Indonesia: lending & credit regulation

Regulated

OJK regulates fintech lending (LPBBTI) and BNPL; strict capital and reporting rules apply

Lead regulator
Otoritas Jasa Keuangan (OJK)
Also involved
Bank Indonesia (payment systems/liquidity) · OJK (supervision) · PPATK (AML/CFT)
Core law
Financial Sector Development and Strengthening Law (2020) & OJK Regulations
Entry capital
IDR 12 billion (LPBBTI)
Approval timeline
6-12 months for LPBBTI license
Customer assets
Funds must be held in segregated accounts at licensed banks
Data protection
Personal Data Protection Law (UU PDP) · OJK reporting
Sandbox
Yes - OJK Regulatory Sandbox

Indonesia strictly regulates digital lending under the OJK. The primary framework for fintech lending is OJK Regulation No. 40 of 2024 on Information Technology-Based Collective Financing Services (LPBBTI), requiring significant capital and data reporting. Buy Now Pay Later (BNPL) is also regulated by OJK Regs No. 32 of 2025 and No. 2 of 2026. Traditional microfinance and SME lending are supervised under separate OJK frameworks for Financing Institutions and Microfinance Institutions.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Consumer lendingLicenceFinancing Institution License[1][2]

Requires OJK license as Financing Institution or LPBBTI

IDR 12 billion (for LPBBTI)6-12 monthsOJK
SME / commercial lendingLicenceFinancing Institution License[3][1]

OJK Reg 19/2025 mandates facilitation; LPBBTI covers SME financing

IDR 12 billion (for LPBBTI)6-12 monthsOJK
MicrofinanceLicenceMicrofinance Institution License[4]

Regulated under OJK Reg 41/2024; local gov ownership allowed

Varies by scale (Small/Medium/Large)OJK
Buy-now-pay-laterLicenceBNPL Service License[5][2]

Strictly regulated for Financing Companies and Commercial Banks

IDR 12 billion (for LPBBTI)6-12 monthsOJK
P2P lending platformLicenceLPBBTI License[1][6]

P2P lending is now classified as LPBBTI under OJK Reg 40/2024

IDR 12 billion6-12 monthsOJK
Credit bureau / scoringUncertainverify with regulator

Scoring used internally; external bureaus regulated differently

Debt collectionUncertainverify with regulator

General business license required; specific debt collection rules unclear

New — what changed recently

  • 2026-01-01OJK Regulation No. 2 of 2026Comprehensive regulation of BNPL for financing and Sharia financing companies[2]
  • 2025-01-01OJK Regulation No. 32 of 2025Regulation of BNPL services by commercial banks and financing companies[5]
  • 2025-01-01OJK Regulation No. 19 of 2025Mandates banks and non-banks to facilitate MSME financing access[3]
  • 2024-01-01OJK Regulation No. 40 of 2024Establishes LPBBTI framework with IDR 12 billion minimum equity[1]

Market-entry checklist

  1. 1Secure OJK LPBBTI LicenseObtain license as Information Technology-Based Collective Financing Service Provider
  2. 2Meet IDR 12 Billion CapitalEnsure minimum paid-up capital of IDR 12 billion for fintech lending operations
  3. 3Implement Data ReportingConnect to OJK's fintech lending data center for periodic transaction reporting
  4. 4Establish Segregated AccountsOpen segregated customer fund accounts at licensed Indonesian banks
  5. 5Adopt Risk Management FrameworkImplement OJK-mandated risk management and consumer protection policies
This guide is compiled automatically from 6 primary-source documents published by Indonesia's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.