biometric data. Never submit identity documents through links received via email, text, or social media DMs. Always verify through the platform’s official app or website.

  5. Talk about the privacy trade-off openly. If your teen is affected by an age ban, discuss why — including both the scam protection rationale and the privacy costs of age verification. Young people who understand the trade-offs make better digital citizens than those who simply have access removed without explanation.

Indonesia’s social media ban takes effect today, March 28, 2026. ScamWatch HQ will continue tracking enforcement developments, privacy implications, and whether this approach actually reduces scam victimization among young people. Stay informed — subscribe to our newsletter for weekly scam intelligence updates.