KRA tax audits: What taxpayers need to know

This story has significance for readers across Kenya and beyond.

A Kenya Revenue Authority (KRA) tax audit is one of those events that most businesses would rather not receive notice of. Yet an audit does not necessarily mean that a taxpayer has done something wrong.

KRA is legally empowered to review taxpayers’ affairs to establish whether the correct taxes have been declared and paid. The outcome may be that the taxpayer is found compliant, or it may result in an additional assessment where KRA identifies a tax shortfall.

KRA may undertake returns reviews, comprehensive audits or investigations covering taxes such as income tax, VAT, PAYE, withholding tax, excise duty and customs duty.

A KRA tax audit is essentially an examination of a taxpayer’s financial and tax affairs to determine whether the taxpayer has complied with its obligations under the applicable tax laws. The process may involve reviewing tax returns, accounting records, invoices, bank information, contracts, payroll records and other documents relevant to determining the taxpayer’s liability.

The Tax Procedures Act, 2015 (TPA) gives the Commissioner broad powers to administer tax laws and obtain information relevant to determining a taxpayer’s liability. Importantly, the TPA defines a “document” broadly to include books of account, records, bank statements, receipts, invoices, vouchers, contracts, agreements, tax returns, tax invoices and electronic data.

There is no general rule requiring KRA to audit every taxpayer after a particular number of years. In practice, taxpayers may be selected for compliance checks, returns reviews, audits or investigations depending on KRA’s compliance mandate and risk assessment.

This means that a taxpayer should not assume that being audited once means it will not be audited again, or that not having been audited for several years means the business is unlikely to be selected. Businesses should instead maintain their tax records on an ongoing basis.

The TPA generally requires taxpayers to retain tax documents for five years from the end of the relevant reporting period, subject to statutory exceptions, including where the documents relate to an amended assessment or ongoing proceedings. Further, the Commissioner may assess outside the ordinary five-year period in cases involving gross or wilful neglect, evasion or fraud.

The best time to prepare for a KRA audit is before the audit notice arrives. A taxpayer should first confirm that its tax registrations accurately reflect the obligations applicable to the business. This includes reviewing the taxpayer’s PIN, VAT registration and other relevant tax obligations.

The taxpayer should then conduct an internal review of its tax returns and payments. Returns should be reconciled against the underlying accounting records, while payments should be matched against the relevant tax liabilities and payment receipts. Any outstanding balances, unexplained differences or inconsistencies should be identified early.

Businesses should also ensure that their tax invoices are properly maintained and compliant. This is particularly important in relation to VAT and income tax and the increasing integration of electronic invoicing requirements.

KRA currently requires applicable taxpayers to comply with eTIMS/TIMS requirements, and from the 2026 year of income, KRA has stated that declared business income and expenses must be supported by valid eTIMs invoices.

Other records that deserve particular attention include contracts, bank statements and the general ledger. These records should tell a consistent story. Where amounts declared in tax returns cannot be reconciled with the general ledger or bank transactions, the discrepancy may attract further questions from KRA.

Payroll should also be reviewed carefully, particularly PAYE, employee benefits, allowances and other employment-related payments.

Similarly, withholding tax records should be reconciled against invoices, payment schedules, certificates and the relevant returns.

For VAT, businesses should reconcile sales, purchases, output VAT, input VAT, tax invoices and VAT returns. Finally, related-party transactions deserve special attention because transactions involving connected persons may raise questions relating to transfer pricing, deductibility, withholding tax and the arm’s-length principle.

During the Audit: control the process

Once an audit begins, businesses should establish a clear communication protocol. Ideally, one person or a designated team member should coordinate communication with KRA. This avoids contradictory responses and ensures that every request is properly recorded and addressed.

Document production should also be controlled. A taxpayer should understand precisely what KRA has requested before producing documents. Requests should be logged, assigned to responsible persons and tracked until fully responded to.

The objective is not to withhold relevant information from KRA, but to ensure that the information provided is accurate, complete and responsive to the request. Every submission should preferably be accompanied by an evidence trail showing what was provided, when it was provided and to whom.

Legal advice is particularly important where an audit involves potentially contentious issues. Taxpayers should also consider whether particular communications or documents attract legal professional privilege. Privilege should not, however, be asserted casually. The nature of the communication and the capacity in which the legal practitioner was acting should be considered carefully.

Before any substantive response is sent to KRA, management should undertake a response review. A seemingly harmless explanation may have wider tax consequences if it inadvertently contradicts information previously submitted or creates an admission that was not intended.

After the Audit: do not ignore the findings

Completion of the audit does not necessarily mean the matter is over. KRA may communicate its findings which the taxpayer is required to respond to. In the event that the KRA is not satisfied with the findings issued, KRA may consider there is additional tax payable and thus issue a tax demand/ assessment.

The taxpayer should carefully review the basis of the assessment rather than simply accepting or rejecting it. The taxpayer should establish which transactions are disputed, the statutory basis relied upon by KRA, the computation of the additional tax, penalties and interest, and whether the evidence supports the assessment.

Where the taxpayer disagrees with a tax decision, the Tax Procedures Act requires the taxpayer to first lodge an objection with the Commissioner. Section 51 of the Tax Procedures Act provides for an objection within 30 days of notification of the tax decision, and the objection must set out the grounds of objection and the amendments required.

This stage should be approached seriously because an objection is not merely a letter stating that the taxpayer disagrees with KRA. It should be properly supported by the relevant facts/ grounds of objection, documents and legal arguments.

Where appropriate, the taxpayer and KRA may explore settlement or alternative resolution of the disputed issues. However, settlement should be considered carefully, particularly where the taxpayer has strong evidence and legal grounds to challenge the assessment.

If the dispute remains unresolved at the objection stage, the taxpayer may proceed to the Tax Appeals Tribunal in accordance with the Tax Procedures Act and the Tax Appeals Tribunal Act.

An appeal relating to an assessment generally requires the taxpayer to have paid the undisputed tax or entered into an arrangement with the Commissioner regarding payment of the undisputed amount. The statutory timelines are strict; recent Tribunal decisions continue to emphasize the importance of filing an appeal within the prescribed period. In the event that the dispute is not resolved at the Tribunal, other avenues for resolution include the High Court, Court of Appeal and the Supreme Court in exceptional circumstances.

A KRA audit should not be treated as a crisis that begins when the first audit letter arrives. It is a process for which businesses should prepare continuously.

The strongest position for a taxpayer is one where its registrations, returns, payments, invoices, contracts, bank records, ledgers, payroll, withholding tax, VAT and related-party transactions can all be reconciled and supported by contemporaneous evidence.

More importantly, taxpayers should remember that an audit is not simply an accounting exercise. It is a legal and evidentiary process.

How documents are produced, how explanations are framed, how requests are managed and how an assessment is challenged can ultimately determine whether a tax dispute is resolved efficiently or progresses into lengthy litigation.

Good tax compliance is therefore not merely about paying tax. It is also about keeping the evidence that proves why the tax reported and paid is correct.

Reporting originally appeared via Business Daily. Read the full source for additional context.