Getting a crypto license in Indonesia used to mean dealing with one agency. Now it means navigating a complex web of regulations from the Otoritas Jasa Keuangan, or OJK, which took over full regulatory authority from BAPPEBTI on January 10, 2025. If you are looking to launch or operate a digital asset platform in the archipelago, understanding the new Digital Financial Assets (DFA) framework is not just a legal formality; it is the difference between staying in business and facing severe penalties.
The shift was driven by POJK 27/2024, a regulation that fundamentally redefined how cryptocurrencies are viewed in the country. They are no longer just speculative commodities; they are now treated as financial instruments subject to strict oversight. This guide breaks down exactly what you need to know about capital, compliance, and the technical hurdles involved in securing your license under the current regime.
The Big Shift: From BAPPEBTI to OJK
For years, the Indonesian Commodity Futures Trading Regulatory Agency (BAPPEBTI) handled crypto assets. But as the market matured, the government realized that treating crypto like physical commodities didn't fit the digital reality. So, effective January 2025, the OJK stepped in. This wasn't just a name change; it was a structural overhaul. The OJK is the primary regulator for all financial services in Indonesia, including banking, insurance, and now digital finance. By moving crypto under its umbrella, the government signaled a desire for institutional-grade stability rather than loose commodity trading rules.
If your company held a license under the old BAPPEBTI system, you might think you're safe. You aren't. While those licenses were automatically recognized initially, you had until July 2025 to reapply and fully comply with the new OJK standards. Missing that deadline could have meant operating illegally. For new entrants, there is no grace period; you must meet the DFA requirements from day one. This transition positions Indonesia as a serious Southeast Asian hub, but it raises the bar significantly for who gets to play.
Capital Requirements: The Real Barrier to Entry
Let's talk money, because this is where many startups stumble. The OJK has kept the financial thresholds high to ensure only well-capitalized firms survive. Under the DFA framework, you need two distinct types of capital:
- Paid-up Capital: A minimum of 100 billion rupiah (roughly US$6 million). This money must be actually deposited and available, not just promised.
- Minimum Equity: At least 50 billion rupiah (approximately US$3 million) must remain in equity at all times.
These numbers are non-negotiable. They serve as a filter to keep out low-quality operators who might cut corners on security or customer protection. If you are planning a joint venture or partnership, make sure your structure supports these figures. Many smaller fintechs have had to seek strategic investors specifically to meet this hurdle. It’s a heavy lift, but it ensures that if something goes wrong, there is actual capital behind the platform to protect users.
The 5-Step Licensing Process
Securing the license isn't a single form submission. It is a multi-stage process that can take several months. Here is the roadmap you need to follow:
- Company Registration: You must establish a legal entity in Indonesia. Most foreign investors use the PT PMA (Penanaman Modal Asing) designation, which allows for foreign equity allocation. You register this through the Ministry of Investments website.
- Document Collection: This is the tedious part. You need detailed beneficial owner information, comprehensive corporate statutes, a clear governance framework, and proof of your operational scope. Every document must be translated into Indonesian and legally authenticated.
- Application Submission: Submit your full package to the OJK. Ensure every detail matches your registered data. Discrepancies here cause delays.
- Regulatory Inspection: The OJK will scrutinize your records. They look at the reputation of your beneficial owners, your technical infrastructure, and your compliance readiness. Expect questions.
- License Issuance: Once approved, you receive your official status as a Digital Financial Asset Trading Provider. Note the terminology: you are a "Trading Provider," not an "Exchange." The term "Exchange" is reserved for the central authority overseeing the ecosystem.
Technical and Security Standards
Money gets you in the door, but technology keeps you there. The OJK demands sophisticated technical infrastructure. You can’t just run a basic web app. Your platform must demonstrate robust information security schemas. This includes specific cryptographic protocols and secure algorithms for handling transactions.
Beyond encryption, you need integrated Know Your Customer (KYC) systems and Anti-Money Laundering (AML) mechanisms. These aren't optional add-ons; they are core components of your licensing application. The OJK wants to see how you verify identities and track suspicious flows. Furthermore, you must prepare for real-time monitoring. The regulator has the capability to watch transaction patterns live, so your systems need to handle this scrutiny without lagging or failing.
| Feature | Old BAPPEBTI Regime | New OJK/DFA Regime (2025+) |
|---|---|---|
| Primary Regulator | BAPPEBTI | OJK (Otoritas Jasa Keuangan) |
| Asset Classification | Commodity | Digital Financial Asset |
| Listing Authority | BAPPEBTI List | DFA Exchange List (Quarterly Review) |
| Tax Treatment | VAT + Income Tax | Final Income Tax 0.21% (No VAT) |
| Initial Tradable Assets | 851 Assets | 1,444 Assets (April 2025) |
Asset Listing and Market Oversight
Who decides which coins you can trade? Not you, and not the OJK directly. That power lies with the newly established DFA Exchange. This body evaluates and issues the list of tradable crypto assets. When they released their first list in April 2025, it contained 1,444 assets-a massive jump from the previous 851. This expansion shows Indonesia’s intent to be open to innovation, provided the assets meet certain criteria.
However, don’t think this list is static. The DFA Exchange reviews it quarterly. You, as a licensed trader, can submit suggestions to add or remove assets. But remember, the OJK retains ultimate veto power. They can prohibit any specific digital asset or order you to stop trading a particular coin if they deem it risky. This dynamic creates a balance between market freedom and regulatory safety.
Compliance, Taxes, and Penalties
Operating under the DFA framework means constant vigilance. Under SEOJK No. 20 of 2024, you have mandatory AML and KYC obligations. You must report suspicious transactions to PPATK, Indonesia’s Financial Transaction Reports and Analysis Center. Think of PPATK as the financial intelligence unit that works alongside law enforcement. If you fail to report, you’re not just breaking a rule; you’re potentially aiding illicit activity.
On the tax side, things got simpler and more favorable starting August 1, 2025. MOF Regulation No. 50/2025 eliminated Value Added Tax (VAT) on crypto transactions. Instead, there is a final income tax rate of 0.21%. This treats crypto as a digital financial instrument rather than a taxable good. It streamlines your accounting and reduces the administrative headache for both you and your customers.
But what happens if you slip up? The consequences are severe. Non-compliance can lead to license revocation, hefty financial penalties, delisting of assets, or even criminal charges. The OJK is not shy about using its full toolkit to enforce discipline. In a market this competitive, losing your license is often fatal for a business.
Frequently Asked Questions
What is the minimum capital required for an Indonesian crypto license?
You need 100 billion rupiah in paid-up capital and must maintain at least 50 billion rupiah in minimum equity. These amounts are fixed under the OJK’s DFA framework and do not change based on company size.
How long does the OJK licensing process take?
There is no fixed timeline, but it typically takes several months. The duration depends on how complete your documentation is and how quickly the OJK completes its inspection of your beneficial owners and technical setup.
Can I choose which cryptocurrencies to list on my platform?
Only partially. You can only trade assets on the official DFA Exchange list. However, you can suggest additions to this list, which is reviewed quarterly. The OJK can also force you to delist specific assets if they pose a risk.
What changed regarding crypto taxes in Indonesia in 2025?
Effective August 1, 2025, VAT was removed from crypto transactions. Replacing it is a final income tax of 0.21% on transaction value. This simplifies reporting and lowers the tax burden compared to the previous commodity-based model.
Is the BAPPEBTI license still valid?
It was temporarily recognized, but companies had to reapply to the OJK by July 2025 to fully comply with the new DFA requirements. Operating without the new OJK license after the grace period constitutes non-compliance.