Your Bali villa is listed online. What does that actually prove?

It proves that a platform accepted a listing.

It does not prove that the accommodation business, company, property, building and guest operation form a complete Indonesian compliance chain.

That distinction is becoming harder to ignore.

In May 2026, Indonesia's Ministry of Tourism said it had identified about 1,600 accommodation businesses marketed through online travel agents without business licensing. Operators were given time to regularise, with unresolved listings announced for delisting from 1 August 2026. New OTA merchants were also expected to provide core business data, including NIB and KBLI information.

The Ministry is separately developing an API system intended to connect OTA verification with OSS data using NIB, KBLI and NKU. The publicly announced target is June 2027. That system is not yet a universal real-time licence gate.

The practical change is still clear:

Online distribution is moving from “the platform accepted me” toward “the platform can identify and verify the operating business.”

Boundary of this note
This note explains the public enforcement architecture as at 13 August 2026. It does not confirm the compliance of a particular property. The complete operating and property file must be checked in the relevant location.

The answer in one screen

Item	What it supports	What it does not prove
OTA listing	The accommodation is commercially visible on a platform.	The operator is licensed, the property use is lawful, the building is suitable or tax and guest-reporting duties are complete.
NIB	Identity and registration of the business actor in OSS.	That every activity, location and supporting requirement is correct.
KBLI	The type of economic activity declared.	That the activity is available to this company, at this scale, in this location, or that the real operation matches the description.
NKU	The specific business-activity record used in OSS, commonly linking activity and location.	That the full property and sector permission chain is complete.
Standard certificate or permit	A required layer for the classified activity, depending on risk and sector.	That land use, building approval, tax, immigration reporting and actual operation all align.
PBG or SLF	Building-control evidence within the stated building use and file.	That a residential building is automatically authorised as tourist accommodation.
Local tax registration	The operation is visible to the relevant local tax system.	That paying tax cures a wrong activity, missing licence or building problem.
APOA reporting	Foreign-guest data are being reported through the accommodation process.	That the company is the correct licensed operator or that all other requirements are satisfied.

The compliance story is cumulative. One document does not replace the others.

A concrete example

A villa in Canggu is professionally photographed and listed on Airbnb.

The host profile uses a management brand. Guest payments are deposited into Company A. The property has an NIB belonging to Company B. The registered KBLI is general management consulting. The building file still describes a private residence. Staff are employed informally by Company C. A foreign founder controls pricing and reservations. Local accommodation tax is reported under another name.

Each isolated fact may look plausible.

Together, they create a basic question:

Which company is actually supplying the stay, and which file gives it the right to do so at this property?

The platform listing does not answer that.

What changed in 2025

Several changes are often described as though Indonesia suddenly banned short-term rentals. That is not what happened.

The more accurate story is an updated regulatory architecture.

PP 28/2025 replaced the previous national risk-based licensing framework.
Tourism Ministry Regulation 6/2025 updated tourism standards, supervision and administrative sanctions.
Law 18/2025 amended the Tourism Law.

These instruments matter because tourism supervision does not stop at the five-digit KBLI. The operating file can involve business licensing, sector standards, spatial compatibility, environmental requirements, PBG or SLF, local tax and the activity actually performed.

The direction is not “one new villa law.”

It is “more systems can now be read together.”

What changed in 2026

The 1,600-business announcement

The Tourism Minister said the Ministry had identified and internally verified about 1,600 accommodation businesses marketed through OTAs without business licensing.

That figure was national. It was not a count of 1,600 Bali villas.

The announced process was:

identify the businesses;
notify them through OTA channels;
allow a cure period;
begin delisting unresolved cases from 1 August 2026;
allow compliant merchants to return after verification.

As of 13 August 2026, no complete official post-deadline list or audited platform-by-platform removal count had been published. It would therefore be inaccurate to state that all 1,600 were removed, or that none were.

New merchant onboarding

The Ministry also stated that new merchants should provide NIB and KBLI information rather than enter the OTA market unidentified.

This is already a material change in behaviour even before the future API is fully deployed.

The planned API

The announced API is intended to check three data points:

NIB;
KBLI;
NKU.

If the data align with OSS, the merchant can be verified. If they do not, onboarding can be blocked or stopped.

The announced target is June 2027. Until then, owners should not describe the system as a universal live connection across every OTA.

The policy direction, however, is unambiguous: machine-readable consistency will matter more.

Why NIB is not “the villa licence”

A NIB identifies the business actor.

That is important. It is not the same as proving that:

the correct accommodation activity is registered;
the activity is available to that company and business scale;
the correct property location appears in OSS;
the relevant standard certificate or permit is complete;
the land use supports the activity;
the building is approved and fit for the use;
local tax registration is correct;
foreign guests are reported;
the company shown in the records is the company actually operating.

The sentence “the villa has an NIB” is usually incomplete because a building does not hold a business identity in the same way a company does.

The better question is:

Which legal entity holds which NIB, for which activity and location, and how does that connect to this property and this guest contract?

Why KBLI is not merely a keyword

KBLI is the classification of the activity.

It should follow what the business actually does.

A company that supplies short-term accommodation directly is not necessarily performing the same activity as a company that manages another owner's accommodation. A company that administers residential property is not necessarily licensed to sell tourist stays. A consultant is not automatically an operational manager.

KBLI 2025 makes some of these boundaries clearer.

For example:

55203 concerns villa activity in private homes managed by their owners;
55901 concerns third-party operational accommodation management for a fee;
hotel and aparthotel activities sit in other classifications;
general management consultancy is distinct from direct operational management;
property management and accommodation intermediation are separate questions.

The property name on Instagram does not determine the code.

Why NKU matters

NKU is the business activity number used in the OSS record.

For an owner, the practical importance is that the same company can have several activities and locations. The relevant question is not only whether the company has an NIB somewhere, but whether the activity and property being examined correspond to the correct live record.

A future OTA verification system based on NIB, KBLI and NKU is therefore checking identity, activity and the specific business-activity record, not simply the existence of one company certificate.

The property still needs its own due diligence

Even a well-structured operator cannot erase a property defect.

The property review can include:

spatial and zoning compatibility;
land or lease rights;
access;
PBG and SLF position;
environmental requirements;
building use;
water and wastewater arrangements;
fire, health or tourism requirements shown by the applicable classification;
neighbourhood and operational restrictions;
local tax registration;
insurance.

A management company with a valid NIB cannot lend a compliant building file to an unrelated house.

Who is the operator?

The operator is not always the owner and not always the manager.

A useful distinction is:

Role	Typical responsibility
Property owner or rights holder	Owns or lawfully controls the asset.
Accommodation operator	Supplies the stay, contracts with the guest and carries the guest-facing business.
Accommodation manager	Manages operations on behalf of the owner or operator under a defined mandate.
OTA or intermediary	Distributes the accommodation or connects supply with demand.
Service provider	Provides a limited function such as marketing, finance, maintenance or transport.

These roles can sit in different entities.

They should not be collapsed into one company name only when an inspector asks.

The fastest diagnostic remains:

who appears on the OTA;
who signs with the guest;
who receives the money;
who employs the team;
who controls pricing and reservations;
who approves refunds;
who files tax and APOA;
who bears the loss and customer claim.

APOA is not only a hotel issue

Indonesia's foreign-guest reporting framework applies to owners or managers of accommodation and is operationalised through APOA.

Official immigration outreach has included hotels, villas and individual accommodation providers.

For an owner, this matters because APOA creates another traceable operating fact.

Which company or manager performs the report? Under whose property and guest records? Does that role match the OTA, guest contract and licence?

APOA does not prove the entire structure. It can reveal whether the day-to-day compliance process matches the declared operator.

Bali is adding a local compliance layer

Bali has separately increased pressure on unlicensed and non-tax-compliant accommodation.

The provincial government asked Airbnb to support removal of businesses that lacked licensing or tax compliance. Bali's tourism authorities also announced the Bali Kerthi compliance-audit programme for accommodation and other tourism businesses.

This does not create a new category of property right.

It does mean that national OSS data, local tourism supervision, tax records and OTA distribution are becoming less isolated from each other.

What an owner should verify this week

The company

current deed and AHU record;
NIB;
complete OSS activity sheets, not only a screenshot of the code;
business scale and risk level;
KBLI and NKU for the actual activity and location;
directors, shareholders and beneficial-owner filing.

The property

title or lease;
right granted to the operator;
zoning and spatial compatibility;
PBG and SLF position;
applicable environmental and tourism requirements;
local tax registration;
insurance.

The operation

OTA merchant name and payout account;
guest terms and invoice;
cancellation and refund authority;
staff employer and manager;
PMS and channel-manager control;
PBJT process;
APOA process;
guest complaints and liability.

The links between them

management agreement;
lease or operating concession;
service agreements;
payment flows;
staff and decision-right matrix;
transition records where an operator changed.

Three common false conclusions

“Airbnb approved the listing, so it is legal.”

No. Platform acceptance is a distribution decision, not a legal opinion on the property and operator.

“The company has an NIB, so the villa is licensed.”

No. The activity, scale, location, sector standard, property file and actual operation still need to align.

“The government is banning OTAs.”

No. The public policy is to strengthen verification of accommodation merchants and remove unresolved unlicensed supply, not to prohibit online travel agents as a category.

The decision in plain language

The 2026 enforcement programme does not make every Bali villa illegal.

It makes one old assumption increasingly unsafe:

Being visible online is not evidence that the operating business is complete.

A serious owner should identify the real operator first, then verify the company, activity, location, property, building, tax, staff and guest-reporting chain around that operator.

The rule to keep is:

The listing should be the public face of a coherent operating file, not the substitute for one.

Talk to François

Sources and direct verification links

The official live OSS record controls a real application. The ANTARA article supports the attributed ministerial statement, not a final post-cure count of delisted properties.