Audit & risk3 min read

FBR's AI audit system: what gets a business flagged, and how to stay off the list

FBR now runs AI and data-analytics checks on Tax Year 2026 income tax returns and sales tax returns, matching them against bank, property, vehicle and travel data. What it looks for, and what a business can do about it.

A finance tracker planner with budget sheets, a gold pen and paper clips
Photo: NORTHFOLK on Unsplash

The short version

  • FBR has extended AI-based screening from a pilot to Tax Year 2026 income tax returns and subsequent sales tax returns.
  • Returns are compared with property, bank, vehicle and travel records, NADRA data, and with taxpayers who have similar profiles.
  • A flag is not a finding of evasion — it can lead to examination, audit or assessment. FBR says flagged issues will reach taxpayers through IRIS first.
  • For businesses, the biggest controllable risk is a mismatch: between invoices and returns, between you and your buyers, or between declared income and visible spending.

What FBR has announced

In early October 2026 FBR said it had expanded its use of artificial intelligence and data analytics to scrutinise tax declarations. After testing on selected income tax and sales tax returns, the system now covers income tax returns for Tax Year 2026 and subsequent sales tax returns. It works alongside the National Faceless Center in Islamabad, which already selects and assigns audit cases by computerised, risk-based methods rather than by an individual officer's choice.

FBR's Chairman has told parliamentarians that the system draws on lifestyle and income data from multiple databases including NADRA, and that it is designed to flag abnormal activity rather than scrutinise every taxpayer equally.

What the system compares

  • Third-party records: property transactions, bank records, vehicle registrations and travel data.
  • Peers: your declarations against taxpayers with a similar profile — same sector, similar size. A margin far below your sector's is the kind of thing that stands out.
  • Your own filings against each other: income tax return against sales tax returns; sales tax return against reported e-invoices; your declared sales against what buyers declare they bought from you.

What typically gets a business flagged

FBR has not published its model, so no one can give you its exact rules. But the inputs above make the likely triggers obvious:

  1. Invoices that don't match the return. With digital invoicing, FBR already knows your reported sales before you file. A return that declares less is an immediate discrepancy.
  2. Buyer–supplier mismatches. Your buyer claims input tax on purchases from you that you never reported — or reported twice.
  3. Bank credits far above declared turnover. Large deposits without matching sales or loans on record.
  4. Spending that outruns income. Property and vehicle purchases, foreign travel, or a lifestyle inconsistent with what is declared.
  5. Margins out of line with the sector. Persistently low profit or high input-tax claims compared with similar businesses.

What happens after a flag

FBR has been clear that an AI-generated risk flag does not by itself mean a taxpayer has committed evasion. A flagged case may move to examination, audit or assessment under the law. FBR has said the automated system will send online advice or advance intimation through IRIS so taxpayers can correct errors before penal proceedings — so the first sign is usually a message or a notice in IRIS, not a visit.

How a business stays off the list

Make your invoices and your return the same numbers

Prepare your sales tax return from the invoices FBR actually accepted — grouped by rate, with the same totals — rather than from a separate spreadsheet. If your software can produce month-end totals straight from reported invoices, the most common mismatch disappears.

Report every invoice exactly once

Dropped invoices (lost when the internet failed) and duplicated invoices (resent after an unclear response) both create mismatches with your buyers' records. Look for software that queues and retries undelivered invoices, and that refuses to blindly resend when it isn't sure the first attempt failed.

Correct mistakes inside 72 hours

A wrong invoice left in place becomes a permanent discrepancy. Use the 72-hour correction window.

Explain large, unusual items before you are asked

A loan, a capital injection, an asset sale — keep the paperwork ready and make sure it is reflected in the return and wealth statement.

Answer intimations quickly

An IRIS intimation is the cheapest point at which to fix something. Every stage after it costs more.

Khulasa — Roman Urdu

FBR ab AI aur data analytics se Tax Year 2026 ki income tax returns aur sales tax returns check kar raha hai — bank, property, gari aur travel records aur NADRA data se mila kar. Flag hone ka matlab tax chori sabit hona nahi, lekin is ke baad audit ya assessment ho sakti hai.

Bachao ka sab se asaan tareeqa: aap ki invoices aur return ke figures ek jaise hon, har invoice sirf ek dafa report ho, ghalti 72 ghante mein durust karein, aur IRIS mein aane wali intimation ka foran jawab dein.

Frequently asked questions

Does FBR use AI to select audit cases?

Yes. FBR has expanded AI and data-analytics screening to Tax Year 2026 income tax returns and subsequent sales tax returns, alongside the National Faceless Center's computerised, risk-based case selection.

Can FBR see my bank account?

FBR's system compares returns with bank records along with property, vehicle and travel data. Large bank credits that don't match declared income or turnover are a likely trigger for questions.

Does being flagged mean I will be penalised?

No. FBR says a flag does not by itself mean evasion. It may lead to an intimation, examination, audit or assessment. Answering early, with documents, usually resolves it.

Sources and further reading

  1. ProPakistani — FBR increases AI monitoring of tax returns (2 Oct 2026)
  2. ProPakistani — FBR unleashes AI against faulty taxpayers and consultants (Aug 2026)
  3. Nukta — Pakistan to launch AI-driven faceless tax audit system
  4. PhoneWorld — How the FBR's AI risk system picks tax audit cases

This article explains rules as we understand them on the date shown. It is not tax advice. Notifications change — check the current SRO or general order, and your own position with your tax adviser.