Indonesia is Southeast Asia's largest country by population and its largest crypto market by users. According to data published by the Commodity Futures Trading Regulatory Agency, Bappebti, registered crypto users in Indonesia surpassed 20 million in 2024-2025, with annual trading volumes in the tens of billions of dollars. Alongside that scale runs a profound regulatory restructuring. Under the 2023 Financial Sector Development and Strengthening Law, known as the P2SK Law, oversight of crypto assets transferred from Bappebti to the Financial Services Authority, OJK, in January 2025, with full framework migration scheduled through 2025 to 2028. For projects, exchanges, wallets, and stablecoin issuers, understanding the transition's pace, rule changes, and local licensing paths is essential for entering Southeast Asia's largest crypto market. This article maps the P2SK legal foundation, Bappebti-era license categories, the new OJK framework, local exchange consolidation, capital and custody requirements, AML and local-currency settlement, stablecoin and CBDC direction, taxation, NFT and GameFi treatment, and recommendations for foreign operators.

1. Why Indonesia's Regulation Is Changing

To understand the transition, start with Indonesia's basic stance: not banned but tightly regulated; treated as a commodity rather than a payment instrument; pushing industry consolidation and removing small platforms. That thread has held for five years; what has changed is who regulates.

Before 2023, crypto assets were legally commodities under Bappebti, a unit of the Ministry of Trade traditionally responsible for futures and commodities. Bappebti folded crypto into the Crypto Asset Physical Market framework, issuing three license types: Crypto Asset Exchange, Clearing House, and Custodian. All trading serving Indonesian users had to occur on Bappebti-registered entities with Indonesian rupiah on- and off-ramps.

The system developed quickly from 2020 to 2024 but exposed gaps. Bappebti was a commodity regulator with limited expertise in investor protection, AML, market conduct, and financial stability. Crypto had outgrown "commodity" status—stablecoins, staking, lending, and derivatives look like financial services. Indonesia's G20 presidency pushed global crypto consensus, and domestically there was a need to fold crypto into the same framework as banking, securities, and insurance. A long tail of small platforms also demanded higher capital and compliance thresholds for consolidation.

The P2SK Law empowered OJK to take over crypto regulation, with Bank Indonesia retaining payment-system and currency stability roles, LPS studying insurance, and Kominfo handling content and blocking. The transition moves Indonesia from the commodity-futures era into the financial-services era.

2. The P2SK Law and Transition Timeline

The P2SK Law is the 2023 omnibus financial-sector statute. Its core crypto provisions include the following.

First, legal characterization. Crypto assets are recognized as a type of financial asset within the financial-services sector, but not legal tender and not usable for payment. This is an important shift from Bappebti's "commodity" framing.

Second, regulator. OJK is the competent authority for licensing, rulemaking, supervision, and enforcement. BI handles payment systems, currency stability, and stablecoin-related monetary policy. Kominfo handles content and internet blocking. PPATK, the financial intelligence unit, receives suspicious-transaction reports.

Third, transition. The law set a preparation period through January 2025, when OJK formally took over. Bappebti-registered entities must migrate to new OJK licenses within a window generally running 2025 to 2028 or face shutdown.

Fourth, enforcement powers. OJK can investigate, sanction, and block illegal crypto activity, request Kominfo to block websites and apps, and require banks to freeze accounts. Individual violations carry prison terms and heavy fines.

Fifth, mandatory rupiah use. Crypto trading in Indonesia must be denominated and settled in IDR, mirroring Bappebti-era restrictions.

OJK published multiple consultation papers and whitepapers in 2024 outlining license categories, capital requirements, custody rules, and stablecoin direction. Final rules rolled out through 2025 as the industry changed engines mid-flight.

3. The Three Bappebti-Era Licenses

To understand migration, recap the Bappebti structure. Bappebti split crypto services into three separately licensed businesses.

Crypto Asset Exchanges (Pedagang Fisik Aset Kripto, PFAK) were customer-facing trading platforms, the exchanges. By late 2024 Bappebti had registered several dozen PFAKs, but many small platforms had been eliminated or merged, leaving fewer than ten genuinely active headliners.

Clearing Houses handled clearing and settlement. Bappebti established a dedicated crypto clearing house through which all exchange trades had to clear to ensure fulfillment and fund safety.

Custodians held customer crypto assets. Some exchanges built in-house custody while others used third-party licensed custodians, with requirements around cold-wallet ratios, multi-signature, insurance, and segregation.

Key Bappebti-era rules included mandatory IDR funding through licensed Indonesian banks or e-wallets, prohibitions on margin and derivatives without separate approval, monthly reporting of users and volumes, Bappebti-approved advertising, .co.id domains, and local customer support. Bappebti also ran a Crypto Asset Physical Market through which all trades had to be routed, resembling centralized market infrastructure rather than the platform-by-platform model common elsewhere.

4. OJK Licensing and Consolidation

Rather than simply inheriting the three Bappebti licenses, OJK is redesigning categories along banking and securities lines. Planned categories include:

Crypto Asset Exchange Providers that operate matching and trading platforms, successors to PFAKs but with higher thresholds.

Crypto Asset Custodians that hold customer assets, with a requirement to separate custody from exchange business. This is a significant change: Indonesian exchanges may no longer fully hold customer assets themselves.

Crypto Asset Clearing and Settlement institutions, possibly evolving from the Bappebti-era clearing house or replaced by a newly authorized entity.

Other service providers including market makers, staking providers, yield and lending services, stablecoin issuers, NFT platforms, and on-chain analytics firms, each regulated or registered by business type.

OJK has explicitly pursued consolidation through higher minimum paid-up capital. Consultation papers reported exchange minimum capital of roughly 500 billion rupiah, on the order of 30 million dollars, with custodians requiring tens to hundreds of billions. The threshold is effectively a death sentence for small platforms, and the final number of OJK-licensed local exchanges is expected to converge to between five and ten.

Consolidation also means business separation. Bappebti-era groups sometimes ran exchange, custody, clearing, market making, and proprietary trading together, creating severe conflicts. OJK requires separate legal entities with separated ownership, boards, and risk systems, forcing internal restructurings.

5. Major Local Exchanges and Migration

Indonesia's currently licensed platforms include:

Indodax, founded in 2014 and one of the oldest and largest local exchanges with a broad retail base, is restructuring under OJK.

Tokocrypto, which received Binance investment in 2020 and was among the fastest-growing exchanges, adjusted its Binance relationship after 2023 and is pursuing OJK migration as a repositioned local platform.

Pintu, a mobile-first exchange backed by Sequoia and others, has grown rapidly among younger users and small trades.

Upbit Indonesia, the local entity of Korea's Dunamu, uses Korean parent technology and risk systems and holds a Bappebti license.

Reku, Pluang, BitoExchange, and Luno Indonesia are active in different niches.

Migration requires these platforms to adjust corporate structure and ownership, top up capital, separate custody and clearing from proprietary business, upgrade KYC/AML/surveillance systems, submit new license applications, and undergo on-site inspections. Some may merge or be acquired to meet thresholds.

Foreign platforms cannot directly serve Indonesian users from offshore. Legal paths are either incorporating locally and applying for an OJK license or investing in a licensed local platform within foreign-ownership limits under Indonesia's investment negative list. Global platforms such as Binance, OKX, and Bybit have generally chosen investment and technical cooperation rather than direct operation in Indonesia.

6. Capital, Custody, and Risk Requirements

OJK-licensed institutions face requirements along several dimensions.

Capital adequacy covers minimum paid-up capital, operating capital, and liquidity reserves. Exchanges must maintain liquid reserves to withstand runs; custodians need capital to cover operational risk.

Asset segregation requires customer crypto to be held strictly separately from proprietary assets by an independent custodian, with at least 80 percent in cold storage, MPC or multi-signature controls, and periodic proof-of-reserves publication.

Insurance or risk reserves require commercial insurance or reserved capital for hacks, insider crime, and key loss. LPS is studying limited insurance coverage for crypto but it is unlikely to be comprehensive in the near term.

Cybersecurity requires OJK-recognized third-party audits of trading, wallet, and KYC systems; demonstrable incident-response and disaster-recovery plans; and fit-and-proper assessments for key personnel.

Market surveillance requires real-time monitoring for self-trading, wash trading, pump-and-dump, and insider trading, monthly suspicious-activity reports to OJK, and cooperation with PPATK investigations.

KYC/AML/CFT follows the Indonesian AML law, with customer due diligence, ongoing monitoring, suspicious-transaction reports, sanctions screening against DTTOT, UN, and OFAC lists, and enhanced due diligence for high-risk jurisdictions.

Governance and local presence require Indonesian-resident board members with appropriate qualifications, compliance, risk, and IT-security officers reporting to the board, a physical Indonesian office, and local support.

Operating a compliant exchange in Indonesia is now a capital- and operations-intensive business, not a market any overseas team can enter remotely.

7. Rupiah, LCT, and Local Settlement

Indonesia runs some of Southeast Asia's strictest FX controls. Bank Indonesia has long enforced Local Currency Settlement (LCS) policy requiring goods and services transactions in Indonesia to be settled in rupiah. Crypto is no exception: trading on licensed platforms must be denominated in IDR, and on-ramps and off-ramps must run through Indonesian banks or licensed e-wallets.

Several consequences follow. First, stablecoins cannot serve as a base currency. USDT and USDC can trade as crypto assets, but OJK may further restrict crypto-cross pairs beyond IDR pairs. Second, offshore platforms lose fiat rails, as Indonesian banks are prohibited from servicing unlicensed offshore crypto platforms and Kominfo blocks websites and apps. Third, cross-border payments use LCS arrangements between Indonesia and partners such as Malaysia, Thailand, China, and Japan, using national currencies rather than dollars, and these corridors may integrate with digital assets, stablecoins, or CBDCs.

BI is also advancing Project Garuda, a central-bank digital rupiah with wholesale and retail tiers. The wholesale tier serves interbank settlement while retail serves the public. BI has been explicit that Digital Rupiah is not meant to replace crypto but to reinforce currency sovereignty and provide sovereign-money infrastructure for the digital economy. Coordination between BI and OJK on stablecoins, CBDCs, and payment licensing will be a central industry issue after the handover.

8. Stablecoins and Indonesia's Stance

Indonesia's stance on stablecoins can be summarized as "tradable as crypto assets, but not allowed to circulate as currency." Under Bappebti, offshore stablecoins such as USDT and USDC could trade on licensed platforms with IDR on-ramps. The OJK framework is likely to clarify several points.

Offshore stablecoins may need to be registered or filed with OJK to trade in Indonesia, with reserve disclosures; unfiled stablecoins may be restricted.

Rupiah stablecoins are viewed cautiously by BI due to currency-sovereignty concerns, and Project Garuda is positioned as the official alternative. Private IDR stablecoins are unlikely to receive payment licenses soon.

Algorithmic stablecoins face strong post-Terra/Luna skepticism and may be banned outright if inadequately reserved.

Asset-backed stablecoins backed by fiat, Indonesian government bonds (SBN), Sukuk, or other high-quality liquid assets may be viewed more favorably, subject to reserve segregation, periodic audits, and Shariah-compliant variants.

Projects considering Indonesia-related stablecoins are generally better served by partnering with local or Islamic banks to launch regulated e-money or tokenized deposits rather than issuing decentralized IDR stablecoins directly.

9. Crypto Taxation

Indonesia's Directorate General of Taxes (DJP) has clarified crypto tax treatment since 2022.

Transaction VAT (PPN) was applied to crypto trading at 0.1 percent, combined with 0.1 percent income tax for roughly 0.2 percent total—high internationally but below equity levies. OJK may adjust the structure to improve regional competitiveness.

Capital gains from crypto held for longer periods are taxed under income-tax law, while frequent traders may be treated as running a trading business subject to corporate tax. DJP continues to refine how crypto gains are characterized.

NFTs and GameFi: NFT sales attract ordinary VAT; in-game token rewards count as income; airdrops may be taxable in some cases.

Exchange withholding: licensed platforms generally withhold trading taxes and report monthly to DJP, adding to compliance cost.

Tax changes directly shape market structure. Excessive trading taxes push users to offshore platforms or P2P OTC, so OJK and the Ministry of Finance must balance broadening the tax base against retaining onshore users. Many platforms have also begun providing users with downloadable tax reports that list cost basis, realized gains, and withholding already remitted, treating tax infrastructure as part of the product rather than a back-office afterthought. Projects that enter Indonesia without planning for this reporting burden often find themselves re-engineering their ledgers after the first DJP audit.

10. NFTs, GameFi, and Web3 Businesses

NFTs occupy a relatively permissive corner. Under Bappebti they were treated as a distinct crypto subset but generally not securities or payment instruments. Under OJK, NFT platforms may still require registration but not a full exchange license, provided NFTs are not securities, are not used for payments, and are not fractionalized.

GameFi and play-to-earn titles exploded in Indonesia with Axie Infinity and similar projects but also triggered pyramid scheme, fraud, and youth-addiction concerns. OJK and Kominfo treat GameFi through a lens of financial-risk and illegal-fundraising prevention. Projects marketed as "investment opportunities" or "guaranteed high yield" will almost certainly be treated as illegal securities or pyramid schemes.

For Web3 projects entering Indonesia, the practical guidance is to avoid direct public fundraising, issue through licensed platforms or local partners, ensure NFTs and tokens have clear non-security utility, make no return promises in advertising, vet KOL collaborations against OJK marketing rules, and engage local counsel for a one-time review.

11. Implications for Foreign Projects

For foreign projects, exchanges, wallets, and stablecoin issuers, the transition has several implications.

First, regulatory visibility improves. OJK is more specialized and predictable than Bappebti, reducing long-term uncertainty.

Second, entry thresholds rise. Paid-up capital, local directors, and custody separation make independent licensing impractical for smaller foreign teams, making investment in licensed local platforms the realistic route.

Third, a consolidation window opens. Of the dozens of existing licensees, some will fail OJK thresholds and become acquisition or exit targets—an opportunity for well-capitalized international players.

Fourth, Islamic finance is a differentiator. Indonesia has the world's largest Muslim population, and Shariah-compliant crypto products, tokenized Sukuk, and Islamic stablecoins represent a large latent market but require coordination with OJK, BI, and the Indonesian Ulema Council (MUI).

Fifth, stablecoins and CBDCs are the next wave. As Project Garuda advances, wholesale Digital Rupiah may open new compliant corridors for cross-border trade, Islamic finance, and RWA tokenization.

Sixth, enforcement tightens. OJK has fuller investigation and sanction powers, making unlicensed offshore service significantly riskier than before.

12. Rollout Recommendations

Ten practical recommendations for operators entering Indonesia. First, hire local legal counsel; OJK and BI rules update frequently and need dedicated tracking. Second, prioritize local partners over standalone applications, especially licensed exchanges, banks, and e-wallets. Third, budget at least 12 to 24 months of capital; migration is not a months-long exercise. Fourth, build KYC, AML, and surveillance to OJK standards from day one rather than retrofitting. Fifth, segregate customer assets and hold 80 percent-plus in cold storage with regular proof-of-reserves. Sixth, vet all advertising and KOL campaigns; penalties for misleading marketing are severe. Seventh, use only licensed banks and e-wallets for IDR on-ramps rather than personal accounts. Eighth, invest in Shariah compliance and Islamic-finance opportunities, a unique window versus other Southeast Asian markets. Ninth, build tax withholding and reporting systems that integrate with DJP. Tenth, maintain dialogue with OJK, BI, and Kominfo and participate in industry associations such as Asosiasi Blockchain Indonesia and Aspakrindo to avoid working in a vacuum.

Conclusion

Indonesia's crypto transition from Bappebti to OJK is not a simple rebranding. It is a structural upgrade of Southeast Asia's largest crypto market from commodity-futures logic to financial-services logic. In the short run, license migration, capital restructuring, and business separation cause pain for existing platforms. In the long run, a more specialized regulator, clearer rules, and stronger investor protection make the Indonesian market friendlier to institutional capital and more predictable for international projects. For projects and operators, the window for wild growth is closing and the window for compliant deep engagement is opening. Indonesia's 20-plus million real crypto users, young demographics, and rapidly growing digital economy remain the market that cannot be ignored in Southeast Asia—but succeeding there long-term requires not edge-ball skill but deep patience with regulation, religion, culture, and local financial infrastructure.

FAQ

Q1: Is crypto legal in Indonesia?

A: Yes, but tightly regulated. Crypto is a financial asset under the P2SK Law but not legal tender or a payment instrument, and trading must occur on OJK-recognized local licensed platforms. Unlicensed platforms serving Indonesian users are blocked by Kominfo and may face OJK enforcement.

Q2: Is Bappebti still issuing licenses?

A: No. Crypto oversight formally passed to OJK in January 2025. Existing Bappebti registrants must migrate to OJK licenses during the transition window, roughly 2025 to 2028; new applications are submitted to OJK.

Q3: Can a foreign company open a crypto exchange in Indonesia?

A: Direct offshore operation is not permitted. The feasible routes are incorporating a local Indonesian entity and applying for an OJK license, or investing in an already licensed local platform within foreign-ownership limits under the investment negative list. Most global platforms use technical cooperation plus strategic investment.

Q4: Does Indonesia allow stablecoins?

A: Offshore stablecoins can trade as crypto assets on licensed platforms but cannot serve as payment instruments or replace the rupiah as base currency. Private rupiah stablecoins are unlikely to receive payment licenses soon; BI is advancing Project Garuda, the Digital Rupiah CBDC, as the official direction.

Q5: What is the crypto trading tax in Indonesia?

A: Under Bappebti-era rules, crypto trading was taxed at roughly 0.1 percent VAT plus 0.1 percent income tax, about 0.2 percent total, with capital gains treated under income-tax law. Rates may change under OJK; licensed platforms generally act as withholding agents and report to DJP.

Q6: How are NFTs and GameFi treated?

A: NFTs are generally not securities or payment instruments, and platforms require registration with lower barriers than exchanges. GameFi that involves investment promises, guaranteed returns, or multi-level referral commissions may be classified as illegal securities or pyramid schemes. Projects should emphasize clear utility and avoid investment language.

🌐 Build secure and scalable Web3 platforms with SoonTech.

Explore our solutions for White Label Crypto Exchanges, Prediction Markets, MPC Wallets, Matching Engines, Liquidity Integration, and Compliance.