A KRA audit notice is one of the most stressful documents a business owner in Kenya can receive. Whether it is a desk audit, a field audit, or a formal demand for additional tax, the situation requires an immediate, structured response — not panic, and not silence.

In 2026, KRA has significantly intensified its audit activity as part of its medium-term revenue strategy. Businesses in sectors including construction, retail, professional services, and import/export are under heightened scrutiny. If you have received an audit notice, you have between 7 and 30 days to respond, depending on the notice type.

What Is a KRA Audit?

A KRA audit is a formal review of a taxpayer's financial records to verify that taxes declared and paid match what KRA believes is owed. Audits are conducted under the authority of the Tax Procedures Act, 2015, and may cover income tax (corporate or individual), VAT, PAYE, withholding tax, or a combination of tax types.

KRA conducts several types of audits:

  • Desk audit: Conducted remotely, based on your filed returns. KRA requests specific records or clarification without visiting your premises.
  • Field audit: KRA officers visit your business premises to inspect books of account, contracts, bank statements, and supporting documents in person.
  • Sector-based audit: Industry-wide reviews targeting all businesses in a particular sector — common in oil & gas, real estate, and hospitality.
  • Back-duty investigation: The most serious form — a full historical review that can go back up to 5 years (or longer in fraud cases).

Critical Deadline

Under the Tax Procedures Act, you have 30 days from the date of a KRA assessment to file a formal objection. Missing this window means accepting the assessment as final. If you have received any KRA notice, treat it as urgent — contact a tax professional the same day.

What Triggers a KRA Audit?

Understanding what flags your account for audit is the first step in protecting your business. Common triggers in 2026 include:

  • VAT/income tax mismatch: Your VAT-taxable sales are significantly higher or lower than your declared income tax revenue — a major red flag.
  • Large or unusual deductions: Claiming expenses that are out of proportion with your business size or sector averages.
  • Dormant filing period followed by sudden activity: Filing nil returns for several years, then declaring significant revenue.
  • Third-party information: KRA receives data from banks, customs, eCitizen, NTSA, and other government databases. Discrepancies between this data and your returns trigger automatic reviews.
  • Sector risk profiling: KRA publishes annual compliance risk guidelines for specific sectors. Being in a high-risk sector increases audit probability.
  • Tip-offs or complaints: Information submitted to KRA's confidential reporting channels by employees, competitors, or business partners.

The KRA Audit Process in Kenya (Step by Step)

Knowing what to expect removes a significant amount of anxiety from the process. Here is how a standard KRA audit unfolds:

1

Audit Notification

KRA issues a formal audit notification letter via post, iTax, or direct delivery. This letter specifies the tax type, period under review, and the records required.

2

Record Submission / Access

You are required to provide financial records — ledgers, bank statements, invoices, contracts, payroll records — within the timeframe specified (typically 14–21 days).

3

KRA Review & Queries

KRA officers review your records and issue queries on items they cannot reconcile. Each query requires a detailed written response with supporting documentation.

4

Preliminary Assessment

If KRA identifies tax shortfalls, they issue a preliminary assessment with their findings. You have an opportunity to respond before the final assessment is issued.

5

Final Assessment or Agreement

KRA issues either a final assessment (which you can object to within 30 days) or a mutual agreement on the tax payable — often the result of professional negotiation.

Common Mistakes Businesses Make During a KRA Audit

  • Responding directly without professional guidance: Anything you say or submit to KRA becomes part of the audit record. Untrained responses frequently confirm issues that could have been defended.
  • Submitting incomplete records: Partial submissions create more questions than they answer and signal disorganisation — which can extend the audit and widen its scope.
  • Missing the 30-day objection deadline: This is the most costly mistake. Once missed, you lose your statutory right to dispute the assessment through the normal objection process.
  • Making voluntary disclosures without strategy: Disclosing errors without a plan can expand the audit scope significantly. Disclosures should be structured and timed carefully.
  • Assuming the audit will go away: KRA's systems track audit cases actively. An unresolved audit will escalate to recovery action.

KRA Audit Penalties & Consequences

If a KRA audit results in an additional tax assessment, the following apply:

  • Late payment penalty: 5% of the unpaid tax, applied immediately on the assessment date.
  • Late payment interest: 1% per month on the outstanding balance, compounded from the original due date — not the assessment date.
  • Fraud penalty: Where KRA determines deliberate under-declaration, penalties of up to 100% of the tax shortfall may be imposed.
  • Recovery action: KRA has statutory powers to recover unpaid tax directly from bank accounts, through agency notices to customers, or via asset distress.
Key Takeaways
  • KRA audits are increasingly common in 2026 — any business can be selected, not just those with obvious errors.
  • You have 30 days to file a formal objection to a KRA assessment. This deadline is statutory and rarely extendable.
  • Professional representation significantly improves audit outcomes — both on the tax amount and the timeline.
  • Penalties and interest compound quickly. Early resolution is almost always cheaper than delay.
  • Apsis Consulting can act as your authorised representative in all KRA audit dealings.

How Apsis Consulting Supports You Through a KRA Audit

Our audit support service is structured to protect your business at every stage of the KRA audit process:

  • Audit notice review: We analyse your notice immediately to identify the tax type, period, and the specific risk areas flagged by KRA.
  • Records preparation: We organise, review, and prepare all documentation before it is submitted to KRA — ensuring nothing is submitted that creates new exposure.
  • KRA representation: We act as your authorised agent in all communications, meetings, and negotiations with KRA officers.
  • Objection filing: Where an assessment is incorrect or disproportionate, we file a formally structured objection within the 30-day window.
  • Negotiation and settlement: Our team negotiates directly with KRA to reach the most favourable outcome, including penalty waivers where applicable.
  • Post-audit compliance review: After resolution, we review your systems to reduce the risk of future audits.

Related Services & Resources