Buy crypto in Indonesia: the licensed route, the alternatives, and the risks

1. Pick one app from the PAKD list and match its company name and website address against OJK's list (2 to 3 minutes).
2. Install the app and register with your phone number or email (3 to 5 minutes).
3. Verify your e-KTP and selfie liveness. This is the slow part: a few minutes to roughly one business day.
4. Top up rupiah from your own account by virtual account or QRIS (1 to 5 minutes during bank hours).
5. Open the simple buy mode, pick a coin, enter an amount and confirm (about 1 minute). {{/steps}}

For an already verified user the whole sequence takes about five minutes. Minimums are small: Pintu sets IDR 11,000 per trade and Indodax LITE mode IDR 10,000, so you do not need a full Bitcoin. Minimum deposit is IDR 50,000 at Pintu and IDR 10,000 at Indodax, Reku, Pluang and Tokocrypto. A cost example: buying IDR 1,000,000 of Bitcoin via Pluang's Instant Order carries only the CFX exchange fee of about IDR 111 (0.0111 percent), while an IDR buy as a taker order at Tokocrypto costs 0.2222 percent, or IDR 2,222. The full walkthrough, with the risky hours, is in how to buy crypto in Indonesia.

Ten platforms in one table

The table shows ten platforms: nine licensed local ones and CEX.IO, an offshore platform that is not OJK-licensed and does not support rupiah. The order of the local platforms follows how much we could verify from official pages, not payment. Rows that say "not verified" are exactly that.

In short: Indodax has the most users (about 9.9 million, or 46.5 percent of the national total as of March 2026, per data the press quoted from OJK). Tokocrypto has the most transparent fee table. Pintu is the friendliest for beginners with free virtual-account deposits. Reku stands out on low fees, and Pluang suits you if you also want gold and stocks in one app. The full comparison, how we judge, and who suits what is in best crypto exchanges in Indonesia. Platform reviews: Indodax, Tokocrypto, Pintu, Reku, Pluang, Luno and Bybit Indonesia, all gathered in the reviews index.

How to check that an app really is licensed

OJK states that entities not on its whitelist are neither licensed nor supervised by OJK. So the check is mandatory, not a formality. It is simple:

• Open OJK's licensing page for digital financial assets and crypto assets and search for the company name (for example PT Pintu Kemana Saja for Pintu).
• Match the website and app address too. The whitelist covers official channels, so the same brand on another domain is not necessarily licensed.
• Tell PAKD (fully licensed) from CPAKD (candidates, only registered).
• Still unsure? Call OJK's contact line, 157.

One honest note: some platform homepages still carry old wording such as "registered and supervised by Bappebti". That does not automatically mean a problem, only that the text was not updated, but use OJK's list as the reference, not a company's homepage. OJK's often-quoted principle is "2L": check that it is Legal and check that it is Logical. A fixed-return promise or a doubled bonus is a red flag. OJK, together with the Satgas PASTI task force, reported stopping 228 illegal digital asset traders between January and May 2026.

Credit cards, PayPal, e-wallets and QRIS

This is the most common question. The licensed apps we read do not accept credit cards as a deposit method, and Pintu says so explicitly in its official FAQ. PayPal does not appear as a deposit method on the local platforms we checked. What is available are rupiah routes: bank transfer, virtual accounts, QRIS and e-wallets such as GoPay, OVO, DANA and ShopeePay. Fees differ. QRIS is listed at 0.7 percent at Indodax, Reku and Pluang, but 2 percent at Tokocrypto. On a IDR 1,000,000 top-up that is IDR 7,000 versus IDR 20,000. Virtual accounts are often free or cost a few thousand rupiah. The per-method fee table is in the guide to buying crypto with GoPay, OVO, DANA and QRIS.

And cards? Some offshore platforms accept Visa, Mastercard, Apple Pay or Google Pay. CEX.IO, for example, is registered with the UK Financial Conduct Authority as a cryptoasset business under the Money Laundering Regulations, and its US entity holds an NMLS number. But CEX.IO is not OJK-licensed, does not support rupiah (only USD, EUR and GBP), and its site puts card deposit fees at 0.49 to 4.99 percent plus a service charge. Your bank may also decline the payment. That is not "legal in Indonesia", only "available". We weigh it in the guide to credit cards and PayPal and in the CEX.IO review.

Cash, Bitcoin ATMs, OTC and P2P

If you want to know whether you can swap cash directly, the answer is hard and rarely what people hope. Here is the short version.

Bitcoin ATMs. We found no confirmed, operating public Bitcoin ATM in Indonesia. There is one unproven claim, from a July 2026 article that names no operator, of a single machine at Ratu Plaza, Jakarta. We could not verify it, so do not travel with cash on that claim alone. A third-party directory also lists one staffed counter in Bandung that we could not verify. The old machines in Jakarta and Bali have unknown status. Evidence, reasons and ways to check claims are on the Bitcoin ATM in Indonesia page.

Cash. Licensed platforms do not accept teller cash deposits; Pintu cites an OJK rule for that. The realistic way: deposit cash into your own bank account, then top up by virtual account. In Bali there are operators that swap USDT for rupiah cash, but those are operator claims, some admit they are unlicensed, and there are documented robberies and kidnappings. Read more in buy crypto with cash.

OTC. Local OTC desks are built for large tickets: minimums are reported from IDR 50 million (Reku) to IDR 500 million, with another source saying IDR 1 billion (Indodax), and about IDR 1.5 billion at Pintu (from a search summary, unconfirmed). Tokocrypto has also run an OTC desk since 6 November 2025 with a minimum of roughly US$10,000 equivalent. All require KYC. OTC has no dedicated rule yet and sits on OJK's roadmap, so we call it neither legal nor illegal. For small amounts it is irrelevant. Details in the crypto OTC guide.

P2P. Binance, Bybit and OKX run active rupiah P2P markets with bank and e-wallet payment. But these are platforms without an Indonesian licence, with no OJK consumer protection, and Binance's own P2P FAQ warns about bank accounts being frozen. We do not write that P2P is legal, and we do not say users automatically commit a crime either, because we found no clear official statement on that. Risks and safer habits are in the P2P crypto guide.

Selling, withdrawing rupiah and storing your coins

After buying, two questions come up almost every time: how do I cash out, and where do I keep it? To cash out, you sell in the app and withdraw rupiah to a bank account in your own name. From the official pages: withdrawal at Pintu is a flat IDR 4,500 and usually around 15 minutes outside bank downtime, while Indodax and Tokocrypto charge IDR 10,000. Remember the 0.21 percent tax withheld on a sale. Per-platform detail, how to turn USDT into rupiah and common mistakes are in the guide to selling crypto for rupiah.

For storage, licensed exchanges let you withdraw to an external wallet address for a network fee. A wallet itself is not a regulated platform and cannot buy rupiah without an on-ramp. We have not verified the availability of particular hardware or app wallets in Indonesia, so we explain the principles in best crypto wallets in Indonesia.

Region by region: what exists where

Indonesia's crypto infrastructure is heavily concentrated on Java. Every large platform has offices in Jakarta (Pintu at Trinity Tower on Jl. H.R. Rasuna Said and Upbit Indonesia at Menara Astra on Jl. Jenderal Sudirman, both checked on the official sites), and most OTC desks are there too. Outside Java and Bali we found no cash service or ATM at all, though that is not proof of absence. For a buyer anywhere, the route is the same: licensed app, bank account, QRIS. Only internet speed and local habits differ.

Region	Internet (APJII 2025)	What we found	Page
Java	84.69%	Big platform offices, OTC, old ATMs unconfirmed	Jakarta
Sumatra	77.12%	No cash service or ATM	Medan
Kalimantan	78.72%	No cash service or ATM	Other islands
Bali + Nusa Tenggara	76.86%	USDT cash swappers (operator claims), crime risk	Bali
Sulawesi	71.64%	No cash service or ATM	Makassar
Maluku + Papua	69.26%	No cash service or ATM	Other islands

On Java, Jakarta is the market centre, while Tangerang, Bekasi and Depok are commuter satellites where small tickets move by e-wallet and QRIS. Bandung has one staffed counter claimed by a directory (unverified and labelled "no KYC", so be careful). Surabaya is East Java's trading city, and Yogyakarta a student town with strong e-wallet habits. Beyond Java, Medan is the gateway to Sumatra, Makassar the gateway to eastern Indonesia, and Batam sits next to Singapore, so cross-border money and the duty to declare cash need understanding. The picture for every island is in crypto across Indonesian islands, and all cities are in the locations index.

Bali: micro-locations with their own stories

Bali is searched most and is the most trap-filled. The island received about 6.95 million direct foreign arrivals in 2025 according to BPS Bali, had 1,144,332 QRIS merchants as of July 2026 according to BI Bali, and 601 licensed money changers according to BI. Yet no public Bitcoin ATM is confirmed. We treat Bali as a whole as the island overview, then each area differently: Denpasar for residents and everyday local banking, Canggu for remote workers and Bitcoin House Bali (a Lightning "ATM" for education, opened 31 May 2024, with no evidence it dispenses rupiah), Seminyak for travellers and money-changer traps, Ubud for long stays and retreats, and Kuta for practical matters near the airport. Tourists who want to swap crypto for cash should read the risk section first, because what is documented is robbery and kidnapping of crypto holders and cash couriers, not arrests of tourists.

Which route fits you

If you are an Indonesian resident with a bank account and an e-KTP, pick a licensed app and do not waste time on other routes. For small amounts, QRIS and virtual accounts are enough. From IDR 50 million up, ask the OTC desk of your chosen platform. If you are a foreigner, expect passport plus a KITAS, KITAP or long-stay visa. We found that requirement only for Tokocrypto, via a search snippet, and we cannot confirm that a tourist on a short visa can open an account at any PAKD. If you need a card, understand that you are stepping outside OJK's perimeter. If someone messages you offering "guaranteed returns" or an "education community", stop and read crypto scams in Indonesia.

One more common misunderstanding. Big foreign platforms such as Binance, KuCoin, OKX, MEXC and Coinbase were named by OJK among platforms it stopped for operating without a licence (OJK's August 2026 statement as reported by the press). That is about the platforms. We found no rule that criminalises retail users, and no official statement that using them is lawful. We chose the words "unlicensed, no OJK protection", and we deliberately do not file them under "safe".

About this site and how we work

Crypto Indonesia is an independent guide written by the Crypto Indonesia editorial team. We rely on official sources where they open, label third-party data as third-party and flag facts we could not confirm. The scoring approach and the re-check cycle are explained on the methodology page, and about us says who we are. To go deeper, every guide is collected in the guides index. If you find a number that has changed, tell us through the contact page, because fee rules such as the CFX change on 1 October 2026 move fast.