Indonesia is strengthening oversight of its national QR payment system, QRIS (Quick Response Code Indonesian Standard), as regulators step up efforts to prevent the misuse of payment infrastructure for unauthorised transactions.

On October 21, 2026, Bank Indonesia Deputy Governor Filianingsih Hendarta outlined four measures to safeguard the QRIS ecosystem during a press conference following the central bank’s Board of Governors Meeting. The measures focus on merchant verification, suspicious transaction detection, payment provider accountability and coordination among relevant authorities.

Four Measures to Strengthen Payment Oversight

1. Stronger Merchant Verification

Payment service providers and merchant aggregators are expected to verify merchants’ identities, business profiles and legal status before onboarding. They must also assess whether merchants’ expected transaction patterns are consistent with their stated business activities and continue monitoring their operations after registration.

2. Improved Detection of Suspicious Transactions

Bank Indonesia is strengthening the monitoring of transaction patterns that do not match a merchant’s normal business activities. For example, repeated payments of identical amounts late at night through a QR code registered to a small food stall that has already closed may warrant further investigation. Authorities may also use merchant watchlists to identify suspected misuse.

3. Greater Accountability for Payment Providers

Payment service providers and merchant aggregators will face ongoing supervision. If a provider is found to have facilitated illegal transactions, Bank Indonesia may impose restrictions, suspend its business activities or revoke its licence, depending on the circumstances.

4. Stronger Coordination Among Authorities

Bank Indonesia will continue working with law enforcement agencies, ministries and other relevant institutions to address suspected misuse of payment services and support enforcement action.

QRIS’s Growing Role in Indonesia’s Digital Economy

QRIS has become an important part of Indonesia’s digital payment infrastructure, serving consumers and businesses across the country. Its widespread adoption makes effective merchant verification and transaction monitoring increasingly important to maintaining the reliability and integrity of the payment ecosystem.

The latest measures highlight a broader regulatory trend: oversight is extending beyond online platforms to the payment channels that facilitate transactions. For payment service providers and merchant aggregators, ongoing due diligence, risk monitoring and compliance procedures are becoming essential parts of responsible operations.

Bank Indonesia’s approach aims to support a payment system that remains fast, convenient, affordable, secure and reliable while reducing the risk of misuse.