According to Indonesia Immigration, the agency has introduced additional security measures for the country’s e-visa system, including two-factor authentication (2FA) through one-time passwords (OTP) sent to registered email addresses.
The update comes amid growing concerns over online scams and unauthorised access to travellers’ immigration accounts.
Indonesia Immigration said travellers should log in through the official eVisa portal and use strong passwords containing a mix of uppercase and lowercase letters, numbers and symbols. Authorities also advised tourists to update passwords regularly.
The immigration department said the eVisa application system now includes additional verification steps to ensure that only account holders can access visa records and travel documents.
Authorities clarify unpaid work rules
Indonesia Immigration has also issued fresh clarification on activities allowed under tourist visas, especially for influencers, content creators and visitors involved in unpaid collaborations.
According to the agency, authorities said unpaid activities are “not always” permitted if there is economic value linked to the activity.
Indonesia Immigration said foreign nationals must use visas and stay permits according to the intended purpose of their visit. Activities that do not match visa conditions could lead to sanctions.
The department warned that even unpaid content creation or promotional collaborations may attract scrutiny if authorities determine that financial or commercial benefits are involved.
Tourist visas in Indonesia are primarily meant for travel, leisure and social activities. Limited business-related activities such as attending seminars or conferences are permitted, but paid work and unauthorised commercial activity are prohibited.
Authorities also reminded travellers that foreigners are personally responsible for ensuring compliance with Indonesian immigration laws during their stay.