Indonesia Crypto Compliance for a U.S. Founder: The First Question Is Whether the Activity Fits the OJK Perimeter
Position as of 12 August 2026: Indonesia’s crypto-asset environment is regulated through the Financial Services Authority (OJK) rather than treated as an unrestricted commercial category. OJK states that responsibility for regulating and supervising digital financial assets, including crypto assets, moved from Bappebti to OJK, and that OJK Regulation No. 27 of 2024 governs trading of digital financial assets including crypto assets.[1] For an Indonesian founder with a U.S. business, the decisive question is therefore how the planned activity fits the OJK perimeter.
The position is in motion. OJK’s current material refers both to the 2024 regulation and to its 2025 amendment, as well as current licensing materials.[1] A founder should not use a general statement about crypto as a substitute for an activity-specific check. The company should describe what it plans to do, which entity will do it, and whether the question concerns an Indonesia-side activity or a separate U.S. commercial relationship.
The Change in Regulatory Home Changes the Planning Sequence
The transfer of responsibility to OJK is not simply a change in an agency name. OJK explains that the transfer covered the regulation and supervision of digital financial assets, including crypto assets, and that the relevant handover took place in January 2025.[1] That means an Indonesian founder should begin with the current OJK framework when analysing a proposed crypto-related activity.
A generic description such as “our U.S. company will use crypto” is not enough for this purpose. The founder should identify whether the company plans to trade digital financial assets, operate a platform, hold or administer assets for others, build a service, or use an asset within another commercial product. The activity description should name the entity involved, the proposed launch period, and the people or counterparties who will interact with it. It should not make an assertion that the business is already authorised or outside the framework.
This is a country-specific distinction because OJK’s published materials speak directly to digital financial assets and crypto assets, including their licensing context.[1] The question is not whether a founder likes the technology or whether a U.S. counterparty is comfortable with it. The question is whether the planned Indonesia-side activity falls into a category for which OJK’s current materials should be consulted.
Treat the Regulations as a Map to the Right Inquiry
OJK identifies POJK No. 27 of 2024 as the regulation concerning trading of digital financial assets, including crypto assets, and notes its amendment by POJK No. 23 of 2025.[1] The useful operational consequence is to ask the right regulator-facing question before the company presents its plan as fixed.
A founder can prepare a factual inquiry with five elements. It should name the entity. It should describe the activity without legal labels. It should explain whether the entity will deal with customers, other businesses, or only its own balance sheet. It should give the planned timing. Finally, it should ask which current OJK rules, licensing materials, or implementation documents apply. This is not a request for a blanket endorsement. It is a way to place the business plan inside the right regulatory conversation.
The question could be framed as follows: “Our identified entity proposes to carry out this digital-financial-asset activity from this date; which current OJK framework and licensing material should govern our assessment?” A qualified Indonesian adviser can help ensure that the description captures the activity accurately before it is put to the relevant authority. If the business model changes, the founder should revise the description and seek an updated answer rather than relying on a response tied to earlier facts.
Do Not Use a U.S. Relationship to Answer an Indonesia Question
A founder may be tempted to rely on the policy of a U.S. exchange, bank, customer, investor, or service provider when deciding how to approach the Indonesia side. That is not a substitute for the OJK analysis. A U.S. counterparty can decide whether it will enter a relationship on its own terms. OJK’s framework concerns a different question: the treatment of the activity under Indonesia’s current regulatory structure.
The two workstreams should therefore be kept separate. The Indonesia file should hold the activity description, the entity, the position date, the relevant OJK material, and any current guidance obtained. The U.S. file should hold the counterparty’s own questions and requirements. This division prevents the founder from presenting a provider decision as a regulatory conclusion, or a local regulatory fact as a commitment by a U.S. business.
The same discipline applies to an internal product discussion. A company may decide that it wants a crypto-related feature for commercial reasons. That decision does not identify the relevant legal category by itself. The founder should first describe the feature in operational terms, identify the parties involved, and ask how the current OJK material applies. Only after that question has been addressed should the team treat the Indonesia-side regulatory path as part of a launch plan.
Keep the Position Dated and Responsive to Change
The 12 August 2026 position date is a live control. OJK’s own material references current regulations and licensing procedures, not a static, once-and-for-all answer.[1] The founder should check the current source before a material step is taken. A launch date, a new customer role, a change in the holding structure, or a new service function may change the relevance of the earlier analysis.
This does not require the company to wait for abstract certainty. It requires a disciplined sequence. Define the activity. Identify the responsible entity. Consult the current OJK materials. Ask the focused question. Record the reply. Then separately ask the U.S. party what it needs for the proposed commercial relationship. This is far more useful than treating a broad country label as a complete compliance plan.
An Indonesian founder should also avoid presenting a tax, reporting, authorisation, or provider outcome as settled unless it has been confirmed for the actual activity. Those points depend on facts that a generic article cannot decide. The appropriate next action is to ask a qualified Indonesian adviser or the relevant OJK channel how the current materials apply to the defined business model, and to obtain the U.S. counterparty’s own requirements independently.
Indonesia’s Practical Starting Point
Indonesia’s current crypto-asset question begins with OJK, the transfer of regulatory responsibility, and the regulations OJK identifies for digital financial assets including crypto assets.[1] The country lens is therefore classification and current regulatory perimeter. A founder should not begin with a generic “is crypto legal?” question or use a U.S. commercial relationship to answer an Indonesia-side regulatory question.
Describe the activity. Check the current OJK framework. Direct the focused inquiry to the appropriate Indonesia-side channel. Keep the U.S. relationship as a separate workstream. That sequence reflects the current, moving regulatory position without turning it into a promise about a licence, a provider, or a transaction outcome.
Prepare the Identity and Settlement File Before the Product File Reaches a Provider
An Indonesian founder should expect the operating dossier to start with the person and entity behind the activity. The country record identifies the NPWP tax number and lists a passport, residence permit, and NPWP in the KYC context.[9] Those records should be kept current and aligned with the company that will conduct the virtual-asset activity. They do not guarantee that a bank, exchange, or payment provider will accept the relationship, but they prevent the business from presenting inconsistent identity information when a regulated counterparty asks who is responsible for the activity.
The business should also draw the settlement flow. Indonesia’s payment ecosystem includes BI-FAST, SKNBI, BI-RTGS, and QRIS, which serve different domestic uses.[10] A founder should not assume that a domestic payment rail decides whether a virtual-asset service or cross-border transaction will be accepted. The useful provider question is narrower: how does this identified company, customer flow, and payment route fit the provider’s current policy and the OJK-supervised regulatory perimeter?
For an outward payment, the available record says that underlying transaction documents are required above USD 50,000 per month.[10] The domestic rule requiring rupiah for domestic payment transactions, subject to stated exceptions, is another reason to separate local settlement from an international payment.[10] The founder should keep the underlying agreement, invoice or transaction record, and payment explanation with the cross-border file, then ask the authorised institution how the current rules apply to the actual amount and purpose.
References
[1]: https://ojk.go.id/en/fungsi-utama/itsk/perizinan-itsk-aset-keuangan-digital-aset-kripto/default.aspx — OJK, licensing of digital financial assets and crypto assets