KRA Tax Audit: What to Do When Your Business Gets Flagged
KRA Tax Audit
Getting a tax audit notice from the Kenya Revenue Authority can feel like a gut punch, especially for a small business owner already juggling suppliers, payroll, and cash flow. A KRA audit is not automatically a sign that something has gone wrong. In most cases it is a routine compliance check, and how it turns out usually comes down to how organized and informed you are once the notice lands.
KRA has been leaning harder on data driven compliance checks in recent years, cross referencing VAT, PAYE, and income tax filings against each other and against third party data from banks, suppliers, and other government systems. That means audits are touching more ordinary, otherwise compliant businesses than before, not just the big players. Knowing what to expect takes a lot of the anxiety out of the process.
What Typically Triggers a KRA Audit
KRA does not audit at random. A few patterns tend to raise flags:
- Frequent or unusually large VAT refund claims
- Inconsistencies between what’s reported for VAT, PAYE, and income tax, for example sales figures on your VAT returns that don’t line up with your income statement
- Profit margins that sit noticeably below what’s typical for your industry
- A pattern of amending returns after they’ve already been filed
- Late or irregular filing and payment history
- Sharp, unexplained swings in reported revenue
- A tip-off or complaint from a third party
None of these automatically means trouble. A legitimate business can trip several of these wires simply through normal, lumpy trading: a slow quarter, a genuine VAT refund position, a late filing during a cash crunch. What matters is being able to explain the numbers when asked.
What Happens During the Audit and What Rights You Have
A KRA audit generally follows a similar pattern regardless of the tax type involved. First comes notification, where KRA writes to you specifying the audit period, scope, and a deadline to respond. Then document collection, where you are asked to produce sales and purchase invoices, bank statements, payroll records, and contracts. For larger or more complex cases, field verification may follow, where officers visit your premises to check records against actual operations. Next is assessment, where KRA issues its findings along with any additional tax, penalties, or interest owed. Finally there is resolution, where you either accept the assessment or challenge it formally.
Throughout this, you have real rights as a taxpayer, not just obligations. You are entitled to know exactly what period and tax type is under review, to respond within the timeline stated in the notice rather than an arbitrary one, and to have someone represent you instead of dealing with KRA alone. That role is often filled by a licensed tax agent or accountant who deals with these reviews regularly, such as Gichuri & Partners’ tax audit response team, who work specifically with SMEs going through this process. Bringing in that kind of support early, before you have responded to KRA in writing, tends to matter more than doing it after an assessment has already landed.
If You Disagree With the Outcome
If the audit results in an assessment you believe is wrong, you are not without options, but the timelines are strict and treated as firm legal deadlines, not suggestions.
You generally have 30 days from receiving the assessment to lodge a formal objection through KRA’s iTax platform. A letter or email is not sufficient. As part of that, you are expected to pay or make arrangements for the portion of the assessment you do not dispute. KRA is then expected to issue a decision on your objection within 60 days. If it does not, the objection is treated as allowed by default.
If you are still unhappy with the outcome after that, you can appeal to the Tax Appeals Tribunal (TAT) within 30 days of the objection decision, with a notice of appeal filed and served on the Commissioner shortly after, followed by the full appeal documents. From there, further appeal to the High Court, and eventually the Court of Appeal, is possible on points of law.
Alternative Dispute Resolution (ADR) is also available at almost any stage of this process. It is a facilitated negotiation aimed at settling the matter without going through the full tribunal or court process. Many SMEs find it appealing because it is faster and less adversarial than a full tribunal hearing, and it can preserve a working relationship with KRA that a drawn out legal fight tends to damage. Starting ADR does not pause your statutory appeal deadlines, though, so many businesses file their formal appeal to protect their position even while ADR talks are ongoing, then withdraw it if a settlement is reached.
KRA can typically review several years of records during an audit, which is one reason keeping organized books year round, not just at tax season, makes such a difference if a notice does arrive.
Practical First Steps If You Have Just Been Flagged
If a KRA audit notice has just landed on your desk, a few things matter more than anything else in the first few days:
- Read the notice carefully and note the exact deadline, tax type, and period under review. Do not assume it covers more, or less, than it says.
- Start pulling together the specific records requested rather than everything you have. Organized, relevant documentation makes a much better impression than a data dump.
- Keep every piece of correspondence with KRA in writing, and confirm that objections or documents submitted through iTax have actually gone through rather than assuming they have.
- Do not ignore the notice or assume it will resolve itself. Missed deadlines at any stage of this process are treated strictly, regardless of how strong your underlying case is.
- Get a second, informed opinion early, particularly if the numbers involved are significant or the audit scope is broad. A fresh set of eyes often catches issues before they turn into a bigger assessment.
A KRA audit is rarely pleasant, but it is a manageable process once you understand the sequence of steps and the deadlines attached to each one. Businesses that come out of an audit in reasonable shape are usually the ones that treated the notice as a process to work through methodically, rather than a crisis to panic over.
About Author
Gichuri & Partners is a Nairobi-based tax consultancy helping Kenyan businesses and individuals resolve KRA audits, disputes, and objections while managing bookkeeping, payroll, and compliance.
