Indonesia’s fintech sector is expanding rapidly, with the digital economy expected to exceed US$130 billion by 2025. Mobile-first consumers, government-led digital transformation, and strong investor appetite have made the country a hotspot for fintech growth. Foreign investors are drawn to this momentum, but licensing a fintech business in Indonesia requires navigating a multi-agency regulatory environment, sector-specific ownership rules, and a rigorous compliance framework.
Understanding the landscape from the outset can distinguish between a smooth market entry and costly delays.
Fintech License Categories and Regulatory Context
Three primary agencies regulate Indonesia’s fintech industry. OJK handles digital lending and banking. BI oversees payment systems. Kominfo regulates digital platforms and data governance. Each applies specific regulations, such as POJK No. 10/2022 for lending, BI Regulation No. 24/8/PBI/2022 for payments, and PP No. 71/2019 for electronic systems — which determine licensing, capital thresholds, and compliance expectations.
License requirements depend on the business model. Lending platforms need around USD 730,000 in capital and strong governance. Payment providers must register with BI, with a capital starting from approximately USD 610,000. Digital banks require up to USD 183 million. Electronic system providers must register with Kominfo and meet local data hosting and cybersecurity standards.
Structuring Foreign Investment and Ownership Limitations
Foreign ownership in Indonesia’s fintech sector is shaped by both the Positive Investment List and regulations issued by OJK and Bank Indonesia. While Presidential Regulation No. 10/2021 outlines the overall framework for foreign investment, actual ownership limits vary by fintech sub-sector and are enforced during the licensing process.
As of 2025, peer-to-peer lending and payment service providers are subject to an 85 percent foreign ownership cap. Digital banking licenses permit foreign ownership of up to 99 percent, provided applicants meet strict governance, capital, and operational requirements. In contrast, equity crowdfunding platforms are more tightly restricted, with a maximum foreign ownership threshold of 49 percent.
To navigate these limits, most foreign investors enter the market by establishing a foreign investment company (PT PMA). In sub-sectors where caps are lower, forming a joint venture with a local partner is often the most practical approach. Others adopt holding company structures to manage multiple licenses or segregate regulated activities for tax and compliance purposes.
While representative offices remain an option for early market research, they are not allowed to conduct revenue-generating activities.
Step-By-Step Licensing and Application Timeline
Setting up the legal entity
The process begins with the incorporation of a PT PMA through Indonesia’s Online Single Submission (OSS) system. This includes obtaining a Business Identification Number, registering for tax and social security, opening a corporate bank account, and securing a local office presence.
This setup phase usually takes between two to four months.
Participating in the regulatory sandbox
For business models that involve new or unproven financial technologies, the next step is entry into the regulatory sandbox program. Overseen by OJK or BI, these sandboxes provide a controlled testing environment for firms to demonstrate innovation, consumer protection mechanisms, and system integrity. Testing typically spans six to twelve months and is often required before regulators will consider a full license application.
Preparing the license application
Once sandbox obligations are met — or if the model does not require one — companies must prepare a comprehensive license application. This involves compiling a business plan, submitting capital injection evidence, and completing internal system testing. Documentation on governance, cybersecurity, and data compliance must also be included.
At this stage, regulators expect a fully operational platform that meets local infrastructure and data hosting requirements.
Undergoing regulatory review
After submission, the application enters a detailed assessment process. Depending on the license type, the relevant authority — OJK, BI, or Kominfo — may conduct background checks, system audits, management evaluations, or stakeholder consultations. This review phase can take twelve to eighteen months and may require several rounds of clarification or supplementary documentation.
Finalizing the license and launching operations
Once conditional approval is granted, companies must complete final capital injections, connect to regulatory reporting systems, and ensure all compliance measures are fully in place. Regulators may require a soft launch period with limited operations under supervision. Following final inspections, the license is issued, and the business may begin full-scale commercial operations. This last stage generally takes an additional two to four months.
Shorter timeframes are possible for well-prepared applicants with standardized business models, but delays are common in more complex or innovative cases
Core Documentation and Compliance Requirements
Applicants must submit a comprehensive package that includes the company’s articles of association, ownership structure, board and management details, and beneficial ownership disclosures. Financial submissions include audited statements and five-year projections with risk stress tests.
Need help navigating fintech regulations in Indonesia? Email us to consult with our licensing specialists at MAP Resources.
Technology-related documents must show cybersecurity resilience, local data hosting, business continuity planning, and integration with national financial systems.
Regulators also review consumer protection frameworks, including KYC, fair treatment, data privacy, and complaint resolution mechanisms.
Maintaining Post-Licensing Compliance
Once licensed, fintech companies must maintain regular compliance reporting. This includes monthly and quarterly filings on operations, capital levels, risk exposures, and technology performance. Firms are expected to uphold minimum capital ratios, submit to regular audits, and follow pre-approval procedures for major system changes.
Regulators closely monitor consumer protection practices. Firms must ensure fair pricing, transparent contracts, data privacy, and accessible customer service.
Cost Expectations and Licensing Timelines
The costs associated with licensing and operating a fintech company in Indonesia can vary significantly based on the business model, licensing scope, and regulatory requirements. While precise figures may differ on a case-by-case basis, several key areas of expenditure should be anticipated.
Government application fees for fintech licenses are set by regulators such as OJK and Bank Indonesia. Depending on the license type, these fees may range from approximately USD 30,000 to USD 120,000. Firms applying for more complex or multi-role licenses may face higher government charges.
Legal and advisory costs are another major consideration. Many foreign entrants rely on local counsel or consulting firms to handle incorporation, compliance planning, and regulatory engagement. For fintech models with complex structures or cross-border elements, advisory expenses can easily reach several hundred thousand U.S. dollars.
Technology and infrastructure development represent a substantial investment for firms aiming to operate at scale. This includes platform architecture, system localization, data hosting compliance, and cybersecurity measures. Depending on the scope, infrastructure costs may fall in the low-to-mid-seven-figure U.S. dollar range.
Annual operational costs can also be significant. These typically include expenses related to compliance systems, internal and external audits, reporting functions, regulatory liaison, and cybersecurity upkeep. As the company grows, these costs may increase in line with new oversight requirements or system upgrades.
The overall licensing process, from incorporation to full commercial launch, can take between 18 to 36 months.
These figures reflect market conditions and regulatory practices as of 2025. For precise budgeting and planning, investors are encouraged to consult local legal and compliance advisors familiar with fintech licensing in Indonesia.
Common Risks and How To Avoid Them
Many foreign firms underestimate the time and capital required. Delays often result from unclear business models, incomplete documentation, or weak consumer protection planning. Regulatory changes, particularly around foreign ownership and data protection, can affect license viability mid-process.
Technical issues such as non-compliant cloud architecture or weak cybersecurity are common stumbling blocks. Strategically, firms should also prepare for exchange rate volatility, unclear exit options, and gaps in local market knowledge.
Partner With MAP Resources Indonesia
The fintech opportunity in Indonesia is significant — but so are the regulatory demands. MAP Resources Indonesia helps foreign investors enter the market confidently. From structuring and sandbox navigation to license submission and compliance setup, our consultants deliver end-to-end support tailored to your business model. Contact us today at info@mapresourcesindonesia.com to get started.
