Anti-Money Laundering Compliance for a PT PMA in Indonesia

Tax compliance and foreign exchange reporting are the two layers that foreign owners of a PT PMA learn first. The third operational layer is anti-money laundering compliance, and it is the layer that most often stops or delays an outbound transfer at the bank. This article sets out the AML compliance Indonesia framework following Indonesia’s full FATF membership in October 2023, the PPATK reporting regime, sanctions screening through OFAC and equivalent international authorities, beneficial ownership disclosure under PR 13/2018, and the practical reality of bank-level screening on a PT PMA’s offshore payments.

---

A foreign owner of a foreign investment limited liability company (Perseroan Terbatas Penanaman Modal Asing, or PT PMA) reaches the AML question once the first material outbound transfer is initiated. The transfer is fully documented for tax purposes (Income Tax Article 26 withholding remitted through Coretax, the bukti potong issued to the recipient), and the Bank Indonesia foreign exchange reporting (Lalu Lintas Devisa, or LLD) is filed automatically by the bank under Bank Indonesia Regulation No. 22/22/PBI/2020. The transfer is still delayed for two to five business days because the bank’s compliance team is performing AML screening on the recipient, the underlying transaction, and the company’s beneficial ownership data.

The delay is the visible manifestation of a regulatory layer that operates in parallel with tax and forex. The framework draws on Indonesian statutory law, regulations issued by the Financial Services Authority (Otoritas Jasa Keuangan, or OJK), guidance from the Financial Transaction Reports and Analysis Centre (Pusat Pelaporan dan Analisis Transaksi Keuangan, or PPATK), international standards set by the Financial Action Task Force (FATF), and the sanctions regimes maintained by the United States, European Union, United Kingdom, and United Nations. This article works through the framework in seven sections.

The Indonesian AML framework

The primary Indonesian statute is Law No. 8 of 2010 on the Prevention and Eradication of the Crime of Money Laundering (Undang-Undang Tindak Pidana Pencucian Uang, or UU TPPU). The law defines money laundering, sets the criminal offences, identifies the predicate crimes from which laundered funds may originate, establishes PPATK as the country’s Financial Intelligence Unit, and imposes the reporting obligations on regulated reporting parties.

Law No. 9 of 2013 on the Prevention and Eradication of Terrorism Financing sits alongside, addressing the parallel offence and reporting regime for terrorism financing transactions.

The implementing regulation for the financial services sector is OJK Regulation No. 8 of 2023 on the Implementation of Anti-Money Laundering, Counter-Terrorist Financing, and Counter-Proliferation Financing of Weapons of Mass Destruction Programs in the Financial Services Sector (POJK 8/2023). The regulation took effect on 14 June 2023 and replaced the prior POJK No. 12/POJK.01/2017 as amended by POJK No. 23/POJK.01/2019. POJK 8/2023 expands the scope of the AML regime in three areas: it adds counter-proliferation financing of weapons of mass destruction (CPF) to the prior AML and CFT scope; it expands the list of regulated reporting parties to include financial technology service providers and other newer financial institutions; and it sets out detailed customer due diligence (CDD) and enhanced due diligence (EDD) obligations on the banks and other regulated parties.

For a PT PMA, the practical effect of POJK 8/2023 sits on the bank side: the company’s commercial bank conducts CDD on the PT PMA at account opening, periodic refresh of the CDD file (typically annually for higher-risk profiles), and transaction-level monitoring against the customer’s expected activity profile. Outbound transfers that deviate from the profile, or that touch high-risk jurisdictions, attract Enhanced Due Diligence and require additional documentation before processing.

PPATK and the reporting regime

PPATK is the Indonesian Financial Intelligence Unit established under Law No. 8 of 2010. The agency operates independently and reports to the President. Its function is to collect, analyse, and disseminate financial intelligence relating to money laundering, terrorism financing, and proliferation financing offences.

The reporting streams from regulated parties flow to PPATK from regulated reporting parties.

Suspicious Transaction Reports (STRs) cover transactions that deviate from a customer’s expected profile, transactions suspected of seeking to evade reporting obligations, transactions using assets suspected of originating from criminal proceeds, or transactions specifically requested by PPATK for reporting. STRs carry no minimum value threshold and must be filed within 3 (three) working days of the reporting party becoming aware of the suspicion.

Cash Transaction Reports (CTRs) cover cash transactions at or exceeding IDR 500,000,000 (five hundred million Indonesian Rupiah) per day, or the equivalent in foreign currency. CTRs are filed for both single transactions and structured patterns of smaller transactions that aggregate to the threshold.

Cross-border fund transfer reports cover outbound and inbound transfers exceeding defined thresholds and are filed alongside the Bank Indonesia LLD reporting on every transfer above USD 10,000 (ten thousand United States Dollars) or local-currency equivalent.

The volume of STRs PPATK receives has grown significantly. Through the first half of 2025, PPATK received 85,514 (eighty-five thousand five hundred and fourteen) STRs, a 32.9 per cent increase year-on-year from the equivalent 2024 period. The reporting parties span banks (the largest reporters by transaction value), non-bank financial institutions, money changers, remittance providers, insurance companies, financing companies, securities firms, and investment managers.

For a PT PMA, the practical interaction with PPATK is indirect. The company itself is not typically a reporting party under POJK 8/2023, since the PT PMA is a non-financial corporate entity. The reporting obligation sits on the bank executing the company’s outbound transfer. The PT PMA’s role is to supply the bank with the documentation set sufficient for the bank to discharge its own reporting obligations, including the underlying contract or invoice, the recipient identification, and the beneficial ownership data on the PT PMA itself.

The international standards: FATF membership and the 40 Recommendations

Indonesia became the 40th full member of the FATF at the Plenary session on 27 October 2023 in Paris. The accession followed a mutual evaluation review (MER) conducted in 2022 and the delivery of a national action plan addressing the recommendations identified during the evaluation.

Full FATF membership carries operational consequences for a PT PMA on three fronts. The Indonesian AML framework continues to align with the FATF 40 Recommendations as the international benchmark, including the beneficial ownership transparency standard (FATF Recommendation 24), the customer due diligence standard (Recommendation 10), and the targeted financial sanctions standard for terrorism financing (Recommendation 6) and for proliferation financing (Recommendation 7).

The country itself is no longer subject to FATF monitoring (it was on the FATF’s Increased Monitoring List in earlier periods), which improves the perception of Indonesia in the international correspondent banking system. Correspondent banks in the United States, Europe, Singapore, and elsewhere apply Enhanced Due Diligence to transfers originating in jurisdictions on the FATF Increased Monitoring List or High-Risk List. Indonesia’s full membership means transfers originating in Indonesia no longer attract this jurisdiction-level enhanced scrutiny.

The reciprocal obligation is that Indonesia applies the FATF country-level high-risk lists to inbound and outbound transactions. The current high-risk jurisdictions under FATF Recommendation 19 are the Democratic People’s Republic of Korea (DPRK), Iran, and Myanmar. Transactions touching these jurisdictions attract automatic Enhanced Due Diligence at the bank level and may be blocked at the correspondent banking layer downstream.

Indonesia’s full FATF membership from October 2023 changed the country’s standing in the international correspondent banking system. Transfers originating from Indonesia no longer attract the jurisdiction-level Enhanced Due Diligence that applies to transfers from countries on the FATF Increased Monitoring List.

Sanctions regimes affecting outbound transfers

Sanctions screening operates as a separate compliance layer on top of the AML framework. Four sanctions regimes affect a typical PT PMA’s outbound payments. The interaction of each with a specific transfer depends on the currency, the correspondent banking chain, and the parties involved.

UN Security Council sanctions. Sanctions adopted under UN Security Council resolutions are binding on Indonesia as a UN member state under the UN Charter. Indonesia transposes UN sanctions through the Ministry of Foreign Affairs and the relevant sectoral regulators (PPATK, OJK, Bank Indonesia). UN sanctions cover targeted financial sanctions against listed individuals, entities, and jurisdictions, including the DPRK, Iran (for nuclear-related and terrorism-related listings), and various counter-terrorism designations.

US OFAC sanctions. The US Office of Foreign Assets Control (OFAC) maintains the US sanctions regime, including the Specially Designated Nationals and Blocked Persons (SDN) list, country-specific embargoes (Cuba, Iran, Syria, North Korea, the Russian Federation under multiple programs, and Venezuela), and sectoral sanctions. Every USD-denominated transfer routes through a US correspondent bank, and the US correspondent applies OFAC screening regardless of the underlying parties’ nationalities. A PT PMA paying USD to a counterparty whose name matches an OFAC list entry, or whose beneficial owners include OFAC-listed persons, sees the transfer blocked or rejected by the US correspondent bank. The block is typically irreversible without OFAC license.

EU sanctions. The European Union maintains its own sanctions list through Council Decisions and Council Regulations, administered at Member State level by national competent authorities. EU sanctions cover the same conflict and counter-terrorism programs as the UN and OFAC, with substantial Russia-related sanctions following the 2022 invasion of Ukraine. EUR-denominated transfers route through EU correspondent banks that apply EU sanctions screening on each transaction.

UK sanctions. The Office of Financial Sanctions Implementation (OFSI), part of HM Treasury, administers the UK sanctions regime since the United Kingdom’s withdrawal from the European Union. The UK Consolidated List of Financial Sanctions Targets covers the equivalent programs as the EU. GBP-denominated transfers route through UK correspondent banks that apply UK sanctions screening.

The compounding effect of multiple sanctions regimes is that a single USD-denominated transfer from a PT PMA to a foreign counterparty is screened against the UN, OFAC, EU, and UK lists separately at each step in the correspondent banking chain. A sanctions hit at any stage halts the transfer until either the relevant authority grants a license to proceed, or the transferring bank releases the funds back to the originating PT PMA. The latter outcome typically follows once the bank concludes the transfer cannot proceed on a sanctions-compliant basis.

Beneficial ownership disclosure under PR 13/2018

Presidential Regulation No. 13 of 2018 on the Implementation of the Principle of Recognising the Beneficial Owner of Corporations in the Framework of the Prevention and Eradication of Money Laundering and Terrorism Financing requires every Indonesian corporation, including every PT PMA, to disclose its ultimate beneficial owners to the authorities. The regulation took effect on 1 March 2018, with the latest implementing regulation being Permenkum No. 2 of 2025 on Procedures for Beneficial Ownership Reporting.

A beneficial owner under Article 1 of PR 13/2018 is an individual who meets one of the following thresholds: owns shares exceeding 25 (twenty-five) per cent in the PT PMA; owns voting rights exceeding 25 per cent; receives an annual profit share exceeding 25 per cent; has the ability to appoint or dismiss directors or commissioners; has the ability to control the corporation in some other defined way; is the actual owner of funds or shares (even where another person is the registered holder); or meets the criteria set in the regulation for an ultimate controlling individual.

The PT PMA reports its beneficial owners to the Directorate General of Legal Administration (Administrasi Hukum Umum, or AHU) at the Ministry of Law. The reporting is integrated into the company formation process (through the notary at the point of the deed of establishment) and into subsequent corporate actions (share transfers, capital increases, changes in directors). The reported data feeds into the central BO register maintained by AHU.

For an existing PT PMA, the BO data is reviewed annually and updated where the ownership or control structure has changed. Failure to file the BO data on time produces administrative sanctions under Article 13 of PR 13/2018, including written warnings, suspension of AHU access (which stops the company processing share transfers or director changes), publication of non-compliance status on the AHU register, and enhanced scrutiny under the AML framework.

The bank conducting an outbound transfer for the PT PMA cross-checks the company’s BO disclosures against the AHU register and against the bank’s own customer file. Discrepancies between the bank’s file and the AHU register typically trigger a documentation refresh request to the PT PMA before the transfer proceeds.

Tax-information exchange: the CRS and FATCA

Two cross-border tax-information exchange regimes affect a PT PMA’s banking relationships, though they sit conceptually adjacent to the AML framework instead of within it.

The Common Reporting Standard (CRS), developed by the OECD, requires participating jurisdictions to automatically exchange financial account information on non-resident account holders. Indonesia is a participating jurisdiction with around 100 (one hundred) reciprocal partners. The PT PMA’s commercial bank in Indonesia identifies the tax residencies of the company’s directors, controlling persons, and (where applicable) shareholders, and reports financial account data to the Indonesian Directorate General of Taxes for onward exchange with the relevant foreign tax authorities. A foreign director of a PT PMA whose tax residence is in a CRS partner country will see the Indonesian account data reach their home tax authority through the annual CRS exchange.

The US Foreign Account Tax Compliance Act (FATCA) imposes a parallel obligation where US persons (US citizens, US tax residents, US-formed entities) have equity in the PT PMA or are controlling persons of accounts the PT PMA maintains. The Indonesian bank classifies the PT PMA at account opening: if the company has substantial US ownership or US controlling persons, the bank reports the account to the Indonesian tax authority for onward exchange with the US Internal Revenue Service.

For practical purposes, CRS and FATCA produce documentation requests at the bank account opening stage and at periodic refresh. A foreign owner setting up a PT PMA in Bali should expect the bank to request self-certification forms identifying the tax residencies of the company’s directors and beneficial owners, and to report through the relevant exchange channels each year. The reporting itself does not generate Indonesian tax liability; the consequence is on the home tax authority’s side, where the data may support a tax assessment in the home jurisdiction if the foreign owner has not declared the Indonesian investment.

The bank-level screening reality for a PT PMA’s transfers

The visible effect of the AML, sanctions, and tax-information exchange layers on a foreign owner is the bank-level screening that applies to every outbound transfer. The screening operates in four passes.

Pass	What is checked	What triggers escalation
1. Customer file refresh	The PT PMA’s CDD file: BO data current, NPWP active, directors’ KITAS still valid	Stale data on file; BO changes not yet filed at AHU
2. Sanctions screening	Recipient name, recipient’s beneficial owners, intermediary banks, all screened against UN, OFAC, EU, UK lists	Name match (including fuzzy matches on transliteration); sanctioned jurisdiction in the routing
3. Transaction profile match	Transfer compared with the company’s expected activity profile (transfer size, frequency, recipient country, transaction purpose)	Deviation from profile, particularly first-time recipients or unusually large amounts
4. Documentary review	Underlying contract, invoice, tax remittance evidence, treaty documentation (DGT forms, certificate of residence)	Missing documents; inconsistency between the documents

The four passes operate sequentially. A transfer that clears all four moves to execution. A transfer that fails any one pass moves to manual review by the bank’s compliance team, with a request for additional documentation or clarification from the PT PMA. The processing time for a manual review typically runs 2 (two) to 5 (five) business days, and longer where the issue involves a sanctions hit or a beneficial ownership discrepancy.

The escalation paths from manual review are: clear and execute (the bank concludes the issue is resolved); rebook the transfer with revised documentation; reject the transfer back to the originating PT PMA; or, in sanctions-related cases, block the funds (the funds are frozen at the bank pending license or regulatory direction). The block outcome is the most operationally serious. Blocked funds are typically not returnable to the PT PMA without sanctions authority intervention, which may take months and may not succeed.

A transfer that is fully tax-compliant and forex-reported can still be blocked at the bank level for AML, sanctions, or beneficial ownership reasons. The AML compliance layer is the operational gating event for outbound payments, and it sits independently from the tax and forex layers the article series has covered.

Operational discipline for the AML-compliant PT PMA

Six operational disciplines reduce the AML friction on a PT PMA’s outbound payment activity.

A current beneficial ownership register at the Ministry of Law (AHU), updated on each share transfer, capital increase, or change in directors. The register is the bank’s primary source for BO verification and stale data is a common trigger for transfer delays.

A complete customer file with the commercial bank, including the deed of establishment, the most recent annual financial statements, the directors’ KITAS and passport copies, the NPWP, and the licensing documentation. The file should be refreshed annually as an operational discipline. Waiting for the bank to request a refresh is the slower alternative.

Pre-screening of new counterparties before the first payment. The PT PMA’s finance function can run an internal sanctions check on the recipient using freely available consolidated lists (the UN list, the OFAC SDN list, the OFSI UK list, and the EU list). Identifying a sanctions issue before initiating the transfer avoids the bank-level block and the funds-recovery problem that follows.

A standard documentation pack assembled for each material outbound transfer: the underlying commercial agreement, the invoice, the PPh Article 26 withholding evidence, the bukti potong issued to the recipient, the recipient’s certificate of residence, the recipient’s DGT form (DGT-1 for legal entities, DGT-2 for individuals), the foreign exchange transaction declaration, and a board resolution for transfers above the authorisation threshold.

A transaction profile maintained at the bank, reflecting the company’s expected activity. The profile is set at account opening and updated as the business scales. A profile mismatch (a small-business profile coupled with a large transfer to a new offshore recipient) is the second most common trigger for transfer delay after sanctions hits.

A regulatory horizon view that tracks changes in the AML framework, sanctions designations, and PPATK guidance. POJK 8/2023 was the last major framework update on the financial services side, and Permenkum No. 2 of 2025 is the most recent on the BO disclosure side. The next major update, when it arrives, will affect the bank-side procedures the PT PMA encounters at its next material outbound payment.

Where this sits in TraceWorthy’s work

TraceWorthy’s financial services team performs the beneficial ownership disclosure for PT PMAs at incorporation and on each subsequent corporate action, the maintenance of the AHU register entries, the response to bank compliance queries on outbound transfer documentation, the pre-screening of foreign counterparties against international sanctions lists where the company requests it, and the operational coordination between the company, its commercial bank, and any external compliance counsel for transfers attracting Enhanced Due Diligence. We work with foreign owners to design the AML-aware payment workflow at the point of company formation and review it as the offshore counterparty base grows.

---

This article provides general information on the anti-money laundering, counter-terrorism financing, sanctions, beneficial ownership disclosure, and tax-information exchange frameworks affecting a PT PMA in Indonesia as at May 2026. It does not constitute legal, tax, accounting or regulatory advice. The Indonesian framework operates under Law No. 8 of 2010, Law No. 9 of 2013, POJK No. 8 of 2023, Presidential Regulation No. 13 of 2018, Permenkum No. 2 of 2025, and the standards set by the Financial Action Task Force. International sanctions regimes administered by the United Nations, the US Office of Foreign Assets Control, the EU, and the UK Office of Financial Sanctions Implementation are amended frequently. The Common Reporting Standard and FATCA reporting regimes evolve. The position for any individual PT PMA depends on its ownership structure, the nature of its outbound payments, the counterparties it transacts with, and the documentation supporting each transfer. Obtain advice specific to your circumstances before acting on any point in this article.

---