For any foreign SaaS or digital application taking payments from Indonesian users, QRIS (Quick Response Code Indonesian Standard) is now the entry point.
The national QR payment standard handles transactions across all participating banks and digital wallets through one interoperable QR code, and Indonesian consumers have moved decisively in this direction. Bank Indonesia reported 50.5 million QRIS users and 32.7 million merchants on the system in 2024, with total transaction value reaching IDR 42 trillion.
Becoming a QRIS-enabled merchant as a foreign app requires upstream licensing first, then registration through a Bank Indonesia-licensed Payment System Service Provider (PJP).
This guide walks through the two structural routes available to foreign apps, the licenses you need before approaching a PJP, and the practical steps to QRIS activation.
What Is QRIS?
QRIS (pronounced "kris") is Indonesia's national standard for QR code-based digital payments, launched by Bank Indonesia in 2019.
From 1 January 2020, all Indonesian Payment System Service Providers using QR codes must implement QRIS. The standard unifies what was previously a fragmented payment landscape, so merchants display a single QR code that customers can scan with any compatible app: GoPay, OVO, DANA, ShopeePay, or any participating bank's mobile banking app.
The per-transaction limit is currently IDR 10 million. Merchants pay a Merchant Discount Rate (MDR) on each transaction, which varies by merchant category (standard rates run between 0.3% and 0.7% for most merchants, with micro merchants generally exempt up to certain thresholds).
QRIS now also operates internationally through QRIS Cross-Border, with active partnerships in Thailand, Malaysia, Singapore, Japan, South Korea, and China. This matters for foreign apps because Indonesian users can pay overseas merchants using their domestic apps, and foreign tourists can pay Indonesian merchants the same way.
Compliance with Peraturan Menteri Perdagangan (Permendag) 31/2023
The Ministry of Trade Regulation No. 31 of 2023 introduced several specific requirements that foreign digital actors must maintain to protect their QRIS merchant status:
- Social Commerce Separation: If your application offers social networking features alongside a marketplace or digital store, you are prohibited from facilitating payment transactions directly within the social feed. You must delineate the transaction environment clearly, often requiring a dedicated checkout page that is separate from the social networking features.
- Consumer Protection and Dispute Resolution: Permendag 31/2023 places a heavy emphasis on local consumer rights. Failure to provide these can lead to "blacklist" status, which results in the immediate revocation of your payment processing privileges. Here are rules you should follow:
- Provide a clear, Indonesian-language complaint mechanism.
- Maintain a local liaison (via the KP3A or PT PMA) to resolve disputes.
- Display the contact information for the Directorate General of Consumer Protection (PKTN) prominently on the platform.
- Minimum Price for Cross-Border Trade: the government established a minimum price of USD 100 (FOB) per unit for goods sold directly from abroad to Indonesian consumers. For SaaS providers, this threshold usually does not apply to subscription fees. If your app involves a "market" for digital or physical goods, adherence to these price floors is monitored by customs and trade authorities.
Can a Foreign App Apply for QRIS Directly?
QRIS is not issued directly to an app. It is issued through a licensed Payment System Service Provider (Penyedia Jasa Pembayaran - PJP). To accept QRIS as a merchant, your business must register as a merchant through one of these licensed PJPs, which are approved and supervised by Bank Indonesia.
For foreign apps, the path to becoming a QRIS-enabled merchant depends on how you structure your presence in Indonesia. There are two routes, and which one applies to you depends on your business model.
Route 1: Foreign PPMSE (Without a PT PMA)
A foreign app can operate in Indonesia as a Foreign Electronic Commerce System Organizer (Penyelenggara Perdagangan Melalui Sistem Elektronik - PPMSE). This applies to companies that offer digital services or products to Indonesian users without setting up a local legal entity.
Under Permendag No. 31/2023, foreign PPMSE platforms are required to appoint a local representative office called a KP3A (Kantor Perwakilan Perusahaan Perdagangan Asing Bidang PMSE) if they meet either thresholds:
- Have at least 1,000 consumers or 1,000 shipments in a year
- Reach 1% of Indonesian internet traffic
Key Compliance for this route: Foreign PPMSE platforms must register as a PSE (Penyelenggara Sistem Elektronik) with the Ministry of Communication and Digital (Komdigi). You will also need to obtain a SIUP3A through your KP3A to operate commercially and accept payments in Indonesia.
Emerhub can act as your representative office. We can act as your official SIUP3A license holder in Indonesia.
Route 2: Domestic PPMSE (Through a PT PMA)
Another route that allows you to apply for QRIS is to establish a PT PMA in Indonesia. A PT PMA is a foreign-owned limited liability company registered under Indonesian law.
Setting up a PT PMA gives you a local legal entity that can hold the necessary business licenses, enter contracts, and register directly as a merchant under Indonesia's e-commerce framework.
Under Permendag No. 31/2023, domestic PPMSE companies must be registered under the appropriate KBLI (Indonesian Standard Business Classification) code. For a digital platform or SaaS app transacting commercially, the relevant KBLI codes are:
| KBLI 2025 | KBLI 2020 |
|---|---|
| 63122 - Portal Web Dan/Atau Platform Digital Dengan Tujuan Komersial (Commercial Web Portal or Digital Platform) | 4791 - Perdagangan Eceran Melalui Pemesanan Pos Atau Internet (Retail Trade via Postal Order or Internet) |
We can help you apply for both a PSE license and a PPMSE license before approaching a licensed PJP for QRIS registration.
Step-by-Step Application Process to Apply as a Merchant for Foreign Apps
As discussed above, you can either operate as a Foreign PPMSE (with a KP3A and SIUP3A) or establish a domestic entity via PT PMA. This decision affects your licensing pathway and what permissions you can apply for.
Step 1: Obtain PSE and PPMSE Licenses
Before you can accept QRIS payments, your app must have both a PSE and PPMSE license. Here is what each one is:
- PSE (Penyelenggara Sistem Elektronik): This is a registration with Kominfo for any electronic system that offers goods or services to Indonesian users. All foreign apps operating in Indonesia are required to register. Failure to register can result in your platform being blocked.
- PPMSE (Penyelenggara Perdagangan Melalui Sistem Elektronik): This is an e-commerce business license for platforms that facilitate commercial transactions electronically. It is issued through Indonesia's Online Single Submission (OSS) system and is required for any platform engaging in digital commerce in Indonesia.
Both licenses must be in place before you proceed to payment registration. Emerhub can assist with both the PSE registration and PPMSE licensing process.
Step 2: Choose a Licensed Payment Service Provider (PJP)
QRIS is not issued directly by Bank Indonesia to merchants. Applications are received through a licensed PJP, which acts as your acquirer. All PJPs that offer QRIS must be approved and supervised by Bank Indonesia.
Examples of licensed PJPs include banks such as BCA, Mandiri, BNI, and Bank Mega, as well as non-bank e-wallet providers like GoPay and OVO. However, the acquirer you choose depends on your business model and volume.
We can help you liaise with banks and payment platforms to request a Merchant ID application form.
Step 3: Register as a QRIS Merchant
After selecting a PJP, you submit a merchant registration application. Corporate applicants need to submit the following:
- Deed of establishment and Ministry approval letter (SK)
- Tax Identification Number (NPWP)
- Business Identification Number (NIB) from the OSS system
- PSE registration certificate
- PPMSE license
- Corporate bank account details
- Director or authorized signatory identification
After your documents are verified, the PJP registers your business under the National Merchant Repository and issues a National Merchant ID (NMID). NMID registration typically takes 3 to 4 working days. QRIS activation follows within 1 to 2 working days.
Step 4: Address Tax Obligations (If Applicable)
If you meet Indonesia’s registration or revenue thresholds, you may be required to register for and collect VAT (PPN) on digital services supplied to Indonesian customers. Although Indonesia’s statutory VAT rate is 12%, PMK-131/2024 applies an adjusted tax base for most non-luxury goods and services. This means, the effective VAT burden for many digital services remains 11%.
If your platform crosses the applicable threshold, you may need to register as a VAT collector with the Directorate General of Taxes. This requirement is separate from the QRIS application itself, but it may apply depending on the scale and nature of your commercial activity in Indonesia. Failure to comply can create tax exposure and administrative liability.
How Emerhub Can Help
Emerhub handles the full setup for foreign apps entering the Indonesian payment ecosystem, from initial structure selection through to QRIS activation.
We can act as your KP3A and SIUP3A license holder if you take the Foreign PPMSE route, or handle the full PT PMA incorporation and PMSE licensing if you go the domestic entity route. We also handle the upstream PSE registration with Komdigi, the OSS-side business licensing, and the documentation prep for your chosen PJP.
If your app is already operating in Indonesia and you need to get compliant quickly (or you've received a Komdigi warning), we can assess your current structure and map the fastest path forward.
Get in touch with our team to discuss your situation and the right structure for your Indonesian payment setup.
Frequently asked questions
Does a foreign SaaS app need a PT PMA to get QRIS?
Foreign apps can operate in Indonesia as a Foreign PPMSE through a representative office (KP3A) with a SIUP3A license. However, if you want a domestic legal presence with full commercial rights, establishing a PT PMA is the more robust option. Both routes require a PSE and PPMSE license before you can apply for QRIS merchant access.
What is the difference between a PSE and a PPMSE license?
A PSE registration is required for any company operating an electronic system in Indonesia. It is administered by Komdigi and applies to all digital platforms serving Indonesian users. A PPMSE license is specifically for platforms that conduct commercial transactions electronically. You need both before you can register as a QRIS merchant.
Which Bank Indonesia-licensed PJP should we use for QRIS?
The right PJP depends on your transaction volumes, whether you need a static or dynamic QR setup, and what your PJP's merchant onboarding requirements look like for foreign-owned entities.
How long does the QRIS registration process take?
The timeline depends on how quickly you have your upstream licenses in place. Once your PSE and PPMSE licenses are confirmed and your merchant application is submitted to a PJP, the National Merchant ID registration takes roughly 3 to 4 working days. QRIS activation then follows within 1 to 2 working days. The licensing steps before this take longer and should be planned for in advance.
Do we need to collect VAT on QRIS transactions?
QRIS is a payment method, not a tax trigger on its own. Whether you are required to collect Indonesia's 12% digital VAT (PPN) depends on your revenue from Indonesian users. Foreign digital services providers that meet the applicable threshold must register with the Directorate General of Taxes as a digital tax collector.
What happens if our app operates in Indonesia without the required licenses?
Under Permendag No. 31/2023, non-compliant platforms face a graduated enforcement process: written warnings, placement on a priority watchlist, blacklisting, and temporary service blocking coordinated between the Ministry of Trade and Kominfo. Persistent non-compliance can result in the revocation of business licenses and full access blocking in Indonesia. Getting your licensing in order before scaling is strongly advisable.
