Carding crimes still often occur in Indonesia and the ineffective implementation of Law Number 11 of 2008 concerning amendments to Law Number 19 of 2016 concerning Information and Electronic Transactions in preventing the occurrence of carding, with a review of one carding case that has legal force in Decision No. 1229/Pid.Sus/2020/PN.Mks. The first problem is how to regulate the crime of carding in the Electronic Information and Transaction Law (UU ITE), second, how can efforts be given to victims of the crime of carding in terms of decision no. 1229/Pid.Sus/2020/PN.Mks. The writing of this research was made with the aim of knowing and analyzing the regulation of carding crimes in the Electronic Information and Transactions Act (ITE) and knowing and analyzing the application of legal protection measures for victims of carding crimes in terms of decision no. 1229/Pid.Sus/2020/PN.Mks. This study uses the juridical-normative method with the results of the study that the regulation of the crime of carding is regulated in general in the criminal law book and in Article 30 of the ITE Law and there is no maximum legal protection based on the decision 1229/Pid.Sus/2020/ PN.Mks. The punishment received by the perpetrator emphasizesretributive justice or retaliation for perpetrators, not a form of recovery of losses or orders to authorized agencies to provide cyber protection to electronic media victims of carding crimes as a form of implementing justice for victims.