Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Indonesia ID

Domains (D1–D6)
1
Sources
10
Role actions
8
Jurisdiction profile
Largely CompliantTier BRisk: DecreasingMixed

Indonesia is a full FATF member (since Oct 2023), governed by AML Law No.8/2010, with PPATK as FIU and OJK/Bank Indonesia/CoFTRA as sectoral supervisors.

MoreCrypto oversight transferred from Bappebti/CoFTRA to OJK in Jan 2025 under the P2SK financial-sector law. Follow-up reports (May 2025, June 2026) show steady technical-compliance upgrades, though effectiveness gaps persist in asset recovery, DNFBP supervision, and beneficial-ownership verification.

Key deficiencies
  • Beneficial ownership registry compliance below 30% of registered corporations, with no independent verification of submitted data
  • DNFBP sectors (notaries, lawyers, real estate agents) not effectively implementing AML/CFT preventive measures
  • Low volume of money-laundering investigations/prosecutions for high-proceeds predicate crimes, especially forestry/environmental crime
  • Asset recovery and confiscation of criminal proceeds, particularly assets held abroad, remains weak
  • Sanctions for non-compliance in financial and DNFBP sectors are frequently limited to warnings rather than dissuasive penalties
Recent developments (18m)
  • FATF adopted Indonesia's Follow-Up Report in May 2025, re-rating Recommendation 7 (proliferation-financing TFS) from Partially Compliant to Largely Compliant
  • FATF adopted a further Follow-Up Report in June 2026 re-rating Recommendation 6 (terrorism-financing TFS) from Partially Compliant to Compliant; Indonesia now exits regular 4th-round follow-up reporting to Plenary
  • PPATK Decree 670 of 2025 (enacted 12 December 2025) tightened the 'reasonable basis' evidentiary standard for DTTOT terrorist-list nominations
  • Crypto regulatory authority formally transferred from Bappebti/CoFTRA to OJK in January 2025, with a mandatory regulatory sandbox for new licensees
  • PPATK-supported convictions (2024-2025) of individuals financing Syria-based terrorist networks via cryptocurrency, using on-chain evidence at trial
  • Major corruption/tin-mining (Timah) asset-recovery action: seized smelters worth an estimated $362-422 million handed to state miner PT Timah (October 2025)
  • OCCRP-reported takedown of a shell-company/QRIS/crypto money-laundering network tied to illegal online gambling, with ~$32 million in assets seized
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Indonesia's financial intelligence unit, PPATK, has published data showing that QRIS, the national quick-response payment standard, has become the dominant deposit rail for online gambling, with QRIS-based deposits reaching IDR 12.36 trillion, 56.04 percent of total online-gambling deposit value across 198.77 million transactions, in the first half of 2026. The same disclosure reports 2,815 accounts holding IDR 325.43 billion suspended in connection with World-Cup-period gambling activity. Rather than seeking to restrict QRIS as infrastructure, PPATK's public framing presses payment-service providers toward stronger merchant verification at onboarding, a regulatory choice that shifts compliance burden onto the private payment sector instead of constraining a payment rail that is, by PPATK's own characterisation, of substantial benefit to the broader economy.

Other Developments

Content-blocking continues in parallel. Indonesia's Ministry of Communication and Digital Affairs (Komdigi) has restated a cumulative content-blocking total of 4.1 million gambling-content items removed between 20 October 2024 and 28 September 2026, reported by the national news agency ANTARA, with a stated ministerial framing oriented toward curbing transnational gambling networks. This finding rests on T2 news-agency reporting of a ministerial statement, without independent primary-instrument confirmation obtained this cycle. The FATF standing-compliance record is unchanged. A 3rd Enhanced Follow-up Report and Technical Compliance Re-Rating for Indonesia was published by FATF in June 2026, predating the current cycle's window; Indonesia is not on the FATF increased-monitoring list, and no new plenary action has been recorded this cycle. Crypto-asset AML supervision continues to consolidate under OJK. Indonesia's Financial Services Authority, OJK, holds crypto-asset AML/CFT supervisory authority under the amended P2SK Law, effective 17 June 2026; this is carried forward as standing architecture, with no new Indonesia-specific crypto-AML enforcement action identified within this cycle's window.

Cross-Monitor Connections

The QRIS deposit-concentration finding connects directly to the World Payments Monitor's coverage of Bank Indonesia Regulation No. 10 of 2025, which restructures payment-service-provider licensing and, separately, prohibits payment-system providers from accepting or processing virtual currency as a source of payment funds; the gambling-deposit exploitation PPATK describes sits on the licensed, non-crypto side of that same payment-rail architecture. It also connects to the gambling-focused monitor's coverage of Komdigi's blocking programme: the two agencies are pursuing parallel but distinct theories, content suppression versus payment-rail accountability, against the same underlying online-gambling activity.

Outlook

Absent a major escalatory event, PPATK's preference for compliance-burden-shifting onto payment-service providers, rather than restricting QRIS at the infrastructure level, is likely to persist. The practical question going forward is whether merchant-verification tightening by payment-service providers measurably reduces the deposit share flowing through QRIS into gambling activity, or whether enforcement remains concentrated on reactive account suspension after the fact. Indonesia's FATF status is expected to remain stable barring a new plenary determination.

weekly_brief_draft · JID ID
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Continue reading

Indonesia's most material D5 signal this cycle is not crypto-native but payments-native: PPATK data shows QRIS, the national quick-response payment code standard, has become the dominant deposit channel for online gambling, with QRIS-based deposits reaching IDR 12.36 trillion, 56.04 percent of total online-gambling deposit value, across 198.77 million transactions, in the first half of 2026. This is a financial-innovation-enablement finding: a digital-payment rail built for licit retail commerce is being exploited at scale for an illicit purpose, and the regulator's own response, pressing payment-service providers to tighten merchant verification rather than restricting QRIS itself, reflects a deliberate choice to preserve the innovation's economic utility while shifting the compliance burden onto the private sector. PPATK separately disclosed that 2,815 accounts holding IDR 325.43 billion were suspended in connection with World-Cup-period gambling activity, indicating the enforcement response to date has been reactive and account-level rather than structural.

Parallel to this, Indonesia's digital-asset supervisory architecture continues to consolidate: OJK, the Financial Services Authority, holds full crypto-asset AML/CFT supervisory authority under the amended P2SK Law, effective 17 June 2026. This is carried forward as standing background architecture this cycle, with no new Indonesia-specific crypto-AML enforcement action identified within the current window. The juxtaposition is analytically significant under an architecture-over-incident frame: Indonesia now has two distinct financial-innovation risk surfaces under active regulatory attention, a licensed real-time payment rail being exploited for gambling-deposit flows, and a crypto-asset sector under a relatively young consolidated supervisory regime, and the two are not yet visibly connected by any single enforcement action or typology finding this cycle.

Outlook

The trajectory to watch is whether PPATK's merchant-verification push produces a measurable reduction in the QRIS gambling-deposit share, or whether enforcement remains confined to reactive account suspension. A compliance-burden-shifting posture that persists without infrastructure-level restriction leaves open the possibility that gambling operators migrate deposit methods within the licensed payment ecosystem rather than exiting it, a pattern that would be a textbook enablement-architecture finding rather than a resolved one.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

Not covered

AML/CTF Regime is not yet covered for this jurisdiction in this report.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
No dated horizon items this cycle. 3 items tracked without a confirmed date.
3 pending date · baseline fim-2026-07-05
Role action cards
MLRO

PPATK data confirms QRIS as the dominant online-gambling deposit channel, with account-suspension action already underway.

A licensed domestic payment rail is confirmed as the primary funding channel for a prohibited activity, with 2,815 accounts (IDR 325.43bn) already suspended; this is a direct SAR/typology-relevant signal for any institution processing QRIS merchant flows.

2 evidence refs
Compliance

PPATK is pressing payment-service providers toward stronger merchant verification rather than restricting QRIS itself.

Compliance functions at payment-service providers should expect regulatory expectations on merchant-onboarding controls to tighten even though no new rule has been issued; the burden-shifting is a supervisory posture, not yet a published requirement.

1 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Indonesia's FATF compliance status remains unchanged following a June 2026 Technical Compliance Re-Rating.

No new plenary action or listing change affects Indonesia's standing AML/CFT reputation this cycle; board-level reputational exposure from the jurisdiction's FATF status is unchanged.

1 evidence refs
CTO

OJK's consolidated crypto-asset AML/CFT supervisory authority under the amended P2SK Law continues as background architecture.

No new Indonesia-specific crypto-AML enforcement action was identified this cycle, but the supervisory consolidation effective 17 June 2026 remains the operative architecture for any crypto-asset infrastructure serving Indonesian users.

Risk

A single licensed payment rail now carries the majority of a large illicit-activity deposit flow, concentrating exposure.

The 56.04 percent QRIS deposit-share finding represents a concentration risk: a large share of gambling-related financial flow runs through one payment standard, meaning any future restriction or enforcement escalation on QRIS itself would have outsized market impact.

2 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

PPATK's figures rest on a single self-reported FIU disclosure without independent corroboration this cycle.

Audit should note that the QRIS deposit-share and account-suspension figures, while from a Tier-1 primary regulator, have not been independently cross-validated against published transaction-data tables within this cycle's evidence base.

1 evidence refs
Decision lens
MLRO

PPATK data confirms QRIS as the dominant online-gambling deposit channel, with account-suspension action already underway.

Compliance

PPATK is pressing payment-service providers toward stronger merchant verification rather than restricting QRIS itself.

Legal

No material change this cycle.

Board

Indonesia's FATF compliance status remains unchanged following a June 2026 Technical Compliance Re-Rating.

CTO

OJK's consolidated crypto-asset AML/CFT supervisory authority under the amended P2SK Law continues as background architecture.

Risk

A single licensed payment rail now carries the majority of a large illicit-activity deposit flow, concentrating exposure.

Operations

No material change this cycle.

Audit

PPATK's figures rest on a single self-reported FIU disclosure without independent corroboration this cycle.

Shared evidence: 2 refs
Scenario sketches

Illustrative: EU AML Package / AMLA transition reshaping cross-border supervisory and evasion dynamics

Illustratively, as the AMLA Regulation (Reg (EU) 2024/1620) moves EU supervision of cross-border obliged entities from a purely national model toward a hybrid direct/indirect AMLA-supervised regime, alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-Member-State 6AMLD transposition, evasion actors accustomed to exploiting divergent national supervisory intensity within the EU could face a narrower seam to route through, while non-EEA enabler jurisdictions outside this perimeter could see relatively increased attractiveness as a layering point. This is architecture-over-incident illustration of a structural transition, not an observed development in any specific jurisdiction this cycle.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion ArchitecturestableNo Indonesia-specific Russian sanctions-evasion signal this cycle.
T2 · EU AML Package / AMLAstableNot applicable to Indonesia as a non-EEA jurisdiction.
T3 · FATF Grey ListstableIndonesia not on increased-monitoring list; 3rd Enhanced Follow-up Report and Technical Compliance Re-Rating published June 2026, predating this cycle.
T4 · Beneficial-Ownership Register StatusstableNo material Indonesia-specific development this cycle.
T5 · Crypto / VASP Regulatory FrameworkwatchOJK's absorption of full crypto-asset AML/CFT supervisory authority under the amended P2SK Law (effective 17 June 2026) continues to bed in; no new Indonesia-specific crypto-AML enforcement action identified within this cycle's window.
T6 · Sanctions Regime DivergencestableNo Indonesia-specific sanctions-divergence signal this cycle.
Registers

Enforcement actions

  • Six tin smelters and associated raw minerals seized during a large-scale corruption probe into illegal tin mining were formally handed to state miner PT Timah, consolidating an asset-recovery outcome from the wider Timah corruption case. 6 Oct 2025
  • Following joint PPATK-police financial intelligence and on-chain tracing, Indonesian authorities identified and secured convictions of three individuals for terrorism financing conducted through cryptocurrency transfers to Syria-based fundraising campaigns. 1 Jun 2025
  • FATF adopted a follow-up report re-rating Indonesia's Recommendation 6 (terrorism-financing targeted financial sanctions) from Partially Compliant to Compliant, reflecting PPATK Decree 670 of 2025's tightened DTTOT listing standard. 19 Jun 2026
  • Police arrested two suspects for laundering illegal-gambling proceeds via QRIS and cryptocurrency using a shell-company network and thousands of bank accounts, active in gambling since 2007 and laundering since 2019. 15 Sep 2025
  • FATF adopted a follow-up report re-rating Indonesia's Recommendation 7 (proliferation-financing TFS) from Partially Compliant to Largely Compliant, recognising amendments to the PF Joint Regulation extending prohibitions on funding designated WMD-list persons. 28 May 2025

Sanctions changes

  • PPATK Decree 670 of 2025, enacted 12 December 2025, introduced an explicit requirement for the DTTOT Task Force and National Police to apply a 'reasonable basis' evidentiary standard when proposing domestic terrorist-list (DTTOT) designations, replacing an implicit practice previously flagged as a technical deficiency by FATF's 2023 MER. 12 Dec 2025
  • The European Commission's December 2025 update to its AML high-risk third-country list (Delegated Regulations (EU) 2026/46 and (EU) 2026/83) added Bolivia and the British Virgin Islands and delisted six African jurisdictions, while Indonesia was neither added nor previously listed, confirming continued non-listed status under the EU regime. 4 Dec 2025
  • Indonesia's PF Joint Regulation framework, as reaffirmed in FATF's May 2025 follow-up review, continues to require designation of all UNSCR 2231 (Iran) and DPRK-related WMD-list individuals/entities to PPATK's national WMD list, with electronic communication of listing/freezing/delisting actions to supervised sectors. 28 May 2025

Regulatory horizon (register)

  • OJK completion of crypto licensing regime transition from Bappebti
  • Indonesia's next FATF follow-up report or 5th-round mutual evaluation
  • Bank Indonesia digital rupiah CBDC development continues

Active schemes

  • [HIGH] Crypto-enabled fundraising to Syria-based extremist networks
  • [HIGH] Illegal gambling proceeds laundered via QRIS and crypto
  • [HIGH] Extractive-industry corruption laundering (tin mining, forestry)
  • Beneficial-ownership under-reporting despite central registry
  • DNFBP gatekeeper under-implementation (notaries, lawyers, real estate)
Sources
  1. FATF (Asia/Pacific Group on Money Laundering assessment)
  2. FATF
  3. FATF
  4. FATF
  5. European Commission (DG FISMA)
  6. UNODC Regional Office for Southeast Asia and the Pacific
  7. TRM Labs
  8. OCCRP
  9. Bloomberg
  10. Chainalysis
Coverage gaps
Despite Indonesia's central beneficial-ownership registry (t…
Despite Indonesia's central beneficial-ownership registry (the only one of its kind in Southeast Asia), fewer than 30% of registered corporations have complied with mandatory BO reporting, and submitted data is not independently verified by the registry authority.
Money-laundering investigations tied to environmental and fo…
Money-laundering investigations tied to environmental and forestry crime remain low relative to the substantial proceeds these crimes generate, despite Indonesia's Ministry of Environment and Forestry recently gaining mandate to investigate related money laundering.
DNFBP supervisors (notaries, lawyers, real estate agents, de…
DNFBP supervisors (notaries, lawyers, real estate agents, dealers in precious metals/stones) have less-developed AML/CFT supervisory systems than OJK/Bank Indonesia, and remedial action for breaches is overwhelmingly limited to warnings rather than licence-level sanctions.
This baseline's evidentiary base for Indonesia relies heavil…
This baseline's evidentiary base for Indonesia relies heavily on FATF, UNODC and international investigative/vendor reporting in English; direct Bahasa Indonesia-language primary publications from PPATK, OJK and Bank Indonesia (e.g. PPATK annual reports, OJK circular letters) were not independently retrieved in this research pass.

Evidence

Confidence-tiered claims

QRIS-based deposits reached IDR 12.36 trillion (56.04% of total online-gambling deposit value, 198.77 million transactions) in H1 2026 SRC-financial_integrity-ID-001
Probable · 1 source
2,815 accounts holding IDR 325.43 billion suspended linked to World-Cup-period gambling activity SRC-financial_integrity-ID-001
Probable · 1 source
3rd Enhanced Follow-up Report and Technical Compliance Re-Rating published by FATF, June 2026 SRC-financial_integrity-ID-002
Probable · 1 source
4.1 million gambling-content items blocked between 20 October 2024 and 28 September 2026 SRC-financial_integrity-ID-003
Probable · 1 source
OJK holds full crypto-asset AML/CFT supervisory authority under the amended P2SK Law, effective 17 June 2026
Uncertain