Is crypto legal in Indonesia? Yes - but the full answer is more specific than that. Cryptocurrency is legal to trade and hold as a regulated digital financial asset, yet explicitly prohibited as a means of payment under Indonesian law. That distinction matters enormously, and getting it wrong exposes traders and businesses to real legal risk.
This guide breaks down Indonesia's crypto legal framework in full: the January 2025 regulatory overhaul that transferred oversight from BAPPEBTI to the Financial Services Authority (OJK), compliance requirements under POJK 27/2024, the approved asset whitelist, tax obligations, and a step-by-step path to trading legally in 2026.
⚡ Key Takeaways
- Cryptocurrency is legal to trade as a regulated digital financial asset on OJK-licensed exchanges
- Using crypto as a payment method is illegal under Indonesia's Currency Law - the rupiah is the only legal tender
- The Financial Services Authority (OJK) has been Indonesia's primary crypto regulator since January 10, 2025
- All crypto businesses must meet AML/CFT obligations, KYC standards, and minimum capital thresholds under POJK 27/2024
What Is the Legal Status of Cryptocurrency in Indonesia?
To answer this question precisely, it is essential to distinguish between trading cryptocurrency as an asset and using it as a means of payment. Indonesia operates under a deliberately dual legal framework: crypto is regulated and fully tradable, but it cannot substitute the rupiah in commercial transactions - and that line is actively enforced.
On the trading side, OJK Regulation No. 27 of 2024 (POJK 27/2024) formally classifies cryptocurrency as a digital financial asset (Aset Keuangan Digital). That classification integrates crypto into Indonesia's formal financial sector, making buying, selling, and holding crypto on licensed exchanges a fully legal activity for Indonesian residents.
On the payment side, the Currency Law (Law No. 7 of 2011) draws a hard line: the rupiah is Indonesia's sole legal tender. No other instrument - crypto included - may be used to settle debts, pay for goods or services, or compensate employees inside the country. Bank Indonesia enforces this prohibition, and it applies regardless of mutual agreement between parties. Two people deciding to transact in Bitcoin doesn't make it legal.
Crypto Trading vs. Using Crypto as Payment: The Critical Legal Distinction
The law doesn't care whether you own crypto - it cares how you use it. Two scenarios make the distinction concrete:
✓ SCENARIO A — LEGAL
A user buys 0.01 BTC on Tokocrypto using rupiah via bank transfer. They hold it for three months, then sell it back for rupiah on the same platform. Every step here is fully compliant with Indonesian law.
✕ SCENARIO B — ILLEGAL
That same user attempts to pay an online merchant in BTC, or transfers ETH as wages to a contractor. This violates Indonesia's Currency Law — regardless of whether both parties agreed to the arrangement.
The distinction is entirely at the point of use, not ownership. The moment cryptocurrency moves as a substitute for rupiah in a commercial exchange, it crosses into prohibited territory. You can learn more about Bitcoin as an asset separately from its legal use as a payment instrument - the two concepts are completely distinct under Indonesian law. Own it freely. Trade it on licensed platforms. Just don't spend it as money.
How Indonesia Reclassified Crypto: From Commodity to Digital Financial Asset
Indonesia's approach to crypto has shifted dramatically. Understanding that evolution explains why the current framework looks the way it does.
The January 2025 transfer wasn't cosmetic. BAPPEBTI treated crypto as a commodity - closer to gold futures than to financial instruments. OJK's framework treats it as a financial asset, which means stricter capital requirements, mandatory consumer protection obligations, and significantly expanded AML/CFT enforcement. The July 2025 deadline for existing businesses to achieve full compliance has passed, putting Indonesia in an active enforcement phase.
INDONESIA CRYPTO REGULATION TIMELINE
2018
BAPPEBTI establishes initial crypto rules. Crypto classified as a tradable commodity on futures exchanges. AML/CFT requirements introduced.
December 2024
OJK issues Regulation No. 27 of 2024 (POJK 27/2024). Crypto reclassified as a "digital financial asset." New capital, consumer protection, and AML rules set.
January 10, 2025
Regulatory authority officially transfers from BAPPEBTI to OJK. Crypto enters the formal financial sector.
July 10, 2025
Full compliance deadline for existing businesses. Non-compliant operators face enforcement action.
The January 2025 transfer wasn't cosmetic. BAPPEBTI treated crypto as a commodity - closer to gold futures than to financial instruments. OJK's framework treats it as a financial asset, which means stricter capital requirements, mandatory consumer protection obligations, and significantly expanded AML/CFT enforcement. The July 2025 deadline for existing businesses to achieve full compliance has passed, putting Indonesia in an active enforcement phase.
Indonesian Crypto Laws: The Regulatory Framework Explained
Understanding which specific laws apply - and which authority enforces each - is essential for traders and businesses operating in Indonesia. One important fact that most coverage misses: Indonesia has no single dedicated "Crypto Act." Regulation is distributed across three separate authorities, each with a distinct and non-overlapping mandate. Conflating them leads to real compliance blind spots.
The framework rests on three legal pillars: POJK 27/2024 governs all digital financial asset trading; the Currency Law provides the legal basis for the crypto payment prohibition; and BAPPEBTI's legacy framework established the approved asset whitelist now maintained by OJK.
OJK Regulation No. 27 of 2024 (POJK 27/2024): The Core Legal Framework
POJK 27/2024 is the single most important legal instrument for anyone operating in Indonesia's crypto market. Issued in December 2024 and effective from January 10, 2025, it replaced the BAPPEBTI commodity framework entirely and brought crypto under financial sector supervision.
Key provisions:
- Asset Classification: Cryptocurrency is a "digital financial asset" - no longer a commodity
- Minimum Paid-up Capital: IDR 100 billion for Crypto Asset Traders
- Minimum Equity: IDR 50 billion to be maintained on an ongoing basis
- AML/CFT Compliance: Mandatory for all licensed operators; capital must not originate from illicit sources
- Consumer & Data Protection: Operators must safeguard personal data and treat clients fairly
- OJK Licensing: All Digital Financial Asset Trading Operators must obtain a formal OJK license
- Reporting: Both periodic and incidental reports required; submission directly to OJK
- Compliance Deadline: Existing businesses had until July 10, 2025 to achieve full compliance
One provision that's often overlooked: OJK retains discretionary authority to demand additional capital contributions from operators it classifies as systemically significant. For large exchanges with deep market exposure, that's a meaningful risk factor in long-term financial planning.
BAPPEBTI's Legacy: The Approved Crypto Asset Whitelist
Although BAPPEBTI no longer holds supervisory authority, its most operationally significant contribution survives: the approved crypto asset whitelist. Originally curated by BAPPEBTI, the list defines which specific cryptocurrencies may legally be traded on Indonesian exchanges.
The whitelist has expanded significantly over time. BAPPEBTI's final list before the January 2025 transition contained around 1,396 assets. Under OJK's framework, the DFA Exchange (PT Bursa Komoditi Nusantara) issued the first official updated list in April 2025, containing 1,444 approved crypto assets - a significant increase driven by market growth and expanded review criteria. The list is reviewed at minimum quarterly. OJK also holds authority to prohibit specific assets or order exchanges to cease trading them.
The list covers all major cryptocurrencies traders would expect:
Always verify the current list via the DFA Exchange (PT Bursa Komoditi Nusantara / CFX) before trading, as additions and removals occur quarterly.
Trading any asset outside the approved whitelist constitutes a regulatory violation - for the exchange facilitating the trade and potentially the trader. If an exchange is offering assets you can't find on the whitelist, that's a red flag worth taking seriously.
Old vs. New: BAPPEBTI vs. OJK Framework - What Actually Changed
The January 2025 transition wasn't just a rebrand. It fundamentally changed how crypto is regulated across seven key dimensions:
The transition period for existing businesses ended July 10, 2025. Non-compliant operators are now exposed to active enforcement.
How to Trade Cryptocurrency Legally in Indonesia (Step-by-Step)
Knowing how to trade crypto legally in Indonesia is straightforward once the framework is clear - but the steps matter. Skipping KYC or trading on an unlicensed platform aren't just technicalities; they're the difference between legal trading and a compliance violation.
Step 1: Select an OJK-Licensed Exchange
Only use exchanges that hold a current OJK license. Established licensed platforms include Tokocrypto, Indodax, and Pintu. OJK publishes the official list of licensed Digital Financial Asset Trading Operators on its website - verify a platform's status there before depositing funds. If it's not on the list, don't use it.
Step 2: Register and Complete Full KYC Verification
All OJK-licensed exchanges require identity verification before trading. You'll need a valid Indonesian national ID (KTP) or passport for foreign nationals. Understanding what KYC involves and why it matters will help you move through onboarding faster - it's a mandatory consumer protection requirement, not an optional formality.
Step 3: Fund Your Account in Rupiah
Deposits must be made in rupiah via Indonesian bank transfer. Crypto payments cannot be used as deposits - that would itself violate the Currency Law. Set up a bank transfer from your Indonesian bank account to fund your exchange wallet.
Step 4: Trade Only OJK-Approved Assets
Restrict your trading activity to assets on the official approved whitelist. With 1,444 assets approved, this covers every mainstream cryptocurrency and most altcoins traders want access to. It is a compliance requirement, however - trading outside the list is a violation.
Step 5: Maintain Transaction Records for Compliance
Keep detailed records of every trade: entry price, exit price, dates, and rupiah amounts. Under POJK 27/2024, DFA Traders are required to store transaction data for at least ten consecutive years - an extension of the five-year retention period that applied under BAPPEBTI. You'll also need accurate records for tax reporting. A dedicated portfolio tracker works well for this purpose.
Who Regulates Crypto in Indonesia? The Three Key Authorities
With crypto oversight now shared across three institutions, understanding each regulator's specific mandate is essential for both traders and businesses. The three bodies have distinct, non-overlapping responsibilities - confusing them creates real compliance blind spots.
OJK (Financial Services Authority): Primary Regulator Since January 2025
OJK became Indonesia's primary crypto regulator on January 10, 2025, following the formal transfer of authority from BAPPEBTI. Its mandate under POJK 27/2024 is broad: OJK supervises all digital financial asset trading activity, licenses and monitors crypto exchanges and trading operators, enforces AML/CFT obligations, and mandates consumer and personal data protection across the industry.
Critically, OJK is not just a licensing body - it's an active compliance enforcer. It reviews operator reporting, investigates breaches, and holds discretionary authority to impose additional capital requirements on firms it deems systemically significant. The official list of OJK-licensed exchanges is publicly accessible and updated as licenses are issued or revoked.
Bank Indonesia: Enforcing the Crypto Payment Ban
While OJK governs crypto trading, a separate authority - Bank Indonesia (BI), the nation's central bank - holds sole authority over the payment prohibition. BI enforces the Currency Law (Law No. 7 of 2011), which establishes the rupiah as Indonesia's exclusive legal tender and prohibits using any other instrument, including cryptocurrency, to settle payments.
One forward-looking development: Indonesia's crypto industry is actively lobbying Bank Indonesia to legally recognize stablecoins as permissible payment instruments, citing their utility for cross-border transactions and business settlements. BI is evaluating the proposal. Until any change is formally enacted, however, stablecoins carry the same payment prohibition as every other crypto asset.
Regulator Mandate Comparison: At a Glance
Each authority's responsibilities are cleanly separated. Here's the full picture:
Legal Risks and Red Flags: What Could Get You in Trouble
Understanding what is legal in Indonesia's crypto market also means knowing exactly what isn't - and the consequences can be serious. Indonesian authorities ramped up enforcement following the July 2025 compliance deadline, and the regulatory environment is no longer permissive toward gray-area activity.
⚠ Know Before You Trade - Legal Risk Summary
- Using crypto as payment → Currency Law violation → criminal liability; the rupiah is the only legal tender
- Trading on an unlicensed exchange → POJK 27/2024 violation → platform and user exposure to enforcement
- Failing AML record-keeping → Indonesian AML Law violation → records must be kept for at least 10 consecutive years
- Trading non-whitelisted assets → OJK whitelist violation → regulatory breach for exchange and potentially the trader
- Business operating without OJK license → POJK 27/2024 violation → revocation, fines, and potential criminal referral
Four specific risk areas deserve attention. First, using crypto for payments remains the most common compliance mistake - often made by individuals who understand that trading is legal and assume payment use follows. It doesn't. Second, offshore exchanges operating outside OJK's licensing framework don't provide legally protected trading conditions for Indonesian users. The full picture of how crypto scams and unlicensed operators operate is worth understanding before depositing on any platform. Third, transaction records must be retained for at least ten years under POJK 27/2024 - a requirement most retail traders ignore. Fourth, trading non-whitelisted assets on DEXs or foreign platforms puts traders into genuinely grey territory with real enforcement exposure.
Crypto Compliance Requirements for Businesses in Indonesia
For businesses operating in Indonesia's crypto sector, compliance with OJK's new framework is not optional - it is a condition of market access. The July 2025 deadline has passed. Non-compliant operators are now exposed to license revocation and enforcement action, and OJK has made clear it intends to actively police the space.
The compliance architecture under POJK 27/2024 rests on four pillars.
AML, CFT, KYC, and Consumer Protection Obligations
Every licensed operator must implement procedures to prevent money laundering and terrorism financing. These requirements align with FATF's (Financial Action Task Force) standards for Virtual Asset Service Providers (VASPs), which means international operators will recognize the framework even if the Indonesian nomenclature differs. A deep understanding of how KYC and AML work in practice is foundational for compliance teams building out onboarding and monitoring systems.
A compliance checklist for operators under POJK 27/2024:
- Implement AML/CFT screening procedures - transaction monitoring, suspicious activity reporting, and sanctions screening are all required
- Verify client identity (KYC) before onboarding - KYC isn't explicitly itemized in POJK 27/2024, but is operationally required under consumer protection obligations
- Protect consumer personal data - data handling must meet Indonesia's Personal Data Protection Law (Law No. 27 of 2022)
- Ensure capital cleanliness - paid-up capital cannot originate from money laundering or terrorism financing; provenance documentation is expected
- Maintain transparent fee and risk disclosure - fair treatment of clients requires clear communication of costs, risks, and platform mechanics
- Submit periodic and incidental compliance reports to OJK - reporting is mandatory and ongoing
Capital Requirements, Licensing, and Data Localization
The operational thresholds under POJK 27/2024 are significant. International operators need to account for these before entering the Indonesian market:
📊 Key Compliance Thresholds - POJK 27/2024
| Minimum Paid-up Capital | IDR 100,000,000,000 (IDR 100B) |
| Minimum Ongoing Equity | IDR 50,000,000,000 (IDR 50B) |
| Transaction Record Retention | At least 10 consecutive years |
| Server Location | Must be physically inside Indonesia |
| OJK License Requirement | Mandatory for all operators |
| Compliance Deadline | July 10, 2025 - now passed |
The data localization requirement is the one most frequently overlooked by international operators. Servers processing Indonesian user data and transactions must be physically located inside the country - not a software configuration, but an infrastructure obligation that adds real operational cost. Per HBT Law's analysis of POJK 27/2024, OJK also extended the transaction record retention period from the five years that applied under BAPPEBTI to at least ten consecutive years. Factor both into market-entry planning from day one.
Cryptocurrency Taxation in Indonesia: Income Tax and VAT
Crypto taxation in Indonesia is settled law, not a gray area. The government introduced formal tax treatment specifically to bring the digital asset market into the revenue framework, and three obligations apply:
Specific current rates are administered by the Directorate General of Taxes (Direktorat Jenderal Pajak / DJP) and are subject to revision - always verify on the DJP's official website before filing. What won't change: all three tax obligations are mandatory compliance requirements, not optional declarations.
Crypto Mining, DeFi, and NFTs: Indonesia's Legal Gray Areas
Beyond mainstream spot trading, several adjacent activities remain in a regulatory gray area. This is where Indonesia's framework has genuine gaps - and where operating on outdated assumptions carries the highest risk.
Crypto mining has no explicit regulatory framework in Indonesia. The activity itself sits in genuine legal limbo - neither explicitly permitted nor prohibited as an operation. Income from mining is unambiguously taxable regardless of the regulatory gap. DeFi protocols and NFT platforms are similarly unaddressed by POJK 27/2024, though OJK's broad authority over digital financial assets could plausibly extend to certain DeFi activities depending on their structure.
Stablecoins occupy a particularly interesting position. They're not approved for payments - they carry the same prohibition as every other crypto asset - but the crypto industry is actively lobbying Bank Indonesia to recognize them as legal payment instruments, citing fiat-pegged stability as a differentiator. That lobby effort is ongoing as of 2026. For any gray-area activity, qualified legal advice from a firm with Indonesian financial services expertise is the only defensible approach.
The Future of Crypto Regulation in Indonesia
With the July 2025 compliance transition now complete, Indonesia's crypto regulatory landscape is entering a more mature enforcement phase. The direction of travel is clear: tighter rules, broader coverage, and a regulator that's actively engaged - but not a jurisdiction closing the door on crypto.
Five developments worth watching in 2026:
- Stablecoin recognition: Bank Indonesia's evaluation of the industry's proposal to legalize stablecoins for payment use - a favorable ruling would be a significant market catalyst
- OJK enforcement ramp-up: Post-July 2025, OJK is transitioning from onboarding to active supervision; expect more scrutiny of AML/CFT and capital compliance
- Digital gold framework: Indonesia introduced digital gold regulation in 2026, signaling willingness to formalize additional asset classes beyond crypto
- DeFi and NFT guidance: OJK has not explicitly addressed DeFi or NFTs; regulatory guidance is likely in the medium term as activity grows
- Blockchain in government and banking: Blockchain adoption is expanding beyond crypto - PT Pelindo (port management) has cut administrative processing time significantly through blockchain-based logistics; PT Bank Negara Indonesia (BNI) has implemented blockchain for trade finance and remittances
The macro context matters: according to BAPPEBTI data confirmed by Chambers Global Practice Guide, Indonesia's crypto transaction volume from January to November 2024 reached IDR 556.53 trillion - a 356% increase from the same period in 2023. Full-year 2024 data from Bappebti via Kompas.id shows total transactions reaching IDR 650.61 trillion. At that scale, crypto isn't a fringe market in Indonesia - it's a significant financial sector driving proportionally increasing regulatory attention.
Indonesia is evolving toward a tighter, more credible framework. That trajectory makes it a market worth understanding in full.
Conclusion: Is Crypto Legal in Indonesia? The Bottom Line
Cryptocurrency is legal in Indonesia - but the full picture is more nuanced than a simple yes. The legal answer depends entirely on who you are and what you're doing with crypto.
Five things that are settled law as of 2026: crypto is a regulated digital financial asset; trading on OJK-licensed exchanges is fully legal; using crypto as payment is illegal; OJK has been the primary regulator since January 10, 2025; and businesses must comply with POJK 27/2024 or face enforcement. Those aren't contested - they're the foundation of the current framework.
The transparency and on-chain verifiability that define best practice in modern DeFi align closely with where Indonesia's regulatory trajectory is heading: a market where rules are clear, enforcement is real, and user control over assets is a design requirement rather than an afterthought. Platforms that prioritize safe, self-custodial asset management are already operating in the spirit of where this market is going.
This article is for informational purposes only and does not constitute legal or financial advice. Cryptocurrency trading involves substantial risk of loss. Always verify current regulations with a qualified Indonesian legal professional before making trading or business decisions.
Last updated: March 2026.
Frequently Asked Questions
Is crypto legal in Indonesia?
Yes, cryptocurrency is legal in Indonesia - but with a critical distinction. Crypto is fully legal to trade and hold as a regulated digital financial asset under OJK Regulation No. 27 of 2024. However, using cryptocurrency as a means of payment is explicitly illegal. Indonesia's Currency Law establishes the rupiah as the sole legal tender, and Bank Indonesia enforces this prohibition regardless of any agreement between parties. Trading on an OJK-licensed exchange with approved assets is fully compliant. Paying a merchant in Bitcoin is not. The legal answer depends entirely on how you use crypto, not whether you own it.
Can I use cryptocurrency to pay for goods or services in Indonesia?
No. Using cryptocurrency - including Bitcoin, Ethereum, stablecoins, or any other digital asset - as a payment instrument for goods, services, salaries, or debt settlement is illegal in Indonesia. The Currency Law (Law No. 7 of 2011) designates the rupiah as the country's sole legal tender, and Bank Indonesia enforces this rule. The prohibition applies even if both parties agree to transact in crypto. There is currently no commercial payment use case where crypto is legally permitted in Indonesia, though the industry is lobbying Bank Indonesia for stablecoin recognition.
What changed in Indonesia's crypto regulations on January 10, 2025?
January 10, 2025 marked the official transfer of all crypto regulatory authority from BAPPEBTI to the Financial Services Authority (OJK). Simultaneously, OJK Regulation No. 27 of 2024 (POJK 27/2024) took effect, reclassifying cryptocurrency from a commodity to a digital financial asset. This shift imposed substantially stricter requirements: IDR 100 billion minimum paid-up capital for exchanges, expanded AML/CFT standards aligned with FATF guidelines, mandatory consumer protection obligations, and a formal OJK licensing requirement. Existing businesses were given until July 10, 2025 to achieve full compliance - that deadline has now passed, and Indonesia is in an active enforcement phase.
Which cryptocurrencies are legally approved for trading in Indonesia?
Only cryptocurrencies on the official approved whitelist maintained by the DFA Exchange (PT Bursa Komoditi Nusantara / CFX) can be legally traded on Indonesian licensed exchanges. As of April 2026, the list contains 1,444 approved assets - including Bitcoin, Ethereum, BNB, Solana, XRP, Cardano, Polkadot, USDT, and hundreds of additional altcoins. The list is reviewed at minimum quarterly by the DFA Exchange, with OJK holding authority to prohibit specific assets. Always verify the current list directly on OJK's official platform before trading, as assets can be added or removed.
What are the capital requirements for crypto businesses operating in Indonesia?
Under POJK 27/2024, Crypto Asset Traders must maintain a minimum paid-up capital of IDR 100 billion and a minimum ongoing equity of IDR 50 billion. These are the baseline requirements - OJK retains discretionary authority to demand additional capital from operators it classifies as systemically significant based on market dominance, transaction volume, or customer base. All operators must also obtain a formal OJK license, maintain server infrastructure physically inside Indonesia, and retain transaction records for at least ten consecutive years. These thresholds effectively filter out undercapitalized operators and represent a meaningful barrier to market entry.
Is crypto mining legal in Indonesia?
Crypto mining exists in a genuine legal gray area in Indonesia. No regulation explicitly permits or prohibits mining as an activity - POJK 27/2024 addresses licensed trading operators, not mining operations. The activity itself has no dedicated regulatory framework, leaving its operational legality unclear. What is unambiguously clear: income from mining is taxable, classified as business revenue by the Directorate General of Taxes (DJP). Mining at commercial scale may also trigger business registration, AML, and electricity regulation considerations. Given the regulatory uncertainty, consulting a qualified Indonesian legal professional before establishing any mining operation is the only defensible approach.
What is the future of crypto regulation in Indonesia?
Indonesia's regulatory direction is toward expansion, not restriction. Full-year 2024 crypto transaction volume reached IDR 650.61 trillion - nearly four times the 2023 figure - giving the government strong incentive to formalize rather than limit the market. Key developments to watch in 2026: Bank Indonesia's ongoing evaluation of stablecoin payment recognition; OJK's active post-compliance enforcement phase; digital gold regulation as a new formalizing asset class; expected OJK guidance on DeFi and NFTs; and a new regulation POJK 23/2025 amending the original POJK 27/2024 framework. Indonesia is becoming a more tightly regulated but increasingly credible crypto jurisdiction.
