Navigating Fintech Licensing: Regulatory Framework for Modern Payment Service Providers (PJP)

Every financial technology company looking to operate in Indonesia is confronted with a fundamental question from day one: what specific license is required, and to which authority should the application be submitted? While this question sounds straightforward, its answer dictates the trajectory of the business for years to come. Fintech licensing is far from a mere administrative formality; it constitutes the foundational bedrock that determines whether a digital payment business model can operate legally, achieve acceptance by banking partners, and command the trust of end-users.

The digital payment industry in Indonesia has experienced exponential growth over the past decade. E-wallets, payment gateways, payment aggregators, and digital remittance services have seamlessly integrated into the daily lives of the population. This rapid expansion has moved in tandem with the robust strengthening of the regulatory framework by Bank Indonesia (BI) and the Financial Services Authority (OJK), both of which hold distinct yet complementary roles in overseeing this dynamic sector.

Why Fintech Licensing is a Mandatory Gateway

credit payment ilustration by tima-miroshnichenko, source:pexels

No entity may conduct activity as a payment service provider in Indonesia without obtaining an official license from Bank Indonesia. This mandate is explicitly reinforced under Bank Indonesia Regulation No. 23/6/PBI/2021 concerning Payment Service Providers (PJP), which serves as the primary statutory reference for any player operating within the digital payment landscape, encompassing both banking and non-banking institutions.

This regulation was enacted to replace the legacy framework, which was historically fragmented into various detached licenses, such as electronic money, credit cards, payment gateways, and fund transfer operations. Previously, market operators had to navigate a complex web of overlapping rules simply to ascertain their legal standing. PBI 23/6/PBI/2021 unified these separate verticals into a single cohesive architecture designated as the Payment Service Provider (Penyedia Jasa Pembayaran, or PJP), categorized under four core operational activities: provision of source of funds information, payment initiation and/or acquiring services, administration of source of funds, and remittance services.

For business operators, this structural consolidation carries significant practical implications. Companies no longer apply for separate licenses on a per-product basis; instead, they apply for an omnibus license under a specific category that encapsulates the combination of activities aligned with their business model. Grasping the underlying structural logic of these categories from the outset saves substantial time and mitigates subsequent legal advisory costs.

The Three License Categories Shaping Business Scale

PBI 23/6/PBI/2021 classifies PJP licenses into three distinct categories, a division that directly correlates with the minimum paid-up capital requirements that prospective licensees must satisfy.

  • Category 1 License: Requires a minimum paid-up capital of IDR 15,000,000,000 (fifteen billion Rupiah). This tier is reserved for operators executing the broadest scope of activities, including the direct issuance of payment instruments to end-users (issuing).
  • Category 2 License: Mandates a minimum paid-up capital of IDR 5,000,000,000 (five billion Rupiah). This category encompasses a comprehensive range of activities but excludes the full instrument issuance capabilities reserved for Category 1.
  • Category 3 License: Maintains a lower financial threshold, requiring IDR 500,000,000 (five hundred million Rupiah) for prospective PJPs that do not provide systems to be utilized by other Category 3 PJPs, or IDR 1,000,000,000 (one billion Rupiah) for those providing such systems. This tier typically serves as the entry point for smaller-scale payment startups or niche enterprises focused on a singular, highly specialized activity segment.

This capital-based classification is far from an arbitrary administrative benchmark. Bank Indonesia utilizes these capital thresholds as a metric demonstrating a company’s financial resilience to absorb operational risks, including liquidity constraints and systemic failures that could adversely impact a vast user base. Consequently, the wider the operational scope a company undertakes, the greater the upfront financial accountability it must demonstrate.

The Application Roadmap: From Pre-Consultative Meeting to Effective License

The formal pathway toward securing an authorized PJP status does not begin with compiling application forms; rather, it commences with an initial consultative interface with Bank Indonesia, officially known as the pre-consultative meeting. This preliminary stage offers prospective PJPs an invaluable opportunity to verify that their intended license category perfectly mirrors their projected business model before formalized documentation is drafted.

Following this initial engagement, the applicant prepares a comprehensive dossier covering four primary pillars of evaluation: institutional structure, capital and financial status, risk management frameworks, and information technology systems capability. Bank Indonesia subsequently conducts an administrative review regarding the completeness of the documentation, followed by a meticulous substantive analysis of the business viability and technical readiness.

At a critical juncture in the process, Bank Indonesia carries out an on-site inspection to directly verify the operational readiness of the prospective PJP, supplementing the evaluations previously based solely on submitted documents. Upon satisfying all evaluation metrics, the license is granted, and the PJP is legally obligated to commence operations within a strictly defined timeframe from the date of issuance. Any delay in realizing operational activities post-issuance may trigger supervisory interventions and regulatory repercussions.

It is crucial to recognize that this application trajectory is not guaranteed to be unidirectional. Submissions can be rejected if the institutional, capital, or risk management aspects are deemed deficient. Applicants whose submissions are rejected face a mandatory waiting period before they can reapply for the same license, underscoring why meticulous document preparation from the outset is a key determinant of time efficiency.

Ongoing Compliance Obligations Post-Licensing

Securing a license represents the commencement, rather than the culmination, of regulatory compliance obligations. Authorized PJPs are strictly bound to uphold robust information security standards, submit periodic transaction activity reports to Bank Indonesia, and ensure seamless interconnection and interoperability with national payment infrastructures, such as QRIS and BI-FAST.

Furthermore, Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) frameworks represent an inseparable component of a PJP’s daily operations. Mechanisms for monitoring suspicious transactions, rigorous user identity verification (KYC), and statutory reporting to the relevant financial intelligence units must be deeply embedded within daily workflows, rather than existing merely as static policy documents on paper.

Non-compliance with these ongoing obligations entails tiered enforcement actions, ranging from written warnings for minor infractions and administrative fines for recurrent lapses, to the ultimate revocation of operational licenses for severe violations. For enterprises that have successfully built a substantial user base, a license revocation translates to immediate financial devastation and catastrophic reputational damage that cannot be easily remedied.

Jurisdictional Intersection with the Financial Services Authority (OJK)

In addition to Bank Indonesia, fintech innovators must carefully monitor the evolving regulatory footprint of the Financial Services Authority (OJK), particularly regarding business models that intersect with financial product aggregation. Under Law No. 4 of 2023 concerning the Development and Strengthening of the Financial Sector (UU P2SK), OJK possesses an expanded mandate to regulate and supervise financial sector technology innovations, including digital financial assets.

As a concrete regulatory implementation, OJK enacted OJK Regulation No. 4 of 2025 concerning Financial Service Aggregators. This regulation governs entities engaged in collecting, filtering, and comparing financial product and service information through electronic systems. OJK introduced this rule to ensure that aggregation services effectively assist consumers in comparing and selecting financial products tailored to their profiles and risk appetites, while concurrently guaranteeing that such activities do not introduce novel systemic risks to consumers or market participants.

For fintech operators whose business models span both jurisdictions, functioning as a PJP under Bank Indonesia while simultaneously acting as an aggregator under OJK, precise jurisdictional mapping during the initial structuring phase is vital. Misjudging the relevant regulatory authorities can lead to redundant licensing loops or abrupt rejections mid-way through development.

Managing Financial Risk Amid Rigorous Payment Regulations

Compliance with PJP regulations is directly intertwined with a company’s cash flow health, particularly for fintechs managing large transaction volumes and multi-tiered ecosystems of merchants and partners. When receivables from corporate partners or merchants begin to accumulate, the liquidity risks highlighted in PJP capital requirements can quickly evolve into operational crises rather than remaining abstract licensing issues.

We provide a specialized Professional Debt Management service specifically tailored for Finance Executives handling high-volume commercial accounts receivable. WNP Asia build debt recovery architectures based on strategic profiling, legal frameworks, nuanced negotiation structures, and rigorous asset recovery execution. By synthesizing legal, commercial, and financial governance perspectives, we empower your firm to maintain cash flow stability without fracturing strategic business relationships.

Whether your team requires strategic counsel to navigate the PJP licensing application or dedicated risk management support for your accounts receivable portfolio, our specialists are ready to assist. You may initiate a direct consultation via WhatsApp or explore our comprehensive scope of expertise on our dedicated Practice Areas platform.