As a responsible taxpayer, Neotizens who already have a Tax Identification Number (NPWP) must report their Income Tax Article 21 (PPh 21) before March 31st every year, online through the official website of the Directorate General of Taxes (DJP).

But what exactly is PPh 21?

Income Tax Article 21 (PPh 21) is a tax imposed on income earned by individual taxpayers residing in Indonesia. PPh 21 includes deductions from salaries, wages, compensation, honoraria, allowances, and other similar earnings that contribute to one’s economic needs and are received in relation to work or services rendered.

However, be careful, many fraudsters take advantage of this reporting period to launch scams. What are their methods? Let’s break it down below:

Types of Fraud

1. Phishing Emails

Be cautious if you receive an email stating that you have an outstanding tax payment. Fraudsters often send emails containing links using addresses that resemble those of the official DJP. Recently, on Twitter (X), a screenshot circulated showing a convincing web domain and email such as efiling@djp.contact and www.pajak.contact.

These emails typically claim that you have underpaid your taxes and request you to send confirmation in the form of your Income Tax Deduction Proof.

Do not click any links in the email and never fill out or send any personal or sensitive data, such as your ID number (KTP), mother’s maiden name, or anything else.

2. APK Scam

This is a common method used by fraudsters. Through WhatsApp, they send a message containing what appears to be a tax notice or payment reminder — but it comes as a file with a .apk extension. Neotizens must be cautious and resist the urge to open it.

Once opened, the file can automatically install malware that steals important data from your smartphone or laptop.

Tips to Stay Safe

1. If you receive a WhatsApp message, check the phone number on the official DJP website, according to your local Tax Office (KPP). You can find the full list at pajak.go.id/unit-kerja.

2. If you receive an email regarding tax notices, bills, or links, make sure the email domain ends in @pajak.go.id. If not, the email is definitely fake.

3. The DJP never sends files with the .apk extension. Do not open any WhatsApp messages claiming to be from the DJP that include such files.

4. Ignore any messages — via email or WhatsApp — containing links that don’t end in pajak.go.id. DJP never uses links from domains outside pajak.go.id.

If you're still unsure or want more information, Neotizens can contact the official DJP support through:

• Email: informasi@pajak.go.id
• Call Center: Kring Pajak at 1500200
• Social Media: @kring_pajak

Make sure to verify any suspicious emails or messages through these official channels.

Visit the official website of Bank Neo Commerce for complete information about neobank and Bank Neo Commerce.

***

PT Bank Neo Commerce Tbk is licensed and supervised by the Indonesia Financial Service Authority (OJK) and Bank Indonesia (BI), and an insured member of Deposit Insurance Corporation (LPS).