Indonesia Forex Broker Payment Onboarding: Licence & Entity Checks

Start with the licence, not the label 'forex'

This checklist is for compliance and business-development teams preparing a payment-provider review. It is not an assessment of any named firm or permission to begin collecting funds. Regulation and supervision of financial derivatives on money-market and foreign-exchange underlyings (PUVA) moved from Bappebti (Badan Pengawas Perdagangan Berjangka Komoditi) to Bank Indonesia effective 10 January 2025, the deadline set by Indonesia's P2SK Law, under a joint Bank Indonesia / OJK / Bappebti announcement; PUVA derivative licences previously issued by Bappebti may remain valid during the operational transition, and reporting arrangements may continue under existing systems until Bank Indonesia introduces its own. For brokers outside the PUVA scope, Bappebti has historically licensed futures brokers (pialang berjangka) for commodity and derivatives trading. Confirm whether your product falls under Bank Indonesia's PUVA regime or a Bappebti-licensed activity, the current status of the licence, and the execution venue and clearing arrangement, with the regulator directly; do not rely on this page for that determination. A "forex" or "trading platform" label alone does not establish which licence, if any, applies to the actual product.

OJK's Satgas PASTI task force regularly halts illegal investment and trading offers and publishes warnings. Check the Bappebti register under Pelaku Pasar / Pialang Berjangka at bappebti.go.id, Bank Indonesia's own channels for PUVA-licensed entities, and OJK's channels directly, not a link supplied in a sales message; report suspicious offers through sipasti.ojk.go.id or the OJK hotline 157.

Build a six-part evidence pack

1. Identity: record the full legal name, registration number, contracting entity, product URL and the relationship between any brand, group company and the licensed entity.
2. Licence: for an Indonesian entity, find it on the Bappebti register or confirm its Bank Indonesia PUVA authorisation. For an offshore entity, find it on its home regulator's own register (for example a CySEC, FCA or ASIC-equivalent body) and separately establish the basis on which it may serve Indonesian clients. Record the licence number or authorisation, current status, exact permitted activities and the date you checked. Resolve a mismatched name with the regulator or a qualified adviser before proceeding.
3. Market: list the incorporation jurisdiction, licensing jurisdiction, customer locations and the actual IDR collection/payout countries separately. For a broker licensed outside Indonesia, record the basis on which it is authorised to serve Indonesian clients; a foreign licence alone does not establish that.
4. Flow: draw who pays whom, for what purpose and under whose contract. Separate client trading funds, company revenue and refunds. Identify the proposed collection-account holder and the final beneficiary of any payout.
5. Authenticity: compare the entity, official domain and contact details against the Bappebti register, the home regulator's register for an offshore entity, and check Satgas PASTI's published actions for the brand or related names.
6. Commercial scope: provide the current or forecast monthly IDR volume, transaction count, average deposit size, required methods and intended launch date. Ask PAYJN to confirm in writing the exact entity, activity and flow it can accept.

How deposits and withdrawals are reviewed

For a broker that passes PAYJN's licence and merchant review, Indonesia deposits (IDR top-ups to a trading account) use QRIS, virtual account bank transfer and supported e-wallets, and withdrawals (returning client funds) use bank transfer or supported e-wallet payouts — the full detail is on the Indonesia forex broker payments page. Each broker is reviewed individually, and the methods, limits and destinations enabled depend on that review. This coverage is for forex and derivatives brokers specifically; it is not for money changers, remittance firms or introducing-broker (IB) agents, which need a different review.

Two controls to confirm in the proposed flow: first, a deposit should only credit the client's tradable balance after PAYJN's callback or status query confirms the final paid state, so a pending or unconfirmed instruction does not unlock leveraged trading. Second, withdrawal requests should be matched against a verified beneficiary on file for that specific client, consistent with the client's own verified name where your compliance policy requires that; treat a changed beneficiary as a new one requiring your own review before the first payout.

A hypothetical mismatch to resolve before testing

Suppose a group presents an offshore forex brokerage licence, but cannot show the basis on which it is authorised to serve Indonesian clients, or the Indonesian entity named on the proposed contract does not match either the Bappebti register or a Bank Indonesia PUVA authorisation. This is an invented example. Keep the application under review: document the entity relationship, confirm the actual licence that covers the Indonesian activity, and do not relabel a trading deposit as a generic digital-service purchase to work around the question.

Similarly, if the proposed receiving account for deposits or the paying account for withdrawals belongs to a third party rather than the licensed entity, request a documented explanation and provider approval before any funds move.

What remains subject to confirmation?

PAYJN must separately confirm whether it can accept the business, entity and proposed IDR flow for each applicant. QRIS, virtual accounts and supported wallets are the public Indonesia method descriptions; this article does not confirm their availability, fees, limits or settlement terms for any individual broker.

A Bappebti or Bank Indonesia register match, or absence from a Satgas PASTI warning, does not guarantee solvency, stable transaction volume or onboarding approval. Recheck material changes before launch and seek qualified advice for unresolved regulatory questions.

Frequently asked questions

Does PAYJN work with brokers licensed outside Indonesia?

PAYJN reviews brokers licensed outside Indonesia case by case. A foreign licence alone does not authorise serving Indonesian residents, so raise the basis on which you serve Indonesian clients during review. See the forex broker payments page for the full FAQ on this.

Who regulates forex brokers in Indonesia now?

PUVA (money-market and foreign-exchange) derivatives supervision moved from Bappebti to Bank Indonesia effective 10 January 2025, with licences issued by Bappebti potentially remaining valid during the operational transition. Confirm the current regulator and licence status directly with Bank Indonesia or Bappebti before onboarding.

What should an initial enquiry contain?

Send your public company and product URLs, your role, your licence/authorisation details and exchange or regulator reference, target IDR volume and average deposit/withdrawal size, and launch timing. Submit the licence certificate and other sensitive documents only through an agreed secure channel, not a first enquiry.

Official references and next step

Official resources checked on 13 November 2026. This is an editorial preparation workflow, not a legal opinion or verification of an individual licensee.

• Bank Indonesia — transfer of PUVA derivatives supervision from Bappebti, 10 January 2025
• Bappebti — commodity futures trading regulator and broker register
• OJK — Satgas PASTI illegal-entity actions and reporting (sipasti.ojk.go.id, hotline 157)
• Indonesia forex broker payment page — methods, FAQ and enquiry
• General payment API evaluation checklist