e-KYC and OJK POJK 12/2017: What Fintechs Need to Know

e-KYC OJK compliance is now a threshold requirement for any fintech that wants to onboard customers remotely in Indonesia. As lending, payments and wealth platforms move fully digital, the old branch-based identity check no longer fits the customer journey — yet regulators still expect the same rigour in knowing who is on the other side of the screen. Electronic Know Your Customer, or e-KYC, is how the two demands are reconciled: it lets a customer complete a compliant identity check from their own device in minutes, while giving the institution a defensible record of how that identity was verified.

OJK POJK 12/2017 sits within the regulator's framework for digital financial innovation and provides the reference point many Indonesian fintechs use when designing remote onboarding. In practice, compliance is less about a single feature and more about being able to demonstrate sound customer due diligence: confirming that a customer is a real, present person, that the identity document they present is genuinely theirs, and that every step and outcome of the check is recorded. A well-designed e-KYC flow addresses each of these points as part of one automated pipeline rather than as scattered manual tasks.

Alfabeta e-KYC runs that full digital identity verification pipeline end to end. It captures a government-issued ID, reads the document with OCR, matches the ID portrait against a live selfie, and confirms the person is genuinely present through liveness detection. Because the flow is remote and automated, it replaces slow, paper-based, in-branch checks with something a customer can finish on their own phone — without the institution giving up the accuracy and auditability that regulated onboarding demands.

The first stage is document handling driven by OCR KTP capture. Optical character recognition reads the Indonesian national ID (KTP) and other identity documents automatically, extracting each field into structured data. Because the information is machine-read rather than retyped by an operator, the process removes the typos and rekeying errors that come with manual entry, shortens onboarding, and lowers operational cost — all while producing clean, structured data that downstream systems can act on immediately.

The second stage confirms that the document belongs to the person presenting it. Face matching compares the live selfie against the portrait on the ID, while liveness detection distinguishes a real, present person from a printed photo, a replayed video or a mask, defeating the presentation and spoofing attacks common in remote onboarding fraud. Face matching produces a similarity result measured against a configurable threshold — commonly set around 75%. That threshold is a policy lever each institution controls: a higher bar reduces false accepts at the cost of more manual reviews, while a lower one accepts more customers automatically.

Every verification returns a structured pass-or-fail result together with the evidence behind each decision, and the whole flow is captured in an audit trail. That trail records each step and outcome so the institution can evidence its customer due diligence during compliance reviews and regulatory reporting. This is where the division of responsibility matters: Alfabeta provides the verification technology and the timestamped record, but the financial institution owns the regulatory decision — how strict to set the threshold, when to escalate to manual review, and how each result maps to its own risk policy.

Because the capability is delivered through clean APIs, e-KYC drops into an existing onboarding journey rather than forcing a rebuild of the front end. A fintech keeps its own app and workflow and calls e-KYC as a service to capture the ID, run OCR, perform the face match and liveness check, and return a structured result with its supporting evidence. Alongside faster onboarding, institutions gain a paperless process, fewer manual errors and lower operational cost.

For fintech teams weighing how to meet e-KYC OJK compliance without slowing growth, the right starting point is a verification layer that is accurate, configurable and fully auditable — one that supports your obligations while leaving the regulatory call firmly in your hands. To see how this maps to your onboarding, explore Alfabeta e-KYC.