Indonesia Bank KYC Refresh After a PT PMA Shareholder Change
A shareholder transfer is not bank-ready until the legal record, beneficial ownership trail, signatory authority, and source-of-funds evidence tell the same story.
A PT PMA shareholder change should trigger a controlled bank KYC refresh, not a casual email to the relationship manager. The bank must make its own customer due-diligence decision, and the documents it requests can differ by institution, ownership chain, nationality, account activity, and risk profile. Start with a change map that identifies what changed, when it became legally effective, who ultimately benefits, and whether any authorized user or transaction limit must change.
Treat AHU, beneficial ownership, OSS, tax, and bank records as one evidence chain. A bank notice submitted before the corporate file is internally consistent can create repeated requests or temporary restrictions. The practical objective is not merely to show a new shareholder name; it is to let the bank reconstruct ownership, authority, and legitimate funding without guessing. The bank signatory change pack is a useful companion when control of the account also changes.
Key takeaways
- Freeze a dated corporate snapshot before notifying the bank.
- Trace the ownership chain to the natural-person beneficial owner.
- Separate shareholder, director, signatory, maker, checker, and token-holder roles.
- Preserve the bank's request list, every submission version, and final acknowledgement.
In this article
Review the ownership-change evidence
Map the legal record, UBO trail, mandate, and live access before the bank submission starts.
Identify the exact KYC refresh trigger
The first task is to define the event precisely. A sale of shares, capital increase, upstream parent change, new beneficial owner, director replacement, or changed account authority can affect different bank records. Do not describe every event simply as a shareholder update. Prepare an event memo with the executed date, corporate approval date, AHU acceptance or notification evidence, effective ownership percentages, and any planned change to payment authority. That memo becomes the index for the submission file.
Indonesia's financial-sector anti-money-laundering framework requires risk-based customer due diligence, including attention to beneficial owners and verification. That means a bank may ask beyond the minimum corporate certificate list. It may request the complete ownership chart, identity documents, business rationale, transaction profile, proof of address, originals, translations, or an interview. A prior account opening does not prevent a fresh review when control changes.
Ask the bank for a written, account-specific checklist and record the response date and owner. Compare it with the company's own change map before sending anything. If the bank's form uses an old shareholder, address, business activity, or director, stop and reconcile the discrepancy. The KYC refresh calendar and evidence pack can help turn future expiry dates into assigned tasks.
| Change event | Evidence to prepare | Bank question to resolve |
|---|---|---|
| Direct share transfer | Deed, approvals, AHU evidence, updated cap table | Who owns, controls, and funds the company now? |
| Upstream ownership change | Parent records, ownership chart, natural-person UBO trail | Did the ultimate beneficial owner or risk profile change? |
| Director or signatory change | Corporate approvals, identity and mandate forms | Who may instruct, approve, and access the account? |
| Capital increase | Approvals, remittance trail, accounting classification | Is the incoming money consistent with declared ownership and activity? |
Freeze the corporate record before bank submission
Create one dated corporate snapshot and prohibit uncontrolled edits while the submission is open. The snapshot should contain the deed and approvals for the change, the current AHU company profile, the post-closing shareholder register, the director and commissioner list, beneficial owner information, NIB and relevant licensing records, tax identity data, and the bank's existing mandate. The file owner should mark which item is authoritative for each fact and which items are still pending update.
A mismatch is often more damaging than a missing document because it makes the reviewer decide which version to trust. Common examples include an old shareholder in a bank form, a new director absent from a license profile, an outdated registered address, or ownership percentages that do not total correctly. Use the document version-control structure so executed, filed, translated, and draft records are not mixed.
Run a four-way reconciliation across legal, licensing, tax, and bank data. Each discrepancy needs an owner, corrective route, expected completion date, and decision on whether the bank can be notified with an explanation or only after correction. Never alter dates or create a backdated document to make the file appear aligned. If sequence is uncertain, obtain Indonesian legal and tax advice before representing that a change is final.
Legal record
Confirm the executed deed, required approvals, AHU status, shareholder register, and board composition. Record any condition that remains outstanding.
Operating record
Compare NIB, business activities, registered and operating addresses, tax profile, and beneficial owner information with the post-change facts.
Bank authority
List every signer, online-banking user, token holder, maker, checker, limit, and approval rule before designing the cutover.
Plan a controlled bank cutover
Protect critical payments while signers, users, tokens, and limits are updated through the bank's process.
Build the shareholder and UBO evidence chain
A cap table is only the beginning when a shareholder is another company. Build an ownership chart from the Indonesian company through every intermediate entity to each natural person who ultimately owns or controls it. Label jurisdictions, legal names, registration numbers, ownership percentages, voting or control rights, and the document supporting every link. If ownership and control differ, explain both rather than forcing them into one percentage column.
Prepare current identity, address, and corporate-registry evidence according to the bank's requested form and validity period. Foreign documents may require translation, certification, notarization, legalization, or originals depending on the bank and the document. Do not assume one bank's acceptance standard applies to another. Maintain a request log showing what the bank asked for, what was delivered, and the exact file version, so later answers remain consistent.
Link the new ownership to the commercial rationale and expected account behavior. Explain why the transfer occurred, how the purchase or capital contribution was funded, whether expected transaction values or countries change, and how the company will use the account. Preserve payment and source-of-funds evidence without overstating what it proves. The bank, not the company or adviser, decides whether the material satisfies its review.
Ownership
Use registry extracts, constitutional records, shareholder registers, and a mathematically checked chart to connect every entity in the chain.
Control
Document special voting, appointment, veto, nominee, trust, or contractual rights that may identify a controller beyond simple ownership.
Funding
Keep transfer agreements, board approvals, bank remittances, payer identity, currency, date, amount, and accounting treatment in one traceable schedule.
Sequence the bank update without losing payment access
Design the cutover before removing an existing user or signer. Map payroll, tax, vendors, customer refunds, subscriptions, loan payments, and statutory deadlines that depend on the account. Decide which authority changes must occur together and whether the bank permits continuity while it reviews new users. Never promise uninterrupted access; document the contingency for critical payments if the bank pauses an instruction or requires an in-person step.
Separate governance approval from technical access. A director's appointment does not automatically issue an online-banking credential, and removal from a corporate role does not prove that every token, card, device, API key, or approval workflow has been disabled. Obtain bank acknowledgements, test maker-checker controls with a low-risk transaction where permitted, and reconcile the live user list after cutover.
Close the project with a dated bank-state record: accepted KYC pack, open questions, current mandate, user and token inventory, account and limit list, tested workflow, and next refresh or expiry dates. Store it with the share-transfer closing file. If the company needs help aligning incorporation, governance, tax, and banking dependencies, review the Indonesia company registration framework before treating bank activation as an isolated task.
Continuity
Inventory time-sensitive payments and nominate an approved contingency route that does not mix personal, nominee, or unrelated-company funds.
Access
Reconcile legal authority, bank mandate, online roles, physical tokens, cards, devices, and notification contacts as separate control layers.
Closure evidence
Retain the bank's final acknowledgement and screenshots or exports of live authority settings, subject to secure handling of sensitive data.
Official references and review basis
The following primary sources were checked on August 1, 2026. They establish the regulatory or service boundary used in this article; bank, tax office, OSS, AHU, and immigration decisions can still depend on the current record and the facts of a particular application.
- OJK — POJK 8 of 2023 announcement — Confirms the risk-based AML/CFT framework and customer due-diligence focus, including beneficial owners.
- AHU — Limited Liability Company services — Primary portal context for Indonesian limited-company establishment and changes.
- AHU — Beneficial ownership transparency — Official context for corporate beneficial ownership transparency.
- BCA — Business current account — Example of a bank's current account documentation and licensing requirements; other banks may differ.
The bank-ready evidence chain after a PT PMA shareholder change
The defensible outcome is a traceable chain from the executed corporate change to the current shareholder register, natural-person beneficial owners, licensing and tax records, bank mandate, and live access settings. No single certificate proves all of those points. A named owner should reconcile them, log exceptions, and prevent a draft or outdated record from re-entering the submission.
Release the project only when the bank has acknowledged its review status, critical payment continuity has been tested, removed users no longer have access, and unresolved requests have owners and deadlines. This is a control milestone, not a guarantee of approval or continued service. Escalate legal interpretation, tax effects, sanctions questions, and unexplained funding to qualified professionals and the bank before acting.
Resolve the open KYC exceptions
Turn every missing, inconsistent, or expired item into an owner, evidence route, and deadline.
Frequently asked questions
