Kenya Revenue Authority (KRA) audits have evolved into data-driven, system-matched reviews—leveraging iTax, eTIMS, customs (ICMS), and third-party data. The implication is clear: documentation, system alignment, and audit readiness are no longer optional.
This guide sets out a structured approach to prepare, respond, and win—protecting cash flow, minimizing disruption, and preserving reputation.
1. Understanding KRA Audits
KRA audits typically focus on consistency, completeness, and substantiation across:
- Income Tax (CIT/PIT) – Revenue recognition, expense deductibility, and losses.
- VAT – Output versus input tax, eTIMS alignment, and zero-rating/exemptions.
- PAYE & Withholding Taxes (WHT) – Payroll integrity and contractor payments.
- Customs & Excise – Import values, HS classification, rules of origin, and excisable supplies.
Audit Approaches You’ll Encounter
- Desk Audit: Document-based, remote review (the most common starting point).
- Field Audit: On-site verification of records and systems.
- Issue-Based Audit: Focused on one risk area (e.g., VAT input claims).
- Comprehensive Audit: Multi-tax, multi-year deep review.
Statutory Framework
- KRA can audit up to 5 years (or longer in cases of fraud or neglect).
- The burden of proof sits largely with the taxpayer.
- Failure to substantiate transactions can result in additional tax liabilities, penalties, and interest.
What’s Changed?
- eTIMS-driven validation of local purchases and sales.
- Cross-system matching (iTax ↔ eTIMS ↔ ICMS ↔ bank/third-party data).
- Risk-based selection using analytics, variance triggers, and abnormal ratios.
2. Audit Triggers
Common flags that invite scrutiny:
Financial & Filing Red Flags
-
Revenue inconsistencies:
- Financials greater than VAT returns resulting in under-declared VAT.
- VAT returns greater than financials resulting in under-declared income tax, often due to classification or timing errors.
- Expense spikes without corresponding growth.
- Unusual gross or net margins compared to industry benchmarks.
- Frequent amendments to returns.
VAT-Specific Triggers
- High input VAT versus output VAT ratio.
- Claims on non-eTIMS supported invoices where required.
- Repeated credit note adjustments.
- Persistent losses or unusual margins.
Payroll & WHT Triggers
- PAYE versus payroll ledger mismatches.
-
Missing WHT on expenses declared in financial statements:
- Professional fees
- Rent
- Management and consultancy services
Customs & Cross-Border Triggers
- Imports declared at customs but not reflected in books or VAT returns.
- Related-party imports creating transfer pricing exposure.
Most audits are pattern-driven. Businesses should fix the pattern, not just the numbers.
3. Pre-Audit Readiness: How to Build a Defensible Position
a) Reconciliations
- Financial statements against VAT returns.
- Financial statements against iTax income tax returns.
- eTIMS extracts against purchase and sales ledgers.
- ICMS imports against inventory and VAT records.
b) Proper Documentation
- Contracts and invoices (supplier/customer).
- Proof of payment (bank statements and remittances).
- Tax workings (VAT, WHT, and PAYE schedules).
- Customs entries (C17s) and shipping documents.
- Board minutes and approvals for material transactions.
- Transfer pricing documentation where applicable.
c) System Discipline
- Correct PIN capture on eTIMS invoices.
- Clean chart-of-accounts mapping with tax-sensitive accounts flagged.
- Monthly close checklists including tax controls.
4. Managing the Audit Process
Step 1: Acknowledge Promptly
Confirm receipt of the audit notice, designate a single point of contact, and propose timelines.
Step 2: Clarify Scope
Seek clarification on tax heads, tax periods, and specific schedules requested by KRA to avoid over-sharing.
Step 3: Assemble a Response Team
Include the finance lead, tax advisor, and legal support where necessary.
Step 4: Create a Response Tracker
Map each KRA request to:
- Responsible owner
- Source documents
- Status and submission date
Structure beats speed. Organized submissions build credibility.
5. Responding Effectively
a) Build Reconciliation Narratives
Each schedule should:
- Tie back to financial statements.
- Cross-reference returns filed.
- Explain timing differences such as accruals and cut-offs.
b) Drafting Structured Responses
A structured response should contain:
- Summary position.
- Detailed schedules.
- Supporting documents list.
Be cooperative, factual, and consistent. Avoid speculative explanations.
c) Common Response Mistakes
- Over-explaining without evidence.
- Submitting raw data without reconciliation.
- Contradicting earlier submissions.
6. High-Risk Areas and How to Defend Them
i) eTIMS vs Expense Claims
- Ensure eligible expenses align with eTIMS where applicable.
- For exclusions such as payroll, interest, and imports, maintain alternative proof including payroll records, loan agreements, and ICMS entries.
ii) VAT Input Claims
- Claim only valid and properly captured invoices.
- Reconcile timing differences such as late invoices and credit notes.
iii) Withholding Taxes
- Confirm correct rates and timely remittance.
- Reconcile WHT certificates with supplier ledgers.
iv) Imports & Customs
- Match ICMS values to accounting entries and VAT records.
- Document freight, insurance, and adjustments.
v) Transfer Pricing
- Maintain transfer pricing policies, benchmarking, and intercompany agreements.
- Ensure consistency across filings and financial statements.
7. Negotiation & Dispute Management
If KRA proposes adjustments, businesses should:
- Request a breakdown of KRA’s computation and the legal basis for adjustments.
- Respond with counter-reconciliations and legal references.
- Seek technical meetings with the KRA team to resolve misunderstandings early.
The objective is to reduce exposure before it becomes a formal assessment.
8. Common Pitfalls to Avoid During KRA Audits
- Submitting inconsistent schedules across responses.
- Relying on internal spreadsheets without source documents.
- Ignoring system mismatches between eTIMS, ICMS, and financial records.
- Missing statutory timelines for responses and objections.
- Treating audits as one-off events instead of control issues.
9. Winning the Audit
- Minimal or no adjustments due to strong documentation.
- Narrowed audit scope after early clarifications.
- Faster closure with fewer follow-ups.
- Preserved cash flow and reputation.
Winning is less about arguing and more about presenting coherent, well-evidenced documentation.
10. Post-Audit Strategy: Institutionalize the Lessons
- Implement a Tax Control Framework through monthly reconciliations and periodic tax reviews.
- Automate reconciliations through eTIMS and ICMS integrations where possible.
- Train finance teams on documentation standards and tax-sensitive transactions.
- Update the business Standard Operating Procedures (SOPs).
In the current environment, success is built on precision, compliance, and consistency. Businesses that invest in systems alignment and audit readiness do not merely survive audits—they control outcomes.
Need Support?
Stalwart Tax Advisory provides end-to-end audit support, from KRA audit readiness to full audit representation and tax dispute resolution.
Phone: +254 707 811 150
Website: www.stalwartadvisory.co.ke
Email: info@stalwartadvisory.co.ke
Precision. Compliance. Confidence.