Indonesia has chosen a different route to taxing foreign digital purchases. It does not register every overseas seller. It collects the tax where the money moves. Under Finance Minister Regulation No. 49 of 2026 (PMK 49/2026), the Directorate General of Taxes (DJP) started the Foreign Digital Transaction Tax Collection System (SPP-TDLN) on September 25, 2026. Three days later, its operator admitted the system is live but not yet collecting fully.
What changed
DJP's official announcement (PENG-6/PJ/2026), as summarised on pajak.go.id, says SPP-TDLN is "not a new type of tax" and does not change the VAT rate. It is an administrative mechanism. It applies to foreign digital goods and services consumed in Indonesia that are not already taxed through the existing PMSE (electronic-system commerce) VAT-collector regime. Covered examples include apps and software, cloud services, streaming and AI subscriptions.
The design rests on Presidential Regulation 68/2025, which assigns operation of the platform to PT Jalin Pembayaran Nusantara, a state-owned-enterprise subsidiary. Six issuers are designated as collectors: BRI, Bank Mandiri, BNI, BTN, Bank Syariah Indonesia and LinkAja's operator, PT Fintek Karya Nusantara. According to Pajak Online, the VAT is computed as 11/111 of the price paid, and the issuer collects it during the transaction. Per DDTC News, collectors remit to the operator within seven days, and the operator remits to the treasury within seven days after that.
The strongest case for the model
The case for it is serious. The PMSE regime depends on foreign companies registering, being appointed, and filing. Companies that never register stay outside it, and the state cannot easily see them. Indonesian consumers, meanwhile, pay VAT on domestic purchases, so a gap on foreign ones is both a revenue loss and a fairness problem for local firms. DJP says it recorded Rp57.23 trillion in digital-economy tax revenue as of September 17, 2026 (DJP press release SP-21/2026). That shows how much the base already matters to the budget. Collecting at the payment rail also puts the compliance burden on a few regulated domestic institutions, not on thousands of foreign sellers. A good part of the design is genuinely sensible: it adds no new tax, no new rate, and leaves existing PMSE collectors on their current arrangements.
Where the model is exposed
On September 28, DDTC News reported that Jalin's VP Corporate Secretary, Putu Agnia, said VAT collection "has not yet run fully effectively" because it still needs support and system adjustments from international card principals. At present collection runs only through the state-owned Himbara banks and LinkAja, with other banks and fintechs still integrating.
This matters because the mechanism assumes the intermediary can identify a foreign digital purchase and apply the tax before funds leave the country. For card payments, that identification depends on data flowing through networks whose systems are designed and governed outside Indonesia. A domestic issuer can collect only what it can recognise. Until the card networks adapt, the covered base is narrower than the policy implies.
Three concerns follow, none of which is fatal.
- Uneven coverage. With only six issuers collecting, a cardholder at a non-designated bank may fall outside the system. Consumers at state-owned banks get taxed while others do not, which recreates the unfairness the system aims to cure.
- Price and access effects. The announcement requires foreign sellers to include Indonesian VAT in the price. If tax is instead deducted at the intermediary, sellers may receive less than expected. Small foreign developers and creators may respond by geo-blocking Indonesia or raising prices, so the cost lands on Indonesian users and local startups that rely on foreign tools.
- Data custody. The regulation makes the operator responsible for the "management, security, confidentiality and protection of data", as reported by DDTC. That is a real legal duty. But a state-linked entity that sees cross-border payment details is a concentration of sensitive financial data, and it needs independent audit and clear limits on use beyond VAT.
A proportionate path
Pro-innovation policy does not oppose taxing digital consumption. It asks that collection be predictable, narrow, and cheap for those who comply. On that test, SPP-TDLN has the right architecture and an unfinished execution. Three steps would help.
- Publish a coverage timeline. DJP and Jalin should say when card networks and additional issuers are expected to be integrated, so sellers and consumers know which transactions are in scope.
- Avoid double taxation. The system must reliably exclude purchases from PMSE-designated sellers. Consumers should not be charged twice, and a refund route should exist where they are.
- Limit and audit data use. Transaction data collected for VAT should stay restricted to VAT purposes, with periodic independent security review published in summary.
The broader lesson is practical. Payment-rail taxation shifts enforcement from seller registration to financial infrastructure, which is more robust against non-compliance but less transparent to the people paying. It works only if the infrastructure cooperates. Indonesia's own operator has now said that it does not yet fully do so. The sensible response is not to abandon the model, but to treat the first months as a calibration period, publish results, and resist projecting revenue before collection is actually operating at scale.