Quick Answer
A KRA tax audit is a formal review by the Kenya Revenue Authority to verify that a taxpayer has correctly declared income, expenses, taxes and supporting records. It normally runs through five stages: audit notification, submission of records, review and verification, audit findings, and resolution. Businesses that keep complete, organised documentation and respond with clear supporting evidence are better placed to avoid additional assessments, interest and penalties.
Key Takeaways
- A KRA tax audit typically examines five areas: income tax (revenue, expenses and taxable profits), VAT (sales, purchases and input tax claims), PAYE (payroll and employee taxes), withholding tax and excise duty.
- The audit runs through five stages: KRA notifies the scope, documents required and review period; the taxpayer submits records; KRA reviews and verifies; findings are issued; and the matter is resolved.
- Audit notices are commonly triggered by risk-based compliance reviews, differences between reported data and third-party information, VAT inconsistencies, missing documentation, industry-specific risk indicators and historical compliance issues.
- KRA commonly requests trial balances, general ledgers, financial statements, sales and supplier invoices, payroll and PAYE submissions, bank statements and reconciliations, contracts and prior tax filings.
- From 2026, expenses that are not supported by compliant eTIMS invoices may be challenged during tax reviews, reducing deductible costs and increasing potential tax exposure.
- Where KRA issues an additional assessment, the business has three options: accept and settle where the assessment is correct, provide further evidence where documentation was missing, or formally object where it disagrees with the findings.
Frequently Asked Questions
Why has KRA selected my business for a tax audit?
KRA runs risk-based audits, so selection usually follows a signal rather than an accusation. Common triggers are sales declared that do not match available data, VAT claims that look inconsistent, income levels that differ from industry patterns, large refunds, significant expenses, related-party transactions, or compliance gaps such as late filing and missing returns. Being audited does not always mean the business has done something wrong.
What actually happens during a KRA tax audit?
KRA first issues an audit notification setting out the scope, the documents it needs and the period under review. You then submit the requested records, and KRA examines the transactions, tax calculations and supporting evidence. It closes with findings, which may be no additional assessment, a request for clarification, or an additional tax assessment, followed by resolution.
What documents will KRA ask us to produce?
Expect requests across five groups: financial records such as trial balances, general ledgers and financial statements; sales documentation including invoices, customer records and revenue reports; purchase records covering supplier invoices, payment evidence and procurement documents; payroll records with employee details and PAYE submissions; and banking information including statements, reconciliations and payment confirmations.
How should we answer KRA's audit queries?
Respond with accurate information, supporting evidence and professional communication rather than emotional or unsupported replies, which make resolution harder. Explain the transaction background, the accounting treatment and the evidence behind it, and submit records in an organised form rather than as unstructured files. Keep your own record of all correspondence, meetings and submissions.
What can we do if KRA issues an additional assessment we disagree with?
Review the assessment carefully before responding, analysing the tax calculations, the supporting evidence, the legal basis and the accounting treatment. You can accept and settle if the assessment is correct, supply additional evidence where documentation was missing, or lodge an objection where you disagree with the findings. Take professional tax advice before deciding which route to take.
What mistakes most often make a KRA audit worse?
Ignoring audit notices is the most damaging, as delays worsen the underlying compliance issue. Submitting incomplete records creates uncertainty, and altering records during the audit damages your credibility with KRA. Poor coordination within the finance team and failing to seek advice on complex technical issues also weaken your position.


