How to Handle a KRA Tax Audit: What to Expect and How to Prepare

A KRA tax audit is not an accusation. It is KRA's way of verifying that your tax returns match your actual business records. A KRA tax audit is essentially an examination of a taxpayer's financial and tax affairs to determine whether the taxpayer has complied with its obligations under the applicable tax laws. An audit does not necessarily mean that a taxpayer has done something wrong; the outcome may be that the taxpayer is found compliant, or it may result in an additional assessment where KRA identifies a tax shortfall. But the clock starts ticking the moment you get that notice. Businesses that are organised before the audit notice arrives fare significantly better than those scrambling after.

What Triggers a KRA Audit

KRA has intensified its audit programme in 2026, driven by eTIMS data matching and the expanded compliance mandate. The most common reason is that your declared figures don't match what KRA's systems already know. eTIMS transmits every invoice you issue to KRA in real time. When your VAT return figures do not match the eTIMS data KRA already holds, the system automatically flags you. This is the most common trigger in 2026.

Other red flags include filing nil returns for 6 or more consecutive months while you are clearly operating, which raises immediate flags because KRA assumes you are making sales but not declaring them. If your business has genuinely had no activity, consider applying for VAT cancellation rather than filing indefinite nil returns. KRA also periodically runs sector-wide audit programmes. Recent targets include construction, hospitality, transport, and digital services. If your industry is on KRA's list, expect a notice regardless of your individual compliance history. Or you could simply be picked at random.

What Happens When You Get an Audit Notice

KRA issues a formal audit notice via the iTax portal. The notice specifies the tax period under review, the scope of the audit, and the documents required. Read it carefully. You typically have 7 to 14 days to respond. Do not ignore it—failure to respond can result in KRA issuing a best-judgement assessment based on whatever information they have.

The most common type of audit is a desk audit, which is generally less disruptive and is conducted remotely. Desk audits usually focus on a narrow issue (for example, VAT input claims) and communication is mainly done via email or iTax. For more complex cases, KRA may visit your premises.

How to Prepare Your Documents

Gather these before your deadline. You will need original bank statements for all business bank accounts, copies of all filed returns (VAT, PAYE, Income Tax) for the period under review, audited accounts and general ledgers, invoices and eTIMS receipts, purchase invoices and payment vouchers, and P9 forms and proof of payment for NSSF and Housing Levy. From the 2026 year of income, KRA has stated that declared business income and expenses must be supported by valid eTIMS invoices. Other records that deserve particular attention include contracts, bank statements and the general ledger.

Use a KRA tax expert on Kaziiko to help organize your records before submission. Organised businesses submit within the deadline. Late submissions signal poor record-keeping and increase KRA's suspicion.

What Happens After You Submit

KRA follows a similar pattern: first comes notification, where KRA writes to you specifying the audit period, scope, and a deadline to respond. Then document collection, where you are asked to produce sales and purchase invoices, bank statements, payroll records, and contracts. For larger or more complex cases, field verification may follow, where officers visit your premises to check records against actual operations. Next is assessment, where KRA issues its findings along with any additional tax, penalties, or interest owed.

Deadlines here are generous compared to what comes next. Once the KRA commences an audit, there is no statutory timeline within which it is required to conclude it. However, the law permits the KRA to only issue assessments within five years immediately following the last date of the reporting period to which the assessment relates. As a result, the KRA tends to match the scope of its audits with this five-year timeline.

If You Disagree With the Assessment

This is where being fast matters. Under Section 51 of the Tax Procedures Act, you have 30 days from the date of the assessment notice to file a formal objection. Miss this window and your right to object is extinguished. The 30 days begins the moment the notice is issued. Not when you read it. Not when you hire an accountant. From the date on the notice.

You must file a tax objection within 30 days of receiving the KRA tax assessment or tax decision. Must be filed online through the KRA iTax portal. A covering letter alone is not sufficient. Your objection should state the grounds clearly—whether the facts are wrong, the law was misapplied, or the calculation is incorrect.

KRA must issue an objection decision within 60 days of receiving a valid notice of objection. If you lose at that stage, you have 30 days from the date of KRA's objection decision to file an appeal at the Tax Appeals Tribunal. This is a separate and equally hard 30-day deadline. Missing it extinguishes your right to a TAT hearing for that assessment.

Consider hiring a compliance expert to help frame your objection. The fee to appeal to the Tax Appeals Tribunal is KES 20,000 (though confirm the current fee when filing). The Tax Appeals Tribunal should hear and determine the appeal within 90 days.

Getting Ready Before the Audit Comes

The best defence is not scrambling when KRA knocks. From January 2026, the authority will validate every figure declared in income tax returns against real-time electronic data at the point of filing. Make sure your eTIMS records, bank statements and your bookkeeping all say the same thing. Accurate, IFRS-compliant bookkeeping is the foundation of audit readiness and one of the leading ways to reduce audit adjustments and KRA scrutiny.

If you are not confident in your records, find a verified Kenyan expert on Kaziiko now—before the notice arrives. A few thousand shillings spent on preventive work beats tens of thousands in penalties later.

Frequently Asked Questions

What if I miss the 30-day objection deadline?

Miss this window and your right to object is extinguished. You cannot revive it by explaining you did not know. A late objection can only be admitted with the Commissioner's approval and must be accompanied by a satisfactory explanation for the delay. Do not rely on this. Act within 30 days.

Can KRA audit records from more than five years ago?

There is no five-year statutory limitation in instances where there is gross or wilful neglect, evasion or fraud by, or on behalf, of a taxpayer. In such instances, the scope of a KRA audit can extend beyond the five-year limitation period. Keep good records for at least five years to be safe.

What happens if KRA issues a best-judgement assessment?

This is when KRA decides what you owe based on incomplete information, usually because you did not respond to the audit notice. You still have 30 days to object. But by then you are working uphill, because KRA has already made assumptions about your income.

Can I negotiate a payment plan if I owe tax?

KRA has expanded its Automated Payment Plan, letting taxpayers restructure liabilities digitally under controlled conditions alongside faster debt recovery. Speak to KRA directly or work with a tax professional to explore this option.