From 1 September 2026, the Federal Board of Revenue fundamentally changed how income tax assessments are initiated across Pakistan.
The FBR has restrained Inland Revenue field formations from selecting cases for income tax assessments unless the cases have been selected and assigned through the FBR's Compliance Risk Management (CRM) System.
This requirement was formalised through Income Tax Circular No. 1 of 2026, effective from 1 September 2026.
What This Means for Your Practice
The shift to automated, risk-based case selection represents a move away from manual or discretionary assessment selection by local tax officers. Under the previous regime, field officers could exercise considerable judgment in choosing which taxpayers to audit or assess. The new CRM system eliminates that layer of discretion by centralising case selection at the FBR level through algorithmic risk profiling.
For chartered accountants and tax practitioners, this has immediate implications. First, assessment selection is now transparent and algorithmic rather than subjective. This should, in theory, reduce ad-hoc targeting of specific sectors or individuals by local tax authorities. Second, the CRM system likely flags high-risk compliance profiles based on returns data, previous defaults, turnover anomalies, and cross-matching with third-party information (banks, SECP, sales tax records). Practitioners should expect that clients flagged by the system will see increased scrutiny—but that scrutiny will follow consistent, documented criteria.
CRM System Criteria and Risk Flagging
The FBR's CRM system utilises data analytics to assign risk scores to taxpayers. Whilst the exact algorithmic weights remain confidential, the system typically considers:
- Sudden changes in turnover, income, or claimed deductions
- Mismatches between turnover reported to FBR and SECP filing data
- Cross-matching with sales tax returns (particularly discrepancies in reported purchases versus sales)
- Withholding tax compliance patterns and previous ATL (Active Taxpayer List) violations
- Real-time IRIS data and digital invoicing submissions
Practitioners should review client profiles proactively. If a client's records show inconsistencies—such as inventory write-offs, sharp expense spikes, or turnover volatility—the CRM system is likely to flag them. Early remediation and voluntary disclosure may reduce exposure.
Practical Guidance for Practitioners
Documentation and reconciliation: Ensure all income and expense claims are supported by authentic documentary evidence. The CRM system cross-matches return data with banking records, so unexplained cash deposits or large round-figure expenses will trigger alerts.
Consistency across filings: Reconcile FBR filings with SECP data (for companies), sales tax returns, and customs records. Discrepancies between platforms multiply assessment risk.
Digital invoicing compliance: If your client is registered under FBR's digital invoicing mandate, ensure real-time uploads of sales and purchase invoices. The CRM system uses these feeds to validate turnover and COGS claims.
Threshold management: Be cautious with clients near critical thresholds (e.g., turnover levels that trigger different tax regimes or mandatory industry-sector rules). The CRM may flag borderline cases for scrutiny.
Prior-year coordination: If a client was assessed in a prior year, ensure that current-year returns address all issues raised in that assessment. The CRM will flag recurrent patterns.
A Shift Toward Systemic Compliance
The CRM system reflects the FBR's broader digital transformation agenda. By automating case selection, the Board aims to improve assessment coverage (wider tax net), consistency (same rules applied uniformly), and efficiency (human auditors focus on high-risk cases). The system also reduces opportunities for corruption or political interference at field level.
However, practitioners should be aware that CRM-selected cases may be higher-risk by definition. Clients should be prepared for detailed scrutiny if flagged. Early engagement with tax counsel and thorough documentation are no longer optional.
Please verify all figures and procedural details against the official FBR IRIS portal and circulars before advising clients; this is an AI-assisted summary and practitioners should confirm current requirements with the FBR directly.