QRIS in Indonesia: payment flows, limits and safe confirmation

QRIS is Indonesia’s standard for QR payments, not a single wallet. Learn how merchant payments differ from QRIS TUNTAS and cross-border use, and how to read a transaction ceiling without confusing it with a wallet balance limit.

Understand which QRIS operation you are using

The Bank Indonesia QRIS guide distinguishes merchant-presented codes from consumer-presented codes. A static merchant code normally requires the payer to enter the amount; a dynamic code can include it. QRIS TUNTAS adds withdrawal, transfer and cash-deposit functions through participating providers. These are different operations, so a fee quoted for a TUNTAS transfer should not be presented as the price of every shop payment. QRIS describes an interoperable standard; the account, app, available features and customer support still come from the participating payment provider.

Keep the ceiling and the fee category distinct

Bank Indonesia’s referenced guide states a maximum of Rp10 million per QRIS transaction. Your provider may impose a lower usable limit. Its TUNTAS fee examples are operation-specific and should be checked against the provider’s current confirmation screen. Merchant discount rates concern merchant acceptance and should not be confused with a consumer cash-in charge. For the funding account, consult the GoPay balance guide or the corresponding provider’s own limit screen. If a payment complaint remains unresolved after contacting the provider, the Bank Indonesia complaint process describes the next route.

Comparison of evidence and checks

Practical comparison, checked 23 October 2026
QuestionWhat the evidence supportsWhat to verify
QRIS merchant paymentInteroperable QR payment standardMerchant name and amount
QRIS TUNTASTransfer, withdrawal or deposit featureOperation-specific fee and availability
Published transaction ceilingRp10 million per transaction in BI guideYour provider’s lower limits
Funding walletSeparate balance and receipt countersAvailable balance and current tier

A practical situation to work through

Suppose a small sports shop displays a QR sticker beside the counter. Scan it inside your existing payment app and compare the merchant name shown on the confirmation screen with the business you intend to pay. A sticker over another sticker is a reason to stop and ask the shop to verify the code. Enter the invoice amount yourself if the code is static. Do not add a second payment simply because the merchant has not yet received a notification: first compare the payer history and merchant receipt. For an Indonesian traveller abroad, a familiar QR shape alone does not establish compatibility. Cross-border service depends on participating apps and schemes, and the confirmation should make the currency conversion clear before approval.

Read the transfer screen as a contract

Before authorising a transfer, check the source account, destination institution or identifier, recipient display, amount and currency. Record the total debit including any fee. A rail-level transaction ceiling is different from your remaining daily allowance, wallet storage limit or incoming monthly limit. The provider may impose a lower cap. Do not split a transfer to evade a security control or identity check. If a payment is blocked, read the reason and use the provider’s official support. A larger account limit is not an instruction to keep more money in an everyday payment wallet.

Checklist for a payment you can reconcile

  • Confirm the recipient using a contact method already known to you. For a changed business account, call the business using its established number before paying.
  • Use a meaningful reference without including passwords or full identity numbers. After authorisation, inspect the transaction status and ask the recipient to check their own account.
  • A screenshot from a messaging app is not proof of settlement. Save the transaction reference and amount in a private folder.
  • If the screen is pending or times out, check history before retrying so that a delayed response does not become a duplicate payment.

Handle exceptions without creating a second loss

A mistaken recipient, an unauthorised debit and a delayed credit require different evidence. Contact the sending institution promptly with the reference and status, and ask whether a trace, recall request or fraud restriction is appropriate. An instant payment should never be described as automatically reversible. Do not send a further payment to an alleged recovery agent. This independent guide explains the process; only the provider can see account restrictions or determine the outcome. Fees and limits were checked on 23 October 2026 and must be rechecked in the app before a later transaction.

Frequently asked questions

Does this observatory operate the service?

No. This is independent editorial information. The named organiser, broadcaster, payment institution or public body operates its own service and sets its own conditions. Use the linked primary source for the action you need.

Are these details permanent?

No. The evidence was checked on 23 October 2026. Match schedules, rights, account limits, provider conditions and complaint procedures can change. Confirm the current information before making a payment, travelling or submitting a case.

What should I save for a later enquiry?

Keep the relevant official page or receipt, its date, the reference number and a short description of what occurred. Store personal and payment information privately, and submit it only through the appropriate verified support channel.

Sources and verification