Legal Oversight of Investment and Fintech: Strategies for Risk Mitigation for Business Actors
Introduction
The rapid development of financial technology (fintech) in recent years has significantly transformed the landscape of the financial services industry in Indonesia. Digital innovation enables the public to access a wide range of financial services more quickly, easily, and efficiently without relying on conventional mechanisms that often require lengthy procedures. Services such as digital payments, electronic wallets, peer-to-peer lending, and application-based investment platforms have now become part of everyday economic activities.
However, the rapid growth of the fintech sector has also brought increasingly complex legal challenges. Technological innovation often develops faster than regulatory frameworks, creating various legal risks, including illegal investment schemes, consumer protection violations, misuse of personal data, and the potential for money laundering through digital platforms. In this context, the existence of an effective legal oversight framework becomes crucial in maintaining a balance between technological innovation and the protection of public interests.
Transformation of the Financial Industry through Fintech
Fintech essentially refers to the use of digital technology to enhance efficiency, accessibility, and innovation in financial services. This technology enables various financial activities to be conducted online, ranging from payment transactions to investment management.
In Indonesia, the growth of fintech has been driven by several key factors, including the increasing penetration of internet access and smartphone usage, the public’s demand for more inclusive financial services, and the rapid development of the digital economic ecosystem. These conditions have led to the emergence of various fintech business models, such as:
These innovations have significantly expanded public access to financial services. Nevertheless, the digitalization of the financial sector also increases the complexity of legal risks, particularly in relation to data security, consumer protection, and compliance with financial service regulations.
Legal Oversight Framework in the Fintech and Investment Sector
Legal supervision of fintech and digital investment activities in Indonesia is carried out through several regulatory institutions with distinct yet complementary authorities.
1. Financial Services Authority (OJK)
The Financial Services Authority (Otoritas Jasa Keuangan – OJK) is an independent institution responsible for regulating and supervising activities in the financial services sector, as stipulated in Law Number 21 of 2011 concerning the Financial Services Authority.
In the fintech sector, OJK has the authority to regulate various technology-based financial services, including:
Through licensing mechanisms, operational supervision, and periodic reporting obligations, OJK ensures that fintech operators comply with standards of corporate governance, risk management, and consumer protection.
Furthermore, OJK actively participates in combating illegal investment schemes through cooperation with the Financial Illegal Activity Eradication Task Force (Satgas PASTI), previously known as the Investment Alert Task Force (Satgas Waspada Investasi).
2. Bank Indonesia (BI)
In addition to OJK, Bank Indonesia holds authority over fintech activities related to the national payment system.
BI’s supervisory scope includes various digital payment services such as:
Regulations issued by Bank Indonesia aim to maintain the security and stability of the national payment system while ensuring that digital transactions are conducted safely and efficiently.
The Strategic Role of OJK in Public Protection
In the dynamic fintech industry, OJK’s role extends beyond regulation to include a critical dimension of public protection. OJK acts as the frontline institution ensuring that financial technology innovation does not undermine public interests.
One form of protection implemented by OJK is through licensing and supervision mechanisms for fintech operators. Every company seeking to operate in this sector must meet certain requirements, including capital adequacy, risk management systems, and information technology security standards.
Additionally, OJK adopts a risk-based supervision approach, enabling regulators to identify potential risks within the fintech industry at an early stage. This approach is particularly important given the highly dynamic nature of fintech and its reliance on complex technological systems.
OJK’s role also includes improving public financial literacy. Limited public understanding of digital financial products often leads individuals to fall victim to illegal investment schemes. Therefore, OJK’s public education initiatives play an important role in strengthening consumer protection within the digital financial sector.
Legal Risks in Investment and Fintech
Although the fintech sector offers significant business opportunities, business actors also face various legal risks.
1. Illegal Investment Risk
One of the most significant risks in the digital investment industry is the proliferation of illegal investment schemes operating without regulatory approval.
The Binomo case, which previously attracted widespread public attention, illustrates how digital investment platforms can operate extensively before eventually being declared illegal by authorities. In that case, many investors suffered losses due to opaque investment mechanisms and the absence of official regulatory authorization.
This case demonstrates that regulatory non-compliance may lead to serious legal consequences for business actors and substantial losses for investors.
2. Consumer Protection Violations
Lack of transparency regarding fees, interest rates, or risks associated with digital financial products may lead to legal disputes between fintech companies and consumers.
Under Indonesian law, consumer protection is governed by the Consumer Protection Law, which requires business actors to provide clear and non-misleading information to consumers.
3. Personal Data Protection Risks
Fintech platforms process large volumes of user data, including identity information, transaction history, and financial data.
With the enactment of the Personal Data Protection Law, fintech companies are legally required to ensure the security and confidentiality of user data. Violations of these obligations may lead to administrative sanctions as well as potential legal claims.
4. Money Laundering Risk
Digital platforms may also be misused for money laundering or terrorist financing if user identity verification systems are inadequate.
Therefore, the implementation of Know Your Customer (KYC) and Anti-Money Laundering (AML) principles constitutes a critical obligation for fintech operators.
Corporate Criminal Liability in the Fintech Industry and the New Criminal Code
The development of the fintech industry also raises an important legal question regarding who bears responsibility when criminal offenses occur within the operations of digital platforms.
In this context, the enactment of Law Number 1 of 2023 concerning the New Criminal Code (KUHP Baru) introduces significant developments in the concept of corporate criminal liability. The new Code explicitly recognizes corporations as subjects of criminal law that may be held accountable for criminal acts committed in the course of their business activities.
This approach represents a shift from the classical criminal law paradigm, focused solely on individual liability, toward a modern framework that also recognizes corporations as entities capable of bearing criminal responsibility.
In the fintech industry, this concept is particularly relevant because decision-making structures often involve multiple actors, including technology developers, corporate management, and beneficial owners. When a criminal offense occurs within corporate operations, legal liability may extend not only to individual perpetrators but also to the corporation that benefits from the unlawful activities.
The New Criminal Code also allows various forms of sanctions to be imposed on corporations, including:
Thus, the regulation of corporate criminal liability under the New Criminal Code provides a stronger legal foundation for law enforcement against the misuse of financial technology.
Legal Risk Mitigation Strategies for Business Actors
To minimize legal risks, fintech companies must implement a comprehensive risk management approach.
Strategic measures may include:
The Strategic Role of Lawyers in the Fintech Ecosystem
Within the increasingly complex fintech industry, the role of legal practitioners is highly significant. Lawyers not only serve as legal advisors but also act as strategic partners in ensuring regulatory compliance.
Their roles may include:
By involving legal professionals from the early stages of business development, companies can identify potential legal risks earlier and implement appropriate mitigation strategies.
Conclusion
The rapid growth of the fintech and digital investment sectors presents significant opportunities for innovation in the financial industry. Technology enables financial services to become more inclusive, efficient, and accessible to a broader segment of society.
However, such innovation also introduces complex legal challenges. Risks related to illegal investments, consumer protection violations, misuse of personal data, and potential corporate criminal offenses demonstrate that the fintech sector requires a robust legal oversight framework.
Through strengthened regulatory oversight by institutions such as OJK, the implementation of sound corporate governance principles, and strict compliance with applicable regulations, fintech business actors can mitigate potential legal risks. Ultimately, the sustainable development of the fintech industry will depend not only on technological sophistication but also on the commitment of business actors to conduct their operations responsibly and in accordance with the rule of law.
Authored by:
Juventhy M. Siahaan, S.H., M.H.
Managing Partner, JBD Law Firm