BANK CONTROL
PT PMA Bank Signatory Control: Authority, Limits, Tokens, and Handover
A decision-led briefing on PT PMA bank signatory and access controls, for foreign investors who need evidence they can verify before acting in Indonesia.
Bank-signatory risk is not limited to forged signatures. Unclear resolutions, old directors, excessive limits, single-person control, shared tokens, personal devices, and incomplete handover can expose company money. Treat every important claim as an evidence question: who has authority, which rule applies, what official output is required, what status makes it usable, and who owns the next action. If the result is conditional, record the condition as a pre-signing or pre-operation gate. That approach prevents a certificate, title, payment receipt, or provider message from being mistaken for a complete approval. The decision record should name the responsible owner and the evidence accepted for each unresolved condition.
Key takeaways
- Bank-signatory risk is not limited to forged signatures.
- Build the bank-signatory controls from current official requirements and recipient-accepted evidence.
- Treat the bank-signatory controls as incomplete until its corporate, regulatory, payment, and operating records agree.
- Keep official outputs, source data, payments, credentials, and unresolved conditions under company control.
Translate director authority into a bank-accepted mandate
Corporate authority and bank authority must be reconciled, not assumed. A bank can review the deed, AHU profile, board composition, resolutions, specimen signatures, UBOs, tax data, business purpose, and individual KYC before deciding who may open or operate the account. The current BCA corporate current-account requirements , for example, describe corporate representatives, powers of attorney, individual-customer data, and supporting documents; another bank may apply a different process. For the bank-signatory controls, the immediate acceptance point is to identify accepted representatives against the documented current deed, AHU data, and board resolution.
Prepare a mandate matrix for account opening, transfers, beneficiaries, foreign exchange, loans, cards, cash-management platforms, token custody, limit changes, and closure. Compare single and joint signing, transaction limits, maker-checker roles, temporary powers, and revocation. The final bank forms and system setup should match the approved corporate resolution, and access should be tested before the company receives customer money or makes a material payment. Within the bank-signatory controls file, the responsible officer should preserve signing rules, limits, maker-checker, and tokens as evidence for the decision to configure account access.
Closing conditions should include the bank KYC refresh after a shareholder change because bank recognition follows its own evidence and approval process.
Bank mandate matrix
Authority. Current deed, AHU data, and board resolution; identify accepted representatives.
Controls. Signing rules, limits, maker-checker, and tokens; configure account access.
Change. Revocation and bank KYC refresh evidence; remove old authority promptly.
Verify the PT PMA bank signatory and access controls before the next commitment
Turn the current facts, official checks, accepted evidence, open conditions, and responsible owners into one dated decision file.
Trace signing power from the deed to the specific transaction
A director's title does not answer every authority question. Start with the Indonesian Company Law , the articles of association, current AHU record, shareholders' or board resolutions, reserved matters, transaction thresholds, joint-signature rules, conflicts, and any lender, license, or shareholder-agreement condition. Then identify the legal act: an ordinary contract, property commitment, financing, guarantee, bank instruction, employment action, notarial deed, tax filing, OSS declaration, or delegated power can require different evidence. For the bank-signatory controls, the immediate acceptance point is to match the transaction against the documented board or shareholder resolution and limits.
Prepare an authority certificate for material transactions that states the company, current directors, relevant constitutional clause, approval body, resolution date, signatory combination, financial limit, validity, and exclusions. Compare it with the counterparty's original or independently verified corporate documents. A specimen signature, business card, email, or possession of a company stamp is not enough. Where authority is delegated, inspect the power of attorney, authentication, substitution right, expiry, revocation, and whether the principal retained the power to grant it. Within the bank-signatory controls file, the responsible officer should preserve signer, joint rules, and power of attorney as evidence for the decision to verify before commitment.
Authority chain
| Control | Evidence | Decision |
|---|---|---|
| Constitution | Deed, AHU record, and reserved matters | Use current corporate evidence |
| Approval | Board or shareholder resolution and limits | Match the transaction |
| Execution | Signer, joint rules, and power of attorney | Verify before commitment |
Design lawful ownership, board roles, and signing authority
The governance file should identify shareholders, subscription amounts, directors, commissioners, authorized signers, reserved decisions, and beneficial owners. Under the Indonesian Company Law, a conventional PT is established by two or more persons subject to statutory exceptions, and its organs include the shareholders' meeting, board of directors, and board of commissioners. PT PMA planning should use the conventional corporate framework unless qualified Indonesian advice confirms another route. For the bank-signatory controls, the immediate acceptance point is to adopt resolutions and controls against the documented reserved matters and signing limits.
Check the current consolidated effect of the Indonesian Company Law and sector rules with the notary. Foreign directors or commissioners can raise immigration, employment, tax-residency, bank-presence, and practical signing questions even where corporate eligibility is available. Define who can bind the company, open and operate accounts, approve payments, sign tax filings, and respond to authorities before the deed is executed. Within the bank-signatory controls file, the responsible officer should preserve subscribers, shares, and beneficial owners as evidence for the decision to verify authority and funding.
Governance controls
Ownership
Subscribers, shares, and beneficial owners
Verify authority and fundingManagement
Directors, commissioners, and duties
Check eligibility and practical presenceAuthority
Reserved matters and signing limits
Adopt resolutions and controlsResolve the open conditions in the bank-signatory controls
Reconcile the corporate, regulatory, document, payment, and operating dependencies that can change the result for this company.
Prepare for the bank's independent KYC and account decision
A corporate bank account is not issued automatically because the PT PMA has an AHU approval, NPWP, or NIB. The bank independently assesses the company, beneficial owners, shareholders, directors, signatories, business purpose, licenses, address, contracts, expected transactions, currencies, source of funds and wealth, tax residence, sanctions and risk factors, and original-document or presence requirements. Criteria can differ by bank and branch. For the bank-signatory controls, the immediate acceptance point is to use final outputs against the documented deed, AHU, tax, NIB, licenses, and address.
Build one KYC file that reconciles the executed deed, AHU corporate output , tax data, OSS licenses, UBO report, ownership chart, passports, corporate-shareholder documents, address evidence, business plan, contracts, and funding narrative. Ask the chosen bank for current requirements in writing, but preserve a fallback institution and visit plan. Before the first remittance, approve signatory combinations, online access, token custody, payment limits, beneficiary controls, accounting evidence, and how paid-up capital will be described and used. Within the bank-signatory controls file, the responsible officer should preserve UBO, shareholders, directors, and signatories as evidence for the decision to complete KYC.
Take control of documents, credentials, and open obligations
A registration engagement is not complete until the company can operate without dependence on the provider's personal accounts or device. Handover should cover final documents, source data, credentials, registered email and phone details, authentication methods, originals, payment receipts, filing history, and unresolved obligations. Access should be tested by an authorized company officer. For the bank-signatory controls, the immediate acceptance point is to transfer and test control against the documented OSS, tax, email, phone, and authentication.
Remote matters need an especially clear revocation and recovery plan. Reconcile the deed, AHU approval, tax record, NIB, licenses, shareholder register, beneficial-owner data, and bank application before acceptance. Record who holds each original, how each credential can be recovered, and when any power of attorney or temporary access must end. Within the bank-signatory controls file, the responsible officer should preserve conditions, renewals, and corrections as evidence for the decision to assign owner and due date.
Handover register
Documents. Final files, originals, and filing receipts; inventory and verify.
Access. OSS, tax, email, phone, and authentication; transfer and test control.
Open work. Conditions, renewals, and corrections; assign owner and due date.
Approve a bank mandate that remains usable, limited, and revocable
The approval decision for the bank-signatory controls should name the selected route, responsible company officer, accepted source data, supporting documents, official outputs, payment limits, unresolved conditions, and the event that permits the next commitment. For PT PMA bank signatory and access controls, a conditional result should remain a visible gate rather than being absorbed into a broad statement that setup is complete.
The founders or board should sign a short bank-signatory controls mandate that records the current facts, authority, required corrections, evidence location, system and credential owners, review date, and first transaction that the company intends to perform. A defensible decision begins with the real commercial activity and the people, money, documents, locations, and authority needed to carry it out. Recheck current official and institution-specific requirements immediately before filing, funding, signing, employing, or operating.
Put the approved bank-signatory controls under company control
Record the final route, authority, source documents, access, payment limits, handover, review date, and next operating trigger.
Frequently asked questions
What should be confirmed before approving the bank-signatory controls?
Confirm the current official position, recipient-specific requirements, authority, source documents, and unresolved conditions for PT PMA bank signatory and access controls. Record the approval and evidence before the company signs, pays, files, or operates.
Can founders use personal payments for company expenses?
Emergency payments need documented authority, business purpose, evidence, accounting treatment, tax review, and reimbursement; routine mixing weakens the company trail. For this bank-signatory controls, record how that answer applies to PT PMA bank signatory and access controls and preserve the evidence used.
Should equity and shareholder loans share one ledger account?
No. Their legal rights, approvals, bank narrative, tax, repayment, and reporting differ and should be classified from receipt. For this bank-signatory controls, record how that answer applies to PT PMA bank signatory and access controls and preserve the evidence used.
What evidence should support a monthly close?
Retain contracts, invoices, receipts, bank statements, payroll, tax calculations, payment evidence, filed returns, ledger reconciliation, approvals, and correction history. For this bank-signatory controls, record how that answer applies to PT PMA bank signatory and access controls and preserve the evidence used.
Can a bank or tax adviser guarantee acceptance?
No. Advisers can prepare and review evidence, while banks and authorities make independent decisions under their current procedures. For this bank-signatory controls, record how that answer applies to PT PMA bank signatory and access controls and preserve the evidence used.
Regulatory notes, official references, and review basis
Requirements affecting PT PMA bank signatory and access controls were checked against the linked official or institution-specific materials on August 10, 2026. The responsible company officer should reconfirm the rule, system status, recipient requirements, and transitional conditions that apply on the actual filing, payment, signing, or operating date for the bank-signatory controls.
- BCA corporate current-account requirements
- Indonesian Company Law — Law No. 40 of 2007 on Limited Liability Companies; Government of Indonesia; enacted, promulgated, and effective 16 August 2007; current with amendments as checked 10 August 2026.
- AHU corporate output