title: Indonesia Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/indonesia/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Indonesia ID schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 1 modules · 5 sourced findings · 15 sources in the cumulative register 1 Modules baseline.modules[] 5 Findings modules[].findings[] 2 Tier-1 sources source_register[source_tier|tier=T1] Confidence mix (sums to 1 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction lead brief ###### Latest update · 18 October 2026 #### Lead Signal Bank Indonesia issued PADG 31/2026 on the Implementation of Central Banking Services, adopted 30 September 2026 and entering into force 31 December 2026, which realigns customer and CIF rules for central-banking-services participants with the participation rules governing payment-system and financial-market-infrastructure access. This is an implementing regulation under PBI 23/15/PBI/2021, and its practical effect is to tighten and harmonise the eligibility and onboarding framework a participant must satisfy, whether it is accessing central-banking services directly or participating in the payment system more broadly. The standing TIKMI compliance deadline of 31 March 2029 for non-compliant payment-service providers remains in place alongside this new instrument, with a possible two-year extension mechanism, meaning the near-term regulatory pressure from PADG 31/2026 operates against a backdrop of a longer multi-year transition window already known to the market. #### Other Developments **Stablecoin framework on a defined timeline.** OJK has stated it is targeting dedicated stablecoin regulation, covering reserves, governance, consumer protection and redemption, for early 2027, and is coordinating with Bank Indonesia on digital-financial-asset risk mitigation as it develops the framework. **Crypto tax transparency incoming.** Indonesia will begin exchanging crypto tax data under the OECD Crypto-Asset Reporting Framework from 2027, with clear operational domain allocation already evident among the relevant bodies: Bank Indonesia retains sole payment-system oversight, OJK supervises crypto trading, and the Finance Ministry handles tax policy. **Gambling-linked account screening (Sentinel feed).** OJK ordered banks to use National Identity Numbers to trace and act on accounts connected to online gambling, resulting in Enhanced Due Diligence or blocking across 38,796 accounts; this finding is sourced via the Sentinel.gi feed, and the underlying illicit-finance analysis belongs to financial-integrity rather than to this brief, which notes the payment-channel dimension only. #### Cross-Monitor Connections The NIK-based bank-screening order is a shared finding with financial-integrity's AML/CFT tracking, sourced here via the Sentinel feed; this brief does not re-analyse the underlying illicit-finance question, consistent with the module specification for Sentinel-sourced W11 material. The crypto tax-data-exchange commencement under OECD CARF from 2027 also intersects with the crypto monitor's tax-treatment tracking, where the same instrument is read for its direct tax-reporting consequence to crypto-asset holders rather than, as here, for its position within Indonesia's broader regulatory-body allocation. #### Outlook PADG 31/2026's 31 December 2026 entry into force is the near-term date to track for any participant in Indonesia's central-banking-services or payment-system access framework, given its realignment of customer and CIF eligibility rules. Further out, OJK's early-2027 stablecoin-regulation target and the 1 January 2027 OECD CARF commencement sit close together on the calendar, and together with the 2029 TIKMI compliance deadline describe a multi-year sequence of regulatory tightening across licensing, digital-money and tax-transparency dimensions for payment and digital-asset participants operating in Indonesia. _1 earlier update not shown here._ ###### Standing brief · as of 4 October 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Bank Indonesia Regulation No. 10 of 2025, effective 31 March 2026, restructures Indonesia's payment-service-provider licensing regime into distinct bank and non-bank categories, covering e-wallet, QRIS-acquiring and payment-gateway services alike. The same instrument tightens the operating environment on two further fronts: Article 122 mandates that all domestic payment-transaction processing, from initiation through settlement, occur within Indonesian territory, and Articles 118 and 119 prohibit payment-service providers from owning or managing non-Rupiah values for payment purposes, or from accepting, processing, or linking virtual currency, including crypto assets, as a source of payment funds. #### Other Developments **QRIS cross-border reach keeps expanding even as the domestic licensing perimeter tightens.** Bank Indonesia and the People's Bank of China launched QRIS cross-border payment interoperability on 30 April 2026, extending the QRIS network beyond its existing ASEAN, Japan and Korea footprint into a new major corridor. This liberalising development sits on a separate track from the licensing and localisation tightening described above: outbound interoperability is expanding even as inbound processing and funding-source requirements are being narrowed. #### Cross-Monitor Connections The Article 118/119 crypto-payment-funding prohibition connects directly to the crypto monitor's cross-border-transfer coverage of the same Bank Indonesia instrument, which treats the prohibition as a constraint on crypto-adjacent payment use cases; that is the crypto monitor's analysis to carry, not this one's. The Article 122 data-localisation mandate also surfaces as an adjacent signal for the data-protection monitor's cross-border-and-adequacy coverage, given its implications for cross-border processing arrangements generally, though this brief does not re-analyse data-protection law. #### Outlook Bank Indonesia's direction of travel is bifurcated: tightening market access and localisation requirements domestically while simultaneously expanding QRIS's cross-border interoperability footprint. The practical question for payment-service providers operating or planning to operate in Indonesia is how the new bank/non-bank licensing categories and the Single Ownership Policy implicit in BI Reg 10/2025 interact with existing group structures, and whether the China corridor is a template for further bilateral QRIS expansion. 1 of 1 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/indonesia/#sec-dom-D7) unpopulated No standing position recorded for this module. Standing sub-brief · as of 18 October 2026 154 words · last cycle 2026-10-18 #### AML/CFT & Financial Crime sentinel.fim: OJK ordered banks to use National Identity Numbers (NIK) to trace and act against accounts linked to online gambling, resulting in Enhanced Due Diligence or outright blocking applied to 38,796 accounts. This intelligence is sourced via the Sentinel.gi feed; the underlying illicit-finance analysis of this development belongs to the financial-integrity monitor, and this brief does not re-analyse it. From a payments-infrastructure perspective, the relevant point is that the screening obligation falls on banks as payment-channel participants, meaning affected institutions face an operational requirement to run identity-based cross-account screening at scale against the flagged population. #### Outlook For banks and payment-service providers, the operational question going forward is how the NIK-based screening mechanism is formalised and whether it is extended to other payment-channel participants beyond banks. Readers seeking the underlying illicit-finance analysis of this development should refer to the financial-integrity monitor's coverage, which carries the primary assessment of this Sentinel-sourced finding. no periodic updates on record for this sub-brief ** Sources and findings (5)** 1. T? FIM (sentinel.gi) per-JID baseline profile — Indonesia — Indonesia is a full FATF member (since Oct 2023), governed by AML Law No.8/2010, with PPATK as FIU and OJK/Bank Indonesia/CoFTRA as sectoral supervisors. Crypto oversight transferred from Bappebti/CoFTRA to OJK in Jan 2025 under the P2SK financial-sector law. Follow-up reports (May 2025, June 2026) show steady technical-compliance upgrades, though effectiveness gaps persist in asset recovery, DNFBP supervision, and beneficial-ownership verification. 2. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness 3. T1 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: FATF Plenary — Indonesia's AML/CFT/CPF technical-compliance framework 4. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: regulatory-failure 5. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: capacity-deficit ** No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Indonesia| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 2 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 1 module(s), 5 finding(s), 15 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).