Checking a Supplier's NIB and NPWP: The Indonesian Registry Walkthrough

By Mohamad Sinno, Charcoal Expert · Last updated 9 September 2026

The lookup steps

Three institutions hold the numbers an Indonesian supplier will send you, and they are not interchangeable. Two free, login-free checks are open to a foreign buyer — and they answer different questions, which is the distinction most English-language guides collapse. One tells you whether the number is valid. The other tells you whether the holder is registered to export.

The NIB is the business identification number issued through the OSS licensing system. The NPWP is the tax number issued by the Directorate General of Taxes. They come from different bodies, prove different things, and are checkable — or not — through different doors. Registry checks are one layer of verifying an Indonesian charcoal factory; this page is the layer you can run from your desk before anyone answers an email.

Why the INSW scope matters more to an importer than an existence check

INSW describes its search as covering NIB yang memiliki registrasi kepabeanan untuk kegiatan ekspor dan/atau impor — NIBs holding customs registration for export or import activity. That scope is narrower than a company registry, and the narrowness is the point. A company can be perfectly real, properly incorporated and filed, and still not be registered to move goods across a customs border in its own name. For a buyer whose actual question is can this counterparty ship a container to me, registration to trade is closer to the question than incorporation is.

The annotated walkthrough

Start at OSS: is the number even valid?

The OSS homepage carries a search headed Pencarian NIB, described in its own words as "Cek keabsahan NIB yang Anda miliki" — check the validity of the NIB you hold. It takes 13 digits, the length of an NIB, and needs no login. A buyer holding a supplier's certificate holds that number, so this check is open to you.

Be clear about what it is, because the distinction decides how much weight to put on a pass. It is a validity check on the number, not a company profile: it speaks to whether the NIB is real, not to who holds it, what they are licensed to do, or whether they can export. OSS does publish a business-profile data search, but that one is documented for ministries and institutions rather than for buyers. As with the INSW form below, we have documented this search as it is presented and have not published what it returns on a match.

INSW, field by field

At insw.go.id/nib the section is headed Penelusuran NIB — NIB search. The form carries two inputs, labelled Masukkan Nomor NPWP (enter NPWP number) and Masukkan Nomor NIB Perusahaan (enter company NIB number). A LOGIN link sits in the site header, but it points to a separate portal; the search form renders without authenticating. The interface is Indonesian. There is no search button beside the NPWP box — the magnifying-glass icon that runs the search sits on the NIB field.

The NPWP box expects the old 15-digit format, and will not tell you otherwise

This is the detail most likely to cost you a wrong lookup. The NPWP box reformats whatever you type into the older dotted pattern — and it does that whether or not the number fits. Typed in on 11 August 2026, a modern 16-digit NPWP beginning with a leading zero came back with that zero absorbed into the first block, every group after it shifted by one, and a final block four digits long where the format allows three. No warning, no rejection — just a different number sitting in the box.

Enter the 15-digit form instead and it renders correctly. So if a supplier sends you the 16-digit number — the only form now issued — convert it to its 15-digit equivalent before searching, and check what the box shows before you trust what comes back. A mistyped tax number does not return "wrong number". It returns nothing, which reads exactly like a supplier who is not registered.

AHU Online, and what the profile costs

AHU Online is the Ministry of Law's registry of legal entities, searched by company name, and it publishes eight categories including Perseroan (limited companies) and Pemilik Manfaat (beneficial owners). The search costs nothing and needs no login. Retrieving the profile document does: it is a state revenue charge of Rp 50,000 for the latest profile and Rp 500,000 for the complete one, bought as a voucher through a Bank Persepsi. The voucher must be paid within two days of ordering, delivery is by email, and the download stays available for seven days.

The price is not the obstacle. The payment rail is. A voucher generates a billing code on Indonesia's state revenue system, and every channel the ministry documents for settling it — teller, ATM, mobile and internet banking across BNI, Mandiri, NOBU and BJB — works by debiting an account at one of those banks. The one over-the-counter route set out in writing asks the customer to bring a KTP. No international card, no cross-border transfer option appears anywhere in that guidance.

Nothing published says a foreign buyer may not pay — it simply never describes a way for one to. Treat the Rp 50,000 profile, then, as a check you delegate rather than run: to a freight forwarder, a lawyer, or an inspection agent already in Indonesia. Budget for the errand rather than the fee. One caveat worth stating plainly, because it defeats the purpose: whoever runs it should not be the supplier being checked.

Two caveats decide how you read a thin result. The registry states that the accessible company data is that which conforms to Law 40 of 2007, with anything else requiring a manual request through the office — so a sparse record is not by itself evidence of a sparse company. And beneficial-ownership detail is not served publicly; who ultimately owns the counterparty is not a question this route answers.

The NPWP: a key, not a number you can independently validate

The NPWP is where the English-language guides quietly overpromise, and the specific way they do it is worth knowing. Most of them send you to a check page on ereg.pajak.go.id, DJP's older e-Registration host. On 10 and 11 August 2026 that address refused our connection outright, from two different clients — while pajak.go.id itself loaded normally from the same network minutes later. So this is something about that host, not about reaching Indonesia.

Where DJP does point taxpayers today is Coretax, at coretaxdjp.pajak.go.id — and that is an account-gated portal, not a public register: it answered an unauthenticated request with an HTTP 403. DJP's own public site surfaces no counterparty lookup either; what it offers is self-service for people who are already registered, plus a live chat that asks who you are. Every other route we found for validating a counterparty's NPWP runs through a vendor tool behind a login, a paid API, an in-person visit to a tax office, or the DJP call centre.

The honest conclusion is not that the NPWP is unverifiable. It is that verifying one is a registered-party function, not a public one — so a guide promising you a quick self-service NPWP check is describing a system that either sits behind an account or is no longer answering at the address given.

Treat the NPWP as two useful things instead. It is the input the free INSW search accepts, which is reason enough to insist on it. And it is a cross-document anchor: the entity name attached to the NPWP should be the same entity named on the NIB certificate, on the proforma invoice, and on the bank account you are asked to pay. Suppliers are used to that request. Reluctance to meet it is itself information.

Search for this and you will meet third-party tools promising instant NPWP validation. Before relying on one, establish which of two questions it answers: is this number well-formed, or does it belong to the company I am dealing with. Those are not the same question. A tax number can be perfectly well-formed and belong to nobody, or belong to a different company entirely — and only the second question is verification.

Reading results: pass, caution, walk away

What follows is how we read these outcomes, not registry-issued guidance. The registries return data; the judgement is yours.

An empty result is a question, not a verdict

This is the reading most likely to cost you a good supplier, so it is worth being precise about. The search covers NIBs carrying customs registration for export or import — narrower than "is this company real", and narrow enough that a blank has more than one honest explanation.

A manufacturer can export in its own name, holding that registration itself. It can equally ship under another party's — a freight forwarder or a trading company acting as exporter of record — in which case the goods move under that party's registration rather than the factory's. Both arrangements are ordinary. The second is common for smaller producers, and for a first shipment into an unfamiliar market where the forwarder carries the customs relationship.

So a blank tells you the number you were handed is not customs-registered for export. It does not tell you the company is fake. Ask who the exporter of record is, and ask in writing. A factory that ships through a forwarder answers that immediately and without fuss, because it is a routine commercial arrangement rather than something to conceal. The signal worth acting on is not the empty result — it is a supplier who cannot say whose registration their goods move under.

What none of this proves

A clean registry pass proves paperwork, not production. It does not show that a factory exists at the address, that it has the capacity it claims, that the goods will meet spec, or who ultimately owns the company. Registry checks are the cheap filter you run first because they cost nothing and eliminate the obvious. They are not the audit — that is the remote factory audit checklist, and the questions that go with it are the 15 a real factory can answer.