The Real Timeline Behind Bali's Foreign Business Crackdown

Most coverage treats this as one story that broke in July. It is actually five stages that began in January, and treating it as a single recent announcement is why so many foreign business owners in Bali are still unclear on what applies to them.

Seven stages, seven months - how Bali's foreign business restrictions actually unfolded.

How it actually unfolded

January 28, 2026: Governor Wayan Koster sent a provincial letter to the Ministry of Investment naming nine KBLI business codes of concern, requesting a broader closure of low-risk foreign registrations, and asking the ministry to stop accepting virtual office addresses for foreign companies.

Late February: The first approval landed. KBLI 70209, management consulting, closed to new foreign registrations in Bali. The rest went to national review.

March to May: Enforcement showed up in practice before any public announcement. Consultants reported OSS automatically rejecting foreign applications across a widening list of codes, some still officially "under review." The Ministry separately reported 423 Bali companies sanctioned in 2025–2026 for operating outside their registered activity.

May 13: The formal, system-wide block took effect. All low-risk and lower-medium-risk KBLI activations for foreign-owned companies closed across Bali Province.

June 18: A separate, routine deadline collided with it: Indonesia's KBLI 2025 reclassification required every PT PMA to migrate its codes. Any company whose code sat inside the closure list now had to navigate a compliance update and a closed door at the same time.

July 23: Koster's public announcement, the one most outlets reported, confirmed a finalised list of 18 closed classifications with Ministry backing. By then the policy had already been running for five months.

What's actually closed, and what isn't

The 18 codes cover sectors close to Bali's SME economy: budget and star-rated hotels, real estate, consulting, vehicle rentals, retail, cafes, tailoring, fitness, and sports promotion.

For existing PT PMA holders, the position is more forgiving than the headlines suggest. NIBs issued before the restriction remain valid and are not retroactively cancelled. Risk shows up at renewal, restructuring, or expansion under a restricted code, not from simply continuing to operate. Higher-risk classifications, genuine hospitality, and manufacturing were never part of this and remain open. The government's stated target throughout has been low-capital registrations being used to sidestep normal foreign investment requirements, not a wholesale closure.

This is one policy, not three

Two other threads have moved through the same process alongside the KBLI closures: a proposed ban on PT PMAs using virtual offices as their registered address, and a proposed IDR 10 billion mandatory paid-up capital requirement specific to Bali. Neither is formally enacted yet, but joint BKPM and statistics-agency site inspections are already verifying registered addresses against real operations, and a database of mismatched companies is reportedly being compiled.

At the same time, immigration enforcement under the Dharma Dewata task force has run continuously all year: 342 deportations between January and June for stay-permit misuse and overstays, and 66 more foreign nationals inspected in a single week just reported, a third of them over suspected misuse of residence permits tied to business activity.

Read separately, these look like three unrelated stories. Read together, they are one government position: verify that foreign presence in Bali, corporate and personal, matches what was declared, and close the gap where it doesn't.

Three Weeks Later: Bali's Foreign Business Crackdown Gets a Name

The July 23 announcement left the rationale somewhat implicit, framed around compliance and misuse of low-risk registration categories. On August 9, Kompas and the state news agency ANTARA carried the government's account directly, and this time the language was explicit: officials described the closures as protecting MSMEs from what they called "unfair business competition." That's a sharper, more political framing than the earlier "ghost company cleanup" narrative, and it signals this is being positioned publicly as an economic-protection measure rather than purely a licensing technicality.

The first real test of how the broader enforcement posture plays out on the ground also landed in early August. Entourage Bali, a Canggu-based running club, was shut down and its two foreign organisers permanently banned from re-entry after screenshots showed Indonesian applicants being rejected from the club's WhatsApp group while foreign applicants were approved. The club called it an automated error; Indonesia's Directorate General of Immigration was unmoved, with its director general describing the case publicly as an example of foreign operators running what he called "a state within a state" on Indonesian soil.

Neither development changes what's closed or what a PT PMA holder needs to do. But together they show the posture hardening rather than settling. The regulatory track (KBLI closures, virtual office and capital-requirement proposals) and the social one (immigration and on-the-ground enforcement against perceived exclusionary conduct) are now visibly reinforcing each other, not running in parallel as separate stories.

If you already hold a PT PMA in Bali

If your business has a real address, real revenue, and activity matching your registered code, the current position is manageable. Keep LKPM reporting current, confirm your KBLI 2025 migration went through correctly, and avoid any filing that would reactivate a closed code.

If your structure relies on a virtual office or minimal real presence, exposure is growing, not shrinking. Every advisory tracking this closely is converging on the same advice: a compliance review now costs far less than an enforcement action later, especially with the government explicitly building records rather than waiting on complaints.

One workaround already circulating deserves caution, not encouragement: some investors are registering new entities against a Jakarta address while continuing to operate in Bali. That may pass at registration. It does nothing to fix the actual concern regulators keep repeating, and it won't hold up if address-verification inspections expand the way current signals suggest.

The balanced view

Bali isn't closing to foreign investment. The line the government keeps drawing is between substantive, well-capitalised investment and low-risk registrations regulators believe were being used to dodge normal requirements. What's changed isn't the openness, it's the cost of cutting corners, and now, three weeks on, the language used to justify it. A properly structured PT PMA hasn't lost anything here. One that was never much more than paper is now operating somewhere that gap is actively being looked for, and increasingly, named.

Subscribe to the weekly update for every regulatory and enforcement development as it happens.