Two Indonesian hackers, who stole $60 million from a COVID-19 aid program in the United States, have been arrested, AFP reports. The program was designed to aid the people who lost their jobs during the pandemic, authorities said.

The scam saw text messages sent to 20 million Americans directing them to more than a dozen fake US government websites, police in the Southeast Asian nation said late Thursday. Thousands of victims supplied personal information, including social security numbers, to the fake sites in the hopes of securing $2,000 offered under a real assistance programme for the unemployed, authorities said. But their data was instead used by scammers to steal millions of dollars from the programme.

Also Read: Pakistan orders temporary social media shutdown after violent protests

“Some 30,000 US citizens were scammed and the government’s financial loss is up to $60 million,” said East Java police chief Nico Afinta.

The two suspects were arrested last month in Indonesia’s second-biggest city Surabaya after police were notified by US authorities.

Indonesian police did not say how long the scam had been running.

The pair could face up to nine years in prison under Indonesia’s electronic information law.

Also Read: India under Modi more likely to respond with military force to Pak provocations: US intel

Police said they were investigating the possible involvement of a third person who may have secured funds illicitly.

Only in January, three Indonesians were arrested by the Interpol and Indonesian National Police for conducting intercontinental Magecart attacks.