Foreign directors of PT PMA companies face three immediate compliance risks under Indonesia's Coretax migration—and organizations that prepared in Q4 2025 are now operating without disruption while others confront NPWP registration delays, reporting gaps, and heightened audit exposure.
The Verdict: Organizations with historical data discrepancies face elevated audit risk upon filing. The companies that conducted pre-migration reconciliation are operating with confidence; those that delayed are now discovering what the new system surfaces.
CoreTax (Sistem Inti Administrasi Perpajakan / PSIAP) is Indonesia's modernized tax administration platform that replaces DJP Online effective January 1, 2025 for corporate functions and 2026 for individual tax filing.
Key differences from DJP Online:
| DJP Online (Legacy) | CoreTax (Current) |
|---|---|
| Separate portals for registration, filing, payment | Unified platform |
| Manual data entry | Pre-populated forms from third-party data |
| EFIN required | Email/phone verification |
| Limited cross-referencing | Integrated Compliance Risk Management |
Who must use CoreTax: All Indonesian taxpayers including foreign individuals and foreign-owned companies (PT PMA).
Before assessing risk exposure, foreign directors must understand the phased rollout of Coretax implementation:
| Phase | Timeline | Scope | Status |
|---|---|---|---|
| Development & Testing | 2018-2024 | System architecture, pilot testing, personnel training | Completed |
| Corporate Function Launch | January 1, 2025 | PPh 21/23/26 withholding, e-Faktur VAT invoicing, taxpayer registration | Live |
| Penalty Waiver Period | January-April 2025 | Administrative penalty exemptions for transition-related delays | Concluded |
| Individual SPT Mandate | 2026 Filing Season | All individual taxpayer Annual Tax Returns must use Coretax | Current Phase |
| Full System Integration | Ongoing | Expanded third-party data integration, CRM enhancement | In Progress |
Source: DGT announcements and PMK 81/2024
Implication for Readers: If you are reading this during the March 2026 filing period, the "immediate actions" below should be completed now—before your filing deadline. Companies that completed these steps in Q4 2025 report smoother operations; those acting now face compressed timelines but can still achieve compliance continuity.
Indonesia's tax enforcement historically operated within fragmented data architecture. Immigration records, banking activity, corporate filings, and individual tax obligations existed in disconnected systems. The Coretax initiative, formally known as Pembaruan Sistem Inti Administrasi Perpajakan (PSIAP), restructures this architecture fundamentally.
Regulated under Presidential Decree No. 40 of 2018, Coretax is built on Commercial Off-The-Shelf (COTS) solutions designed to render the tax system "easy to navigate, reliable, seamlessly integrated, highly accurate, and unfailingly precise". The system consolidates previously separate applications—e-Faktur, e-SPT, e-Billing, and others—into a single integrated platform.
Strategic Insight: According to official DJP documentation, Coretax was developed to establish "a more modern, credible, and accountable tax authority supported by information technology that meets current digital demands". This represents architectural transformation, not merely interface modernization.
The scope of transformation extends across virtually every taxpayer interaction:
| Process Category | Key Changes Under Coretax |
|---|---|
| Registration | Digital NPWP workflow; NIK-NPWP integration; EFIN elimination |
| SPT Management | Automated form completion; real-time data integration; pre-populated fields |
| Payment Procedures | Unified gateway; single billing code for multiple tax types; Taxpayer Account Management (TAM) |
| Compliance Risk Management | Risk profiling capabilities comparing SPT against third-party data |
| Document Management | Centralized digital system replacing fragmented legacy applications |
| Exchange of Information | Enhanced AEOI (Automatic Exchange of Information) framework capabilities |
Important Distinction: The system is designed for comprehensive data integration. The operational deployment of specific integration features—particularly cross-referencing with banking data and other external institutions—is being implemented progressively. Foreign directors should assume integration capabilities will expand throughout 2026 and beyond.
The Mechanism: Under Coretax, VAT (PPN) and Withholding Tax (PPh 21/23/26) forms can be pre-filled based on e-Invoices (e-Faktur) and counterparty data submissions. The system processes taxpayer data with the aim of providing "accurate and up-to-date information".
The Risk: Foreign entities can no longer easily reconcile discrepancies at year-end. If a vendor issues an invoice to your PT PMA through the Coretax e-Faktur system, the transaction is recorded in DGT's integrated database. Inconsistencies between your reported inputs and counterparty-reported outputs become visible through the system's cross-referencing capabilities.
The "Zero Reporting" Problem: PT PMAs that historically filed minimal or zero returns while maintaining active operations face elevated exposure. The system's design enables cross-referencing of your declared revenue against:
Implication: The compliance strategy of "we'll reconcile during audit" carries higher risk under the new architecture. Proactive data cleansing before filing reduces exposure.
The Mechanism: Coretax is designed to integrate with the Ministry of Law and Human Rights (AHU) database containing Ultimate Beneficial Owner (UBO) declarations. The system architecture links corporate tax liability to declared ownership structures.
The Risk: PT PMAs utilizing informal arrangements face multiple layers of exposure.
Critical Legal Context: So-called "nominee" structures are not merely a tax risk—they are illegal under Indonesian law. The Investment Law (Law No. 25 of 2007) and its implementing regulations prohibit nominee arrangements for foreign investment. The risk extends beyond tax exposure to include:
Foreign directors should understand that Coretax visibility is one dimension of a broader legal exposure that predates this system.
Implication: Directors with any ambiguity in ownership structures should seek legal counsel immediately—not primarily for Coretax compliance, but for fundamental regulatory exposure that the new system may accelerate.
The Mechanism: Indonesia's Coretax implementation coincides with global enforcement of the OECD Pillar Two Income Inclusion Rule (IIR) in 2026. The global minimum effective tax rate (ETR) of 15% applies to multinational enterprises with consolidated revenue exceeding €750 million.
Scope Clarification: This exposure applies to a specific subset of PT PMAs. Most foreign-owned entities in Indonesia fall well below the €750 million threshold. For smaller PT PMAs, the Pillar Two analysis is informational context rather than direct exposure.
For In-Scope MNEs: The transparency features of Coretax mean effective tax rate calculations become more visible to both Indonesian authorities and foreign tax administrations. Transfer pricing arrangements, intercompany transactions, and profit allocations surface through the integrated system.
Key Terms Defined:
Implication for Large MNEs: Administrative efficiency—not fiscal incentives—becomes the competitive differentiator. For smaller PT PMAs, the primary exposures remain Exposure 1 (pre-populated liability) and Exposure 2 (beneficial owner visibility).
The DGT's CRM module is designed to classify taxpayers into risk categories based on behavioral analysis and data cross-referencing.
Analytical Framework: Based on publicly available DGT guidance and tax practitioner analysis, the risk classification approach can be understood through a tiered model:
| Risk Profile | Indicative Criteria | Likely Consequences |
|---|---|---|
| Lower Risk | Consistent filing history; data aligns with third-party sources; no historical disputes | Reduced audit probability; streamlined processing |
| Moderate Risk | Minor discrepancies; incomplete documentation; occasional late filings | Enhanced monitoring; potential clarification requests (SP2DK) |
| Higher Risk | Significant data mismatches; pattern of non-compliance; third-party data contradictions | Elevated audit probability; potential operational restrictions |
Important Caveat: The specific taxonomy and classification thresholds used by DGT are not publicly documented in detail. The framework above represents an analytical interpretation based on DGT's stated objectives of using CRM to "identify taxpayer compliance risk profiles based on Tax Notices (SPT) compared to third-party data". Individual taxpayer classifications are determined by DGT algorithms and official review processes.
On SP2DK Issuance: While CRM-driven risk profiling accelerates the identification of potential discrepancies, SP2DK (Surat Permintaan Penjelasan atas Data dan/atau Keterangan—formal clarification request letters) are authorized by DGT officials. The system enables faster targeting; human authorization remains part of the issuance process based on current procedures.
| Priority | Action | Owner | Expected Outcome |
|---|---|---|---|
| Critical | Verify NPWP status in Coretax portal | Finance Director | Confirm tax identity active and migrated |
| Critical | Confirm e-Faktur access credentials transferred | Tax Manager | Ensure VAT invoice capability uninterrupted |
| Critical | Update registered email and phone number | Administration | Enable account verification (EFIN no longer required) |
| High | Resolve any pending NPWP registration for new directors | HR/Legal | Address migration-related delays |
Operational Note: Unlike DJP Online, Coretax does not require an EFIN for verification. Taxpayers verify accounts using registered email addresses or phone numbers. Directors should confirm these details are current and accessible.
| Priority | Action | Owner | Expected Outcome |
|---|---|---|---|
| Critical | Review Taxpayer Account Management (TAM) dashboard | CFO/Tax Director | Identify historical position discrepancies |
| Critical | Reconcile 2024-2025 GL against filed SPTs | Finance Team | Flag unreconciled transactions before CRM detection |
| High | Validate e-Faktur input/output VAT reconciliation | Tax Manager | Confirm PPN positions match system records |
| High | Review withholding tax certificates received vs. filed | Tax Team | Ensure PPh 21/23/26 alignment |
| Priority | Action | Owner | Expected Outcome |
|---|---|---|---|
| Strategic | Assess effective tax rate under Pillar Two framework (if applicable) | CFO | Determine top-up tax exposure for in-scope MNEs |
| Strategic | Update Transfer Pricing documentation for enhanced scrutiny | Tax Director | Ensure arm's-length substantiation |
| Strategic | Monitor DGT releases for system integration updates | IT/Finance | Maintain automated reporting capability |
| Regulation | Effective Date | Relevance to PT PMA Compliance |
|---|---|---|
| Presidential Decree No. 40 of 2018 | 2018 | Legal foundation for PSIAP development |
| PMK 81/2024 | 2024 | Tax provisions governing Coretax System implementation |
| GR 55/2022 | 2022 | Income tax rate harmonization; PPh 21 calculation methodology |
| PMK 213/PMK.03/2016 | 2016 | Transfer Pricing documentation requirements (Local File, Master File, CbCR) |
| Law No. 25 of 2007 | 2007 | Investment Law; prohibition on nominee arrangements |
| PMK 70/2017 (replaced by PMK 108/2025) | January 2026 | Tax transparency framework updates |
| DGT Regulation PER-26/PJ/2014 | 2014 | Electronic tax administration procedures (foundational) |
Note: Foreign directors should monitor pajak.go.id for regulatory updates. The government has indicated supporting regulations continue to be finalized to "facilitate the operation of the core tax system".
Assessment: The Coretax migration represents an inflection point for Indonesian tax compliance. For organizations with clean historical positions, the system offers improved processing speed, reduced administrative burden, and potential audit probability reduction. For those with legacy gaps—whether in documentation, beneficial ownership clarity, or historical filing consistency—the integrated architecture creates exposure that previously remained fragmented across disconnected systems.
The Positioning Reality: As DGT's own published analysis indicates, the focus for tax authorities and taxpayers alike is "understandably fixed on the migration of data, the new interface, and the procedural shifts that CTAS brings." Organizations that treated 2025 as a year of proactive preparation—rather than reactive waiting—now operate with structural advantage.
What Distinguishes Prepared Organizations:
| Unprepared Posture | Prepared Posture |
|---|---|
| Discovering NPWP migration issues at filing time | NPWP and credential verification completed Q4 2025 |
| First TAM dashboard review reveals historical discrepancies | Historical reconciliation completed before system visibility |
| Reactive to SP2DK clarification requests | Proactive documentation supporting filed positions |
| Transfer Pricing documentation outdated | TP documentation refreshed for enhanced scrutiny environment |
JCSS Methodology: Our Coretax Readiness Diagnostic applies a three-phase assessment framework: (1) Registration and access verification, (2) Historical data reconciliation against current system visibility, and (3) Forward positioning for CRM classification optimization. This methodology reflects our experience advising foreign-invested entities through Indonesia's previous tax administration transitions and our ongoing engagement with regulatory developments.
Filing deadlines are imminent. Foreign directors managing PT PMA entities require clarity on:
The organizations that prepared are filing with confidence. Those that delayed are managing compressed timelines and discovering what the integrated system now surfaces.
JCSS conducts Coretax Readiness Diagnostics for foreign-owned entities in Indonesia. Our Tax Governance Team assesses specific exposure to the PSIAP migration—including historical data reconciliation, transfer pricing documentation review, and compliance positioning analysis.
Schedule a Coretax Migration Assessment to address your compliance positioning before the April filing deadline.
Don't wait for the SP2DK clarification request. Understand your position before filing.
This strategic briefing distinguishes between three categories of information:
Where specific claims require attribution, source references are provided. The CRM risk classification framework presented reflects analytical interpretation of DGT's stated compliance monitoring objectives rather than formally published taxonomy.
This briefing reflects conditions as of early March 2026. Regulatory guidance continues to evolve; foreign directors should consult qualified advisors for entity-specific analysis.
Strategic guidance for foreign-owned companies navigating Indonesia’s new Core Tax Administration System (CTAS).
CoreTax (officially the Core Tax Administration System or CTAS) is Indonesia's completely rebuilt tax administration platform, developed by the Directorate General of Taxes (DJP) as the backbone of the country's tax modernization reform. It went live in 2025 and is now mandatory for all taxpayers filing for the 2025 tax year onward.
This is not an upgrade — it's a full replacement.
Under the old system, DJP Online was really a loose collection of separate applications: e-Faktur for VAT invoicing, e-SPT for return preparation, e-Billing for payment codes, and so on. These systems didn't talk to each other well, which meant a lot of manual reconciliation, inconsistent data, and room for error — or, frankly, room to operate in grey areas.
CoreTax consolidates everything into a single integrated platform:
What this means for you as a business owner: Every piece of tax data your company submits — VAT invoices, withholding slips, monthly returns, annual filings — now sits in one system and is automatically cross-checked against itself, against your counterparties' data, and against external government databases (banking, customs, business registries). Errors and inconsistencies that used to take months or years to surface in an audit are now flagged in real time during submission.
The verification method has also changed. CoreTax no longer uses the old e-FIN system. Instead, taxpayers verify their accounts using registered email addresses or phone numbers, and companies now use personal digital certificates for authorized representatives rather than a single corporate electronic certificate.
Yes. There are no exceptions.
CoreTax is mandatory for all taxpayers in Indonesia — individuals, domestic companies, and PT PMAs alike. For the 2025 fiscal year (filed in 2026), CoreTax is the only accepted filing method for the Annual Corporate Income Tax Return (SPT Tahunan PPh Badan). No alternative submission method — paper, legacy DJP Online, or third-party workaround — is accepted.
As a PT PMA, you are subject to the same corporate tax obligations as any Indonesian limited liability company: 22% corporate income tax on taxable profits, periodic filing obligations (PPh 21, PPh 23, PPh 4(2), VAT, etc.), and the annual SPT. All of these now flow through CoreTax.
What you should be aware of as a foreign-owned company:
Let's be precise here, because this is a common source of confusion:
These are the default statutory deadlines. The government may issue extensions (as it did for the 2025 tax year) depending on system readiness or other policy considerations, but you should plan around the statutory dates unless officially told otherwise.
If you missed the April 30, 2026 corporate deadline:
PMK 81/2024 (Minister of Finance Regulation No. 81 of 2024) is the primary regulatory framework that governs how CoreTax operates in practice. It is essentially the rulebook for the new system — covering everything from registration procedures, tax filing formats, electronic certificate requirements, delegation of authority, to how withholding certificates and VAT invoices are handled under CoreTax.
Key provisions that directly impact your PT PMA:
No — e-Faktur as a standalone desktop application has been retired.
VAT invoice creation and management is now handled entirely within the CoreTax platform. The old workflow — downloading the e-Faktur app, importing certificates, generating invoices locally, and uploading them — is gone.
Under CoreTax:
Why this matters for your business:
Indonesia's Coretax integration has unified what was once fragmented across disconnected systems. What it surfaces about your PT PMA — before you file — determines your compliance posture for 2026 and beyond.
Time remaining until the corporate SPT deadline under Coretax. Filing without pre-migration reconciliation locks your CRM risk classification in place — a position that cannot be reversed after submission.
"The organizations that conducted pre-migration reconciliation are filing with confidence. Those that delayed are now discovering what the integrated system surfaces — with no window remaining to remediate before the deadline."— JCSS Tax Governance Team, Jakarta · March 2026
Our Tax Governance team delivers a structured diagnostic across all three structural risk areas — NPWP migration status, historical data reconciliation, and CRM positioning — with a prioritised remediation plan before your April 30 corporate filing deadline. Directors who act now retain the ability to file with clean, defensible positions.
CoreTax & Tax Administration: Indonesia CoreTax System (CTAS), DJP Online replacement, tax modernization, CoreTax activation, digital certificates, e-Faktur migration, SPT filing, and taxpayer compliance systems.
PT PMA & Foreign Company Compliance: PT PMA taxation, foreign-owned company compliance, Indonesian corporate tax obligations, withholding tax, VAT compliance, corporate governance, and tax filing requirements.
Risk, Audit & Transfer Pricing: transfer pricing documentation, related-party transactions, real-time tax data matching, audit risk, customs reconciliation, tax penalties, and compliance risk management for multinational companies.
