Indonesian crypto exchange licensing requirements for 2026

If you are planning to launch a cryptocurrency platform in Indonesia, the landscape has fundamentally shifted under your feet. On January 10, 2025, the regulatory baton passed from BAPPEBTI to OJK, the Financial Services Authority. This move introduced the Digital Financial Assets (DFA) framework, creating a stricter but clearer environment for operators. The days of vague guidelines are gone. Today, you face a mature regime designed for stability and investor protection. If you are entering this market, understanding these rules is not optional-it is the price of admission.

The Regulatory Power Shift

The most critical thing to grasp is who holds the power. For years, BAPPEBTI managed commodities and derivatives, including crypto. But since early 2025, the Otoritas Jasa Keuangan (OJK)The primary financial services authority in Indonesia responsible for regulating the banking, capital market, and non-bank financial sectors, including digital financial assets. took full control. This isn't just a name change; it reclassifies crypto businesses. You are no longer operating a traditional exchange in the eyes of the law. Instead, you apply to be a Digital Financial Asset Trading Provider. This distinction matters because it changes how you report, what audits you undergo, and how your customers perceive safety. Existing companies had until July 2025 to realign their licenses, and by late 2025, almost all active players were fully under the OJK umbrella.

Capital Requirements and Company Structure

You cannot simply register a small LLC and start trading coins. The government wants serious players only. Under the POJK 27/2024 regulation, you must have significant skin in the game. The minimum paid-up capital stands at 100 billion rupiah, roughly US$6 million. Beyond that, you need a minimum equity of 50 billion rupiah (US$3 million). These figures act as a massive filter, ensuring that only well-funded entities attempt to license. This prevents fly-by-night operations from putting retail investors at risk. Additionally, you typically need to set up as a PT PMA, a foreign investment company, if you are bringing international capital into the country. This designation dictates specific shareholding structures and board composition requirements that differ from standard domestic firms.

Step-by-Step Licensing Process

Getting the green light involves a rigorous inspection process. You cannot skip stages here. First, you register your legal entity with the Ministry of Investments website. This creates the official shell for your operations. Once established, you begin gathering the exhaustive documentation required. You will need beneficial owner details to prove transparency, complete statutes of the company, and a governance framework showing how decisions are made. Operational scope documents define exactly what tokens or services you intend to offer.

The application submission follows document collection. OJK reviews your paperwork for months, scrutinizing the reputation of your founders and the validity of your funds. During the regulatory inspection phase, auditors might visit your physical office and test your systems. Finally, upon successful review, you receive the license. There is no express lane for this; patience is part of the strategy. Most applicants find that translation issues delay the process, as all documents must be in Indonesian and legally authenticated.

• Register company via Ministry of Investments
• Prepare beneficial owner and governance documentation
• Submit application with proof of capital
• Undergo technical and operational inspection
• Receive final license issuance from OJK

Managing Digital Financial Assets

Who decides which coins are tradeable? This used to be BAPPEBTI, but now the newly established DFA Exchange manages this list. In April 2025, they released the first list containing 1,444 crypto assets. That is a jump of 70 percent from the previous 851 assets, signaling openness while maintaining scrutiny. However, this list is dynamic. The DFA Exchange reviews it quarterly. As a provider, you can suggest additions, but OJK retains the ultimate veto power. They can order you to delist specific cryptocurrencies if security risks arise. You do not have total freedom to list whatever you want. You must align your offering with the approved tradable list to remain compliant.

Compliance and Technical Standards

Tech stacks alone won't save you. You need robust Anti-Money Laundering (AML) and Know Your Customer (KYC) systems integrated deeply into your platform. The Securities and Futures Commission rule (SEOJK No. 20 of 2024) makes this mandatory. You must report suspicious transactions to the Indonesia Financial Transaction Reports and Analysis Center (PPATK). This center monitors flows to prevent illicit activity. Non-compliance leads to severe outcomes: license revocation, heavy fines, or even criminal charges. Your technical architecture needs cryptographic protocols and secure algorithms detailed in your application. OJK uses real-time monitoring tools to track your transaction patterns. If your system flags anomalies, authorities can intervene quickly.

In terms of security, you are expected to implement sophisticated information security schemas. This includes encryption standards and customer identification workflows. A single breach can jeopardize your license status permanently. Many operators utilize the regulatory sandbox to test these new technologies before full deployment. This allows innovation within safe boundaries while satisfying oversight bodies.

Tax Implications for Operators and Traders

One area where things have smoothed out is taxation. Starting August 1, 2025, MOF Regulation No. 50/2025 changed the fiscal landscape. The government eliminated Value Added Tax (VAT) on crypto trades. Instead, a final income tax rate of 0.21% applies to these transactions. This simplifies reporting significantly. Previously, traders faced complex corporate tax filings. Now, the system treats crypto as digital financial instruments rather than taxable goods. For a business, this means your accounting team handles withholding this 0.21% and remitting it directly. It streamlines administrative burdens and provides better legal certainty for both the platform and the user base.

Navigating the Competitive Landscape

You are not entering an empty room. As of early 2026, OJK has issued multiple DFA Exchange licenses. Major players like Indodax, Tokocrypto, Pintu, and Reku are already entrenched. High capital requirements force many smaller startups to seek partnerships or joint ventures to meet the 100 billion rupiah threshold. While this reduces the number of new entrants, it strengthens the overall ecosystem. Investors feel safer knowing their funds are held by heavily capitalized entities backed by strict regulatory oversight. If you cannot afford the capital alone, consider forming alliances with local banks or established fintech firms that understand the PT PMA setup.