
KBLI 2025 and OSS: Do You Need to Update Your NIB and Business Licenses?
The implementation of KBLI 2025 has raised an important question among businesses across Indonesia: Do I need to update my OSS licenses because of KBLI 2025?

Learn why companies that cannot demonstrate business activity may face bank compliance reviews, account restrictions, or closures, and how proper company registration helps reduce risks.
Opening a corporate bank account used to be relatively straightforward. As long as a company had proper incorporation documents, a tax number, and a registered address, many businesses could operate without facing intense scrutiny from financial institutions. Today, however, the situation is very different. Banks around the world — including in Indonesia — are applying much stricter compliance standards to companies, especially those involved in international transactions, foreign ownership structures, or cross-border operations.
One of the biggest compliance concerns today is whether a company can clearly demonstrate business activity to banks. Financial institutions are now expected to understand not only who their customers are, but also how those customers operate, where their money comes from, and whether their transactions align with legitimate commercial activity. This shift is largely driven by global Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) requirements, and increased pressure from financial regulators.
For many businesses, especially newly established PT PMA companies, holding companies, consulting firms, and businesses with low operational visibility, failing to demonstrate business activity can create serious banking challenges. Even legally registered companies may face transaction delays, enhanced compliance reviews, account restrictions, or account closures if banks believe the company lacks sufficient operational substance.
Understanding how banks evaluate business activity has become essential for companies that want to maintain stable banking relationships and avoid unnecessary compliance problems.
To demonstrate business activity means proving that a company is actively operating as a legitimate business rather than existing only on paper. Banks increasingly look beyond incorporation documents and expect companies to show evidence of real commercial operations.
In the past, having a Deed of Establishment, NIB, NPWP, and business license may have been enough to satisfy basic requirements. Today, banks often want to see broader operational indicators such as:
A company that cannot demonstrate business activity may appear dormant, inactive, or potentially high-risk from a compliance perspective. Even if the business itself is legitimate, the absence of operational evidence can trigger additional scrutiny.
This is particularly important because banks are now expected to identify risks related to shell companies, financial crime, sanctions evasion, and suspicious transaction activity. As a result, many banks adopt a “substance over paperwork” approach when reviewing corporate customers.
Global banking regulations have evolved significantly over the last decade. International AML frameworks now require financial institutions to conduct ongoing customer monitoring rather than simply performing checks during account opening.
Banks are expected to understand:
If a company’s actual banking behavior does not match its declared profile, the bank may initiate additional reviews.
For example, a consulting company that suddenly receives multiple high-value overseas transfers unrelated to consulting services may trigger compliance concerns. Similarly, a company that claims to be operational but shows almost no transaction activity for long periods may raise questions about whether it is genuinely active.
This stricter approach is not unique to Indonesia. Financial institutions globally have become more cautious due to increased regulatory penalties and enforcement actions related to AML failures. Banks now prioritize risk management much more aggressively than before.
One of the clearest warning signs for banks is minimal or inconsistent account usage. A company account with very few operational transactions may appear inactive or commercially irrelevant.
Banks typically expect businesses to show signs of operational life through normal financial activity. This may include:
When accounts remain largely inactive for extended periods, compliance departments may question whether the company is genuinely operating.
Banks also monitor whether transaction patterns align with the company’s stated business activities. If a business registered as a marketing consultancy suddenly processes transactions involving unrelated industries or high-risk sectors, this inconsistency may trigger enhanced reviews.
Consistency matters because banks use transaction monitoring systems to identify unusual or suspicious behavior. Companies that cannot properly explain their transaction flows may face delays or restrictions.
A company that lacks visible operational indicators may also face compliance challenges. In some cases, businesses operate remotely or digitally, which is perfectly legitimate. However, when combined with low transaction activity and minimal supporting documentation, the company may appear difficult to verify.
Banks increasingly look for signs of operational substance, including:
The absence of these indicators does not automatically mean wrongdoing, but it can make it harder to demonstrate business activity effectively.
One of the first consequences is Enhanced Due Diligence. EDD is a deeper compliance review process used when banks identify higher-risk customers or unclear operational profiles.
During EDD, banks may request:
This process can delay transactions, onboarding approvals, or account services. Companies that fail to provide satisfactory documentation may face additional restrictions.
Another common consequence is delayed transaction processing. International transfers may be temporarily held while compliance teams request additional explanations or supporting documents.
For businesses relying on smooth payment operations, these delays can disrupt:
Even legitimate businesses can experience operational difficulties if they cannot quickly demonstrate business activity to the bank.
Banks and financial authorities have become increasingly proactive in monitoring dormant or suspicious accounts. In Indonesia, concerns around inactive accounts and financial misuse have received growing attention from regulators and compliance authorities.
If a company account is considered high-risk or insufficiently transparent, banks may:
For companies operating internationally, account restrictions can create significant reputational and operational damage.
In more serious situations, banks may decide that maintaining the relationship is too risky. This can result in unilateral account closure.
Once an account is closed for compliance-related concerns, businesses may face:
This is why proactive compliance and operational transparency have become increasingly important for modern businesses.
While incorporation alone is no longer enough, proper company registration still forms the foundation of business credibility. Banks are more likely to trust companies that have complete, accurate, and well-maintained corporate documentation.
For companies in Indonesia, this includes:
Many compliance problems begin when companies use outdated information, incomplete registrations, or business structures that do not match actual operations.
This is why professional company registration support can help businesses establish stronger credibility from the beginning. A properly structured company with clear documentation and operational consistency is generally better positioned to demonstrate business activity during banking reviews.
CPT Corporate helps businesses navigate the company registration process in Indonesia while supporting compliance readiness for long-term operational stability.
Companies should avoid leaving corporate accounts inactive for long periods. Regular operational usage helps establish legitimacy and consistency.
Businesses should maintain updated:
Having these documents readily available can significantly speed up compliance reviews.
A visible and professional business presence can help reinforce operational credibility. This includes:
Banks expect financial activity to align with the company’s registered industry and operational explanation. Consistency reduces compliance concerns and helps companies demonstrate business activity more effectively.
Banks are required to comply with AML and KYC regulations. They need to verify that companies are operating legitimately and that transaction activity aligns with the declared business model.
Yes. Even newly incorporated businesses may face additional scrutiny if they cannot clearly demonstrate business activity or provide supporting operational documentation.
Examples include invoices, contracts, payroll records, tax payments, supplier transactions, operational expenses, and regular commercial activity.
Yes. Banks may restrict or review dormant or inactive accounts, especially if they are considered high-risk from a compliance perspective.
Yes. Proper company registration helps establish legitimacy, improve transparency, and create stronger credibility during banking and compliance reviews.
Modern banking compliance has changed significantly. Today, simply owning a legally registered company is no longer enough to maintain smooth banking operations. Financial institutions increasingly expect businesses to demonstrate business activity through real operational substance, transparent transaction behavior, and consistent commercial activity.
Companies that fail to demonstrate business activity may face enhanced due diligence, transaction delays, account restrictions, or even account closure. These risks can affect not only financial operations but also long-term business credibility and growth opportunities.
For businesses operating in Indonesia, especially PT PMA companies and internationally connected businesses, maintaining strong corporate documentation and operational transparency has become essential. Proper company registration, accurate compliance preparation, and consistent business activity can help companies build stronger relationships with banks and reduce unnecessary compliance risks.
If your business is planning to establish operations in Indonesia, CPT Corporate can assist with professional company registration services designed to help companies build a stronger foundation for long-term operational and banking compliance.

The implementation of KBLI 2025 has raised an important question among businesses across Indonesia: Do I need to update my OSS licenses because of KBLI 2025?

Indonesia has officially introduced KBLI 2025 through BPS Regulation No. 7 of 2025, replacing the previous KBLI 2020 framework under BPS Regulation No. 2 of 2020, which has now been revoked. This update marks an important shift in Indonesia’s business classification system and affects how business activities are categorized for licensing and regulatory purposes.

Indonesia has stepped up its enforcement of halal compliance with the issuance of BPJPH Regulation No. 2 of 2026 on Administrative Sanctions for Violations of Halal Product Assurance. The regulation introduces a clearer and more structured sanctions framework that applies not only to businesses, but also to Halal Inspection Bodies (LPH), halal auditors, and other stakeholders in the halal ecosystem.

Tell us about your plan and our consultants will reach out to you to assist with your needs.