OJK warns banking business transformation poses supervision challenges

SINGAPORE, 12 OCTOBER 2026 —

OJK Warns Banking Supervision Faces ‘Unprecedented Challenges’ as Crypto, AI and Quantum Computing Reshape Financial Risks

Indonesia’s financial regulator, the Otoritas Jasa Keuangan (OJK), has flagged growing risks to banking stability from rapid digital transformation—including cryptocurrencies, artificial intelligence, and emerging threats like quantum computing—while urging regulators to balance innovation with robust oversight.

In a statement released Monday, OJK Chair Friderica Widyasari Dewi emphasized that while technological advancements present new business opportunities for banks, they also demand unprecedented vigilance to prevent financial instability, fraud, and illicit activities such as money laundering and terrorism financing.

The warning comes as Indonesia accelerates its push for expanded banking activities, including cross-border transactions and digital asset integration, while grappling with evolving regulatory gaps in a fast-changing financial landscape. OJK’s Head of Banking Supervision, Dian Ediana Rae, stressed that supervisors must adopt risk-based, principle-driven, and technology-neutral approaches to stay ahead of threats—ranging from stablecoin volatility and tokenization risks to long-term challenges like post-quantum cryptography.

The regulator also called for cross-border policy harmonization to ensure oversight keeps pace with global financial innovation without sacrificing prudence.

Digital Assets and AI: A Double-Edged Sword for Malaysian and Regional Banks OJK’s concerns align with broader trends in Southeast Asia, where digital payment adoption and crypto trading have surged amid regulatory uncertainty. While technologies like stablecoins and tokenization promise to boost cross-border efficiency, they introduce new vulnerabilities, including: - Financial stability risks from asset volatility and liquidity shocks. - Consumer protection gaps, as fraud and scams proliferate in unregulated digital markets.

- Anti-money laundering (AML) and counter-terrorism financing (CFT) challenges, given the interconnectedness of banks, payment providers, and crypto platforms. - Operational risks, as AI-driven banking models—such as frontier AI tools—may introduce unintended biases or systemic failures if not properly governed.

For Malaysian banks, which have been gradually integrating digital assets (e.g., Maybank’s crypto custody services, CIMB’s blockchain pilots), OJK’s stance signals heightened scrutiny from regional peers. Bank Negara Malaysia (BNM) has previously warned against retail crypto exposure while exploring central bank digital currency (CBDC) frameworks, but OJK’s emphasis on harmonized cross-border rules could pressure Malaysia to align its crypto and AI banking policies with stricter regional standards.

Quantum Computing and the Next Frontier of Financial Risk Beyond immediate threats, OJK is preparing for a "quantum-ready" financial system, citing long-term risks from quantum computing—which could break traditional encryption and disrupt digital payment security. Dian Ediana Rae noted that post-quantum cryptography must be adopted before material risks emerge, a challenge that could force banks to overhaul cybersecurity infrastructure at significant cost.

This aligns with global moves: The Basel Committee on Banking Supervision (BCBS) and the International Conference of Banking Supervisors (ICBS)—which OJK and Bank Indonesia (BI) co-hosted in Bali from September 28 to October 1, 2026—dedicated sessions to quantum risks and AI-driven financial stability. The event, attended by 300 delegates from over 60 countries, underscored Indonesia’s role as a regional hub for financial innovation governance, though it also highlighted diverging approaches between jurisdictions.

Malaysia’s Banking Sector: Caught Between Innovation and Oversight Malaysian banks, which have aggressively digitized in recent years (e.g., RHB’s AI chatbots, Public Bank’s blockchain loans), may face increased regulatory pressure as OJK’s warnings ripple across ASEAN. While BNM has resisted full crypto liberalization, it has encouraged controlled experimentation—such as digital trade finance pilots—which could now come under stricter OJK-inspired scrutiny.

Key Malaysian banks with direct exposure to digital risks include: - Maybank: Operates a crypto custody service (Maybank Crypto Solutions) and has invested in blockchain-based trade finance. - CIMB: Piloted tokenized bond issuance and explores AI-driven credit scoring. - Public Bank: Uses blockchain for loan syndication and has tested stablecoin settlements. - RHB: Employs AI for fraud detection but has faced customer complaints over automated decision-making.

If OJK’s technology-neutral but risk-obsessed approach gains traction in ASEAN, Malaysian banks may need to enhance AML/CFT filters for crypto transactions, stress-test AI models for bias, and accelerate quantum-resistant encryption upgrades—all while maintaining profitability in a tightening interest-rate environment.

Outlook: A Race Between Innovation and Regulation The next critical phase for Southeast Asian banking will hinge on how quickly regulators can adapt to crypto, AI, and quantum risks without stifling growth. OJK’s push for cross-border policy alignment—discussed at the BCBS/ICBS Bali meetings—could lead to tighter ASEAN-wide rules on: - Stablecoin and tokenization frameworks (currently a patchwork across Malaysia, Singapore, and Thailand).

- AI governance in banking (with Malaysia’s Personal Data Protection Act and Singapore’s AI Verify framework as potential models). - Quantum-readiness timelines, which may force banks to budget for cryptographic upgrades within the next 3–5 years.

For now, OJK’s message is clear: Indonesia will not slow its digital banking push, but it will demand ironclad safeguards. The question for Malaysian policymakers and bank CEOs is whether BNM will follow suit—or risk being left behind in a region where financial sovereignty is increasingly defined by technological resilience.