The hook
“A fake tax portal can create a tax problem just as fast as a missed filing can.”
DJP's January 2026 warning says official Coretax access is only through coretaxdjp.pajak.go.id, while the Coretax portal page on pajak.go.id points taxpayers to the same address. That makes domain-checking part of the real compliance workflow. In a digital system, giving credentials to the wrong site is not just an IT mistake.
The takeaway
The safest habit here is simple: start from pajak.go.id or type the official Coretax domain yourself.