Loading Zantara...
Zantara AI
AI Business Advisor
Topics
Zantara AI
AI Business Advisor
Bali Zero handles visas, company setup, tax and property compliance in Indonesia. Ask us directly on WhatsApp.
Chat with Bali Zero on WhatsAppEvery KBLI code you register on your PT PMA sends a message to at least three government systems simultaneously: the OSS-RBA licensing platform, the DJP (Direktorat Jenderal Pajak) tax surveillance engine via Coretax, and the immigration authority's RPTKA/TKA monitoring pipeline.
Some codes pass through quietly. Others light up dashboards across multiple agencies the moment they appear. The difference between a smooth compliance trajectory and an audit notification landing in your inbox often comes down to which five-digit number you selected during company registration.
This is not about legality. Every code on the KBLI 2025 list is a valid, lawful classification. The issue is regulatory attention density — certain codes attract disproportionate scrutiny because of their history, their risk profile, or the gap between how they are registered and how they are used.
Not all red flags are created equal. Some trigger automated system alerts. Others raise eyebrows during manual reviews. Understanding the taxonomy helps you assess where your business sits on the scrutiny spectrum.
Certain KBLI 2025 codes carry an inherent risk classification of Tinggi (High) within the OSS-RBA system. This classification is not arbitrary — it reflects sectors where government has identified elevated potential for public harm, environmental damage, security concerns, or regulatory abuse.
High-risk codes require more extensive licensing, more frequent reporting, and face more regular compliance audits. The processing itself is more involved: instead of the streamlined Fiktif Positif (automatic approval) pathway, these codes require substantive review by relevant ministries.
Construction codes sit prominently in this category. Codes 41011 (Konstruksi Gedung Tempat Tinggal) and 41018 (Konstruksi Gedung Lainnya) carry Tinggi risk classification with strict environmental oversight requirements, AMDAL (Environmental Impact Assessment) obligations, and closer DJP attention due to the sector's historical association with unreported cash transactions.
The technology sector has its own high-scrutiny entries. 62022 (Aktivitas Identitas Digital) and 62023 (Aktivitas Sertifikat Elektronik) are classified as Tinggi because they touch government security infrastructure. Foreign-owned entities operating under these codes face additional vetting from BSSN (Badan Siber dan Sandi Negara) and potential restrictions on data handling.
Broadcasting and content production codes within Category J carry a hard 20% foreign ownership cap. This is one of the most frequently violated restrictions, typically by foreign investors who register a PT PMA under a permissible code but then pivot their actual operations into content production or media distribution.
The enforcement mechanism has tightened considerably under KBLI 2025. Coretax now cross-references revenue streams against registered KBLI codes. A company registered as IT services (62019) but generating the majority of its revenue from advertising-supported content distribution will trigger an automated mismatch alert.
The consequences are severe: forced divestiture to comply with the 20% cap, potential license revocation via OSS, and back-tax assessments on revenue that was misclassified under the wrong sector benchmark.
This is the single biggest audit trigger for foreign-owned companies in Bali: the KBLI code on your OSS registration does not match your actual business activity.
The mismatch takes several forms:
Retail codes for import-export operations. A company registered under retail KBLI codes (47xxx) that is actually conducting import-export activity needs an API (Angka Pengenal Importir) license — which is tied to different KBLI codes entirely. The DJP sees retail-classified revenue with import duty payments and flags the inconsistency.
Consulting codes for hands-on services. Registering as management consulting (70209) because it is the "safe" code, then actually providing construction management, event production, or manufacturing supervision. The revenue patterns and expense structures do not match the DJP's benchmark profiles for consulting.
Tourism codes for property operations. Using a travel agency code (79111) to mask what is actually a property rental or villa management business. Different KBLI codes carry different tax obligations, and the mismatch creates exposure on both PPh (income tax) and PPN (VAT) fronts.
Under the Coretax regime, the DGT's automated systems compare your KBLI-derived benchmarks against your actual financial performance. When the numbers do not align with what a company in your registered sector should be producing, the system generates an SP2DK — a formal clarification request that is the first step toward a full audit.
Changing your KBLI codes through OSS is a legitimate process. Companies evolve, pivot, and expand. But when a PT PMA changes its primary KBLI code more than once within a 24-month period, or shifts between fundamentally unrelated sectors, it triggers a pattern recognition alert in both the DJP and immigration systems.
Why does sector-hopping raise flags? Because it is a documented technique used by shell companies to obscure actual business activity, reset DJP benchmark expectations, or justify changes in KITAS sponsorship categories. A company that starts as a consulting firm, becomes a construction company, then pivots to food and beverage — all within two years — looks like an entity searching for regulatory cover rather than conducting genuine business.
Each KBLI change also resets the DJP's profitability benchmarks for your entity. If a company consistently underperforms its sector benchmark, changes its KBLI to a sector with lower expected margins, then repeats the cycle, the DGT's system interprets this as benchmark arbitrage.
Immigration authorities are equally sensitive. Your KITAS classification must align with your company's registered KBLI codes. An E25B Director KITAS sponsored by a consulting company (70209) will face hard questions during renewal if the company's OSS registration now shows construction (41011) or manufacturing (10xxx) codes.
A PT PMA is legally permitted to register multiple KBLI codes on its OSS license. Many legitimate businesses operate across related sectors and need several codes to cover their full scope of activity.
The red flag emerges when a single PT PMA holds a portfolio of unrelated KBLI codes that span wildly different industries. A company simultaneously registered for construction (41011), digital identity services (62022), food manufacturing (10710), and broadcasting (60200) does not look like a diversified business. It looks like a shell entity designed to hold multiple licenses for resale or regulatory arbitrage.
The DJP's automated profiling system uses the number and diversity of registered KBLI codes as a complexity indicator. High complexity scores correlate with higher audit probability. Immigration authorities use the same data point: a single PT PMA sponsoring KITAS holders across unrelated sectors raises questions about the genuineness of each position.
| Factor | Red Flag Codes | Safe Codes |
|---|---|---|
| Construction (41011, 41018) | Tinggi risk. AMDAL required. DJP benchmark scrutiny on cash-heavy sector. Environmental compliance audits. | Villa Operations (55193) — Fiktif Positif. Straightforward licensing. Established hospitality benchmarks. |
| Digital Identity (62022) | Tinggi risk. BSSN security vetting. Data handling restrictions for foreign entities. | IT Programming (62019) — Low risk. Well-understood sector. Clear DJP benchmarks. 100% PMA. |
| Electronic Certificates (62023) | Tinggi risk. Government security interest. Additional ministry approvals. | IT Consulting (62021) — Low risk. Professional services classification. Minimal compliance burden. |
| Broadcasting (Category J, 60xxx) | 20% PMA cap. Forced divestiture if exceeded. Revenue stream monitoring. | Consulting (70209) — Lowest scrutiny. Most flexible. 100% PMA. No ownership caps. |
| Retail masking Import-Export (47xxx without API) | API license mismatch. Customs data cross-reference. Back-tax exposure. | Tourism / Travel Agency (79111) — Low risk. Established sector. Clear rules. 100% PMA. |
The connection between your KBLI code and your immigration status is direct and increasingly monitored. Every KITAS (Kartu Izin Tinggal Terbatas) in Indonesia is sponsored by a company, and that company's KBLI codes define the scope of permissible work activity for the KITAS holder.
RPTKA (Rencana Penggunaan Tenaga Kerja Asing) — the foreign worker utilization plan — must specify job positions that are consistent with the sponsoring company's registered KBLI codes. A PT PMA registered for consulting (70209) cannot file an RPTKA for a "Construction Site Supervisor" position without triggering an immigration review.
The enforcement is bilateral. Immigration checks the RPTKA against OSS KBLI data. The DJP cross-references KITAS holder salaries against company revenue and sector benchmarks. When a consulting company with two foreign directors reports revenue that would barely cover their combined KITAS-mandated minimum salaries, both systems flag the discrepancy.
Codes that require RPTKA/TKA (Tenaga Kerja Asing) permits are monitored more closely than those that do not. Manufacturing, construction, and resource extraction codes carry mandatory TKA reporting requirements and face more frequent immigration compliance audits than professional services or consulting codes.
The DJP does not randomly select audit targets. Under the Coretax system, selection is algorithmic, and your KBLI code is the primary input variable. Understanding the triggers helps you assess your risk profile:
Below-benchmark performance. Every KBLI code has an associated set of financial benchmarks — gross profit margin, operating profit margin, net profit margin, and effective tax rate. If your reported figures consistently fall below the benchmark for your registered sector, Coretax generates an automatic SP2DK clarification request.
Revenue-expense pattern anomalies. The DJP maintains sector-specific models for what a company's cost structure should look like. A consulting firm (70209) should have high labor costs and low material costs. If the pattern is reversed, the system flags a potential code mismatch.
VAT discrepancy. Different KBLI codes carry different PPN (Pajak Pertambahan Nilai) obligations. Companies that claim VAT input credits inconsistent with their registered sector — for example, a consulting firm claiming large material import VAT credits — trigger automated review.
Cross-database inconsistency. Coretax now pulls data from OSS, customs (DJBC), immigration, and banking systems. A KBLI code that does not align across all databases is the clearest possible audit trigger.
For foreign investors seeking the cleanest compliance trajectory, certain KBLI codes offer a demonstrably lower risk profile:
Consulting — 70209 (Aktivitas Konsultasi Manajemen Lainnya). This code carries the lowest regulatory friction of any professional services classification. It is 100% open to PMA, classified as low risk in OSS-RBA, processes through Fiktif Positif for most permits, and has well-established DJP benchmarks that are straightforward to meet. The code is broad enough to cover a wide range of advisory, strategic, and management activities without triggering mismatch concerns.
IT Services — 62019 (Aktivitas Pemrograman Komputer Lainnya). Low risk, 100% PMA, clear sector benchmarks. The digital economy is well-understood by the DJP, and the benchmarks for IT service companies reflect the high-margin, low-material-cost reality of the sector. Revenue patterns are predictable and easy to explain during any review.
Tourism — 79111 (Aktivitas Agen Perjalanan). Bali's tourism sector has decades of regulatory precedent. The codes, benchmarks, and compliance expectations are thoroughly documented. Foreign ownership is fully permitted, and the DJP has extensive comparative data for benchmarking, which means your performance is measured against a large, stable dataset rather than a small, volatile one.
Villa Operations — 55193 (Pondok Wisata / Homestay). Processes through Fiktif Positif, meaning automatic approval without substantive ministry review. The hospitality benchmarks are well-calibrated, and the sector has clear, predictable compliance requirements. For Bali-based property operators, this code offers the most straightforward regulatory path.
Your KBLI code selection is not a bureaucratic formality. It is a strategic decision that determines your audit probability, your immigration compliance burden, your tax benchmark expectations, and the overall regulatory attention your company receives for the duration of its existence.
The principle is straightforward: choose the code that most accurately reflects your actual business activity, within the lowest-risk classification available. Do not register for a code because it sounds prestigious or covers a future ambition you have not yet operationalized. Do not choose a low-risk code as cover for high-risk activity — Coretax will find the mismatch.
If your genuine business activity falls under a high-risk code, that is not a problem. High-risk codes are legal, common, and thousands of companies operate under them successfully. The issue is not the risk level itself — it is the surprise. Companies that register accurately, prepare for the associated compliance requirements, and maintain consistent operations across all government databases do not get audited by surprise. They get audited on schedule, pass, and move on.
The companies that get caught are the ones that tried to be clever with a five-digit number.
| Multiple unrelated codes | Shell company signal. High complexity audit score. Immigration sponsorship questions. | 2-3 related codes in one sector — Normal business scope. Clean audit profile. |
| Frequent KBLI changes (>1 per 24 months) | Benchmark arbitrage suspicion. KITAS alignment issues. Pattern recognition alert. | Stable registration with planned expansion — Shows genuine business evolution. |