Bandung Students Moved to Signal After the Omnibus Revisions Made the Group Chat a Crime Scene

The 2026 revisions to Indonesia's omnibus law did something the original Cipta Kerja fight never quite managed: they wrote the group chat into the penal code. The new language on 'disruptive online assembly' is broad enough that a Telegram broadcast calling for a march and a Signal channel coordinating one can both qualify, depending on which prosecutor reads the screenshot. Student coalitions in Bandung and Jogja did the only thing the threat model allowed. They moved.

Signal is now the default for organizing meetings at ITB, UGM, UIN Sunan Kalijaga, and the smaller campuses that orbit them. Disappearing messages set to a day, sealed sender, usernames instead of numbers, and a rotating set of admins who hold the keys to the announcement channel. The infrastructure looks clean on paper, but anyone who has organized through a semester knows the weak point is never the cryptography.

The leak is almost always a person

A coalition is only as secure as its loosest member, and a student coalition is by design porous: new freshmen every August, alumni who drift in and out, sympathetic lecturers, the friend of a friend who showed up to one teach-in. Police in Indonesia have not needed to break Signal to break a protest. They need one phone unlocked at a checkpoint, one screenshot forwarded to a parent, one informant who joined the channel in March and stayed quiet until June.

Organizers in Jogja have responded with vetting that looks more like a small NGO than a student council: in-person onboarding, no invite links posted publicly, separate channels for logistics, legal aid, and press, and a hard rule that planning conversations never touch a phone that has been through a campus security desk. It slows everything down, which is the point and also the cost.

The law moves faster than the workaround

The deeper problem is that the legal definition keeps expanding to meet the workaround. The 2024 ITE Law amendments already criminalized a wide band of online speech. The 2026 omnibus revisions added 'disruptive' as a category that a judge gets to interpret after the fact, which means the chilling effect is doing most of the work before anyone is charged. Civil society groups, including LBH and SAFEnet, have documented how vague digital-speech provisions get applied unevenly, and almost always downward, against students, journalists, and labor organizers rather than the officials they criticize.

This is the part the encryption cannot fix. A Signal channel protects the contents of a conversation. It does not protect the existence of the conversation from being treated as evidence of conspiracy. Indonesian prosecutors have already used metadata, screenshots from cooperating members, and seized devices to build cases without ever cracking a single message.

What the move actually buys

What the migration to Signal gives Bandung and Jogja organizers is time, and a smaller blast radius when something goes wrong. A leaked Telegram group exposes a whole movement's planning cycle. A leaked Signal channel exposes a cell. That is a meaningful downgrade in damage, and for a coalition trying to hold a march without losing its organizers to a precinct in Polrestabes, meaningful is enough.

The students know the platform is not the protection. The protection is the discipline around it: who you let in, what you write down, whose phone is in the room, and which alumnus you stopped trusting in April. The law followed them into the group chat. They are organizing as if it is sitting in the corner taking notes, because it is.