Indonesia Curated

DeFi Intel Research Desk2026-07-14Asia

Is crypto legal in Indonesia? (2026)

Yes — cryptocurrency is legal in Indonesia. Current status: Legal. Oversight sits with Otoritas Jasa Keuangan (OJK) — since Jan 2025; Bappebti (legacy). Full details — governing law, licensing, tax and dated enforcement history — follow below (last reviewed 2026-07-14).

Framework: P2SK Law (Law No. 4 of 2023) → Government Regulation 49/2024 + OJK Regulation (POJK) 27/2024 — Digital Financial Asset regime, effective 10 January 2025; amended by POJK 23/2025.

Indonesia executed one of Asia's cleanest regulatory handovers on 10 January 2025, when supervision of crypto moved from Bappebti — the commodity-futures regulator that had overseen the sector since 2018 — to the Financial Services Authority (OJK). The transfer was mandated by the 2023 P2SK financial-sector omnibus law and implemented through Government Regulation No. 49 of 2024 (31 December 2024) and OJK Regulation No. 27 of 2024 (10 December 2024). With it, crypto was reclassified from a commodity into a "digital financial asset", aligning it with securities-style supervision. Bappebti-era licences, approvals and token registrations remain valid where they do not conflict with the new rules; applications pending at handover were taken over by the OJK, and providers had until July 2025 to comply fully with POJK 27/2024.

The regime defines four institutional roles: the digital-financial-asset exchange, traders (the customer-facing platforms), a clearing-guarantee-and-settlement institution, and custodians. Traders must maintain minimum paid-up capital of IDR 100 billion (≈US$6M) and minimum equity of IDR 50 billion, and the OJK reserves the right to demand more from operators it deems systemically significant by market share, volume or customer base. POJK 23/2025 amended the framework during 2025, expanding the scope for crypto derivative products under OJK oversight. The market being supervised is large: reports citing OJK-era data put Indonesia's crypto-investor base at roughly 17 million traders, approaching the country's 19-million-plus capital-market investors — and market leader Indodax alone reports over 1.8 million registered users, with a stated target of three million by end-2026. Stablecoins such as USDT and USDC are not banned but trade only as listed assets on licensed platforms; the rupiah remains the sole legal tender and crypto payments are not permitted.

Licensing has moved from paper to practice. On 19 December 2025 the OJK published a whitelist of 29 platforms cleared to operate — full licence holders (PAKD) including Indodax, Pintu, Pluang, Reku, Upbit Indonesia, Stockbit Crypto, Tokocrypto, Triv, Nanovest and Bittime, plus prospective traders (CPAKD) such as Luno Indonesia and Fasset still completing approval. The OJK maintains the official list on ojk.go.id (most recent edition dated 12 March 2026). Platforms left off the whitelist have no legal route to Indonesian retail customers, which is why the December publication doubled as an enforcement signal as much as a directory.

Tax treatment

Crypto taxation was overhauled by Finance Ministry Regulation PMK 50/2025, effective 1 August 2025, to match the asset's reclassification. Under the prior commodity-era rules, sellers on licensed exchanges paid a 0.1% final income tax and buyers a 0.11% VAT. PMK 50/2025 scrapped the VAT leg entirely — digital financial assets are now treated like securities rather than goods, so crypto transfers are no longer a VAT-able supply. In exchange, the final income tax (PPh Article 22) on sellers rose from 0.1% to 0.21% of transaction value on licensed domestic platforms — and to 1% when trading through foreign or unlicensed platforms, a deliberate penalty spread that pushes volume onshore. Exchanges collect, report and remit the tax at source.

• Capital-gains rate (general): 0.21% final income tax (PPh 22) on domestic-platform sales; 1% via foreign platforms; VAT abolished Aug 2025
• Holding-period rule: N/A — transaction-based

Travel rule applicability

Status: yes — travel-rule obligations exist under Bappebti's physical-crypto-trading rules and carried into the OJK era. Under those rules providers must collect and transmit originator and beneficiary information on transfers regardless of amount, with a wider data set required at or above the equivalent of US$1,000 in rupiah. The rules apply equally to domestic and cross-border transfers. Withdrawals to self-hosted wallets may only proceed where the wallet belongs to the verified customer or to a third party whose identity has been registered and verified under travel-rule principles.

Notable enforcement actions

• Sept 2024. Indodax, Indonesia's largest exchange, is hacked for over $22M from hot wallets across multiple chains (≈$14M in ETH plus TRX, BTC and MATIC, in 150+ suspicious transactions); SlowMist assessed that the withdrawal system was likely compromised, and Cyvers noted the pattern resembled North Korea's Lazarus Group. The exchange took its web and mobile apps offline during the response — its remaining wallets still held over $400M — and later resumed operations.
• Jan 2025. Regulatory authority formally transfers from Bappebti to the OJK; pending licence applications move to the new regulator and providers are given until July 2025 to reach full POJK 27/2024 compliance.
• Dec 2025. OJK publishes its 29-platform whitelist — the first OJK-era consolidated public register of fully licensed (PAKD) and prospective (CPAKD) crypto trading providers, succeeding the Bappebti PFAK/CPFAK register that had listed traders such as Indodax, Tokocrypto and Pluang since the commodity era, and drawing the legal perimeter for the retail market.

Public licensed CASP list

The OJK publishes the official register of Digital Financial Asset Trading Providers on ojk.go.id — 29 platforms were whitelisted on 19 December 2025, split between full PAKD licensees (Indodax, Pintu, Pluang, Reku, Upbit Indonesia, Stockbit Crypto, Tokocrypto, Triv, Nanovest, Bittime and others) and CPAKD prospective traders under supervision (including Luno Indonesia and Fasset). DeFi Intel mirrors the OJK list as it is updated.

Comparison to neighbours

Compare Indonesia crypto regulation with three geographically adjacent jurisdictions:

Doing business in Indonesia — practical notes

OJK licensing is mandatory for customer-facing trading: traders need IDR 100 billion paid-up capital and IDR 50 billion equity, and operate inside the exchange-clearing-custody market structure inherited from the Bappebti design. Serving Indonesian users from offshore without a licence is commercially penalised — the 1% withholding on foreign-platform trades versus 0.21% onshore — and unlicensed platforms sit outside the OJK whitelist that banks and payment partners reference. Travel-rule data collection applies to all transfers, and self-hosted-wallet withdrawals require prior wallet verification. Crypto remains an investment asset only: payments in anything but rupiah are prohibited.

Methodology and sources

This profile was researched and updated by DeFi Intel's research desk on 2026-07-14 from the primary and secondary sources listed below. Claims that could not be verified against a source are omitted or marked pending — we do not republish unverified third-party datasets. Submit corrections and primary-source links to research@defi-intel.com.

Sources

• HBT Law — OJK assumes regulatory oversight of digital financial assets (POJK 27/2024 capital requirements)
• SSEK — from Bappebti to OJK: GR 49/2024 and POJK 27/2024 handover (10 January 2025)
• AP Law Solution — transition of crypto-asset supervision to the OJK (2025)
• OJK — POJK 23/2025 amending POJK 27/2024
• SSEK — crypto taxation under MOF Regulation PMK 50/2025 (effective 1 August 2025)
• KPMG — Indonesia updated tax rates for cryptoasset transactions (2025)
• Notabene — Indonesia travel-rule status (Bappebti physical-crypto guidelines; regulation noted as still pending)
• CoinDesk — Indodax hacked for $22M (11 September 2024)
• Cryptonews — OJK whitelists 29 crypto platforms (19 December 2025): 25 licensed PAKD + 4 prospective CPAKD
• Tempo — OJK whitelist of 25 licensed PAKD and 4 prospective CPAKD traders (19 December 2025)
• Bappebti — public register of physical crypto-asset traders (PFAK/CPFAK), incl. Indodax, Tokocrypto and Pluang, predating the OJK handover
• OJK — list of Digital Financial Asset Trading Providers (12 March 2026)