**As of 2026, Indonesia’s OSS-RBA licensing platform is refusing to issue business licenses to foreign-owned PT PMAs that register a Bali address under low and medium-low risk KBLI codes. The block is real, sits in no single published regulation, and is pushing founders toward higher-risk classifications, representative offices, or non-Bali domiciles.**
If you are planning a foreign-owned company on the island and expect the cheapest, “lowest-risk” business classification to be the fast lane, the opposite is now true. What follows is a 2027-forward outlook — grounded in what founders, notaries, and consultants were reporting through 2026, not a prediction. Rules here move quarter to quarter, so treat every figure below as accurate as of 2026 and subject to change.
Which KBLI codes is OSS-RBA actually blocking for Bali addresses?
OSS-RBA — the Online Single Submission, Risk-Based Approach platform run by BKPM under the Ministry of Investment — assigns every KBLI business-classification code a risk level. That level decides how much licensing a company needs before it can legally trade, and it also interacts with the Positive Investment List that caps foreign ownership per code.
| Risk level | What it normally means | Typical KBLI examples | Bali PT PMA reality, as of 2026 |
|---|---|---|---|
| Low | NIB alone acts as the license | small retail, some consulting | frequently stalled or refused at a Bali address |
| Medium-low | NIB + self-declared standard certificate | small F&B, minor services | frequently stalled or refused at a Bali address |
| Medium-high | NIB + government-verified certificate | construction, larger hospitality | generally still processable |
| High | NIB + full sectoral permit | regulated tourism, specific sectors | processable, heavier compliance |
The pattern founders reported across 2026 is narrow but consistent: when a PT PMA lists a registered address in Badung, Denpasar, or Gianyar and selects a low or medium-low risk KBLI, the NIB or follow-on license stalls, comes back for “clarification,” or is refused outright. The identical code filed against a Jakarta or Surabaya address often clears without friction.
Before you commit to a Bali address, it is worth mapping the code against the full path of offshore setup in Bali, because the block usually surfaces after the notary deed is signed and capital is committed — the most expensive moment to discover it.
Why does a “low-risk” code get a Bali PT PMA stuck?
The paradox is deliberate, not a bug. A low-risk KBLI is the cheapest to license precisely because it covers small, high-volume activities — cafes, boutique villas, scooter rentals, small trading. Those are exactly the categories Bali’s provincial and district authorities spent 2025 and 2026 publicly worrying about, arguing that foreign micro-operators were competing directly with local businesses.
There is a capital logic underneath it too. A PT PMA is meant to be a serious commitment. As of 2026 the minimum total investment plan is IDR 10,000,000,000 — roughly USD 660,000 to 700,000 depending on the exchange rate — with minimum paid-up capital generally set at 25% of that, or IDR 2,500,000,000 (about USD 150,000 to 175,000). According to Emerhub, that IDR 2.5 billion paid-up floor is fixed by Article 26(10) of BKPM Regulation No. 5 of 2025. A foreign investor filing a “small cafe” code against that capital requirement raises an obvious question at the desk: why register a IDR 10 billion vehicle to run a warung? Low-risk codes at Bali addresses have become the place where that mismatch gets flagged.
What stays compliant in 2026 — and likely into 2027?
Code selection is strategy, not paperwork. There are lawful routes that keep working while the block persists.
| Route | Capital exposure, as of 2026 | What it lets you do | Best fit |
|---|---|---|---|
| PT PMA on a medium-high or high-risk KBLI | IDR 10B investment plan; IDR 2.5B paid-up | full commercial operations, invoicing, hiring, land rights (HGB/Hak Pakai) | committed operators with real scale |
| KPPA representative office | no IDR 10B requirement | market research, liaison, promotion only — no revenue, no invoicing | testing the market lawfully and cheaply |
| Employer of record (EOR) | none of your own entity | employ staff and test demand before incorporating | pre-entry hiring |
| Non-Bali domicile plus Bali activity | IDR 10B investment plan; IDR 2.5B paid-up | register where the code clears, operate on-island where lawful | code-sensitive businesses |
A few practical notes on these. Choosing a genuinely higher-risk KBLI that honestly matches your activity is often cleaner than fighting a low-risk rejection. The KPPA is the underrated one: it carries no IDR 10 billion capital requirement, which makes it the lawful low-cost way to test Bali before committing — but a KPPA may only research, liaise, and promote. The moment it starts invoicing or doing “soft” commercial work, it can create permanent-establishment tax exposure for the foreign parent, per how Indonesia’s Directorate General of Taxes treats PE. On the bank side, the administrative reality is gentler than the headline: per Bali Villa Realty, the initial deposit to open the corporate account can be under USD 100, separate from the formal paid-up capital you still have to inject.
Where is enforcement heading in 2027? This is an outlook, not a forecast
No regulation announces “Bali blocks low-risk KBLI,” so nobody can promise how 2027 plays out. But several dated 2026 signals point the same direction, and founders should plan against the trend rather than the wish.
- Tightening capital rules. BKPM Regulation No. 5 of 2025, which Emerhub cites for the IDR 2.5 billion paid-up floor, signals a policy preference for larger, verifiable foreign commitments over small ones.
- Local political pressure. Bali district and provincial authorities voiced concern through 2025 and 2026 about foreign micro-businesses; domicile letters (SKTU) are issued locally, giving districts a real chokepoint.
- Concentration of rejections. The block clustered at Bali addresses on low and medium-low codes through 2026, suggesting an address-plus-risk filter rather than a nationwide code change.
- Wider tax transparency. Indonesia participates in automatic exchange of information (CRS) with Australia, Singapore, the US, and EU jurisdictions, so structures that look thin on substance are easier to see than they were five years ago.
Read together, the honest base case for 2027 is that the low-risk Bali route stays hard, capital expectations stay high, and substance — a real office, a matching KBLI, a resident director — matters more, not less.
What should founders do before locking a Bali address?
- Pick the KBLI first, the address second. Confirm the code clears at a Bali domicile before you sign the Akta Pendirian before a notary and pay for legalization at the Ministry of Law and Human Rights.
- Get a written OSS pre-check. Ask licensed Indonesian counsel to run your intended code and address through OSS-RBA before incorporation, not after.
- Budget the real capital. Plan for the IDR 2.5 billion paid-up injection and the IDR 10 billion investment commitment, not just the small bank-opening deposit.
- Line up address proof. OSS keys sectoral licenses to your registered address, which needs an office rental agreement, land certificate, or building permit (IMB, now PBG).
- Reject nominee shortcuts. Nominee shareholder or director arrangements used to dodge the capital rule or the block are risky and, in practice, unenforceable — this is where founders lose the whole asset.
The honest bottom line
The OSS-RBA block on low-risk Bali KBLI is not a paperwork glitch you can argue away; it is a policy signal about the kind of foreign investment the island wants. As of 2026, the compliant paths — a matching higher-risk PT PMA, a KPPA for genuine market testing, an EOR, or a non-Bali domicile — all still work, and companies under IDR 4.8 billion in annual turnover can still access the 0.5% final turnover-tax regime while they grow into a full corporate income tax footing. What none of them tolerate is a mismatch between what you file and what you actually do.
This is market-entry information, not legal, tax, or financial advice, and it does not guarantee any licensing outcome. Before you incorporate, route your specific code, address, and capital plan to licensed Indonesian counsel and a registered tax consultant who can pre-check it against the live OSS-RBA system.
By Rendra Wijaya, Editor — Archipelago Desk. Figures are as of 2026 and subject to change.