Can an Overseas Director Control a PT PMA Bank Account Remotely After Opening?
How an overseas director can approve, monitor, and recover access without surrendering the PT PMA’s banking controls to a local proxy.
An overseas director can potentially control a PT PMA bank account remotely after opening if the deed and bank mandate authorize the role, the bank’s digital platform supports the required users and approvals, identity and KYC are current, tokens or credentials can be used and recovered securely, and transaction limits and evidence procedures fit the company’s payments. Remote control is a bank-specific operating arrangement, not a right created by foreign directorship alone.
The director may still need an in-person step for initial enrollment, specimen signatures, token collection, mandate changes, high-risk transactions, replacement credentials, or periodic KYC. International transfers can require supporting documents and manual bank review. Do not solve time-zone or travel friction by giving a local employee, nominee, or provider uncontrolled sole access. Design remote authority with segregation, backup, incident response, and a lawful local continuity role.
Key takeaways
- Remote operation begins with valid company authority and a bank-accepted mandate.
- Maker, checker, releaser, administrator, and view-only rights should remain separated.
- Token and recovery logistics matter as much as ordinary login.
- International, new-beneficiary, and unusual transactions may require extra evidence or manual review.
- Maintain a lawful limited local continuity role without transferring uncontrolled ownership or payment power.
In this article
Test remote post-opening control
Review the deed, mandate, platform, users, tokens, international payments, KYC updates, and recovery before relying on overseas approval.
Remote control readiness test
The account is remotely controllable only when authority, technology, evidence, and recovery all work without creating a single uncontrolled proxy.
| Capability | Remote requirement | Fallback |
|---|---|---|
| Approve payments | Authorized signer or releaser and supported authentication | Joint backup or bank-approved emergency process |
| Create payments | Maker role with controlled beneficiaries and evidence | Local finance under limited access |
| Monitor | Statements, alerts, audit logs, and read-only access | Independent bank reconciliation |
| International transfer | Evidence upload, FX, limits, cut-off, compliance support | Branch or relationship-manager escalation |
| Recover access | Controlled email, phone, token, identity, and bank contact | Planned visit or authorized replacement route |
| Update KYC | Current passport, address, tax, role, and business data | Timed renewal and original-review plan |
Confirm the overseas director’s authority and bank mandate
The current deed determines how directors represent the PT PMA, and the corporate resolution and bank mandate apply that authority to the account. A foreign director may be a sole or joint signer depending on those documents and bank acceptance. Digital access cannot lawfully expand authority beyond the deed or mandate.
Evidence test
Map the director’s opening, payment, limit, beneficiary, borrowing, foreign-transfer, and user-administration powers separately.
- Current director appointment and representation clause.
- Board or shareholder banking resolution.
- Bank signer mandate and specimen requirements.
- Digital role, amount, currency, and transaction limits.
Use the PT PMA bank requirements to retain the authority record. Keep the evidence together so the same answer can be supported across the notary, OSS record, tax file, and bank review.
Configure maker-checker-releaser roles across locations
A common model places payment preparation with Indonesian finance, review with another finance or control person, and final release with the overseas director. The exact roles depend on the platform. The administrator who can add users or change limits may carry more risk than an ordinary payment maker and should not be overlooked.
Execution test
Design roles for ordinary operations, absence, conflict, emergency, and fraud. Ensure no person can create, approve, release, and reconcile the same transaction alone.
- Maker prepares payment and attaches evidence.
- Checker reviews beneficiary, amount, purpose, and budget.
- Releaser authorizes within mandate and limit.
- Administrator and read-only auditor remain separately controlled.
Record every role, backup, limit, token, and revocation owner in a company access register. Assign an owner and a completion condition instead of treating the item as a general reminder.
Solve token, device, and recovery logistics
Remote access can fail when a token cannot be delivered overseas, a registered phone changes, a passport expires, a device is replaced, or the bank requires branch confirmation. Confirm whether authentication works abroad, whether the token can travel, which contact receives alerts, and how replacement or reset is performed.
Mismatch test
Run a recovery test on paper before the director leaves Indonesia. Name the bank contact, required identity, corporate authority, forms, lead time, and travel trigger.
- Physical or digital token issuance and overseas use.
- Company-controlled email, phone, device, and alerts.
- Password reset, token replacement, and call-back process.
- Lost device, compromised credential, and director-unavailable response.
Review remote-risk claims with the remote bank account promise guide. If two records give different answers, resolve the source record first and then refresh downstream documents.
Configure roles and limits safely
Run ordinary, high-value, new-beneficiary, international, unavailable-director, and compromised-token scenarios.
Plan international payments and supporting evidence
Cross-border transfers can require invoices, contracts, tax evidence, loan or capital documents, purpose codes, beneficiary information, FX conversion, and compliance review. The digital platform may allow initiation but a bank officer may still request clarification before release. Time zones and cut-off times should be built into approval deadlines.
Control test
Select the first three transaction types and document the exact preparation, evidence, approval, cut-off, bank review, rejection, and settlement process.
- Supplier or service payment and tax treatment.
- Capital, shareholder loan, or repayment evidence.
- Dividend, royalty, reimbursement, or related-party support.
- FX rate, fee, correspondent deduction, and statement reconciliation.
Do not approve blank or incomplete payment evidence merely because the director is in a different time zone. Document who can approve the decision, who can execute it, and what record will prove completion.
Maintain KYC and mandate changes from overseas
Banks periodically update customer, UBO, director, address, passport, tax, business, and transaction data. Corporate amendments, director changes, new shareholders, new KBLI, higher volumes, new countries, or expired documents can trigger updates. Some changes can be submitted electronically; others can require original or in-person steps.
Readiness test
Maintain a twelve-month expiry and change calendar and ask the bank which events require prior notice, new resolution, token change, or attendance.
- Passport, address, tax residence, and contact expiry.
- Director, signer, shareholder, UBO, and authority changes.
- Business activity, license, country, currency, and volume changes.
- Bank forms, originals, electronic verification, and travel lead time.
Include bank KYC maintenance in the PT PMA compliance calendar. A document is ready only when its names, dates, authority, and business purpose match the rest of the file.
Build local continuity without a nominee controller
A PT PMA may need local finance staff or a limited representative to prepare documents, contact the branch, collect allowed items, or handle emergencies. Give only the authority required, use maker-checker separation, retain overseas visibility, and keep root credentials and corporate records under company control. A local person should not secretly hold or control the account for the foreign owners.
Decision test
Define local acts, limits, expiry, audit, token custody, conflict, revocation, and backup. Test continuity when the overseas director is unavailable for forty-eight hours.
- Limited maker or contact role without sole release authority.
- Specific power of attorney only where bank accepted and necessary.
- Independent statement access and reconciliation.
- Emergency payroll, tax, fraud freeze, and bank-contact process.
Use the remote PT PMA authority guide to constrain delegated acts. Use the result to decide what must be fixed before the next filing or bank contact.
Use the Indonesia company registration service overview to test whether the proposed implementation scope covers this decision. Review the Indonesia company registration scope.
Regulatory Notes and Limitations
Remote post-opening access depends on the bank platform, customer risk, mandate, geography, and transaction. Features and requirements can change.
- Foreign directorship does not itself create bank signatory or platform authority.
- The deed, corporate approvals, bank mandate, and digital configuration must agree.
- The bank can require additional or in-person verification for updates, high-risk transactions, or credential replacement.
- International transfers remain subject to supporting evidence and bank review.
- Do not use a nominee or uncontrolled local proxy to conceal the true controller or bypass bank requirements.
Official References and Review Basis
Primary materials were checked on July 28, 2026. The links below support the regulatory and banking framework used in this article; they do not replace a matter-specific legal, tax, licensing, or bank review.
- Limited Liability Company Law No. 40 of 2007: Company-law framework for share capital, corporate organs, records, and shareholder rights.
- OJK Regulation No. 8 of 2023: CDD, beneficial-owner review, enhanced measures, and face-to-face or electronic verification framework for financial services.
- Bank Mandiri Giro requirements: Published eligibility, supporting-document, blacklist, and power-of-attorney conditions for corporate current accounts.
- BCA Current Account requirements: Published corporate current-account rules, including authorized representatives and powers of attorney.
- BNI Giro corporate-account requirements: Published bank checklist for deeds, NIB, NPWP, management composition, authorized officials, and initial deposit.
Practical conclusion
An overseas director can potentially control a PT PMA bank account remotely after opening, but the arrangement succeeds only when authority, platform roles, authentication, evidence, KYC maintenance, and recovery are designed together.
Keep payment preparation and release separated, secure tokens and recovery channels, plan cross-border evidence and cut-offs, maintain KYC proactively, and give local personnel only the limited continuity authority the company can monitor and revoke.
Build a lawful continuity plan
Limit local roles, preserve overseas visibility, and document recovery, mandate changes, KYC renewals, and travel triggers.
Frequently asked questions
