An archipelago where the central bank decides everything
Indonesian retail payments are the rails, standards, and licenses that move money from a payer to a payee inside Indonesia. Bank Indonesia, the country’s central bank, plays four roles at once. It operates the interbank rails, sets merchant fees, imposes technical standards, and issues operating licenses. Indonesia is Southeast Asia’s largest market by population, and in less than a decade its retail payments have been rebuilt around this single authority. In markets where acceptance pricing is negotiable, planning a market entry starts with choosing an acquirer. In Indonesia, it starts with reading the central bank’s regulations, which set acceptance pricing, routing, and message formats in advance.
The country is an archipelago of 17,000 islands, and much of the population still has limited access to banking. Those two facts explain how the market actually works: no single payment channel has been able to take over. Payments are split across three channels that coexist without replacing one another: the interoperable QRIS QR code, bank transfers (usually through a virtual account), and e-money wallets tied to the super-apps. A fourth channel, cash on delivery, survives on the fringes of e-commerce. It is shrinking fast but has not disappeared.
| System | Type | Operator | Since |
|---|---|---|---|
| BI-RTGS | Real-time gross settlement of wholesale payments above IDR 1B | Bank Indonesia | – |
| SKNBI (Sistem Kliring Nasional Bank Indonesia) | Bulk clearing in cycles, below the RTGS threshold | Bank Indonesia | 2005 |
| BI-FAST | 24/7 retail instant payments at a capped price | Bank Indonesia | 2021 |
| QRIS | Single, interoperable QR standard, mandatory for all issuers | Bank Indonesia with ASPI | 2019 |
| GPN (Gerbang Pembayaran Nasional) | Mandatory domestic routing of card transactions | Bank Indonesia, through four licensed switches | 2017 |
| SNAP (Standar Nasional Open API Pembayaran) | Mandatory national payment API standard | Bank Indonesia; specifications maintained by ASPI | 2021 |
| Digital Rupiah (Proyek Garuda) | Central bank digital currency, wholesale track first | Bank Indonesia | 2022 (pilot) |
The Blueprint Sistem Pembayaran Indonesia 2030 sets the five-year direction for Indonesia’s payment system. Governor Perry Warjiyo launched it on August 1, 2024, at the Festival Ekonomi Keuangan Digital Indonesia. It announces five workstreams: modernizing retail, wholesale, and data infrastructure; consolidating the payments industry; innovation and digital acceleration; expanding international cooperation; and developing the digital rupiah. Implementation runs from 2025 to 2030. The blueprint lays out the policy directions Bank Indonesia intends to turn into regulation over that period, which makes it the main source for anticipating upcoming requirements.
QRIS: interoperability by mandate
QRIS (Quick Response Code Indonesian Standard) is the national QR payment standard, designed by Bank Indonesia with the Asosiasi Sistem Pembayaran Indonesia (ASPI), the national payment system association. It imposes a single format that every licensed issuer must accept and every acquirer must generate. Before it went live in 2019, an Indonesian merchant that wanted to accept wallets had to put four stickers on the counter: one each for GoPay, OVO, DANA, and ShopeePay. Each code worked only with its own app. The fragmentation was solved by a regulatory mandate, not by a dominant standard emerging from competition among issuers. Since 2019, a single code displayed at the till can be read by every licensed app.
Indonesia’s experience is the international benchmark for standardizing QR payments by regulation. The ecosystem includes 96 banks, 60 nonbank institutions, and 4 switching operators (Bank Indonesia, August 2026). The merchant base is overwhelmingly made up of very small businesses: 93.16% of merchants enrolled in the first half of 2025 were micro, small, and medium-sized enterprises (Bank Indonesia, press release of August 4, 2025). That mix explains what acceptance looks like on the ground. Very small businesses use a printed code rather than a terminal, which limits the reconciliation data available.
QRIS supports two presentment modes, defined by which party displays the code. In MPM (Merchant Presented Mode), the merchant displays the code and the customer scans it with their app. CPM (Customer Presented Mode) reverses the roles: the customer displays their code and the merchant’s terminal reads it. MPM dominates the installed base by far, because it needs no hardware: a printed sticker is enough to start accepting payments. The displayed code is usually static, meaning it is printed once and never changes. It then encodes neither an amount nor an order reference.
Cross-border links now cover six countries: Thailand, Malaysia, Singapore, Japan, South Korea, and China. Bank Indonesia says it is targeting India, Hong Kong, and Timor-Leste in 2026. The volume is tiny next to domestic traffic: cumulative cross-border QRIS payments total about IDR 2,280 billion, against IDR 600,690 billion in Indonesia in the first half of 2026 alone. These links stem from agreements between central banks. They mainly serve regional tourism, making in-person payments easier for visitors. Their contribution to a merchant’s volume remains marginal, and a business plan that relied on them would overstate expected volumes by a factor of about 100. FX is the unresolved issue in these agreements. The rate applied to travelers and the required level of transparency vary from one bilateral link to the next, with no common rule among the participating central banks.
BI-FAST and bank transfers: the rail the central bank priced
BI-FAST is Bank Indonesia’s retail instant payment system, live since December 21, 2021. Technically, it works as a push credit transfer that executes instantly and runs around the clock. What sets it apart is price. The central bank capped it by decision instead of leaving it to each bank’s fee schedule. Banks can charge customers at most IDR 2,500 per transaction, down from IDR 6,500 for the previous interbank transfer. The central bank, for its part, charges participants IDR 19 per transaction. The per-transaction limit is IDR 250 million.
On December 21, 2024, Bank Indonesia added three services to the rail, each with its own customer price cap. Bulk transfer requires at least 20 transactions per instruction and is capped at IDR 2,100. Request for payment and direct debit are both capped at IDR 2,500. Nine participants have launched the service. On a push payment rail, the payment order always comes from the payer, which rules out any debit triggered on a due date. The direct debit service removes that limitation and enables creditor-initiated recurring payments.
| Rail | Operating hours | Per-transaction limit | Customer price | Typical use |
|---|---|---|---|---|
| BI-RTGS | Business days | None (IDR 1B minimum) | Bank fee schedule | Interbank, financial markets, high-value payments |
| SKNBI | Daily cycles | Below the RTGS threshold | Bank fee schedule | Bulk clearing, losing ground to BI-FAST |
| BI-FAST | 24/7, continuous | IDR 250M | ≤ IDR 2,500 (regulatory cap) | Retail transfers, merchant payments, payouts |
| BI-FAST, bulk transfer | 24/7 | IDR 250M per line | ≤ IDR 2,100 | Payroll, bulk refunds, ≥ 20 transactions per batch |
| BI-FAST, direct debit | 24/7 | IDR 250M | ≤ IDR 2,500 | Subscriptions and recurring bills |
A virtual account is a unique bank account reference that the merchant’s bank generates for a specific order. In Indonesian e-commerce, bank payments almost always take this form rather than an open-ended transfer. The buyer pays to the reference they were given, from their banking app or at an ATM. Reconciliation becomes automatic and exact, because the reference identifies the order. The mechanism solves the problem a static QR code leaves open: matching the payment received to the order placed. Every local gateway offers virtual accounts: Xendit, Midtrans, DOKU, Faspay.
GPN: mandatory domestic routing
The Gerbang Pembayaran Nasional (National Payment Gateway) is Indonesia’s national routing framework for card transactions. Established by PBI No. 19/8/PBI/2017 and PADG No. 19/10/PADG/2017, it launched on December 4, 2017. It requires domestic card transactions to be routed and processed in Indonesia by one of four licensed switches: Artajasa, Rintis, Alto, and Jalin. A transaction between an Indonesian card and an Indonesian merchant therefore never leaves the country. The goal is national control over payment flows and the messages that carry them, ahead of any technical consideration. International overviews of the Indonesian market often leave this requirement out.
| Criterion | GPN debit card | International network card |
|---|---|---|
| Acceptance | Indonesia only | Worldwide acceptance, including cross-border online |
| Routing | Must go through a licensed domestic switch | Scheme network, subject to the GPN requirement for domestic transactions |
| Debit MDR | Capped at 0.15% on-us and 1% off-us, 0% on payments to the government (PADG No. 19/10/PADG/2017) | Network and acquirer pricing, not capped by Bank Indonesia |
| Settlement | In rupiah, in Indonesia | Per the network’s own flow |
| Value for the merchant | Lowest acceptance cost in the market | Covers foreign cardholders and cross-border commerce |
The Kartu Kredit Indonesia (KKI) is a domestic credit card built on the GPN rails. Bank Indonesia launched it in 2022 with the state-owned banks grouped in Himbara, extending to credit the principle already applied to debit. It initially targeted central and local government spending, with the explicit goal of moving public procurement off the international networks. An extension to the private sector has been announced. The system is almost entirely absent from English-language overviews of the market.
GoPay, OVO, DANA: the wallets and their super-apps
An Indonesian e-money wallet is a prepaid rupiah account held with an issuer licensed by Bank Indonesia. The leading wallets grew up inside service apps rather than as standalone payment products. Gojek moves people and delivers, Shopee sells, Grab does both, and payments came afterward, at the end of the chain. The wallet was born of the need to pay for the ride or the order, then spread to in-store commerce. That origin explains two lasting traits. The first is a usage frequency no bank rail can match. The second is a dependence on the host app that the product description never mentions.
Volume is concentrating, and the financial reports of the groups behind these wallets show how much. GoTo reports more than 500 million transactions a month for GoPay in September 2025, up 54% year over year, with 24 million monthly active users (+29%). At group level, gross transaction value rose from IDR 538.2 trillion in 2024 to IDR 685.6 trillion in 2025, up 27%, with 66 million annual transacting users (GoTo, 2025 results). That second aggregate goes beyond payments, since it also covers transport and commerce. Any comparison with another wallet should therefore stick to the figures published for GoPay itself.
Short-term credit has been grafted onto these apps. Kredivo, part of the Kredivo group (parent company FinAccel, founded in 2015), makes lending decisions in real time and is distributed through the major marketplaces. Its sister company KrediFazz has held an OJK peer-to-peer lending license since October 2021, and the group controls Krom Bank Indonesia. Akulaku, operated by PT Akulaku Silvrr Indonesia, claims 33 million customers and more than 90,000 listed sellers (Akulaku, official website, 2026). In Indonesia, installment payments count as consumer credit, regulated by the OJK, not as payment services regulated by Bank Indonesia. That classification determines which license is required and which authority supervises it.
Bank Indonesia licenses: PJP, PIP, and ownership thresholds
A single regulation defines the licensing regime for payment activities in Indonesia. PBI No. 22/23/PBI/2020, in force since July 1, 2021, overhauled all payment licenses and distinguishes two families. A PJP (Penyedia Jasa Pembayaran, payment service provider) serves end users: issuing instruments, acquiring, payment initiation, and funds transfer. A PIP (Penyelenggara Infrastruktur Sistem Pembayaran, payment infrastructure operator) runs the infrastructure itself. Switches fall under this regime. The classification determines the required level of Indonesian ownership, which makes it the first potential deal-breaker for a foreign applicant.
| Regime | Activities covered | Minimum Indonesian ownership | Who holds it |
|---|---|---|---|
| PJP Category 1 | Fund management, account information, initiation and acquiring, funds transfer | 15% of capital and 51% of voting rights | Full-scope wallets and acquirers (e.g., DANA) |
| PJP Category 2 | Account information, payment initiation, and acquiring | 15% of capital and 51% of voting rights | Gateways and aggregators |
| PJP Category 3 | Funds transfer and other services specified by Bank Indonesia | 15% of capital and 51% of voting rights | Transfers, specialized services |
| PIP | Operating payment system infrastructure | 80% of capital and 80% of voting rights | Licensed switches: Artajasa, Rintis, Alto, Jalin |
Financial supervision in Indonesia is split between two authorities, depending on the activity. Bank Indonesia licenses and oversees payment systems, e-money, and infrastructure. The Otoritas Jasa Keuangan (OJK) licenses and oversees banks, financing, consumer credit, and peer-to-peer lending. A single group therefore often holds two licenses in two separate entities: GoTo has the wallet on one side and its financing companies on the other. Each activity needs a license from its own authority, so a structure that stacks payments and credit in a single entity will not be licensed.
SNAP (Standar Nasional Open API Pembayaran) is the mandatory national API standard for payment services. Introduced by Governor’s Decision No. 23/10/KEP.GBI/2021, it sets the message format, security requirements, and governance of interconnection agreements. ASPI runs the developer portal and maintains the specifications. SNAP makes QRIS, BI-FAST, and wallets technically uniform. The specifications are binding on providers, whose documentation is an implementation of them. An integration built from a provider’s documentation alone ends up following that provider’s quirks instead of the standard, and has to be rewritten.
What it costs to accept payments, and who sets the price
The merchant discount rate (MDR) is the share of the payment amount that goes to the acceptance chain. On QRIS, BI-FAST, and GPN debit cards, merchants don’t negotiate the price with an acquirer, because the central bank publishes the schedule or the cap. The QRIS MDR depends on the merchant category assigned at enrollment. A misclassification is corrected going forward, rarely retroactively. Merchants should therefore check their assigned category before the first settlement.
| Merchant category | MDR | Note |
|---|---|---|
| Micro business (usaha mikro, UMI), transaction ≤ IDR 500,000 | 0 % | Exemption meant to push micro-merchants toward digital payments |
| Micro business (UMI), transaction > IDR 500,000 | 0,3 % | Lowest rate on the standard schedule |
| Small, medium, and large businesses (UKE, UME, UBE) | 0,7 % | The default case for formal retail |
| Education | 0,6 % | Dedicated category |
| Gas stations (SPBU) | 0,4 % | Dedicated category |
| Public services, G2P social assistance, taxes and passports, nonprofit donations | 0 % | Explicit policy of keeping the public channel free |
- BI-FAST: a regulatory cap of IDR 2,500 per transfer charged to the customer, and IDR 2,100 for bulk transfers. Bank Indonesia charges participants IDR 19 per transaction, IDR 16 for bulk. Bank margins on this rail are capped by design.
- GPN debit card: MDR capped at 0.15% on-us and 1% off-us, and 0% on payments to the government (PADG No. 19/10/PADG/2017). The cheapest acceptance channel in the market, but domestic only.
- International network cards: network and acquirer pricing, not capped by the central bank. They are still needed to accept foreign cardholders and cross-border payments.
- Virtual account: charged per transaction by the bank or gateway, usually as a flat fee. Weigh the exact reconciliation it provides against the manual reconciliation cost it eliminates, not just against the posted rate.
- Cash on delivery: the real cost is not the carrier’s commission but the refusal rate at the door, shipping paid both ways, and the delay before the cash is paid out.
Foreign merchants almost always connect through a local gateway rather than an international acquirer. Xendit, Midtrans, DOKU, and Faspay are the market leaders; they aggregate QRIS, virtual accounts from the major banks, wallets, cards, and often the convenience store network. On the bank side, acquiring and virtual accounts are concentrated at Bank Mandiri, BCA, BRI, and BNI. Each gateway can only generate virtual accounts for the banks it is connected to. Its coverage of issuing banks therefore determines the share of buyers who can pay through this channel, and that selection criterion comes before price.
Cash on delivery and convenience store payments
Cash on delivery (COD) means paying for an order in cash when it is handed over. The carrier collects the money. COD persists in Indonesia even as cash use declines rapidly. Cash accounted for 36% of point-of-sale payments in 2025, down from 77% in 2019 (Worldpay, Global Payments Report 2026). Online, COD remains the fallback for some buyers. That choice reflects limited access to banking, limited trust in sellers, and the lack of any dispute mechanism on push transfer rails.
- The return rate is the real cost. An order refused at the door goes back to stock, with round-trip shipping paid and no money collected. Compare COD with online payment by including refusal rates and return costs, not on commission alone.
- The carrier becomes the collector. It collects the cash, consolidates it, and pays it out to the merchant on its own schedule. The merchant therefore carries counterparty risk on a logistics provider that is rarely regulated as a payment provider, and the payout delay adds to its working capital needs.
- Reconciliation is inherently manual. Carrier payouts arrive aggregated, rarely itemized by order. Getting a detailed payout file by order number is a logistics negotiation, not a payments negotiation.
- Convenience stores are the best available alternative. Alfamart and Indomaret cover the country so thoroughly that they counted 44,366 stores in early 2026. Unbanked customers pay for their orders there in cash against a reference, and nobody has to carry cash to the customer’s door.
- The virtual account does what cash on delivery never will. It reconciles automatically, collects payment before shipping, and eliminates the risk of refusal at the door. It is the most valuable conversion for an Indonesian online merchant.
What breaks in production
The operational problems merchants run into in Indonesia stem from assumptions formed in another market and carried over without checking. Payment technology itself is rarely the cause. Six such assumptions come up again and again.
- Assuming dynamic QR codes. Most merchant codes are static. Without an encoded reference, order-level reconciliation is impossible, and the gap surfaces at the first month-end close.
- Treating wallets as four separate in-store integrations. Since QRIS, they all pay the same code. The integration is with the QRIS acquirer, not with each brand.
- Ignoring the QRIS per-transaction cap. PADG No. 3 of 2025 sets it at IDR 10,000,000 per transaction, and issuers can impose lower cumulative limits. A high average order value requires a fallback channel: virtual account or card.
- Expecting a chargeback on BI-FAST. A push transfer is final. Disputes, guarantees, and refunds have to be built into the merchant’s app, or they don’t exist.
- Routing domestic cards outside the country. The GPN requirement is a condition of the acquirer’s license, not a pricing preference.
- Structuring an entity without looking at voting rights. PBI No. 22/23/PBI/2020 requires 51% Indonesian voting rights for a payment provider and 80% for an infrastructure provider. A structure built on capital alone will not be licensed.
LICENSE AND STRUCTURE
[ ] target regime: PJP category 1, 2, 3 or PIP (PBI 22/23/PBI/2020)
[ ] Indonesian ownership: 15% capital AND 51% voting rights (PJP)
80% / 80% (PIP)
[ ] credit activity ring-fenced in an OJK-licensed entity, not in the PJP
TECHNICAL
[ ] SNAP specifications read BEFORE the provider's documentation
[ ] dynamic QR required by contract and verified in acceptance testing
[ ] IDR 10,000,000 cap per QRIS transaction handled in the checkout flow
[ ] fallback channel above the cap: virtual account or card
ACCEPTING PAYMENTS
[ ] merchant category (UMI / UKE / UME / UBE) verified at enrollment
[ ] QRIS MDR applied matches the Bank Indonesia schedule
[ ] no QRIS surcharge charged to customers, including via the provider
[ ] GPN routing through a licensed switch: Artajasa, Rintis, Alto, or Jalin
[ ] issuing bank coverage for virtual accounts verified
OPERATIONS
[ ] gap between BI-FAST 24x7 and BI-RTGS business-day settlement modeled
[ ] refund procedure built (no chargeback on BI-FAST)
[ ] carrier payout file itemized by order number
[ ] cash on delivery -> QRIS / VA conversion rate tracked monthlyTwo projects Bank Indonesia is involved in reach beyond the current year. Bank Indonesia went from observer to full member of Nexus Global Payments in 2026. This multilateral model aims to replace bilateral links with a single connection between instant payment systems. The Digital Rupiah (Proyek Garuda), launched in 2022, remains at the pilot stage. It is being built primarily around the wholesale track (interbank settlement and tokenized securities), and no retail rollout is under way. Neither project affects an integration delivered in 2026. Their effects will come later.