Indonesia Tightens E-Visa Security and Warns Bali Influencers on Visa Rules

Bali — — Indonesia’s immigration authorities have tightened security on their e-visa system and warned Bali-bound travellers to secure online visa accounts and avoid using tourist visas for any activity with commercial value, including unpaid influencer work, according to recent guidance reported by foreign travel and immigration outlets.

The Economic Times reported on 11 September 2026 that Indonesia Immigration has introduced two-factor authentication for e-visa users, requiring a one-time password (OTP) sent to the email registered to each account before access is granted.

A separate explainer on visa and immigration rules states that the Directorate General of Immigration tightened its e-visa system on 23 May 2026, with OTP-based two-factor authentication designed to prevent account takeover and online fraud in the electronic visa system.

According to these reports, the updated login process means travellers must enter their usual account credentials and then confirm access using a unique code delivered to their registered email address.

The available guidance does not specify how long each OTP remains valid, whether the additional step applies to every type of e-visa transaction, or how travellers can recover access if they lose control of their registered email address.

Protecting e-visa accounts

Indonesia Immigration has urged travellers to access services only through the official e-visa portal and to use strong passwords comprising uppercase and lowercase letters, numbers and symbols, according to the Economic Times report and independent travel coverage.

Authorities further advise users to update their passwords regularly and to avoid sharing either login details or OTP codes with third parties, including agents or intermediaries.

Reports summarising the new rules say the security changes were introduced in response to concerns about online fraud and account misuse involving third-party handlers who manage visa applications and credentials on behalf of travellers.

Neither the Economic Times nor other publicly available English-language summaries provide detailed figures on any specific breach, the number of affected accounts or confirmed financial losses.

Influencer and content creator activity

Alongside the security update, immigration authorities have issued clearer guidance for influencers, content creators and digital nomads visiting Bali on tourist visas.

Indonesia Immigration has clarified that tourist visas and visas on arrival are intended primarily for leisure, travel and social activities, and that foreign nationals must use their visas and stay permits in line with the stated purpose of stay.

According to recent immigration advisories quoted by local and international outlets, activities that generate economic or commercial value — including sponsored posts, brand collaborations, barter stays and unpaid promotional content that provides benefits such as free accommodation or products — are treated as work and are not permitted on tourist visas.

One Bali-focused travel outlet reports that immigration officials answered the question “Is unpaid activity always allowed?” by stating “Not always,” explaining that authorities may assess the purpose of stay, the type of activity and whether there is economic value behind it.

Officials have warned that activities inconsistent with the granted visa may result in sanctions, including fines, deportation or potential long-term bans from entering Indonesia, according to multiple reports summarising immigration enforcement in Bali.

Practical implications for travellers

Travellers are advised to verify that any visa application or payment page connects to the official e-visa service before entering passport or payment details, and to treat unsolicited payment requests or unfamiliar links as potential risks.

Influencers and content creators are encouraged to obtain an appropriate work or creative visa if their activities in Bali involve sponsorships, barter arrangements, paid collaborations or other commercial gains, even where no cash payment is involved.

Reports note that immigration enforcement in Bali has increasingly focused on digital nomads, lifestyle influencers and foreign visitors whose online content or collaborations may be considered commercial, underscoring the importance of matching visa type to planned activities.

Sources

• The Economic Times
• VisaVerge explainer on Indonesia e-visa rules and influencer security update
• The Bali Sun
• South China Morning Post
• VnExpress International
• PerthNow