Exchange review · South & Southeast Asia
Indodax Review 2027: Is It the Right Exchange for You?
Indodax is the largest crypto exchange in Indonesia by number of users and the oldest still operating there. Millions of Indonesians have used it to buy bitcoin and hundreds of other coins with rupiah. It is a licensed trader within Indonesia's regulated crypto market, which since 2025 has been supervised by the country's financial services authority.
In September 2024 Indodax was hacked for about $22 million and went offline for several days. Customers did not lose their balances. This 2027 review covers the platform, the incident and the Indonesian rules that shape how the exchange works.
From Bitcoin.co.id to Indodax
The exchange was founded in 2014 by Oscar Darmawan and William Sutanto under the name Bitcoin.co.id. It was one of the first places in Southeast Asia where people could trade bitcoin against a local currency. In 2018 it rebranded as Indodax, short for Indonesia Digital Asset Exchange, to reflect a much wider list of coins.
Its growth has tracked Indonesia's enthusiasm for crypto. The country has one of the largest populations of crypto investors in the world, most of them young and trading small amounts from their phones. Indodax reports membership in the high millions.
How Indonesia Regulates Crypto
Indonesia treats crypto as a tradable asset, not as money. Paying for goods with crypto is prohibited; investing in it is legal and regulated.
For years the commodities regulator, Bappebti, supervised the market. It registered exchanges, published a list of crypto assets permitted for trading and required a licensing process. In January 2025 supervision passed to the Financial Services Authority (OJK), bringing crypto under the same body that oversees banks and capital markets.
The system has several layers designed to protect investors:
- Licensed traders, such as Indodax, deal with customers.
- A crypto bourse records and oversees transactions.
- A clearing house verifies and settles trades and holds a share of customer funds.
- A depository safeguards a large portion of customer crypto.
This separation means that a trader does not hold all client assets by itself. Only tokens on the official list may be offered, and listings are reviewed.
- Spot fee
- —maker / taker, base tier
- Founded
- 201413 years in 2027
- Trust score
- 3 / 10CoinGecko, live
- Proof of reserves
- —licensed or registered
Products
- Spot trading in rupiah for several hundred coins, including many small tokens and locally created projects.
- USDT markets for some pairs.
- A simple "Lite" mode and a "Pro" mode with full order book and charting.
- Staking and earn features on selected assets.
- Recurring purchases and price alerts.
- An education academy and an active community.
Indodax does not offer leveraged derivatives. Rules for crypto derivatives in Indonesia are being developed separately.
Fees and Taxes
Trading fees on the rupiah market are in the region of 0.2% to 0.3% per trade, with makers paying less than takers, and lower rates on some markets. They are higher than the base fees of large global exchanges.
Indonesian taxes are collected automatically on each transaction made through a licensed domestic platform. The tax regime was revised in 2025: a small final income tax is withheld from the value of each sale, and the rate is deliberately lower for trades on domestic licensed exchanges than for trades on foreign platforms. Because the tax is final and withheld at source, most retail investors have no further calculation to make for those trades.
Rupiah deposits can be made by bank transfer, virtual account or e-wallet, some of which carry a small charge. Withdrawals to a bank account cost a fee that depends on the amount. Crypto withdrawals are charged per coin.
The September 2024 Hack
On 11 September 2024 security firms detected a large number of suspicious transactions from Indodax hot wallets on several networks, including Bitcoin, Ethereum, Tron and Polygon. The loss was estimated at about $22 million. Some analysts noted similarities with attacks by North Korean groups.
Indodax shut down its web and mobile platforms completely while it investigated. The chief executive stated that customer balances were safe in both crypto and rupiah and that the company's reserves comfortably covered the amount. The exchange came back online in stages over the next few days, and customers found their balances intact.
Assessment:
- The company met its obligations, and the layered Indonesian custody system limited what could be reached from hot wallets.
- A full shutdown of several days left customers unable to trade or withdraw during volatile markets.
- The attack compromised withdrawal systems, which points to weaknesses that the company says it has since fixed.
Security and Reserves
Before 2024 Indodax had operated for a decade without a major breach. It holds international information security certifications and publishes proof of reserves that shows customer assets covered. Under Indonesian rules a large share of customer crypto must be kept with the licensed depository and in cold storage.
Users should enable two-factor authentication with an app, set a PIN for withdrawals and be cautious about messages claiming to come from the exchange. Scams using fake Indodax accounts on messaging apps are widespread.
Small Tokens on the Rupiah Market
Indodax is known for listing many low-priced tokens, which are popular with retail traders who like to buy large numbers of units for small sums. A low unit price says nothing about value. What matters is market capitalisation and liquidity.
Some of these markets are driven by coordinated buying in chat groups, followed by a collapse. Protect yourself with simple habits:
- Check the order book depth before buying.
- Avoid coins promoted in "signal" groups.
- Use limit orders.
- Do not hold illiquid tokens you could not sell in a falling market.
Opening an Account
Indodax serves Indonesian residents. Verification requires a national identity card and a selfie, and it is completed in the app. Foreign residents with the appropriate permit may also register.
Deposits in rupiah are credited quickly through virtual accounts. Customer service is available in Indonesian by chat, email and phone, and the company has physical offices, which is reassuring to many local users.
Who Is Indodax For?
Indodax suits Indonesian residents who want a licensed local exchange with rupiah funding and a very wide choice of coins. It is the default starting point for many first-time investors in the country.
Traders looking for the lowest fees or for derivatives will not find them here, and Indonesian rules restrict the use of unlicensed foreign platforms.
Indodax Compared With Tokocrypto and Others
Tokocrypto, owned by Binance, offers lower base fees and deeper order books in major pairs through its link with the global exchange. Other licensed Indonesian platforms, including app-based brokers, compete on simplicity. Indodax has the longest history, the largest community and the broadest list of rupiah pairs. Its 2024 hack is the main mark against it.
What Indonesian Investors Should Remember
- Use only platforms licensed under the OJK framework.
- Crypto cannot be used for payments in Indonesia.
- Taxes are withheld on each trade at domestic platforms.
- Price swings are large; invest only money you can leave untouched.
- For large or long-term holdings, learn to use a personal wallet.
How the Custody System Protected Customers
It is worth returning to the structure of the Indonesian market, because it explains the outcome of the 2024 incident. A licensed trader is required to place most customer crypto with the national depository and most customer cash with the clearing house. The trader keeps a smaller working balance for daily withdrawals.
When a hot wallet is breached, the loss is limited to that working balance. The assets held elsewhere are out of reach. The trader must then restore the missing funds from its own capital. This is close to how securities markets separate brokers from custodians, and it is a real advantage of trading on a licensed domestic platform.
Verdict on Indodax
Indodax is the established leader of Indonesia's regulated crypto market, with easy rupiah access and an enormous list of coins. It protected customer balances through the 2024 hack, helped by the country's layered custody rules, though the multi-day outage was costly for users. Fees are moderate to high. For Indonesian investors it remains a solid, licensed choice. Use strong account security and keep long-term holdings in your own wallet.