--- title: "Indonesia Payments Regulation Monitor | World Payments Monitor" canonical: https://payments.gi/jurisdictions/indonesia/ source_html: /jurisdictions/indonesia/index.html description: "Indonesia payments and e-money regulation: 1 modules, 5 sourced findings, updated 2026-10-27. Licensing, safeguarding, stablecoins, AML/CFT." generated_at: 2026-10-27T09:21:10Z content_sha256: 4f4167856dbdcb0945fe846485206c617ea0b0817ebd51b444ba3c64b27245d6 generator: "fe-fleet/md-twin@1.0" --- # Indonesia ID schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-27 · 1 modules · 5 sourced findings · 16 sources in the cumulative register Download report (PDF) Expand all 1 Modules 0 Moved this cycle 1 Key judgments 3 Open gaps 5 Findings 4 Tier-1 sources Confidence mix 1 unpopulated (sums to 1 rendered modules; click to filter) No modules moved this cycle. ## Jurisdiction brief Jurisdiction lead brief 767 Full executive summary 247 ###### Latest update · 25 October 2026 #### Lead Signal Bank Indonesia has issued Regulation of the Members of the Board of Governors Number 31 of 2026, dated 30 September 2026, which updates the implementation provisions for Central Banking Services operating under the earlier Bank Indonesia Regulation 23/15/PBI/2021. The new instrument resets the eligibility, onboarding, data-change and service-application processes that govern how banks and non-bank parties connect into Bank Indonesia's payment systems and financial market infrastructure. It takes full effect on 31 December 2026, giving affected institutions a transition window to align their access arrangements before the updated criteria bind. The substance here is governance of entry and continued participation rather than a loosening or tightening of who may ultimately qualify. It reworks how a party demonstrates eligibility, how it is onboarded, how it registers changes in its own data, and how it applies for new or amended services connected to the central bank's settlement and infrastructure layer. For institutions that rely on direct access to Bank Indonesia's systems, or that sit downstream of a sponsoring participant, the practical question this raises is procedural: whether existing onboarding and data-maintenance workflows match the refreshed requirements, and whether any service applications already in train need to be re-tested against the new provisions before the year-end effective date. #### Other Developments No other payments-specific regulatory movement met the threshold for inclusion this period. A capital-markets reform commitment reiterated by Indonesia's Financial Services Authority following an external market evaluation touches the broader financial sector but does not bear on payment systems, settlement access, or correspondent arrangements, and is noted only as surrounding context rather than as a payments development in its own right. #### Cross-Monitor Connections The central bank's updated access provisions sit squarely within the settlement and infrastructure-access space and do not, on the present record, extend into licensing thresholds, consumer-facing conduct, or scheme-level rulebooks. No cross-cutting signal connecting this update to anti-financial-crime controls, digital-asset frameworks, or data-handling obligations has surfaced in the material reviewed. #### Outlook The operative date of 31 December 2026 is the near-term marker to track: once the updated provisions bind, any party accessing Bank Indonesia's central banking services or payment-system and financial-market-infrastructure participation will need to operate under the revised eligibility, onboarding, data-change and service-application processes. Because this is a backfilled structural update rather than a newly announced policy shift, the more informative test over the coming quarter is less whether the rule exists and more how smoothly institutions already connected to Bank Indonesia's systems move through the transition without disruption to settlement continuity. 2 earlier updates not shown here. ###### Standing brief · as of 4 October 2026 Written before the update above. Where they differ, the update is the more recent position. #### Lead Signal Bank Indonesia Regulation No. 10 of 2025, effective 31 March 2026, restructures Indonesia's payment-service-provider licensing regime into distinct bank and non-bank categories, covering e-wallet, QRIS-acquiring and payment-gateway services alike. The same instrument tightens the operating environment on two further fronts: Article 122 mandates that all domestic payment-transaction processing, from initiation through settlement, occur within Indonesian territory, and Articles 118 and 119 prohibit payment-service providers from owning or managing non-Rupiah values for payment purposes, or from accepting, processing, or linking virtual currency, including crypto assets, as a source of payment funds. #### Other Developments QRIS cross-border reach keeps expanding even as the domestic licensing perimeter tightens. Bank Indonesia and the People's Bank of China launched QRIS cross-border payment interoperability on 30 April 2026, extending the QRIS network beyond its existing ASEAN, Japan and Korea footprint into a new major corridor. This liberalising development sits on a separate track from the licensing and localisation tightening described above: outbound interoperability is expanding even as inbound processing and funding-source requirements are being narrowed. #### Cross-Monitor Connections The Article 118/119 crypto-payment-funding prohibition connects directly to the crypto monitor's cross-border-transfer coverage of the same Bank Indonesia instrument, which treats the prohibition as a constraint on crypto-adjacent payment use cases; that is the crypto monitor's analysis to carry, not this one's. The Article 122 data-localisation mandate also surfaces as an adjacent signal for the data-protection monitor's cross-border-and-adequacy coverage, given its implications for cross-border processing arrangements generally, though this brief does not re-analyse data-protection law. #### Outlook Bank Indonesia's direction of travel is bifurcated: tightening market access and localisation requirements domestically while simultaneously expanding QRIS's cross-border interoperability footprint. The practical question for payment-service providers operating or planning to operate in Indonesia is how the new bank/non-bank licensing categories and the Single Ownership Policy implicit in BI Reg 10/2025 interact with existing group structures, and whether the China corridor is a template for further bilateral QRIS expansion. Read full brief · 767 words Standing brief, as of 25 October 2026. #### Regulatory Status The one development of note affecting Indonesia's payments regulatory environment in this period is Bank Indonesia's issuance, on 30 September 2026, of Regulation of the Members of the Board of Governors Number 31 of 2026. This instrument updates the implementation provisions for Central Banking Services that operate under the earlier Bank Indonesia Regulation 23/15/PBI/2021, resetting the eligibility, onboarding, data-change and service-application processes that apply to banks and non-bank parties seeking to access Bank Indonesia's payment systems and financial market infrastructure. The provisions become fully applicable on 31 December 2026. This is best read as a structural update to how settlement and infrastructure access is administered rather than a signal of a wider shift in Indonesia's payments policy direction. No other licensing, conduct, consumer-protection, scheme-compliance or product-innovation development met the bar for inclusion in this period; the only other item touching the broader financial sector, a reiterated capital-markets reform commitment from Indonesia's Financial Services Authority, concerns capital markets specifically and has no direct bearing on payment systems or settlement access. #### Outlook Attention over the remainder of the year should sit with the 31 December 2026 effective date: institutions already connected to Bank Indonesia's central banking services, or with service applications already in progress, need their access arrangements to meet the revised criteria by that point. Absent further announcements, Indonesia's payments regulatory trajectory over this window reads as stable, with this access-governance update as the one concrete marker of change. Read full brief · 247 words × 1 of 1 modules Signal Moved Judgment Gap Density Comfortable Compact Expand all sources Reset all Selections OR within a group, AND across groups. Press / to search. ### W11AML/CFT & Financial Crime (Sentinel.gi-fed)Sourced from Sentinel.gi ↗Probableconfirmed 2026-10-18▾# No standing position recorded for this module. Standing sub-brief · as of 18 October 2026 154 words · last cycle 2026-10-18 #### AML/CFT & Financial Crime sentinel.fim: OJK ordered banks to use National Identity Numbers (NIK) to trace and act against accounts linked to online gambling, resulting in Enhanced Due Diligence or outright blocking applied to 38,796 accounts. This intelligence is sourced via the Sentinel.gi feed; the underlying illicit-finance analysis of this development belongs to the financial-integrity monitor, and this brief does not re-analyse it. From a payments-infrastructure perspective, the relevant point is that the screening obligation falls on banks as payment-channel participants, meaning affected institutions face an operational requirement to run identity-based cross-account screening at scale against the flagged population. #### Outlook For banks and payment-service providers, the operational question going forward is how the NIK-based screening mechanism is formalised and whether it is extended to other payment-channel participants beyond banks. Readers seeking the underlying illicit-finance analysis of this development should refer to the financial-integrity monitor's coverage, which carries the primary assessment of this Sentinel-sourced finding. Read full sub-brief · 154 words no periodic updates on record for this sub-brief Evidence 5 Sources and findings (5) - T?FIM (sentinel.gi) per-JID baseline profile — Indonesia — Indonesia is a full FATF member (since Oct 2023), governed by AML Law No.8/2010, with PPATK as FIU and OJK/Bank Indonesia/CoFTRA as sectoral supervisors. Crypto oversight transferred from Bappebti/CoFTRA to OJK in Jan 2025 under the P2SK financial-sector law. Follow-up reports (May 2025, June 2026) show steady technical-compliance upgrades, though effectiveness gaps persist in asset recovery, DNFBP supervision, and beneficial-ownership verification. - T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: sourcing-thinness - T1FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: FATF Plenary — Indonesia's AML/CFT/CPF technical-compliance framework - T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: regulatory-failure - T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: capacity-deficit No modules match. Filters combine as OR inside a group and AND across groups. Reset all filters ## Provenance and declared absence Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page. Band honesty: uncertainty bands are computed against a frozen build clock of 2026-10-27. A year-precision row is never promoted into a tighter band. Orphan deltas: 1 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. Envelope: baseline resolved at jurisdiction_json.baseline ; 1 module(s), 5 finding(s), 16 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](/legal/#contact).