The advice to an Indonesian borrower is the advice everywhere in this region: check the regulator’s list first. Indonesia offers three ways to do it, and one of them runs on the handset the loan app is already sitting on.
That is the interesting product here, and it needs care: all three routes answer a question about a name, and the thing a borrower is anxious about is the build behind an icon.
The list, and the number on it
The licensed category is LPBBTI, Layanan Pendanaan Bersama Berbasis Teknologi Informasi, the framework this market now calls pindar. Otoritas Jasa Keuangan publishes the licensed operators on its own site; this desk could not reach OJK’s licensed-provider list while writing, so the figure below is a news organisation’s reading of OJK’s data, not ours.
As reported by Kompas on 1 September 2026, OJK data as of 31 August 2026 carried 94 licensed and supervised operators. Read that as a measurement with a date on it: licences are granted, surrendered and revoked, and a list republished a month later is a different list. We name no operator as licensed, for the same reason.
We have not run the check ourselves; the steps above are Kompas’s, as reported; the hours are OJK’s published Kontak 157 schedule.
Why the WhatsApp route is the better product, and what caps it
Most licence checks fail at the point of friction, not the point of truth. They ask a worried person to leave the app, open a browser and search a name inside a file built for a desktop. The drop-off is the problem, and this route removes most of it: no browser, no account, no sign-up, and a typed name answered with a status, not a document.
Two limits sit on top. OJK’s announced schedule puts its digital chat channels, WhatsApp included, at 07.45 to 16.50 WIB, while the 157 telephone line has run round the clock since 10 October 2025 — and a loan app can be installed at three in the morning. A saved number is also only as good as the digits a borrower was given, the obvious surface for an impersonator to work.
What a name match cannot tell you
A licence check matches a name, not a build, and no route looks at the software on the handset. Nothing in the OJK check itself stops software carrying a licensed operator’s name and branding without any connection to it — in which case typing that name into any of these routes returns a perfectly accurate answer about the wrong thing.
Per Kompas the prompt accepts a company or loan-app name, and the reply reports on the company. That is materially weaker than confirming an app, and the distinction is the borrower’s whole exposure. Indonesia’s list performs the join this desk found India lacks, between an app directory and a company register — two lists, two questions — and still stops short of the build on the handset.
POJK 8/2026 points at OJK, with one clause reaching the user
OJK issued Peraturan OJK Nomor 8 Tahun 2026 in early August; what follows comes from OJK’s statement as reported by ANTARA on 5 August 2026, not from the regulation text. Per that report it obliges pindar operators to submit funding-transaction data to OJK’s reporting system and, to the industry association, to the Fintech Data Center, with a named accountable director and administrative sanctions.
That is supervisory plumbing, aimed at OJK’s own data rather than at what a borrower sees before tapping accept, and it should not be reported as a transparency measure. One clause does reach the user, and outweighs the reporting duty around it: per the same report, the regulation bars operators and associations from giving or selling user information to other parties except where the law requires.
The store runs its own check
A fourth gate belongs to a company rather than a regulator. Google Play’s Financial Services policy requires a developer running information-technology-based money lending in Indonesia to submit a copy of its valid licence for review, defining that activity by reference to OJK Regulation No. 77/POJK.01/2016, “as may be amended from time to time”. That instrument dates from 2016; this desk asserts nothing about its present status.
Verdict
Our assessment: the WhatsApp route earns its attention because it is built around the moment of doubt, not the archive. Distribution beats completeness, and a perfect register nobody opens protects nobody.
The order that saves time: take the name on the icon to whichever OJK route you can reach — the published list pairs it with an entity; then confirm the app’s own terms and its store listing name that same entity. The checks cannot do that last step.
This is reporting, not financial advice, and this desk asserts nothing about the standing of any app or operator. Borrow only from lenders licensed in your own jurisdiction, and take the entity name to the regulator’s own records rather than trusting a licensing claim made inside the app.