Tokocrypto: exchange services, costs, custody and account access

Tokocrypto combines an Indonesian rupiah spot order book, Buy/Sell conversion, recurring purchases and selected staking. Bank funding, exchange execution and external withdrawal are separate cost events.[1][5]

Buy/Sell presents a confirmation that refreshes every four seconds and shows the applicable tax, ICEx charge and amount received. Compare the actual proceeds with the order-book alternative at the same time and size; a zero commission label alone does not measure the conversion price.[5]

The API can reach account, trading and withdrawal functions. Its documentation says keys enable secure routes by default, while access can be configured by route. An automation key should therefore be reviewed for withdrawal authority as well as trading permission. Rate-limit responses require backoff; repeated violations can cause an IP ban.[20]

IDR integrations also need the December 2025 migration instructions: 31 pairs moved from the MBX engine to NextMe, changing response fields and data types. Compatibility with an older endpoint response should not be assumed merely because the pair name is unchanged.[21]

The published standard tariff changed with the exchange migration at 01:00 WIB on 18 June 2026. The totals below combine Tokocrypto commission, the stated tax withholding and the ICEx charge. They are execution charges, before price spread, slippage, deposit-provider costs or withdrawal fees.[4]

Buy/Sell removes the trading commission while retaining taxes and ICEx charges. Its conversion quote should therefore be assessed separately from order-book execution.[5]

Prestige advertises lower commissions but does not supply a complete current all-in tier schedule in its overview. Obtain the account-specific tariff before modelling a headline minimum.[29]

Staking has separate reward and withholding treatment. The fee page lists a 5% progressive-tax item for staking; this should not be substituted for spot transaction tax. The product confirmation shows the applicable return and deductions for the actual subscription.[3][26]

Virtual-account details changed at 01:00 WIB on 18 June 2026. Tokocrypto stated that the previous numbers became invalid. A saved bank payee from before that migration should be compared with newly generated deposit instructions before sending money. The migration notice did not impose an additional migration fee.[16]

Fiat withdrawals require a bank account in the verified customer’s name and security confirmation. Tokocrypto estimates 15 minutes to 24 hours, subject to bank clearing and overnight maintenance. The guide gives inconsistent overnight cutoff windows, so a precise universal bank timetable is not established; it directs users to support when a withdrawal remains delayed beyond 24 hours.[12]

An internal transfer is a platform ledger movement. It should not be treated as evidence that an equivalent external blockchain transfer will be immediate or free. For external withdrawals, the current guide asks for recipient information or a declaration that the customer is sending to their own wallet.[15][13]

Tokocrypto holds customer account balances in a custodial service. Its September 2026 explanation warns that an explorer balance for an address can include wider platform flows and differ from the amount credited to one customer. The account ledger and an address’s on-chain balance answer different questions; neither alone establishes a client’s insolvency priority.[18]

The January 2026 reserves publication reported approximately US$345.38 million of customer assets as at 1 January. It described one-to-one backing, exclusion of company-owned assets from the customer calculation, and customer verification using Merkle-tree and zero-knowledge methods. That is a dated company reserve disclosure, not a current volume figure, a financial-statement audit or a promise to reimburse every possible loss.[19]

Changing the password can create a 72-hour withdrawal hold. Tokocrypto’s February 2026 login notice recommends two-factor authentication or passkeys and ended Binance-based login on 28 February. Customers using that route need a supported email/password, Google or Apple login method before relying on urgent account access.[9]

No customer-specific insurance limit, insurer policy wording or universal compensation entitlement was established in the reviewed reserve, custody and terms materials. Reserve verification and custody controls should therefore be read on their documented scope rather than converted into an insurance amount.[19][18]

Eligible foreign individuals need the specified passport/residence documents. Companies require Indonesian registration and domicile. Acceptance remains subject to verification; an English interface does not establish worldwide eligibility.[2]

Successful registration and successful verification are separate stages. A user who intends to trade through the website still needs access to the mobile app for the KYC step; the mobile-only change did not require already verified users to repeat verification merely because the process changed.[6]

Complaints need account, transaction, problem, requested resolution and supporting documents. The agreement targets ten business days, permitting an explained exceptional extension. Requested missing documents are due within ten business days. Unresolved disputes can follow LAPS SJK.[2]

During the June migration, the company suspended IDR deposit channels for a defined maintenance window while describing crypto trading and transfers as continuing. That example shows why an outage should be checked by function. A support conversation does not itself establish that an order has been cancelled or that a replacement instruction has been executed.[16]

The agreement names PT Aset Digital Berkat and cites OJK S-14/D.07/2025. This company statement was not independently matched to a readable current regulator firm entry. Product-specific permission is not inferred.[2]

The June notices concern exchange, clearing and custody infrastructure; they do not announce a transfer of the customer’s contracting company.[17]

In its 3 February 2026 report on the preceding year, Tokocrypto said it had more than 4.8 million users by the end of 2025 and more than 480 IDR pairs. It also reported 75% growth in active users, without publishing the underlying active-user count in that release. These are company-reported measures with different definitions; neither registered reach nor pair count measures executable liquidity at a particular order size.[33]

The same release discussed a planned futures expansion. A plan is not evidence of a live leveraged product, so this profile’s service classification remains grounded in the presently documented spot and account services. A later launch would need its own contract, eligibility, margin and cost verification.[33]

Operator

PT Aset Digital Berkat

Exchange model

Centralised

Service scope

Indonesian spot exchange, conversion, recurring purchases and selected staking.

Client types

Retail clients; Institutional clients

Pricing publication

Public and quoted pricing

Pricing scope

Published standard tariffs; personalised Prestige terms.

Funding scope

IDR payment channels and supported blockchain transfers.

Custody and asset handling

Custodial balances; dated company reserve disclosure is separate from insurance.

Client eligibility

Verified customers; app required for KYC. Corporate onboarding is available.

Support

Help-centre live chat and email.

Authorisation and registration scope

Operator cites OJK S-14/D.07/2025; exact firm entry was not independently recovered.

Exchange metadata checked 20 Oct 2026Source 1Source 2Source 3Source 6Source 18Source 19Source 29Source 9

Recurring Buy supports daily, weekly or monthly schedules, with time chosen on the hour. The June guide lists 24 eligible IDR assets and a minimum IDR 20,000 purchase. Insufficient funds skip the scheduled purchase without deleting the plan; a later top-up does not automatically replay that missed instalment. The next scheduled run uses the available balance and normal market-order charges.[28]

The website’s Tax History workflow provides an annual IDR summary, monthly exports and withholding documentation. Save those records alongside deposits, withdrawals and trades when reconciling the account. The March report guide repeats older transaction-tax descriptions; for current execution charges use the later June schedule, not the historical explanatory text.[30]

Delisting can leave a visible balance that is no longer transferable because its blockchain or external support has ceased. Tokocrypto’s July guidance recommends retaining transaction IDs, addresses and balance evidence for support. A price displayed elsewhere does not demonstrate that a delisted balance can be sold or recovered through Tokocrypto.[31]

The July AI Terms notice describes an educational glossary and still indicates that its launch is forthcoming. That is not documented authority to place, alter or manage customer trades. This review did not establish an autonomous AI execution or copy-trading mandate from the inspected service documentation.[25]