BROKER DUE DILIGENCE
Indonesia Company Registration Broker Risks Explained
A decision-led briefing on intermediary identity, hidden subcontractors, payment flows, data exposure, credentials, and liability, for foreign investors who need evidence they can verify before acting in Indonesia.
A registration broker may coordinate useful specialists, but founders should not confuse coordination with notarial, legal, tax, immigration, bank, or government authority. Hidden subcontracting can obscure competence, conflicts, fee margins, data recipients, payment destinations, and liability for mistakes. The company needs a performer map, verified contracting entity, controlled data access, direct evidence, and ownership of all credentials and originals. The safe sequence is to confirm the exact facts, identify the authority or institution that decides each stage, collect evidence in the form that recipient accepts, and assign corrections before money or authority moves. Founders should preserve the source data, official output, access credentials, payment trail, and change history so the company can demonstrate the basis for its decision later.
Key takeaways
- A registration broker may coordinate useful specialists, but founders should not confuse coordination with notarial, legal, tax, immigration, bank, or government authority.
- Build the broker review from current official requirements and recipient-accepted evidence.
- Treat the broker review as incomplete until its corporate, regulatory, payment, and operating records agree.
- Keep official outputs, source data, payments, credentials, and unresolved conditions under company control.
Identify who actually performs each registration task
A broker may introduce or coordinate providers without being the notary, lawyer, tax adviser, immigration sponsor, registered-address provider, bank, or filing account owner. That commercial role is not automatically improper, but the investor needs to know the legal contracting party, actual professionals, fee margin, data recipients, conflicts, authority, and responsibility when advice is wrong or a submission fails. Anonymous subcontracting makes competence and liability hard to verify. For the broker review, the immediate acceptance point is to know the counterparty against the documented legal entity, role, and liability.
Require a performer map with entity names, registration or professional capacity, named contacts, tasks, access rights, payment flow, data handling, deliverables, and escalation. Verify the provider's company and official outputs independently. The PT PMA should own its registered email, phone, OSS and tax recovery channels, originals, and final files. If a broker refuses direct evidence or claims that secrecy is required by a government connection, stop payment and seek an independent check. Within the broker review file, the responsible officer should preserve notary, adviser, filer, address, and sponsor as evidence for the decision to verify actual work.
Broker transparency
Contract. Legal entity, role, and liability; know the counterparty.
Performers. Notary, adviser, filer, address, and sponsor; verify actual work.
Control. Payments, data, credentials, and originals; keep company ownership.
Validate the evidence before the next commitment
Convert the open questions into a dated review file with named owners, accepted evidence, and a clear stop condition.
Verify provider authority, custody, and correction liability
Provider due diligence should establish identity, contracting entity, professional role, authority, payment account, and responsibility for every filing. An agent may coordinate work without being the notary, lawyer, tax adviser, immigration sponsor, or bank decision-maker. The engagement should identify each actual performer and the limits of their authority. For the broker review, the immediate acceptance point is to control deposits and disbursements against the documented entity bank account, invoice, tax, and receipt.
Before payment, verify official company and registration evidence and use a controlled contract. An independent document and payment check should support the provider review. Require no guaranteed approvals, no unexplained personal accounts, no withholding of company credentials, and no substitution of screenshots for downloadable official records. State how errors, rejected submissions, missed deadlines, and termination will be handled. Within the broker review file, the responsible officer should preserve originals, credentials, and official outputs as evidence for the decision to set handover and recovery rights.
Provider checks
| Control | Evidence | Decision |
|---|---|---|
| Identity and role | Contracting entity and actual professionals | Verify authority and conflicts |
| Money | Entity bank account, invoice, tax, and receipt | Control deposits and disbursements |
| Custody | Originals, credentials, and official outputs | Set handover and recovery rights |
Normalize price, scope, taxes, and exclusions
A provider quote is comparable only when scope, assumptions, taxes, third-party charges, and acceptance evidence are normalized. Headings such as complete setup, bank support, or all licenses have no operational meaning unless the proposal names the precise output and any condition outside the provider's control. The investor should convert each offer into the same comparison sheet. For the broker review, the immediate acceptance point is to allocate foreseeable failure costs against the documented correction, delay, refund, and liability term.
Require legal entity, KBLI analysis, foreign ownership review, deed, AHU output, tax setup, OSS output, license verification, address work, bank assistance, immigration, compliance onboarding, originals, credentials, corrections, and cancellation terms to appear as included, excluded, optional, or conditional. Link payments to verifiable milestones and never pay capital or government charges into an unexplained personal or intermediary account. Within the broker review file, the responsible officer should preserve named output and acceptance test as evidence for the decision to mark included, excluded, or conditional.
Quote normalization
Scope
Named output and acceptance test
Mark included, excluded, or conditionalPrice
Fee, tax, disbursement, and currency
Compare the same commercial basisRisk
Correction, delay, refund, and liability term
Allocate foreseeable failure costsResolve the decision gaps before filing
Reconcile the corporate, regulatory, payment, and operating facts before they become amendments or rejected submissions.
Protect the registration deposit with scope and payment evidence
A company-registration deposit should pay an identified contracting entity for defined work under an invoice and contract. Before transfer, verify the provider's legal name, authority, bank account, tax treatment, notary or specialist roles, deliverables, third-party disbursements, cancellation rights, refund basis, correction duty, and custody of originals and credentials. A personal account, cash request, crypto transfer, urgency claim, or unexplained split payment needs escalation. For the broker review, the immediate acceptance point is to do not use unexplained recipients against the documented verified contracting entity and bank account.
Tie the deposit to an initial acceptance package such as the signed engagement, approved fact sheet, ownership and KBLI review, document matrix, filing plan, and itemized disbursement budget. State which fees are earned on commencement and which remain refundable or held for later milestones. Never combine paid-up capital, government charges, address rent, bank opening funds, and professional fees into one undefined transfer. Reconcile every payment to an invoice, receipt, deliverable, and remaining balance. Within the broker review file, the responsible officer should preserve named work, tax, and disbursements as evidence for the decision to separate every category.
Take control of documents, credentials, and open obligations
A registration engagement is not complete until the company can operate without dependence on the provider's personal accounts or device. Handover should cover final documents, source data, credentials, registered email and phone details, authentication methods, originals, payment receipts, filing history, and unresolved obligations. Access should be tested by an authorized company officer. For the broker review, the immediate acceptance point is to transfer and test control against the documented OSS, tax, email, phone, and authentication.
Remote matters need an especially clear revocation and recovery plan. Reconcile the deed, AHU approval, tax record, NIB, licenses, shareholder register, beneficial-owner data, and bank application before acceptance. Record who holds each original, how each credential can be recovered, and when any power of attorney or temporary access must end. Within the broker review file, the responsible officer should preserve conditions, renewals, and corrections as evidence for the decision to assign owner and due date.
Handover register
Documents. Final files, originals, and filing receipts; inventory and verify.
Access. OSS, tax, email, phone, and authentication; transfer and test control.
Open work. Conditions, renewals, and corrections; assign owner and due date.
Engage the broker only after the actual performers, money flow, and accountability are visible
The approval decision for the broker review should name the selected route, responsible company officer, accepted source data, supporting documents, official outputs, payment limits, unresolved conditions, and the event that permits the next commitment. For intermediary identity, hidden subcontractors, payment flows, data exposure, credentials, and liability, a conditional result should remain a visible gate rather than being absorbed into a broad statement that setup is complete.
The founders or board should sign a short broker review mandate that records the current facts, authority, required corrections, evidence location, system and credential owners, review date, and first transaction that the company intends to perform. The working file should connect legal identity, ownership, governance, activity, capital, premises, licensing, tax, banking, immigration, and real conduct wherever those facts are relevant. Recheck current official and institution-specific requirements immediately before filing, funding, signing, employing, or operating.
Put the approved route under company control
Record the decision, authority, documents, access, payment limits, and follow-up calendar in one owner-approved mandate.
Frequently asked questions
Should founders pay a broker's personal account?
An unexplained personal beneficiary is a major warning sign. Verify the contracting entity, invoice, authority, bank account, purpose, and receipt before any transfer.
Can a registration provider guarantee approval?
No. The notary, AHU, OSS, tax authority, sector authority, bank, and Immigration make their own decisions; contracts should use evidence-based endpoints.
Who should own the OSS and tax credentials?
The company should control registered contacts, authentication, recovery, downloads, and filing history through authorized officers, with limited provider access.
How should third-party charges be paid?
Use an itemized approval, verified beneficiary, official or supplier evidence, receipt, unused-balance treatment, and reconciliation to the relevant deliverable.
What should happen at termination?
Stop authority and access, return data and originals, transfer credentials and work files, reconcile money, identify pending submissions, and record correction and cooperation duties.
