Preparing for Indonesia's FATF Mutual Evaluation: A Complete Guide from a Central Bank Insider's Perspective
Indonesia will face a FATF Mutual Evaluation — a comprehensive assessment of how effective the country's anti-money-laundering and counter-terrorist-financing system actually is. The outcome will determine whether Indonesia stays in "regular follow-up" or lands on a watch list, with direct consequences for the financial sector and foreign investment.
As a former financial investigator with Malaysia's central bank, directly involved in preparing for and running Malaysia's Mutual Evaluation by FATF/APG, and with more than a decade in financial intelligence units and multinational banking across the Asia-Pacific region, I can offer a perspective rarely available in Indonesia: what actually happens during an evaluation, what evaluators look for, and where ASEAN countries typically fall short.
Understanding FATF's 11 Immediate Outcomes
The FATF Methodology assesses the effectiveness of a country's AML/CFT system against 11 Immediate Outcomes (IOs). This is not a regulatory checklist — evaluators assess whether the system genuinely works in practice, not merely on paper. This is covered in depth in Module 5: Preparing for the FATF Mutual Evaluation of our ASEAN AML Regulations course.
IO.1: Risk, Policy and Coordination
A country must show it understands its domestic ML/TF risk and uses that understanding to direct policy and resource allocation. Indonesia already has a National Risk Assessment (NRA), but evaluators dig deeper: is the NRA genuinely used by financial institutions in their own risk assessments? Is there effective coordination between PPATK, OJK, Bank Indonesia, the foreign ministry, and law enforcement?
The Malaysian experience: During Malaysia's evaluation, evaluators were highly critical of the gap between the NRA at national level and its application at institution level. Several large banks could not demonstrate how NRA findings influenced their customer risk ratings. That became a significant weakness in the IO.1 rating.
IO.2: International Cooperation
Evaluators assess whether the country proactively seeks and provides mutual legal assistance (MLA) and extradition in ML/TF cases. They will ask for statistics: how many MLA requests were sent and received, how long they took, and how many succeeded.
IO.3: Supervision
This assesses whether regulators (OJK, Bank Indonesia) apply risk-based supervision to financial institutions' AML/CFT compliance. Evaluators want evidence: how many AML examinations were conducted, what did they find, what sanctions followed, and were those sanctions sufficient to change behaviour?
IO.4: Preventive Measures
Do financial institutions and DNFBPs genuinely apply CDD, record keeping, and suspicious transaction reporting under a risk-based approach? Evaluators do not only ask the regulator — they interview compliance officers directly at banks, insurers, notaries, accountants, and property dealers.
A critical observation from the field: During evaluations across ASEAN, evaluators frequently found that bank compliance officers could explain their AML programme well, while compliance officers at DNFBPs — notaries, accountants, property agents — barely understood their AML obligations at all. This is invariably a major weakness.
IO.5: Legal Persons and Arrangements
Transparency of beneficial ownership for companies and legal arrangements. This is usually a weakness across almost every ASEAN country. Evaluators will test whether Indonesia has adequate mechanisms to identify the beneficial owner behind companies, foundations, and trusts.
IO.6: Financial Intelligence
The effectiveness of PPATK as the Financial Intelligence Unit. Evaluators assess the quality of PPATK's analysis, whether intelligence dissemination to law enforcement is timely and actionable, and whether the reports received are of high quality.
From experience in a financial intelligence unit, I know report quality varies enormously. Many are submitted simply to meet a quota, without adequate analysis. Evaluators see that clearly.
IO.7: ML Investigation and Prosecution
Are money laundering cases genuinely investigated and prosecuted? Evaluators look at the statistics: how many ML cases were investigated, how many reached court, and how many produced convictions. They also assess whether ML is prosecuted as a stand-alone offence or always "rides along" with a predicate offence — an important distinction that is often a weakness.
IO.8: Confiscation
The effectiveness of seizing and confiscating criminal proceeds. What value of assets was actually recovered? Is there a dedicated asset recovery unit? Is there a non-conviction-based forfeiture mechanism?
IO.9: TF Investigation and Prosecution
Investigation and prosecution of terrorist financing. Given Indonesia's history of significant terrorist incidents, evaluators will scrutinise how effectively the country cuts terrorist financing chains.
IO.10: TF Preventive Measures and Financial Sanctions
Implementing terrorism-related financial sanctions (UN Security Council Resolutions) and those covering weapons of mass destruction proliferation. Evaluators test whether financial institutions screen against sanctions lists effectively.
IO.11: PF Financial Sanctions
Implementing proliferation financing sanctions. This is a relatively new area and frequently a weakness for many countries.
What Actually Happened During Malaysia's Mutual Evaluation
Having served in the Malaysian financial authority while the evaluation ran, I can describe what rarely gets documented:
The Preparation Phase (12-18 months before the on-site visit)
- A National Coordination Committee was formed with representatives from every relevant body (the central bank, securities commission, tax authority, anti-corruption commission, attorney general's chambers, police, and others)
- A technical compliance assessment was run against all 40 FATF Recommendations — every gap identified and closed through new legislation or regulation
- A mock evaluation was conducted using assessors from other countries (peer review) to surface weaknesses before the real thing
- Statistics were collected and validated — often the single biggest problem, because data sits across many agencies in different formats
The On-Site Visit (2-3 weeks)
- The evaluation team (typically 10-15 people from several countries) holds hundreds of meetings with government bodies, regulators, law enforcement, financial institutions, DNFBPs, and NGOs
- Direct interviews with compliance officers at a range of financial institutions — evaluators pick institutions at random, not the ones the country has prepared
- Evaluators are highly trained at spotting scripted answers — they probe with specific, situational follow-up questions
- Private sector sessions where evaluators meet industry associations without the regulator present — these often produce the most candid information
A critical insight: FATF evaluators are not bureaucrats checking documents. They are experienced practitioners from several countries who understand the reality of AML implementation. They know the difference between an AML programme that genuinely runs and one that merely looks good on paper. When they interview a compliance officer, they ask things like: "Tell me about the last suspicious transaction report you filed. What triggered your suspicion? What was the process from detection to reporting?" Generic answers are spotted immediately.
Where Malaysia Succeeded (and Where It Fell Short)
Malaysia's successes:
- Very strong national coordination under the National Coordination Committee to Counter Money Laundering
- The central bank had a robust enforcement track record — significant fines against banks that breached requirements
- Malaysia's FIU demonstrated high-quality analysis with timely dissemination
- The banking sector showed a good grasp of the risk-based approach
Weaknesses identified:
- DNFBP supervision (particularly lawyers, accountants, and company secretaries) remained weak
- Beneficial ownership transparency for companies was still inadequate
- Asset confiscation was not proportionate to the scale of financial crime
- Parts of Sabah and Sarawak lagged well behind the peninsula on implementation
This comparative analysis is covered in Module 2: Malaysia's AML Framework and Module 4: Comparative Analysis and Gap Assessment.
Gap Analysis: Where Indonesia Is Most Exposed
Based on a close reading of the FATF methodology and Indonesia's current position, these are the most exposed areas:
1. DNFBP Supervision (IO.3 and IO.4)
Designated Non-Financial Businesses and Professions — notaries, public accountants, lawyers, property dealers, precious metals dealers, and casino operators — are almost always the weakest point in ASEAN evaluations. In Indonesia, many DNFBPs are not even aware they carry AML obligations under the money laundering law.
What needs to happen:
- Identify and register every DNFBP subject to the obligations
- Communicate AML duties to each profession
- Establish an AML compliance examination programme for DNFBPs
- Apply sanctions that are credible and dissuasive
2. Beneficial Ownership Transparency (IO.5)
Indonesia does not yet have a comprehensive central register of beneficial ownership readily accessible to competent authorities. Evaluators will test whether BO information is available, accurate, and current.
3. ML as a Stand-Alone Offence (IO.7)
Does Indonesia prosecute money laundering as an offence in its own right, rather than only as an add-on to a predicate offence? Evaluators pay close attention to stand-alone ML conviction statistics.
4. Report Quality versus Quantity (IO.6)
Indonesia may file a large number of suspicious transaction reports, but evaluators care more about quality. Do the reports contain adequate analysis? Can PPATK show that its dissemination produces real investigations and prosecutions?
What Evaluators Ask Compliance Officers
This is the most valuable information for any compliance officer who may be interviewed by FATF evaluators. Drawn from directly observing and helping prepare these interviews in Malaysia:
Typical questions to be ready for:
- "Explain how your bank applies the risk-based approach in its AML programme. Give a specific example of how risk assessment shaped a CDD decision."
- "How many suspicious transaction reports did you file last year? Tell me about one interesting case — what triggered it, how the process ran, what the outcome was."
- "How does your bank identify the beneficial owner of a corporate customer? What happens when the BO cannot be identified?"
- "Have you ever refused to open an account or exited a customer relationship over ML/TF risk? Give an example."
- "How does the NRA influence your bank's AML programme? Which sectors or typologies did you identify as highest risk from it?"
- "Describe your bank's AML training programme. Who must attend, how often, and how do you measure its effectiveness?"
- "How does your bank handle sanctions screening? What is your false positive rate, and how do you manage it?"
Preparation tips:
- Do not memorise scripted answers — evaluators will detect it. Understand your AML programme well enough to answer naturally
- Prepare specific examples — an interesting report, a de-risking decision you made, an audit finding you acted on
- Be honest about challenges — evaluators value candour. Saying "this is an area we are still developing" lands far better than claiming everything is perfect
- Show continuous improvement — evaluators want to see that you go beyond the minimum requirement and keep strengthening the programme
A FATF Preparation Checklist for Financial Institutions
Based on experience preparing financial institutions for FATF evaluation, here is an actionable checklist:
- Review and update your risk assessment against the latest NRA — and document how the NRA was integrated
- Audit report quality — review a sample of filed reports and assess the analysis in them
- Verify beneficial ownership for high-risk corporate customers
- Test sanctions screening effectiveness — run test cases and document the results
- Review the AML training programme — confirm the material is current and effectiveness is measured
- Simulate the evaluator interview — rehearse the compliance team against typical questions
- Compile the statistics — reports filed, CDD outcomes, accounts refused or exited, internal sanctions, and remediation actions
- Review policy against the 40 FATF Recommendations — identify gaps and close them before the evaluation
- Document your successes — cases where the AML programme genuinely detected and prevented ML/TF
- Coordinate with the regulator — understand what OJK and PPATK expect from the evaluation
What the Course Covers
Our ASEAN AML Regulations: Comparison and FATF Preparation course is designed by a practitioner with direct experience of the Mutual Evaluation process in ASEAN. The module map:
- Module 1 — Indonesia's AML Framework: PPATK and OJK: A close analysis of Indonesian AML regulation, its strengths and weaknesses, and the areas needing reinforcement before the FATF evaluation
- Module 2 — Malaysia's AML Framework: A case study of a country that has been through evaluation, the lessons learned, and the best practices worth adopting
- Module 3 — Singapore's AML Framework: MAS and the CDSA: Singapore's approach, frequently the ASEAN benchmark, including its aggressive enforcement posture
- Module 4 — Comparative Analysis and Gap Assessment: Comparing all three frameworks to identify best practice and the gaps Indonesia needs to close
- Module 5 — Preparing for the FATF Mutual Evaluation: The evaluation methodology, the 11 Immediate Outcomes, what evaluators look for, how to prepare for interview, and an evaluation simulation
- Module 6 — A Unified ASEAN Compliance Framework: Building a compliance programme that satisfies multiple jurisdictions, useful for institutions operating across ASEAN borders
The course is relevant not only for FATF preparation but for building a genuinely effective AML programme — rather than one that merely satisfies a regulatory checklist.
Related Courses
- AML/CFT Anti Money Laundering — Comprehensive AML programme foundations
- KYC AML Compliance Professional — KYC competency, a critical part of IO.4
- Financial Crime Investigation — The investigative capability assessed under IO.7
FAQ: Preparing for Indonesia's FATF Mutual Evaluation
When will Indonesia's FATF Mutual Evaluation take place?
Indonesia is scheduled for evaluation in the next cycle. Preparation should begin at least 18-24 months before the on-site visit. Even where the exact date is unannounced, starting now is sensible — strengthening the AML programme pays off regardless of the evaluation.
What are the consequences of a poor rating?
A poor rating could place Indonesia in "enhanced follow-up" or even on the FATF grey list. The consequences are serious: international correspondent banks apply enhanced due diligence to transactions to and from Indonesia, international transaction costs rise, foreign investors become more reluctant, and the reputation of Indonesia's financial sector suffers globally.
Is the FATF evaluation only a concern for regulators rather than financial institutions?
No. FATF evaluators interview compliance officers at financial institutions directly. How those officers perform in interview feeds straight into the IO.4 (Preventive Measures) rating. Every compliance officer at a bank, insurer, or other financial institution needs to prepare.
What can Indonesia learn from Malaysia's experience?
Malaysia went into its evaluation after nearly 2 years of intensive preparation. The main lessons: (1) strong national coordination from the outset, (2) an honest mock evaluation to surface weaknesses, (3) heavy investment in compliance officer training, and (4) focusing on demonstrating effectiveness rather than technical compliance alone. Our course covers the Malaysian experience in detail from an insider's perspective.
What role do DNFBPs play in the evaluation, and why does it matter?
DNFBPs (notaries, accountants, lawyers, property agents, precious metals dealers) are consistently the weak point in ASEAN FATF evaluations. Evaluators assess whether they understand and discharge their AML obligations. In Indonesia, AML supervision of DNFBPs remains very limited. It has to be a preparation priority, because it heavily affects the rating on several Immediate Outcomes.
Is this course only for bank compliance officers?
No. It is relevant to everyone the FATF Mutual Evaluation will touch: compliance officers across every kind of financial institution, regulators (OJK, PPATK, Bank Indonesia), law enforcement, DNFBPs (notaries, accountants, lawyers), and policy makers. Understanding the FATF evaluation process and standards is an increasingly crucial competency in Indonesia's financial sector.