Indonesia is the largest ASEAN economy and the third-largest country in the world by population that you've probably underestimated. It's also a market where "what works in the rest of ASEAN" needs significant adaptation — different rails, different wallet penetration, different regulatory tone.
This guide focuses on what changes in your design when you ship to Indonesia.
The fast facts
Indonesia in 2026 is in the middle of a payment-modernization sprint. QRIS has unified the QR mess. BI-FAST has solved the instant-payment gap. The remaining friction is regulatory (foreign currency rules) and operational (the 17,000-island geography is real and affects logistics for B2B remittance).
- Population: 281M (2025)
- Banked rate: ~52% — meaningfully lower than ASEAN-developed peers
- Wallet penetration: ~45% (GoPay/OVO/DANA combined, with overlap)
- Smartphone penetration: ~67%
- e-Commerce GMV: USD 84B (2025), growing 12% YoY
- Cross-border consumer payments: USD 14B+ inbound, mostly remittance from MY/SG/HK
The payment rails that matter
QRIS (Quick Response Code Indonesian Standard)
QRIS is the unified merchant QR standard launched by Bank Indonesia in 2019 and now mandatory for any QR-receiving merchant in Indonesia. Critically:
- One QR works for all wallets — GoPay, OVO, DANA, LinkAja, plus most banks. The fragmented pre-2019 wallet QR landscape is gone.
- B2B and government flows increasingly use QRIS too
- Cross-border QRIS is live with Thailand, Singapore, Malaysia, Philippines (some bilateral, some multilateral)
QRIS is the modal merchant payment method in Indonesia in 2026. Acceptance volumes have crossed offline cards. If you're building merchant-receive in IDR, QRIS is mandatory; supporting it is table stakes.
BI-FAST
Bank Indonesia's instant interbank rail, launched 2021. It's the equivalent of Singapore's PayNow or Malaysia's DuitNow at the rail level — 24/7, real-time, low-cost.
- Reach: ~95% of Indonesian banks (commercial banks, BPRs partially covered)
- Identifier: account number; can also be coupled with mobile/email proxy
- Limit per transaction: IDR 250M (~USD 16K)
- Cost: capped at IDR 2,500 per transaction (~USD 0.16)
For B2B and high-value transfers, BI-FAST is the rail of choice. Domestic IDR settlement is now genuinely fast and cheap.
Virtual Account (VA)
The unique-to-Indonesia checkout flow: merchants are issued a "virtual account" by their bank; consumers transfer to that VA via internet banking, ATM, or wallet. The merchant gets paid; the consumer's bank shows the merchant name.
Why it matters: Indonesian consumers prefer VA over card-not-present for any flow above ~USD 30. Even with QRIS dominant, VA still represents ~20-30% of e-commerce checkout volume.
If you're building Indonesian e-commerce checkout, support at minimum VA from BCA, Mandiri, BNI, BRI (the four biggest banks) plus Permata. That covers ~80% of the VA flow.
GoPay / OVO / DANA / LinkAja
The four major e-wallets. As of 2026:
- GoPay (under GoTo) — strongest in transport and food delivery via Gojek
- OVO — strong retail and Tokopedia integration
- DANA — bank-backed (Bank Permata + Ant Group), strong online
- LinkAja — state-owned, weaker share but mandated for some government flows
All four interoperate via QRIS, so for receiving payments, supporting QRIS gets you all of them. For sending (paying out wallet balances), each has separate APIs and partner-onboarding.
Cards
Card penetration in Indonesia is lower than ASEAN-developed peers (~25M active cards vs 80M+ in Malaysia). Major schemes work; domestic networks (Visa Debit, Mastercard Debit, GPN) all process. Acceptance fees are relatively high by ASEAN standards.
For B2C Indonesia, cards are typically 15-30% of e-commerce flow, with QRIS + VA + wallets dominating.
The regulators
Indonesia has a more fragmented regulatory landscape than most ASEAN peers:
- Bank Indonesia (BI) — the central bank; regulates payment systems, FX, and remittance
- Otoritas Jasa Keuangan (OJK) — financial services regulator; oversees banks, fintech lending, capital markets
- Komdigi (Ministry of Communication and Digital Affairs) — increasingly relevant for digital licensing
For payment operators specifically:
| License | Permits | Issued by | Capital |
|---|---|---|---|
| PJP (Penyedia Jasa Pembayaran) | Operate as payment service provider | BI | Tiered IDR 1B–25B |
| PSE (Penyelenggara Sistem Elektronik) | Operate any electronic system in Indonesia | Komdigi | Registration + ongoing |
| KUPVA (formerly) | Money changer / remittance | BI | Lower threshold |
| Branch / partnership of foreign PSP | Limited operations under local partnership | BI | Varies |
The path most foreign cross-border operators take is partner with a PJP-licensed local entity rather than apply directly. Direct PJP licensing for foreign-owned entities has gotten harder since 2022.
The foreign currency rules that bite
This is the single biggest "gotcha" for foreign operators entering Indonesia.
The Rupiah Mandatory Use policy (Bank Indonesia regulations 17/3/PBI/2015 and successors) requires that all transactions on Indonesian soil settle in IDR. Specifically:
- IDR is mandatory for transactions where the buyer and seller are both Indonesian, including most domestic e-commerce
- Foreign currency is permitted for cross-border B2B trade (with documentation) and certain enumerated exceptions
- Holding IDR balances on behalf of Indonesian residents by foreign entities is restricted
Practical implications:
- You cannot, in general, run a foreign-USD-settled e-commerce checkout that Indonesian consumers transact through. The settlement to merchant must be in IDR.
- Cross-border B2B between an Indonesian merchant and a foreign counterparty is permitted with proper documentation (purpose codes, supporting trade documents).
- You cannot pre-fund IDR float in your own name as a foreign entity — you do this through a partner.
Combined with the TKDN (Local Content) rules for some sectors, this is why "operating in Indonesia" almost always means "operating with a local partner who holds the customer-facing relationship and the IDR balance."
The single most common reason foreign cross-border operators fail in Indonesia is underestimating the partnership work. Identifying, onboarding, and integrating with the right Indonesian PJP partner takes 6-12 months. Build this into your launch plan.
What cross-border looks like in practice
IN ↔ Indonesia (inbound consumer payments)
The dominant flow: an offshore platform (Singapore-based marketplace, e.g.) wants to accept payment from Indonesian consumers.
Pattern that works:
- Local PJP-licensed acquirer integrates QRIS + VA + cards
- Settlement in IDR to the merchant via the local entity
- FX from IDR to merchant's preferred currency happens at a separately-licensed FX layer
- Cross-border settlement to merchant abroad
Total path latency: same-day to T+1; total cost: 1-2.5% all-in.
Indonesia → Out (cross-border B2B remittance)
Outbound B2B from Indonesian companies. Less restricted than inbound, but still requires:
- Documented purpose (trade, services, investment, etc.)
- Local IDR-licensed remittance partner
- BI reporting above thresholds
Costs are typically 0.8-1.5% all-in for SME-tier flows.
Indonesia ↔ MY/SG (consumer remittance)
Driven by migrant workers (mostly to Malaysia and Saudi Arabia). Massive volumes (USD 12-15B annually), well-served by specialist remitters, increasingly by wallet-based flows (Wise, Sendwave, regional fintechs).
KYC obligations
Indonesia operates a tiered KYC regime aligned with FATF:
- Tier 1 (low-value e-money up to IDR 2M total balance) — minimum: name + phone
- Tier 2 (most consumer use, up to IDR 20M) — KTP (national ID) + selfie
- Tier 3 (higher value or business) — full KYC with KTP + NPWP (tax ID) + supporting documents
The Indonesian e-KYC ecosystem has matured rapidly since 2020. Dukcapil (the national civil registry) provides API access to identity verification for licensed entities, making consumer onboarding feasible at digital-native speed.
For business KYC, expect SIUP/NIB documentation, beneficial-ownership declarations, and PEP screening at minimum.
Tax treatment
For payment operators:
- Corporate income tax: 22% (planned to reduce to 20% by 2027)
- VAT: 11%, with most B2B financial services exempt
- Withholding tax: 20% on certain cross-border outbound payments unless treaty-mitigated
- Local content (TKDN): sectoral, varies by license type
Indonesia is moving toward simplification but still has more tax-compliance overhead than Singapore or Hong Kong. Plan for a real local accounting function.
What we'd integrate first
Priorities for IDR market entry, in order:
- QRIS — non-negotiable
- VA from top-4 banks (BCA, Mandiri, BNI, BRI)
- At least one major wallet API for payouts (typically GoPay or DANA)
- BI-FAST for high-value B2B
- Local PJP partner for the regulated relationship
What to watch in 2026-27
- PayNow ⇋ BI-FAST linkage launch (announced for late 2026) — should compress SG-ID corridor cost by ~25-40 bps
- QRIS cross-border expansion — already live with TH/SG/MY; PH and JP in pipeline
- Project Garuda (CBDC) — Bank Indonesia's CBDC pilots are active; production cross-border is multi-year
- OJK fintech licensing reform — ongoing; expect tighter consumer-protection rules and possibly new categories
Closing
Indonesia is the largest ASEAN payment opportunity by a wide margin and the most operationally complex. The infrastructure has matured remarkably in the past 5 years; the regulatory landscape rewards local partnership; the consumer base is genuinely digital-native in the major cities.
If you're working through Indonesian market entry and want to compare notes on the partnership landscape, drop us a note via contact.