If you're looking to launch a cryptocurrency business in Indonesia, you've probably noticed that the rules have shifted dramatically. Forget everything you knew about the old BAPPEBTI days. As of 2025, Indonesia has completely overhauled how it handles digital assets, moving the goalposts to make the market safer-and a lot harder to enter for small players. The core problem for most founders isn't just the paperwork; it's meeting the massive financial thresholds and navigating the new Otoritas Jasa Keuangan (OJK) oversight.
The most critical thing to understand is that you aren't just opening an "exchange" anymore. Under the Digital Financial Assets (DFA) framework introduced via POJK 27/2024, most platforms are now classified as Digital Financial Asset Trading Providers. The term "Exchange" is now reserved for the high-level entities that actually manage the ecosystem. If you want to operate legally, you have to play by these new rules or risk facing severe penalties, including criminal charges.
The Financial Barrier: Capital Requirements
Indonesia isn't looking for bedroom startups. To keep the market stable and protect users, the OJK has set financial bars that are intentionally high. You can't just bootstrap a license here; you need serious backing.
First, you need 100 billion rupiah (roughly US$6 million) in paid-up capital. On top of that, you must maintain a minimum equity of 50 billion rupiah (about US$3 million). These numbers are designed to ensure that any platform handling public funds is well-capitalized enough to survive market volatility and operational mishaps. For many fintech startups, this means the only viable path is through strategic partnerships or joint ventures with larger financial institutions.
| Requirement Type | Amount (Rupiah) | Approximate Value (USD) |
|---|---|---|
| Paid-up Capital | 100 Billion IDR | $6 Million |
| Minimum Equity | 50 Billion IDR | $3 Million |
Step-by-Step Licensing Process
Getting your license is a marathon, not a sprint. The process usually takes several months because the authorities scrutinize everything from your business model to the reputation of your beneficial owners.
- Company Registration: You must first register your business in Indonesia. This is done through the Ministry of Investments website. Most foreign investors use the PT PMA (Foreign Investment Company) designation to handle equity allocation.
- Document Gathering: This is the heaviest lift. You'll need your company statutes, a full governance framework, a detailed operational scope, and proof that you have the required capital in the bank.
- Formal Application: Submit your full package to the OJK. Every single document must be translated into Indonesian and legally authenticated. If your translations are sloppy, expect your application to be kicked back.
- Regulatory Inspection: The OJK won't just take your word for it. They will perform inspections to verify your operations and technical setups.
- License Issuance: Once you pass the audit and the background checks on your owners, the OJK will grant your license as a DFA Trading Provider.
Technical and Security Must-Haves
The regulators are obsessed with security, and for good reason. You cannot get a license without a rock-solid technical schema. The OJK requires a detailed breakdown of your cryptographic protocols and the algorithms you use to secure assets. If your security architecture is vague, you will fail the inspection.
Beyond the encryption, you need a robust Know Your Customer (KYC) system. This isn't just about uploading a photo of an ID; it's about a comprehensive identity verification process that integrates with local databases. You also need automated Anti-Money Laundering (AML) mechanisms that can flag suspicious patterns in real-time. These systems must be capable of reporting directly to the PPATK (Financial Transaction Reports and Analysis Center), Indonesia's financial intelligence unit.
Which Assets Can You Actually Trade?
You don't get to decide which coins you list. That power now sits with the DFA Exchange Authority. They maintain a master list of tradable crypto assets that is updated quarterly. This list is surprisingly generous-it grew by 70% in early 2025, now featuring 1,444 approved assets.
While you can suggest new assets for addition, the OJK has the final word. They can order you to delist a specific coin instantly if they believe it poses a risk to consumers. This means your operational team needs to be agile enough to remove assets quickly to stay compliant.
Taxes and Ongoing Compliance
The tax landscape changed significantly on August 1, 2025, with the introduction of MOF Regulation No. 50/2025. The government stopped treating crypto as a taxable good (VAT) and started treating it as a digital financial instrument. Now, there is a final income tax rate of 0.21% on transactions. For a platform owner, this simplifies the administrative burden but requires a precise integration into your billing and reporting software.
Compliance doesn't end with the license. You are expected to engage in real-time transaction monitoring. The OJK and PPATK use these data streams to catch fraud and market abuse. If you're caught ignoring suspicious activity or failing to report a major breach, the consequences are swift: license revocation and potential criminal charges for the directors.
For those wanting to innovate, the OJK offers a regulatory sandbox a controlled environment for testing new fintech products. This is a great way to test new features-like advanced staking or lending products-without risking your primary license while you prove the technology is safe.
Who is the main regulator for crypto in Indonesia now?
The Otoritas Jasa Keuangan (OJK) is now the primary regulator, having officially replaced BAPPEBTI on January 10, 2025, under the Digital Financial Assets (DFA) framework.
What is the minimum capital required to start a crypto platform?
You need a minimum of 100 billion rupiah (approx. US$6 million) in paid-up capital and 50 billion rupiah (approx. US$3 million) in minimum equity.
Can I list any cryptocurrency I want on my exchange?
No. You can only trade assets listed by the DFA Exchange Authority. They review and update this list quarterly. The OJK can order the immediate delisting of any asset they deem risky.
How is crypto taxed in Indonesia as of 2026?
Since August 2025, VAT on crypto transactions has been eliminated. Instead, a final income tax rate of 0.21% is applied to crypto transactions under MOF Regulation No. 50/2025.
What happens if I don't comply with AML/KYC rules?
Non-compliance can lead to severe penalties, including heavy financial fines, the immediate revocation of your operating license, asset delisting, and possible criminal charges for the company's leadership.
Next Steps and Troubleshooting
If you are an existing platform that was licensed under the old BAPPEBTI rules, your priority is the grace period. Ensure you have reapplied and fully complied with the DFA framework by the July 2025 deadline to avoid a service interruption.
For new entrants, start by auditing your capital. If you are short of the 100 billion rupiah mark, look for local partners or venture capital specifically interested in the Southeast Asian market. Your next move should be hiring a local legal firm that specializes in OJK compliance to handle the Indonesian translations and authentication of your corporate documents-this is where most foreign applications fail.