KRA VAT Audit Process Kenya 2026: What to Expect and How to Prepare

A KRA VAT audit is one of the most stressful events a business can face. The notice arrives in your iTax inbox, and suddenly every invoice, every return, every bank deposit from the past three years is under scrutiny.

The good news: most audits follow a predictable pattern. If you know what KRA will ask for, why they ask for it, and how to respond, you can significantly reduce your risk of an adverse assessment.

This guide walks through the entire KRA VAT audit process — from the triggers that put you on KRA's radar through to objection and appeal — and gives you a practical checklist to prepare before the notice arrives.

What Triggers a KRA VAT Audit?

KRA does not audit every VAT-registered person every year. Resources are limited, so KRA uses a risk-based selection model. Understanding what puts you in the high-risk pool is your first line of defence.

Common audit triggers include:

• Nil returns for 6 or more consecutive months: Filing nil returns while you are clearly operating raises immediate flags. KRA assumes you are making sales but not declaring them. If your business has genuinely had no activity, consider applying for VAT cancellation rather than filing indefinite nil returns.
• Input VAT claims far exceeding output VAT: If you regularly claim more input VAT than you collect in output VAT, KRA will question whether your purchases are genuine business expenses. A consistent credit position, especially without zero-rated supplies, invites a desk audit.
• Large or frequent VAT refund claims: Any refund application over KES 500,000 typically triggers a pre-refund audit. KRA wants to verify the claim before releasing cash. Even smaller refunds can trigger an audit if they are frequent or the pattern is unusual.
• Inconsistencies between eTIMS data and returns: eTIMS transmits every invoice you issue to KRA in real time. When your VAT return figures do not match the eTIMS data KRA already holds, the system automatically flags you. This is the most common trigger in 2026.
• Supplier on the Special Table: If you claim input VAT from a supplier on KRA's Special Table (suspected of issuing fake invoices), your claim may be disallowed and your entire return flagged for audit. The burden falls on you to prove the supply was genuine.
• Industry-wide audits: KRA periodically runs sector-wide audit programmes. Recent targets include construction, hospitality, transport, and digital services. If your industry is on KRA's list, expect a notice regardless of your individual compliance history.
• Random selection: KRA also selects a percentage of taxpayers randomly each year. Even if you have no red flags, you can still be selected. This is why ongoing preparedness matters.
• Tip-offs or third-party information: KRA receives intelligence from competitors, disgruntled employees, and other government agencies. Information from the KRA whistleblower programme can initiate an audit with no prior warning.

The KRA Audit Process: Step by Step

A KRA VAT audit follows a defined process under the Tax Procedures Act 2015 and the VAT Act 2013. Understanding each stage helps you know what to expect and when to engage professional support.

What Documents KRA Will Request

KRA issues a standard document request at the start of every VAT audit. The exact list depends on the scope, but these are the documents most frequently requested:

• Sales invoices and receipts: All invoices issued during the audit period, including eTIMS-compliant invoices, credit notes, and debit notes. KRA will cross-check totals against your filed VAT returns.
• Purchase invoices and expense records: All supplier invoices for which you claimed input VAT deduction. KRA will verify these against the supplier's eTIMS records. Missing or non-eTIMS invoices mean disallowed claims.
• eTIMS data extracts: Your complete eTIMS transaction history from the KRA eTIMS portal. This includes all invoices issued and received. KRA will compare this against your VAT return declarations.
• Bank statements: All business bank accounts for the audit period. KRA looks for deposits that do not match your declared sales — a common source of under-declaration findings.
• M-Pesa / mobile money statements: If your business accepts mobile money payments, KRA will request these statements. Cash-intensive businesses are especially vulnerable to under-declaration findings from mobile money data.
• Stock records and inventory reports: Opening and closing stock positions, stock movement schedules, and any stock count sheets. KRA uses stock records to test whether your purchases match your declared sales.
• Import documents: IDF forms, customs entries, Single Customs Territory (SCT) declarations, and import VAT payment receipts. These verify that VAT on imports was paid and correctly claimed.
• VAT returns for the audit period: All VAT returns filed during the period, including any amendments. KRA reviews these against your invoice-level data.
• Accountant's working papers: If you use a tax agent, KRA may request the working papers behind your VAT return preparation — trial balances, VAT control account reconciliations, and the audit trail from source documents to the return.

How Long Does a KRA VAT Audit Take?

KRA does not have a statutory deadline for completing an audit. In practice, most VAT audits take between 3 and 6 months from the date of the notice to the issue of a final assessment.

What affects the timeline:

• Complexity of your business — businesses with multiple revenue streams, branches, or related-party transactions take longer.
• Quality of your records — organised, digitised records can be reviewed in weeks. Shoe-box accounting adds months.
• Responsiveness — each time you delay responding to a KRA request, the clock keeps running.
• Site visits — these add 4 to 8 weeks to the process, especially if KRA needs to visit multiple locations.
• KRA workload — audit officers handle multiple cases simultaneously. Peak periods (January to April) are slower.

You can help move the audit faster by responding to every KRA communication within the deadline, submitting documents in a well-organised format (indexed and labelled), and designating a single point of contact for the audit team.

Common Audit Findings

Based on KRA's published audit outcomes and our experience representing clients, these are the most common findings in VAT audits:

How to Object to an Audit Assessment

If you disagree with KRA's final assessment, you have the right to object under Section 51 of the Tax Procedures Act 2015. A valid objection must meet strict requirements:

• Lodge the objection within 30 days of the date of the final assessment. Late objections are only accepted if KRA is satisfied the delay was due to reasonable cause.
• The objection must be in writing and submitted through the iTax portal.
• State each ground of objection clearly — vague objections like "we disagree with the assessment" are invalid.
• Provide supporting documents for each ground. If you claim a specific invoice was miscounted, attach it. If you dispute a bank deposit analysis, provide alternative evidence.
• Pay any tax not in dispute before lodging the objection. If KRA assessed KES 1,000,000 and you agree with KES 200,000, pay the KES 200,000 first. Failure to pay the undisputed portion can invalidate the entire objection.

KRA must respond to your objection within 60 days. If they do not respond within that period, the objection is deemed allowed — meaning KRA accepts your position. If KRA rejects your objection, you can appeal to the Tax Appeals Tribunal within 30 days.

At the TAT level, the process becomes formal: written submissions, oral hearings, and legal representation. TAT decisions can be appealed to the High Court on points of law. Most businesses engage a tax agent or lawyer at the objection stage — attempting to navigate the objection process alone significantly reduces your chances of success.

Preparing for a VAT Audit: Checklist

Preparation before the audit notice arrives is the single most important factor in a favourable outcome. Use this checklist to get your records audit-ready:

Related Resources

• Input VAT Deduction Guide — How to claim and document input VAT correctly to avoid audit findings
• VAT Special Table Risks — Why suppliers on the Special Table trigger input VAT disallowance and audit flags
• KRA VAT Penalties Reference — Complete penalty table including audit-related penalties