Coretax SPT Jockey Services Proliferate, Hiding Major Risks of Personal Data Leaks

JAKARTA, KOMPAS.com — Amid the growing use of third-party services for filing annual tax notices (SPT) through the Coretax system, new concerns have emerged that go beyond mere administrative convenience.

This practice, which offers quick solutions for taxpayers, is gradually opening up risks, particularly in terms of the security of sensitive personal data.

As public reliance on third parties to handle tax obligations increases, a process that should be personal now involves the exchange of large amounts of data.

Information such as population registration numbers, addresses, and financial data is handed over without clear protection guarantees.

Cybersecurity expert Pratama Persadha views the trend of using SPT jockey services as part of changing public behaviour in responding to digital services.

He notes that when a system intended to simplify processes is perceived as complicated, there is a tendency to seek shortcuts without considering the accompanying risks.

“In this context, the issue does not stop at administrative compliance but develops into a serious matter in the realm of cybersecurity and personal data protection,” said Pratama when contacted on Tuesday (13/4/2026).

He emphasised that in practice, users often hand over important data without understanding its potential impacts.

The data provided is not limited to basic identity but also includes highly private economic information.

Pratama assesses that weak data management by service providers is one of the vulnerable points in this practice.

Without adequate security systems, user data is potentially exposed through various gaps, whether intentional or not.

“The main risk arising from this practice is the potential for personal data leaks. In a digital ecosystem that is not yet fully mature, data storage by jockey service providers is often not protected with appropriate security standards,” he stated.

He also warned that tax data has high economic value because it contains complete information about an individual’s financial condition, making it vulnerable to exploitation in illegal activities.

“Tax data has high value because it contains detailed individual economic information,” he added.

In addition to the potential for leaks, another risk is the misuse of account access by third parties.

When credentials are given fully, control over the tax account becomes open to outsiders.

“Shared credentials are potentially leaked or used on devices infected with malware,” he said.