Article

Indonesia's LIMS Interception Scandal: When a Lawful System Becomes Unlawful

Author: Agus Budi Harto, 2026-11-04 20:35:30


Background - What LIMS Is Supposed To Be

Lawful Interception Management System (LIMS) is not a portable bugging device. It is the official control plane that allows law enforcement to request interception from telecom operators. In Indonesia, the system is regulated by Peraturan Kapolri No. 5/2010 on Interception Procedures at the Police Monitoring Center and Permen Kominfo 11/2006 on the operator side.

Technically, LIMS follows ETSI standards TS 101 671 / TS 102 232. It consists of three domains: the Law Enforcement Agency (LEA) Monitoring Center, the Communication Service Provider's Core Network where Internal Intercept Functions (IIF) are embedded, and the Administration and Mediation functions (ADMF/MF). The workflow is designed to be lawful by architecture: an investigator submits a warrant with case details, target identity (MSISDN, IMSI, IMEI, SIP URI, IP), and a 30-day period; Kabareskrim evaluates it and requests court permission; only after approval does the ADMF push the target identifier via X1 interface to the operator, which then duplicates Content of Communication (CC) and Intercept Related Information (IRI) and delivers it via secure HI2/HI3 VPN tunnels to the LIMS.

LIMS supports 2G to 5G, fixed, wireless, WLAN, WiMax and PON, and has evolved into vLIMS, a cloud-based software that can manage, track and automate interception data digitally. This system can record target identities, and after identities are entered, it runs authorization and verification procedures. The information obtainable includes voice conversations, text messages, and internet traffic data, plus metadata such as phone number, time, duration and communication patterns.

Other agencies have their own stacks. The KPK, for example, historically procured ATIS Gueher GmbH systems from Germany in 2005 - portable A (laptop and receiver) at Rp 1.512 billion, type B at Rp 5.25 billion, type C at Rp 4 billion - capable of connecting to GSM/AMPS/CDMA audio sources with capacity of more than 680 minutes and 1000 different calls. This shows LIMS is a generic concept, not a single Polri server.

Problem - How The System Was Allegedly Abused

On 3 November 2026, Bareskrim Polri announced that three senior officers, including former National Police Chief Gen. LSP, Irjen ASN, and Irjen EH, were named suspects for alleged illegal interception against President and dozens of other figures - state officials, politicians, mass organizations, NGOs, media and businessmen.

According to Kabareskrim Komjen Asep Safrudin:

"Terdapat beberapa nomor tersebut dimasukkan ke server LIMS, ya, atau Lawful Interception Management System, tanpa melalui verifikasi. Kemudian nomor-nomor tersebut disadap tanpa kaitan atau tanpa adanya proses penegakan hukum."

The problem statement is architectural, not about spyware sophistication. Investigators allege that numbers were provisioned into the LIMS server without verification and without connection to any investigation. Bareskrim also alleged deletion of interception result files stored on the LIMS computer around October 2026 to erase traces. This transforms a lawful interception into unlawful interception by bypassing the ADMF controls.

Parallel reporting in Indonesian media introduced a second narrative: the alleged use of Predator spyware, marketed by Cytrox via the Intellexa Consortium, reportedly procured in 2018 with a value of around Rp2 trillion per system and requiring periodic license reactivation. The reports claim the tool was used for political monitoring in 2019 and 2024. However, Bareskrim's official statement to date focuses on LIMS abuse, not spyware implantation, and Polri has previously denied using Pegasus while admitting to using zero-click systems in 2017-2018. The distinction is crucial: LIMS works from the network side and does not install anything on the phone, while Predator/Pegasus works by implanting malware on the endpoint to read messages, emails, photos, contacts, record calls, track location, and activate camera and microphone without user knowledge via zero-click exploits.

Solution - From Box-Centric to Control-Centric Security

The case demonstrates that securing interception is not about buying a more advanced box. It is about controls around the box:

Immutable Warrant Binding: Every X1 provisioning must be cryptographically bound to a court warrant ID, expiry, and dual authorization. No manual MSISDN entry should be possible without it. Separation of Duties: The person who can add a target (ADMF admin) must not be the person who can approve it and the person who can delete logs. Two-person rule and HSM-based signing. Write-Once Audit Trail: As IT observers note, LIMS is like a master key - lawful when supervised. If logs can be deleted by an interested party, supervision is just formality. Logs must be shipped in real-time to an external SIEM under Kominfo / Kompolnas / independent oversight, with WORM storage. HI2/HI3 Anomaly Detection: The mediation function should flag anomalous patterns: sudden bulk addition of VIP numbers, interception outside criminal case categories, activity during non-investigative periods (2025-2026 without case link).

Periodic Log Review: This is the missing layer. A monthly and quarterly review must include: who provisioned which IMSI/MSISDN, warrant linkage, data volume per target, deletion attempts, failed authorization attempts, and cross-check with court registries. The review must be done by an independent audit committee that includes non-law-enforcement members, as originally envisioned for KPK's supervisory committee.

Result - What Happens If Not Fixed

If the current architecture remains, the result is predictable: lawful interception can be performed without leaving a legally admissible trace, eroding public trust in both interception for serious crimes and in democratic checks. The exposure of alleged 2-year interception of the President's phone shows that even the highest office can be affected when verification is bypassed.

Conversely, a reformed model would produce three results: (a) Every interception remains attributable to a case and a judge, (b) Any deletion attempt triggers an alert before it succeeds, (c) Public transparency reports (number of warrants, not targets) can be published as in many ETSI-compliant countries, restoring the distinction between Content and Metadata interception.

The investigation is still ongoing and the suspects are presumed innocent until proven in court. The technical lesson, however, is already clear: technology is only as strong as its governance system.

References

  1. Mengenal LIMS, Sistem yang Dipakai LSP cs untuk Menyadap Presiden - https://www.seanteronews.[STRIPPED 98 bytes]. Apa Itu LIMS yang Diduga untuk Menyadap Presiden ?
  2. Mengenal LIMS, Alat Negara Pemburu Penjahat Malah Dibuat Jenderal LSP Cs Sadap Presiden - https://astakom.[STRIPPED 113 bytes]. Memahami LIMS dan Kasus Penyadapan: Betulkah Menggunakan Pegasus, Spyware Buatan Israel?
  3. Alat Sadap LSP Mereknya Predator Buatan Israel - https://afu.[STRIPPED 105 bytes]. Inilah Alat Sadap Milik KPK Dan Cara Penyadapan Serta Antisipasinya
  4. Skandal Penyadapan Polri: Mendesak Pengawasan Independen dan Transparansi Alat Sadap - ELSAM

Tags: News Opinion

13 reviews

Add comment