Bali scams: fake sites, money changers and ATMs

Bali’s recurring scams, from look-alike levy and visa sites to short-changing money changers and skimmed ATMs, and the counter-move that beats each one.

On this page
  1. Short answer
  2. In detail
    1. What are the common scams in Bali?
    2. How do you spot a fake tourist levy site?
    3. Are there fake e-VOA and arrival card sites?
    4. How do money changers short-change you?
    5. Are Bali ATMs safe from card skimming?
    6. How do you avoid taxi scams in Bali?
    7. Is it safe to pay a villa deposit online?
    8. What should you do if you are scammed in Bali?
  3. Sources

Short answer

Bali’s recurring scams are look-alike payment sites, short-changing money changers, skimmed ATMs, overpriced rides and fake villa listings, and each has a simple counter-move. Type each official address yourself, never pay for the free arrival card, and count your cash at the changer’s counter.[4, 7, 11, 16]

Levy, official site
IDR 150,000
Arrival card
Free
Police
110

In detail

Start where your trip sits:

What are the common scams in Bali?

Bali’s recurring scams take money at the moment you pay: on a copied website, at a money changer’s counter, at a tampered ATM or in a car with no agreed fare. None of them needs you to be careless. The copies look official, and the counts happen fast.

In practice, each one fails against a single habit. The table pairs each scam with the move that beats it.[2, 4, 5, 11, 14, 16]

Bali's recurring scams and the counter-move, October 2026
ScamWhere it happensCounter-move
Look-alike levy siteSearch ads and copied sitesType the official address; the total is IDR 150,000
Paid arrival card or fake e-VOACopied sites, emailed linksType the official address yourself; the card is free
Short countUnlicensed money changersLicensed changer; count at the counter
Card skimmingTampered ATMsA bank-branch ATM; check the card slot
Overpriced rideStreet and arrivals-hall driversMeter, app or official counter
Fake villa listingSocial media and messaging appsVerification code and a viewing first

Our rule

Type every payment address yourself, and count every cash handover where it happens.

A copied page and a fast count both rely on you skipping that step.

How do you spot a fake tourist levy site?

The Bali tourist levy, the tourist tax, is IDR 150,000 (about AUD 12) a person, paid on lovebali.baliprov.go.id or the Love Bali app, at the airport and port counters, or through a hotel, agent or attraction registered with Love Bali, by card, transfer or QRIS, never cash.[1]

Type lovebali.baliprov.go.id yourself, since look-alike sites can sit above the real site in search ads. Look-alike sites can charge more than the levy; some can send a voucher that fails a check, others can pass the real levy on and keep the difference.[2, 3]

Every official arrival address is in the official sites guide, and the payment steps are on the tourist levy page.

Are there fake e-VOA and arrival card sites?

Yes. The All Indonesia arrival card is free, and any site or emailed link that asks you to pay for it is not the government. The card is on allindonesia.imigrasi.go.id, and the e-VOA (electronic visa on arrival) is on the two addresses immigration's visa page lists, evisa.imigrasi.go.id and indonesiavoa.vfsevisa.id, or at the airport's bank counter.[5, 7, 8]

Copies of the arrival card site often charge a processing fee for the free card, and fake visa agents can take a fee and deliver no visa, or the wrong one, so type the official address yourself and ignore any email link that asks for payment.[4, 5, 6, 7]

A copy can rank first. In 2022 immigration warned that a look-alike e-VOA site, indonesia-evoa.com, appeared at the top of Google search results and took payment like the real site.[9]

Our rule

Read the whole address in the bar ahead of any passport or card number.

A copied page can look identical; the address cannot.

How do money changers short-change you?

Some unlicensed changers short-change you with a fast, distracted count, so the first defence is to pick a licensed one. A licensed money changer shows three things: Bank Indonesia’s licensed-changer logo, its licence certificate, and a sign reading “Penyelenggara Kegiatan Usaha Penukaran Valuta Asing Berizin” (Authorised Money Changer). Licensed exchanges also show a QR code that opens the business’s name and licence.[10, 11]

The warning sign is the rate. Unlicensed changers often post a better rate than the others, and have no fixed premises.[10]

At unlicensed changers, short counts often follow a routine: the teller recounts, mixes look-alike notes such as IDR 2,000 and IDR 20,000, and keeps you talking while the count runs. Count it yourself at the counter, keep the receipt, and go straight back if it is short.[11, 12, 13]

Our rule

Scan the QR code first, then hand over your notes.

A changer with no code and none of the three signs is one to walk past.

Are Bali ATMs safe from card skimming?

Not all of them: skimmers and hidden cameras are sometimes fitted to machines, and a fake help number can be stuck on one so that a caller asks for your card details. Use a machine at a bank branch, check the card slot for a bulky casing, and never phone a number stuck to the machine.[4, 11, 14]

Sources differ on ATMs in shops and shopping centres; see Conflicts. A bank-branch machine is the one choice every source accepts.

Our rule

Keep your card in sight at every payment, at a machine or a till.

Card fraud is common, and a card that leaves your sight can be copied.[11]

How do you avoid taxi scams in Bali?

Ride on the meter, in an app, or from an official counter, and check that the car and driver match the app before you get in. Overcharging is a risk with taxis hailed on the street and with drivers who approach you in the airport arrivals hall: most of them quote with no fixed fare, and some claim to drive for Grab or Gojek.[4, 11, 15]

The official taxi counter and the app pickup lounges at the airport are mapped on the airport arrival page.

Our rule

Share the trip from the app with someone you know.

Someone else then has the driver, the car and the route.[11]

Is it safe to pay a villa deposit online?

Not until you have checked the listing: a fake one can use stolen photos and a sham agent who disappears once the deposit lands. Single losses run from IDR 10 million to hundreds of millions, and travel insurance does not refund money sent to a scammer.[16]

The association's database at bvrma.org is open to anyone and lists about 3,000 villas from 70 member companies, each with its own code. Ask the owner or agent for the code and enter it there. It covers member villas only, so a missing code means ask for a viewing, not that the listing is fake. If a code fails, or the explanation is odd, don't transfer.[16]

Our rule

View the villa, or check its code with the Bali Villa Rental Manager Association, before you send any deposit.

A viewing or a code is the one proof a copied listing cannot fake.

The checks before a long lease are on the long-term rentals page.

What should you do if you are scammed in Bali?

First protect your money: check your bank statements, then follow the step for your scam below.[4]

  1. Card used on a fake site or at a skimmed ATM

    Call your bank on the number printed on your card and block it. Do not use any number stuck to an ATM, because that line can be the scam itself.[11]

  2. Short-changed at a money changer

    Go back at once with the receipt. If a licensed changer will not settle it, complain to Bank Indonesia on 131, or 1500131 from abroad, or at bicara@bi.go.id with your ID and the receipt. An unlicensed changer often gives no receipt to complain with.[10, 12]

  3. Paid a look-alike levy site

    Look your payment up on the official site with your passport details first: some copies pass the real levy on. Pay again there only if no payment shows, and keep the QR voucher it emails you.[1, 2]

  4. Paid a visa agent who sent nothing, or the wrong visa

    Before you fly, apply yourself on evisa.imigrasi.go.id or indonesiavoa.vfsevisa.id. Already in Bali? Check what visa you hold with immigration before your stay runs out.[7, 8]

  5. Sent a villa deposit to a fake listing

    Report it in person at the local police station and get a police report, then check any other listing's code at bvrma.org before you pay again.[4, 16]

  6. Threatened or robbed

    Leave the car or the place if it is safe to do so, then call the police on 110.[4, 17]

Next steps

FAQ

Does travel insurance cover money lost to a scam?

Usually not for money you sent to a scammer yourself.[16]

Are Grab and Gojek rides safe from scams?

Safer, if the car and driver match the app and the fare shows in it. Drivers can pose as Grab or Gojek drivers, especially at the airport, so check both before you get in.[4, 11]

Conflicts

Sources differ on whether ATMs in shops and shopping centres are safe to use.

Sources disagree

Are ATMs in shops and shopping centres safe to use?

Our reading

Use an ATM at a bank branch.

Both sources accept a bank-branch machine; the Australian advice also lists shops and shopping centres, which the Bali skimming report says to avoid, so the choice both accept is the safe default.

See what each source says
  • Use authorised ATMs in safe places, like at a bank branch, shops or shopping centres; some vendors, including at ATMs, install hidden cameras and use card skimmers.[4]

    updated 16 October 2026, read 18 October 2026

  • After skimming devices were reported on cash machines across Bali: use ATMs at bank cash-machine stations; avoid ATMs not connected to a bank and machines inside minimarts and shopping centres.[14]

    8 April 2024, read 18 October 2026

Sources

Our summaries of Indonesian rules are unofficial; the Indonesian text governs.

  1. Bali Provincial Government, Love Bali, FAQ

    accessed 11 October 2026

  2. Bali Travel Life, Bali tourism levy: a visitor's guide

    published 27 April 2026 · accessed 16 October 2026

  3. Bali Live, Fake links and double charges: what is going on with Bali's tourist levy?

    updated 31 August 2026 · accessed 12 October 2026

  4. Australian Government, Smartraveller, Indonesia travel advice

    updated 16 October 2026 · accessed 18 October 2026

  5. Ortax, Beware of scams: the customs directorate confirms the arrival card is free to fill in

    published 9 February 2026 · accessed 12 October 2026

  6. The Canberra Times, Bali tourists targeted by arrival card scam websites

    published May 2026 · accessed 12 October 2026

  7. UK Foreign, Commonwealth and Development Office, Indonesia travel advice: entry requirements

    published 18 September 2026 · accessed 18 October 2026

  8. Directorate General of Immigration, Indonesia, B1 visa on arrival (Visa Kunjungan Saat Kedatangan): stay, fee, how to apply

    accessed 24 October 2026

  9. Directorate General of Immigration, Indonesia, Press release: the official e-VOA site is only molina.imigrasi.go.id (fake site indonesia-evoa.com)

    published 6 December 2022, updated 17 January 2024 · accessed 18 October 2026

  10. UK Foreign, Commonwealth and Development Office, Indonesia travel advice: safety and security

    published 18 September 2026 · accessed 24 October 2026

  11. Indonesia Expat, How backstreet Bali money changers cheat

    published 2016, updated 19 July 2022 · accessed 16 October 2026

  12. Bali Live, Money changer in Ubud caught cheating tourist, video spreads on social media

    updated 23 September 2025 · accessed 16 October 2026

  13. The Nightly, Bali tourists reminded to stay cautious when using ATMs after reports of card skimming

    published 8 April 2024 · accessed 16 October 2026

  14. Bali Holiday Secrets, Bali airport at night

    updated 8 September 2026 · accessed 16 October 2026

  15. bali.live (media), Villa rental in Bali: check the code or kiss your deposit goodbye

    updated 21 January 2026 · accessed 12 October 2026

  16. UK Foreign, Commonwealth and Development Office, Indonesia travel advice: getting help

    published 18 September 2026 · accessed 18 October 2026

  17. Ministry of Finance, Indonesia, Fiscal Policy Agency, Kurs Pajak (tax exchange rate), weekly

    accessed 21 October 2026

    KMK 50/MK/EF.2/2026: USD 1 = IDR 17,946.00, AUD 1 = IDR 12,483.54, EUR 1 = IDR 20,088.08, GBP 1 = IDR 23,780.53, JPY 1 = IDR 113.393, CNY 1 = IDR 2,681.69, SGD 1 = IDR 14,004.96, valid 21 October 2026 to 27 October 2026. A weekly reference rate, not the rate a bank or money changer gives you.

Spotted something wrong or out of date? Send a correction

More questions,
answered the same way.