A DJP tax audit (pemeriksaan pajak) is a formal review by Indonesia’s Directorate General of Taxes to test whether a taxpayer’s reported and paid tax matches what the law actually requires, carried out under Minister of Finance Regulation No. 15 of 2025 on tax audit procedure. For a PT PMA, the fear is rarely about having done something wrong on purpose. It’s the quieter worry: filing everything correctly, on time, and still not knowing whether a number on last year’s return will pull your company into six months of document requests.
Key Takeaways
- A DJP audit is a formal, warrant-based process under PMK 15/2025, distinct from an SP2DK clarification letter, and it is triggered by specific data mismatches, not random selection.
- VAT refund claims and annual losses almost always lead to an audit, since Article 4 of PMK 15/2025 lists a refund request or a loss-making SPT as compliance-audit criteria.
- Books, records, and supporting documents must be kept for 10 years in Indonesia under Article 28(11) of the KUP Law, whether or not an audit is ever opened.
What Is a DJP Tax Audit, and How Is It Different From an SP2DK?
Most PT PMA owners hear “audit” and picture the same thing: a stranger walking into the office with a warrant. In practice, DJP has two separate tools, and confusing them is where a lot of unnecessary panic starts.
An SP2DK (Surat Permintaan Penjelasan atas Data dan/atau Keterangan) is a request for clarification. DJP’s system has spotted a gap between your SPT and third-party data, such as a bank transaction or a counterparty’s withholding slip, and wants an explanation. It is not a formal audit, there is no audit warrant, and if your written response and supporting documents hold up, the matter usually closes there. You typically get seven to fourteen working days to respond.
A pemeriksaan pajak is the formal escalation. DJP issues a Surat Perintah Pemeriksaan (SP2), an official audit warrant, and assigns a team to test your books against the law directly. Under PMK 15/2025, a compliance audit comes in three depths: Pemeriksaan Lengkap covers every line of the SPT, Pemeriksaan Terfokus narrows in on one or two items, and Pemeriksaan Spesifik targets a single, specific issue. Ignoring an SP2DK for more than about two weeks, or giving an explanation DJP’s data contradicts, is one of the more common ways a clarification letter turns into a full audit.
What Triggers a DJP Tax Audit for a PT PMA?
DJP does not select taxpayers at random. Article 4 of PMK 15/2025 lists specific criteria for a compliance audit, and Indonesia’s Compliance Risk Management (CRM) system layers automated, data-driven flags on top of that legal baseline. For a PT PMA, six patterns account for most of the audits that actually happen.
VAT Refund Claims (Restitusi)
If your SPT shows an overpayment and you request restitution rather than carrying the credit forward, PMK 15/2025 requires DJP to follow up with an audit before releasing the refund. This is not discretionary. Requesting a VAT or income tax refund is, on its own, one of the listed criteria for a compliance audit. The accelerated pengembalian pendahuluan track processes faster for low-risk, on-time filers, but even that track carries the possibility of a later audit if the figures don’t hold up.
Large or Unexplained Swings in Reported Revenue
Coretax runs automated pattern recognition across VAT, withholding, and payroll tax data every month. A sudden jump or drop in reported turnover, especially one that isn’t matched by a similar move in tax paid, generates a system flag. The inverse pattern is just as visible: sales rising while PPh Badan paid falls. DJP’s own risk-scoring model treats that divergence as a signal that costs may be inflated or income understated, and Coretax now cross-references your e-Faktur output data against your monthly SPT in near real time, so a mismatch surfaces at filing, not months later.
Discrepancies Between SPT Income and LKPM Investment Realization
LKPM (Laporan Kegiatan Penanaman Modal) and your annual SPT go to different authorities, BKPM and DJP respectively, but Indonesia’s integrated data systems now cross-check them against each other. If your LKPM reports strong investment realization and production output while your SPT shows minimal income or a loss, that gap is a specific, recorded discrepancy DJP’s analytics are built to catch, not a coincidence regulators overlook.
Related-Party Transactions Without Transfer Pricing Documentation
Any transaction with a party under common control, whether a foreign parent, a sister subsidiary, or an entity a third party influences on both sides, falls under the arm’s length principle in PMK 172/2023. If DJP requests your Master File and Local File during an audit and you can’t produce them within one month, PMK 172/2023 lets the auditor treat the absence of documentation as evidence the pricing wasn’t at arm’s length, with the adjustment landing directly on your taxable income.
Consistent Loss-Making Status Over Multiple Years
Filing an SPT that reports a loss is itself listed as an audit criterion under PMK 15/2025. A single loss year during a genuine expansion phase rarely draws attention on its own. A PT PMA reporting losses or near-zero margins for three consecutive years, particularly one still able to fund operations and pay foreign shareholder loans, reads very differently to an examiner. It suggests either costs that don’t belong on the books or profit shifted somewhere that isn’t Indonesia.
Industry Profit Margin Benchmarks (Total Benchmarking)
Under Surat Edaran DJP No. SE-96/PJ/2009, DJP maintains a Total Benchmarking system that scores every taxpayer against financial ratios calculated for their five-digit KLU industry code: gross and net profit margin, the Corporate Tax to Turnover Ratio (CTTOR), and several cost-input ratios. A company whose CTTOR sits well below the average for its sector, especially a high-revenue company paying disproportionately little corporate tax, becomes a candidate for an SP2DK first and a targeted audit if the explanation doesn’t add up. A low ratio isn’t automatically wrong. It just means you need a documented, defensible reason on file before anyone asks.
Notes from InvestinAsia Consultants
The pattern we see most often isn’t outright evasion. It’s a PT PMA whose LKPM, Coretax filings, and internal accounting were prepared by three different people who never compared notes. A director reports strong investment realization to BKPM to protect an incentive, while the finance team files a conservative SPT to Coretax. Neither number is fabricated, but together they tell a story that doesn’t hold up, and that inconsistency is exactly what the cross-referencing systems are built to catch.
Not Sure Your Numbers Would Hold Up Under a DJP Review?
With 380+ in-house professionals, InvestinAsia can reconcile your LKPM, Coretax filings, and books before DJP does.
What Does a DJP Tax Audit Actually Look Like?
DJP runs two formats, and which one you get says something about what triggered it in the first place.
A desk audit (pemeriksaan kantor) happens at the tax office. You are summoned, and you bring or send the requested books, records, and documents for the auditor to review on their premises. It is generally used for narrower, more specific issues.
A field audit (pemeriksaan lapangan) takes place at your registered business address. The auditor team has the right to enter your premises, access your accounting systems, and request a dedicated room to work from. VAT refund audits and full-scope compliance audits are typically conducted this way.
Either way, the sequence is the same. DJP issues the SP2 (Surat Perintah Pemeriksaan), holds an opening meeting to explain the scope and legal basis, and requests your books, records, and supporting documents, which you have one month to produce in full. Depending on scope, a Pemeriksaan Spesifik typically runs around one month, a Pemeriksaan Terfokus around three months, and a Pemeriksaan Lengkap around five months, before the closing stages. At the end, DJP issues a Surat Pemberitahuan Hasil Pemeriksaan (SPHP) listing every proposed correction with its legal basis, and you get a formal closing conference to respond before the final Laporan Hasil Pemeriksaan and any resulting assessment letter (SKPKB) are issued.
How Long Do You Need to Keep Your Documents?
Article 28(11) of the KUP Law requires every taxpayer to keep books, records, and the documents underlying them, including electronic data, for 10 years, stored inside Indonesia at your registered business address. That covers ledgers, journals, invoices, contracts, and payment evidence, and it applies whether or not you are ever audited. The 10-year window lines up with the statute of limitations for tax-related criminal investigation, which is DJP’s stated reason for setting it that long rather than the shorter period many foreign investors expect from their home jurisdiction. Deliberately failing to retain these records carries its own criminal exposure under Article 39 of the same law, separate from any correction arising from the audit itself.
What Should You Do If You Receive an SP2?
An SP2 is not something to negotiate away or ignore. A few practical steps make a material difference to how the process goes.
Verify the warrant and understand the scope
Confirm the auditor’s identification and the SP2 itself, and read the stated scope and legal basis carefully. A Pemeriksaan Spesifik covering one tax type is a different conversation than a full Pemeriksaan Lengkap.
Assemble documents within the one-month window
DJP can issue up to two written warnings if requested books and records aren’t produced in full. Failing to produce them lets DJP calculate your tax liability secara jabatan, using its own estimate rather than your figures, which is rarely favorable to the taxpayer.
Bring in a tax advisor before the closing conference
You have the right to request a review by DJP’s Quality Assurance Team if you disagree with a finding at the closing conference stage. That right is far more useful with a prepared, documented position behind it than with a verbal objection made on the spot.
Respond in writing to the SPHP
The Surat Pemberitahuan Hasil Pemeriksaan lists every proposed correction. A written response addressing each item, backed by the underlying documents, is your last structured opportunity to change the outcome before the final assessment is issued.
Filing your annual corporate tax return through Coretax correctly in the first place is still the cheapest form of audit defense. Coretax cross-checks your VAT invoices, licensing data from OSS, and payroll data against BPJS in real time, and most of the red flags that later become SP2DK letters or audit triggers, a revenue-VAT mismatch, a reported-zero-revenue-but-claimed-expenses pattern, a missing monthly SPT, show up at the filing stage rather than a year later.
Tips from InvestinAsia consultant team:
- Reconcile your LKPM figures against your SPT before each filing window, not after BKPM or DJP flags a gap.
- Keep a short internal memo explaining any year your margins fall below your industry’s benchmark, with the business reason attached, so it’s ready if an SP2DK arrives.
- Prepare Master File and Local File documentation for related-party transactions on an annual cycle rather than scrambling once DJP’s one-month request clock starts.
A well-run PT PMA tax structure is straightforward to defend when the underlying compliance work, from LKPM reporting to monthly Coretax reconciliation, has been treated as one connected system rather than four separate chores handled by whoever has time that week. For foreign founders who want that groundwork handled correctly from the start, InvestinAsia’s Indonesia tax consultant and compliance services cover monthly filing, LKPM alignment, and transfer pricing documentation as a single workflow, so a discrepancy gets caught internally before DJP’s systems catch it first.
Received an SP2DK or Worried One Is Coming?
Our team has guided foreign-owned companies through Coretax audit flags since the system launched.
References
1. Direktorat Jenderal Pajak. (n.d.). Tax Audit. Retrieved from
https://www.pajak.go.id/en/tax-audit
2. Direktorat Jenderal Pajak. (n.d.). Pemeriksaan. Retrieved from
https://www.pajak.go.id/en/node/34951
3. Ortax. (2025). Pemeriksaan Pajak: Tujuan, Jenis, dan Jangka Waktunya. Retrieved from
https://ortax.org/apa-itu-pemeriksaan-pajak
4. DDTCNews. (2024). Alasan Dokumen Dasar Pembukuan Wajib Disimpan selama 10 Tahun. Retrieved from
https://news.ddtc.co.id/berita/nasional/1805429/alasan-dokumen-dasar-pembukuan-wajib-disimpan-selama-10-tahun
5. Acclime Indonesia. (2026). Understanding Transfer Pricing in Indonesia: Rules & Guidelines. Retrieved from
6. Diskusi Pajak. (2026). Apa Itu Rasio Benchmarking Pajak dan Bagaimana Cara Menggunakannya? Retrieved from
https://www.diskusipajak.com/apa-itu-rasio-benchmarking-pajak-dan-bagaimana-cara-menggunakannya/
7. JCSS Indonesia. (2026). Everything Foreign Businesses Get Wrong About Corporate Tax in Indonesia. Retrieved from
https://jcss.co.id/corporate-tax-indonesia-compliance-guide/
