What does monthly tax compliance involve for a PT PMA in Indonesia?

Monthly tax compliance for a PT PMA includes withholding tax filings (PPh 21 for payroll, PPh 23 for domestic services, PPh 26 for cross-border payments, PPh 4(2) for final taxes), VAT returns (PPN), and PPh 25 corporate income tax installments — all filed through Indonesia's Coretax system. Each tax type carries its own filing deadline, typically the 10th or 15th of the following month for payment and the 20th for reporting. Post-2025, all filings transit through the Directorate General of Taxes (DJP) Coretax platform, replacing the legacy e-Filing and e-Billing systems. A PT PMA must also reconcile its withholding obligations against vendor contracts and employee payroll data monthly — not at year-end — because DJP cross-references reported data against third-party submissions in real time. Late filings attract administrative penalties under Article 7 of the General Tax Provisions Law (UU KUP), and persistent non-compliance triggers audit selection under DJP's risk-based profiling system.

What is Coretax and how does it affect Indonesian tax filings in 2025–2026?

Coretax is Indonesia's integrated tax administration system launched by the DJP in 2025, replacing e-Filing, e-Billing, e-Faktur, and e-Bupot. All taxpayers — including PT PMAs — must now register, file returns, issue tax invoices, and make payments through the Coretax platform. Coretax consolidates previously fragmented DJP systems into a single platform. For companies, the key operational changes include: unified login replacing multiple credentials, digital tax invoice (Faktur Pajak) issuance within Coretax rather than the standalone e-Faktur application, integrated withholding tax proof (Bukti Potong) generation, and real-time payment confirmation via the NTPN system. Companies that previously relied on third-party tax software for e-SPT preparation must verify compatibility with Coretax's API specifications. The transition period has created compliance gaps for firms that delayed migration — particularly around NPWP format conversion from 15-digit legacy to 16-digit Coretax format.

How should a company prepare for a DJP tax audit in Indonesia?

DJP audit preparation requires contemporaneous documentation: reconciliation between SPT filings and financial statements, complete Bukti Potong archives, VAT input-output matching, transfer pricing documentation if applicable, and a structured response team — ideally before the SP2 (audit notification) arrives. The DJP issues an SP2 (Surat Perintah Pemeriksaan) to commence a field audit or desk audit. Once received, the taxpayer has limited time to produce supporting documents. Best practice is to maintain audit-ready workpapers throughout the year. Key audit targets include: discrepancies between PPh 21 reported amounts and actual payroll records, VAT input credits claimed without valid Faktur Pajak, related-party transactions without arm's-length documentation, and expense deductions that fail the Article 6 deductibility test under UU PPh. Companies with a "High" DJP risk profile — common for PT PMAs with cross-border transactions — face higher audit frequency. The audit defense file should include: a tax position paper for each material position, reconciliation schedules (SPT-to-GL, PPh 21-to-payroll, PPN-to-revenue), and pre-drafted responses to standard DJP queries.

What are the annual corporate income tax obligations for a PT PMA in Indonesia?

A PT PMA must file its annual corporate income tax return (SPT Tahunan PPh Badan) within 4 months after fiscal year-end, with a possible 2-month extension. The standard CIT rate is 22%. The return must reconcile with audited financial statements prepared under PSAK (Indonesian GAAP). The SPT Tahunan PPh Badan requires detailed schedules including: fiscal adjustment computations (positive and negative corrections to commercial profit), depreciation schedules per Article 11 UU PPh, foreign income and tax credit calculations under Article 24, related-party transaction disclosures, and withholding tax credit reconciliation. PT PMAs with foreign shareholders must also consider withholding on dividend distributions (PPh 26 at 20% or treaty rate). Companies claiming tax incentives — such as tax holidays under PP 78/2019 or super-deductions under PP 45/2019 — must file additional compliance reports to maintain incentive eligibility.

What happens if a company misses a tax filing deadline in Indonesia?

Late tax filings in Indonesia trigger automatic administrative penalties under Article 7 UU KUP: IDR 100,000 per monthly return (PPh) and IDR 500,000 for annual returns. Late tax payments incur 0.4% per month interest. Persistent non-compliance elevates DJP audit risk profiling. Beyond the administrative fine, late filing has compounding consequences. DJP's risk engine flags habitual late filers for prioritized audit selection. If a company fails to file entirely, DJP may issue an ex-officio assessment (SKP) based on its own calculations — typically unfavorable to the taxpayer. For withholding taxes (PPh 21/23/26), late remittance creates personal exposure for directors under Article 32 and Article 35 of UU KUP, as withholding agents bear fiduciary responsibility for collected taxes. For VAT, late-issued Faktur Pajak results in the input credit being denied to the recipient — creating downstream liability for your counterparty and damaging commercial relationships.

What is a PT PMA and how is it different from a local PT in Indonesia?

A PT PMA (Perseroan Terbatas Penanaman Modal Asing) is an Indonesian limited liability company with foreign ownership. Unlike a local PT, a PT PMA requires minimum paid-up capital of IDR 10 billion, is subject to BKPM investment reporting (LKPM), and must comply with the Positive Investment List (DNI). The distinction affects capital requirements, permitted business activities (KBLI codes), licensing pathways (OSS-RBA), and ongoing compliance obligations. A PT PMA must file quarterly LKPM investment activity reports to BKPM — a requirement that does not apply to purely domestic PTs. Foreign ownership percentages are governed by the Positive Investment List under PP 10/2021 (as amended), which specifies sectors open to 100% foreign ownership, sectors with caps, and sectors reserved for domestic investors. PT PMAs also face stricter scrutiny on related-party transactions, thin capitalization (PMK-169/2015), and transfer pricing documentation (PMK-22/2020). The choice between PT PMA and alternative structures should be made with full visibility of the 3-year compliance cost, not just incorporation cost.

How long does it take to set up a PT PMA in Indonesia and what are the steps?

PT PMA setup typically takes 4–8 weeks from KBLI classification to first tax filing readiness. Key steps: KBLI and capital structure planning, deed of incorporation before notary, OSS-RBA licensing, NPWP and NIB registration, domicile letter, bank account opening, and BPJS enrollment. The timeline breaks down as: Weeks 1–2 for pre-incorporation planning (KBLI code selection, capital structure design including DER implications under PMK-169/2015, shareholder agreement drafting); Weeks 2–3 for deed execution before a licensed Indonesian notary and Ministry of Law and Human Rights (Kemenkumham) approval; Weeks 3–4 for OSS-RBA registration, NIB issuance, and business licensing; Weeks 4–6 for NPWP registration, domicile certificate, corporate bank account opening, and EFIN activation; Weeks 6–8 for BPJS Ketenagakerjaan and Kesehatan registration, initial employee enrollment, and first payroll tax setup. Delays most commonly occur at bank account opening (KYC requirements vary by bank and foreign shareholder jurisdiction) and at BPJS registration.

What is LKPM reporting and why does it matter for foreign investors in Indonesia?

LKPM (Laporan Kegiatan Penanaman Modal) is a mandatory quarterly investment activity report filed with BKPM by all PT PMAs. It covers capital realization, employment, production, and export data. Non-filing triggers OSS license revocation warnings and BKPM sanctions. LKPM is filed through the OSS-RBA system quarterly (Q1 by April 10, Q2 by July 10, Q3 by October 10, Q4 by January 10). The report requires disclosure of: realized investment vs. planned investment (as stated in the original NIB application), number of Indonesian and foreign employees, production output or revenue figures, and export values if applicable. BKPM uses LKPM data to monitor whether the PT PMA is operating in accordance with its stated investment plan. Persistent non-filing or significant deviation between planned and actual investment can result in: warning letters, OSS license suspension, and ultimately revocation of the NIB — which effectively makes the company unable to operate legally.

What capital structure considerations matter when incorporating a PT PMA in Indonesia?

PT PMA capital structure must address minimum paid-up capital (IDR 10 billion), debt-to-equity ratio limits (4:1 under PMK-169/2015 for thin capitalization), intercompany loan terms that satisfy arm's-length requirements, and foreign currency vs. IDR denomination for share capital. The capital structure decision has downstream tax consequences that persist for the life of the entity. Thin capitalization rules under PMK-169/2015 cap the deductible interest expense by reference to a 4:1 debt-to-equity ratio — interest on debt exceeding this ratio is non-deductible for CIT purposes. Intercompany loans from parent entities must carry arm's-length interest rates with proper loan agreements, or DJP may recharacterize interest as dividends under Article 18(2) UU PPh, triggering withholding at 20% (or treaty rate) without deductibility. The most common structuring error is under-capitalizing the PT PMA and over-leveraging with shareholder loans — it minimizes incorporation cost but maximizes ongoing tax risk.

What post-incorporation compliance does a new PT PMA face in the first 6 months?

In the first 6 months, a new PT PMA must complete: first PPh 21 payroll filing, monthly tax returns from month one, BPJS enrollment within 30 days of first employee, initial LKPM filing in the next quarterly window, and — if PKP-registered — VAT invoice issuance setup within the Coretax system. The compliance clock starts immediately upon NPWP issuance, not upon commencing revenue-generating operations. Even a pre-revenue PT PMA with zero transactions must file nil monthly tax returns (PPh 21, PPh 25). Failure to file nil returns triggers the same administrative penalties as late substantive returns. If the PT PMA employs foreign workers, RPTKA (manpower plan) and IMTA/notification must be obtained before the foreign employee begins work. BPJS enrollment is mandatory within 30 days of the first employment relationship; delays result in penalties and inability to access BPJS healthcare for employees. PKP registration for VAT purposes is mandatory once revenue crosses the IDR 4.8 billion threshold, or voluntary if the company wishes to claim input VAT credits earlier.

When is transfer pricing documentation mandatory in Indonesia?

Under PMK-22/2020, Indonesian transfer pricing documentation (master file, local file, and CbCR) is mandatory for taxpayers with related-party transactions exceeding specified thresholds: gross revenue above IDR 50 billion, or related-party transactions above IDR 20 billion (tangible goods) or IDR 5 billion (services/other). The documentation must be prepared contemporaneously — meaning before the annual tax return filing deadline, not when DJP requests it during an audit. The master file covers the multinational group's global operations, value chain, and intercompany transaction framework. The local file details the Indonesian entity's specific related-party transactions, functional analysis, and benchmarking study with comparable companies. Country-by-Country Reporting (CbCR) under PMK-213/2016 applies when the group's consolidated revenue exceeds EUR 750 million. Even below the mandatory thresholds, DJP retains authority under Article 18(3) UU PPh to challenge any related-party pricing — making voluntary documentation a defensive investment for PT PMAs with material intercompany flows.

How does Indonesia's thin capitalization rule (DER) work under PMK-169/2015?

PMK-169/2015 imposes a 4:1 debt-to-equity ratio (DER) for Indonesian corporate taxpayers. Interest expense on debt exceeding this ratio is non-deductible for corporate income tax purposes. The rule applies to all debt — intercompany and third-party — with specific exclusions for banks, financial institutions, and infrastructure companies. The DER calculation uses the average debt and average equity over the fiscal year, based on monthly balances. A common structuring error is establishing a highly leveraged PT PMA with minimal equity and a large shareholder loan — this may satisfy corporate law (minimum IDR 10 billion paid-up capital) but fail the DER test, rendering a significant portion of interest expense non-deductible. For groups planning intercompany financing, the DER analysis must be performed before the loan agreement is executed, not at year-end tax computation. PMK-169/2015 also interacts with transfer pricing requirements: even if the DER test is satisfied, the interest rate must still be arm's-length under Article 18(3) UU PPh.

What happens when there is no Double Tax Agreement between Indonesia and another country?

Without a DTA, Indonesia applies full domestic withholding rates: 20% on interest, royalties, dividends, and certain service payments to non-residents under Article 26 UU PPh. No treaty relief, no reduced rates, no mutual agreement procedure. The structuring decision must happen before the transaction. Indonesia has 70+ DTAs, but notable gaps exist — including Brazil, most African nations, and several Caribbean/offshore jurisdictions. In absent-DTA scenarios, outbound interest payments bear 20% WHT with no relief, making intercompany loan structures from these jurisdictions tax-inefficient. Royalty payments face the same 20% rate. Groups with operations in both treaty and non-treaty jurisdictions sometimes consider intermediate holding structures through treaty-partner countries — but this requires genuine substance and survives scrutiny only if the intermediate entity has real economic activity, given Indonesia's adoption of the Multilateral Instrument (MLI) Principal Purpose Test (PPT). The absence of a DTA also eliminates the mutual agreement procedure for dispute resolution.

How should intercompany management service fees be structured for Indonesia tax compliance?

Intercompany management fees paid by an Indonesian PT PMA must satisfy the "benefit test" — the Indonesian entity must demonstrate it received actual, identifiable services that a prudent independent party would have paid for. Fees failing this test are non-deductible and may trigger withholding tax reassessment. DJP scrutinizes management service fees intensively because they represent an easy mechanism for profit shifting. The OECD Transfer Pricing Guidelines (adopted by Indonesia) require that: the service was actually rendered (not merely available), the Indonesian entity received a tangible benefit, the fee reflects arm's-length pricing (benchmarked against comparable uncontrolled transactions), and adequate documentation exists (service agreements, timesheets, deliverable evidence, allocation keys). "Shareholder activities" — services the parent performs for its own benefit as a shareholder — are not chargeable to the subsidiary. DJP commonly challenges management fees where the service agreement is generic, no deliverables are evidenced, or the fee is computed as a percentage of revenue without cost-basis support.

What is the Multilateral Instrument (MLI) and how does it affect Indonesia's tax treaties?

Indonesia ratified the MLI (PP 49/2019), which modifies its existing DTAs by adding anti-abuse provisions — most critically the Principal Purpose Test (PPT). Under PPT, treaty benefits can be denied if one of the principal purposes of an arrangement was to obtain those benefits. The MLI overlays Indonesia's bilateral tax treaties without requiring individual renegotiation. The key provisions affecting businesses are: the PPT (Article 7 MLI), which allows DJP to deny treaty benefits for arrangements that lack commercial substance beyond tax advantage; the tie-breaker rule for dual-resident entities (Article 4 MLI), which now requires mutual agreement rather than automatic place-of-effective-management determination; and modifications to permanent establishment definitions (Articles 12–15 MLI), which may expand PE exposure for commissionnaire and similar arrangements. For groups using Singapore, Netherlands, or other holding jurisdictions to access Indonesia's treaty network, the MLI-PPT means that the holding company must demonstrate genuine economic substance — not merely legal presence.

What is an ITGC audit and why does an Indonesian company need one?

ITGC (IT General Controls) audits evaluate access management, change management, IT operations, and data backup/recovery across financial reporting systems. Indonesian companies need ITGC for group SOX compliance, external audit reliance, UU PDP data protection compliance, and OJK regulatory requirements for financial institutions. ITGCs are the foundational layer of IT controls that support the reliability of automated financial reporting controls. If ITGCs are weak — for example, if system administrators can modify financial data without approval workflows — then no application-level control can be trusted. For Indonesian PT PMAs that are subsidiaries of listed parent companies, ITGC audit results directly feed into the group's SOX 404 or equivalent internal control assessment. Under Indonesia's UU PDP (Personal Data Protection Law), companies processing personal data must implement technical safeguards including access controls, encryption, and breach notification procedures — all of which fall within ITGC scope. For companies regulated by OJK, POJK 38/2016 on IT Risk Management requires documented IT risk assessments and control testing.

How does Indonesia's UU PDP (Personal Data Protection Law) affect company IT controls?

UU PDP (Law 27/2022) requires companies processing personal data in Indonesia to implement: data minimization, purpose limitation, consent mechanisms, data breach notification within 72 hours, Data Protection Officer appointment for large-scale processors, and technical safeguards — all testable through ITGC frameworks. UU PDP applies to any entity processing personal data of Indonesian data subjects, regardless of where the entity is incorporated. For PT PMAs, this means employee payroll data, customer records, vendor contact information, and even director KTP data fall within scope. The technical control requirements map directly to ITGC domains: access management, change management, IT operations, and data lifecycle management. Companies that fail to implement adequate safeguards face administrative sanctions including fines up to 2% of annual revenue and potential criminal liability for directors under Article 57–67 UU PDP. The 72-hour breach notification requirement to both the data subject and the supervisory authority makes incident detection controls critical.

What does a COSO-based internal audit cover for an Indonesian manufacturing company?

A COSO-based internal audit for an Indonesian manufacturer covers five components: Control Environment (tone at top, ethics), Risk Assessment (operational and financial risks), Control Activities (procurement, inventory, revenue, payroll controls), Information & Communication (reporting accuracy), and Monitoring (ongoing evaluation and deficiency remediation). For Indonesian manufacturing companies, the highest-risk areas typically include: procurement and vendor management (kickback risk, related-party vendor transactions, single-source dependency), inventory management (physical-to-book reconciliation, shrinkage, obsolescence provisions under PSAK 14), fixed asset lifecycle (acquisition approval, capitalization thresholds, depreciation accuracy per PSAK 16, disposal controls), revenue recognition (cut-off, bill-and-hold, consignment), payroll and BPJS compliance (ghost employees, overtime calculation accuracy, PPh 21 withholding correctness), and treasury/cash management. For PT PMAs reporting to a parent group, the internal audit scope must also cover group-mandated controls — which may include anti-bribery (FCPA/UK Bribery Act), sanctions screening, and ESG reporting controls.

How should a company assess cybersecurity risks in Indonesia under ISO 27001?

ISO 27001 risk assessment for Indonesian companies requires: asset inventory (data, systems, people, physical), threat identification (ransomware, insider threats, regulatory non-compliance), vulnerability assessment, risk evaluation using likelihood × impact matrix, and treatment plans — mapped to Annex A controls and UU PDP requirements. Indonesian companies face a specific threat landscape that generic global frameworks may understate: high prevalence of business email compromise (BEC) targeting finance teams, ransomware attacks on manufacturing OT/IT converged networks, social engineering via WhatsApp, and insider threats amplified by high employee turnover rates. The risk assessment should be conducted at least annually and after significant changes. For companies pursuing ISO 27001 certification (increasingly requested by multinational clients and group auditors), the Statement of Applicability (SoA) must document which of the 93 Annex A controls (ISO 27001:2022) are applicable, implemented, and justified. The intersection with UU PDP creates a dual compliance mandate: ISO 27001 provides the control framework, while UU PDP specifies the legal obligations.

What is the difference between internal audit and external audit for an Indonesian PT PMA?

External audit (by a registered KAP) provides an independent opinion on financial statements under PSAK — it is backward-looking and mandatory for PT PMAs above threshold. Internal audit is forward-looking, tests operational controls, identifies risks, and reports to the Board/Audit Committee — it is governance-driven, not just compliance-driven. In Indonesia, external audit is performed by a Kantor Akuntan Publik (KAP) registered with OJK and the Ministry of Finance. It is mandatory for companies with assets or annual revenue above IDR 50 billion, publicly listed companies, and companies in regulated sectors. The external auditor provides an opinion on the fair presentation of financial statements — it does not test operational effectiveness of internal controls (except in limited scope for SOX-mandated engagements). Internal audit, by contrast, is management's tool for evaluating control effectiveness, identifying operational risks, and recommending improvements. For PT PMAs that are subsidiaries of listed groups, the parent's Audit Committee typically mandates internal audit coverage over the Indonesian subsidiary — covering areas the external auditor does not: procurement fraud, inventory leakage, payroll ghost employees, IT access violations, and regulatory compliance beyond financial reporting.

When should a company conduct physical inventory verification in Indonesia?

Physical inventory verification should occur at fiscal year-end (mandatory for audited entities), during ERP migrations, after warehouse relocations, before insurance renewals, during M&A due diligence, and when book-to-physical variance exceeds 2% — the threshold at which external auditors typically flag material discrepancy. For Indonesian manufacturing and distribution companies, inventory often represents 30–60% of current assets — making verification accuracy a material financial reporting issue. PSAK 14 (Inventories) requires inventory to be carried at the lower of cost or net realizable value, which means physical verification includes assessing condition, identifying obsolete or slow-moving items, and validating the NRV write-down provision. The external auditor (KAP) is required to observe the physical count for material inventory balances; if the company cannot demonstrate a reliable count process, the auditor may issue a qualified opinion — which has downstream consequences for banking covenants and investor confidence. For multi-site operations (common in Indonesian manufacturing — Java, Sumatra, Kalimantan), simultaneous counts or statistical sampling approaches must be pre-agreed with the external auditor.

What does a fixed asset verification engagement produce?

A fixed asset verification produces: a complete asset register reconciled to the general ledger, physical existence confirmation with tagged asset IDs, condition assessment, location mapping, ghost asset identification, impairment indicators, and a variance report — all formatted as audit-grade evidence the external auditor can rely on. The deliverable set typically includes: a reconciled fixed asset register (FAR) matching GL balances to physically verified items, signed count sheets with verifier identification, photographic evidence for high-value assets, exception reports (assets found but not in FAR, FAR items not physically located), condition grading (serviceable, needs repair, impaired, to be disposed), remaining useful life reassessment recommendations, and revaluation indicators where fair value has materially diverged from carrying value. For Indonesian companies applying PSAK 16 (Fixed Assets), the verification supports: impairment testing under PSAK 48, component depreciation assessment, and revaluation model elections. Insurance adequacy is a critical byproduct — the verification often reveals that insured values have not been updated to reflect acquisitions, disposals, or appreciation, leaving the company underinsured.

How does inventory verification work for multi-site manufacturing operations in Indonesia?

Multi-site inventory verification requires: simultaneous count coordination across all locations, standardized count sheets, independent count teams per site, cut-off procedures for inter-site transfers, statistical sampling for high-volume SKUs, real-time variance escalation, and consolidated reconciliation to ERP/GL — typically over a 2–5 day window. Indonesian manufacturing groups commonly operate across multiple islands — Java (primary), Sumatra, Kalimantan, Sulawesi — creating logistical challenges for simultaneous verification. The methodology must address: movement freeze (all inter-site and inbound/outbound transfers halted during count window), cut-off documentation (last GRN, last dispatch note, goods-in-transit identification), team independence (counters should not be warehouse staff who manage the inventory daily), variance thresholds (items exceeding ±1% variance by value require immediate recount), and consignment inventory (goods on client premises or third-party warehouses require separate confirmation procedures). The count methodology must be pre-agreed with the external auditor if the results will be relied upon for the statutory audit opinion.

What triggers a fixed asset impairment review under Indonesian accounting standards?

Under PSAK 48 (Impairment of Assets), impairment indicators include: significant decline in market value, adverse changes in technology or regulation, physical damage, asset idling, restructuring plans, and internal reporting showing asset performance below expectations. Any indicator triggers a mandatory recoverable amount test. PSAK 48 requires that at each reporting date, management assess whether any indication of impairment exists. If yes, the recoverable amount (higher of fair value less costs of disposal, and value in use) must be estimated and compared to carrying amount. For Indonesian manufacturing companies, common impairment triggers include: production line obsolescence due to technology upgrade, factory relocation leaving behind non-transferable installations, regulatory changes rendering equipment non-compliant, and sustained underperformance of a cash-generating unit (CGU). The impairment review requires: identification of the CGU to which the asset belongs, projection of future cash flows (supported by approved budgets and reasonable growth assumptions), selection of an appropriate discount rate (WACC adjusted for asset-specific risks), and sensitivity analysis on key assumptions.

How does ERP migration affect inventory and fixed asset records, and what controls should be in place?

ERP migration creates high risk for inventory and fixed asset data integrity: duplicate records, orphaned balances, unit-of-measure conversion errors, lost cost layers (FIFO/weighted average), and depreciation recalculation discrepancies. Pre-migration physical verification and post-migration reconciliation are mandatory controls. Indonesian companies migrating ERP systems (commonly to SAP S/4HANA, Oracle, or local solutions like Accurate/Jurnal) face a data migration risk that is both a financial reporting issue and an operational continuity issue. For inventory: cost layers built over years under FIFO or weighted-average methods may not transfer cleanly, leading to cost-of-goods-sold distortions post-migration. For fixed assets: accumulated depreciation histories may not map to the new system's depreciation engine, especially if the old system used custom or manually overridden rates. The control framework should include: pre-migration physical verification (establishing the "truth" baseline), parallel-run period (both systems running simultaneously for 1–2 months), post-migration reconciliation, and UAT sign-off by Finance before legacy system decommission.

What are the most significant Indonesian tax regulation changes in 2025–2026 that companies must act on?

The three most urgent 2025–2026 changes are: (1) full migration to Coretax — all tax filings, invoices, and payments now require Coretax registration and the legacy e-Filing/e-Faktur systems are decommissioned; (2) NPWP format conversion from 15-digit to 16-digit NIK-linked numbers for individuals and the updated entity format; and (3) the operationalization of Pillar Two (Global Minimum Tax) framework consultations that will affect large MNC groups operating in Indonesia. Beyond Coretax migration, PMK 81/2024 overhauled the VAT and withholding tax technical guidance effective 2025. Transfer pricing rules were updated by PMK 172/2023, tightening contemporaneous documentation requirements and introducing a new CbCR filing portal. BPJS Ketenagakerjaan contribution rates for the JHT (old-age savings) and JKP (employment termination insurance) programmes were recalibrated in 2025, affecting payroll cost models for all employers. Companies should also note that Indonesia signed the OECD BEPS MLI and the modifications to bilateral DTAs are now in effect — directly affecting withholding tax rates under Indonesia's treaty network.

How does the Coretax system change VAT invoice (Faktur Pajak) management in 2025–2026?

Under Coretax, all VAT invoices (Faktur Pajak) are issued, numbered, and submitted directly within the Coretax platform — the standalone e-Faktur desktop application is decommissioned. Buyers can only claim VAT input credits for invoices confirmed as issued in Coretax; invoices created outside the system are invalid for input tax purposes. The Coretax Faktur Pajak workflow is fully digital and counterparty-verified: the seller issues the invoice in Coretax, which generates a system-approved serial number (NSFP) automatically — eliminating the old batch NSFP allocation process. The buyer receives notification within Coretax and confirms receipt, which locks the invoice for both parties. Critical compliance risk: companies that issue invoices with VAT collected but fail to upload them into Coretax face double jeopardy — the VAT liability exists but the buyer cannot claim input credit, generating disputes with customers. Retroactive corrections (pembetulan) are possible but procedurally complex. Companies with high invoice volumes should ensure their ERP-to-Coretax API integration is certified and tested before each compliance cycle.

What is the Global Minimum Tax (Pillar Two) and how does it affect Indonesian subsidiaries of multinational groups?

The OECD Pillar Two Global Minimum Tax establishes a 15% effective tax rate floor for large MNC groups (consolidated revenues above EUR 750 million). Indonesia is consulting on domestic implementation. Indonesian subsidiaries of qualifying MNC groups need to assess their effective tax rate in Indonesia and model potential top-up tax exposure under their parent group's Pillar Two framework. Indonesia's standard CIT rate is 22%, which is above the 15% Pillar Two floor — meaning most Indonesian operations will not directly trigger a Qualified Domestic Minimum Top-Up Tax (QDMTT). However, Indonesian subsidiaries that benefit from significant tax incentives (tax holidays, special economic zone rates, super-deductions) may see their effective tax rate fall below 15% for specific years, creating potential top-up tax exposure in the parent jurisdiction. Companies claiming Indonesia tax holidays under PP 78/2019 or reduced rates in KEK/KPBPB zones should conduct a Pillar Two ETR analysis now. The relevant Indonesian implementing regulation is expected in 2025–2026; groups should engage with their consolidated tax advisors to align the Indonesian analysis with the parent's GloBE Information Return preparation.

How has PMK 172/2023 changed transfer pricing documentation requirements in Indonesia?

PMK 172/2023, effective for fiscal year 2024 and onwards, tightened Indonesian transfer pricing documentation requirements by: mandating contemporaneous preparation of the Local File (updated within the tax year, not retrospectively), introducing a new Notification Letter (Pemberitahuan) filing requirement separate from the SPT, and strengthening the definition of "controlled transactions" to cover indirect related-party relationships. Under PMK 172/2023, the Indonesian Local File must now include an expanded functional analysis, detailed comparability analysis with source identification, and a complete arm's-length range using interquartile methodology — consistent with OECD TPG Chapter II updates. The Country-by-Country Report (CbCR) filing portal has been integrated into Coretax for qualifying MNC groups (consolidated revenue above IDR 11 trillion). Penalty exposure for TP non-compliance has increased: DJP can now adjust related-party transactions to the median of the arm's-length range (not just the range boundary) if contemporaneous documentation is absent. Companies with significant intercompany services, royalties, loans, or tangible goods transactions must review their TP policy and documentation annually — not only when a DJP query arrives.

What are the key BPJS Ketenagakerjaan and BPJS Kesehatan changes effective in 2025–2026 that employers must implement?

The key BPJS changes effective in 2025 include: revised contribution bases reflecting the new minimum wage (UMR/UMP) structures, updated Jaminan Kehilangan Pekerjaan (JKP — employment termination insurance) contribution mechanics, and the integration of BPJS data verification with Coretax — meaning DJP can cross-reference BPJS salary reports against PPh 21 filings to identify discrepancies. BPJS Ketenagakerjaan covers four programmes: JHT (old-age savings, 5.7% split employer/employee), JKK (work accident, 0.24–1.74% based on risk level), JKM (death benefit, 0.3%), and JKP (employment termination, 0.46%). BPJS Kesehatan contributions are capped at a maximum salary basis. The 2025 changes require employers to reconcile their BPJS payroll reports against the Coretax PPh 21 reports — since DJP's risk profiling system now flags companies where the BPJS contribution base is materially lower than the PPh 21 gross salary base (a common pattern when companies incorrectly exclude allowances from BPJS calculations). Expatriate employees on KITAS are subject to different BPJS Kesehatan obligations depending on their employment contract structure and home country social security totalization agreements with Indonesia.

FAQ

Indonesia Business Compliance FAQ

30 partner-level answers covering tax compliance, PT PMA setup, transfer pricing, internal audit & ITGC, inventory verification, and 2026 regulatory changes — organized by service line.

Tax Compliance PT PMA Setup Transfer Pricing Internal Audit Inventory Regulatory Updates

Still have questions?

Speak to a partner — not a chatbot.

Every client engagement is supervised by a credentialed partner. Partner-led response within one business day.

Book a Free Consultation Email Us

Indonesia Business Compliance FAQ

Tax Compliance & Audit Readiness

PT PMA Setup & Foreign Investor Compliance

Transfer Pricing & Cross-Border Structuring

Internal Audit & ITGC / Cybersecurity

Inventory & Fixed Asset Verification

Regulatory Updates & 2026 Changes

Speak to a partner — not a chatbot.