A KRA PIN is an identity; compliance is a continuing record
A Kenyan Revenue Authority Personal Identification Number identifies a taxpayer across tax laws and specified transactions. It does not, by itself, prove that the holder has filed every required return, paid every liability or correctly registered each tax obligation. That distinction explains why a person can possess a valid PIN certificate but still be unable to obtain a Tax Compliance Certificate, complete a transaction or resolve a KRA account restriction.
The practical task is therefore not merely “get a PIN.” It is to align four records: the taxpayer’s legal identity, the obligations registered on iTax, the returns and payments posted to those obligations, and the documents supporting what was declared. Problems arise when one layer changes without the others—for example, a company changes directors or address but the KRA profile is not updated, a dormant business retains active VAT or PAYE obligations, or a payment is made but allocated to the wrong period.
This guide separates initial registration, profile maintenance, day-to-day compliance and Tax Compliance Certificate issues. It also explains how to build an evidence file when the portal result does not match the taxpayer’s actual position.
Who must register, and when?
Section 8 of the Tax Procedures Act requires a person who has accrued or expects to accrue specified tax liabilities, or expects to manufacture or import excisable goods or supply excisable services, to apply for registration. The application is made in the prescribed form and may require identity or registration documents. The section provides a thirty-day period tied to the person becoming liable to apply. If a person who should register does not apply, the Commissioner may register that person and must notify the person in writing.
Registration should follow the real activity, not a guessed future structure. An individual earning only employment income presents a different obligation profile from a landlord, consultant, importer or employer. A company may require corporation tax, PAYE, VAT, withholding obligations, excise or other registrations depending on what it actually does and applicable thresholds. Adding an obligation “just in case” can create return duties and automatic penalties even where no tax is payable.
The KRA PIN also appears in transactions listed in the First Schedule to the Act. Section 12 permits a person who is not otherwise registered under section 8, but needs a PIN for a scheduled transaction, to apply with the documents the Commissioner requires. This is why the legal reason for obtaining the number matters: a transaction-only PIN should not be treated as proof that every business obligation has been activated or satisfied.
For registration, keep the application, supporting identity or incorporation documents, the generated acknowledgement, PIN certificate and a screenshot or export of the obligations activated. Non-individual applicants should retain the incorporation record and authority of the person who made the application. Foreign applicants should preserve the passport, immigration or transaction documents used to connect the applicant to Kenya.
Use the PIN only for the person to whom it was issued
Sections 11 to 13 of the Tax Procedures Act govern the PIN itself. The Commissioner issues one PIN to a registered person for use across tax laws. The holder must state it on returns, notices and other tax documents, and on documentation for scheduled transactions. The Act prohibits another person from using the PIN, subject to the specific rule allowing a tax agent to use it with written permission and only for the taxpayer’s affairs.
This rule has practical consequences. A director’s personal PIN is not the company’s PIN; a sole proprietor’s business name does not create a second legal person; and related companies should not exchange credentials or certificates. Before filing, verify the name, PIN, tax head and period shown on the return or payment slip. A correct amount posted under the wrong taxpayer may leave one account apparently unpaid and another in unexplained credit.
Control access to iTax. Keep an authorised-user register, change credentials when an employee or agent leaves, and require the preparer to supply filed-return acknowledgements and payment registration numbers. Written authority for an agent should define the permitted work and end date. Never resolve an access problem by sharing credentials informally with a third party whose actions cannot later be traced.
Keep the registration profile synchronized with reality
Section 9 requires a registered person to notify the Commissioner of changes in the information supplied at registration, generally within thirty days of the change. Relevant events may include a new physical or postal address, altered contact details, a legal name change, a change in business activity, a tax representative change, or other prescribed particulars. The company registry, licensing record, bank record and iTax profile should tell the same story.
A profile amendment file should contain the source document proving the change, the iTax request, any KRA correspondence and the updated certificate or profile. Where the portal will not accept the amendment, preserve the error message and service ticket. Do not keep retrying with different facts: inconsistent submissions can make a simple data issue look like an identity problem.
When an activity ends, consider deregistration or removal of an obligation rather than simply stopping returns. Section 10 addresses deregistration and requires an application within thirty days after the person ceases to be liable for the relevant tax. KRA may require outstanding returns, tax and supporting documents to be dealt with before approval. The legal entity, its PIN and a particular tax obligation are not interchangeable; closing one obligation does not necessarily dissolve the entity or cancel every registration.
Section 14 deals with cancellation of a PIN, including cases involving deregistration, a transaction-only PIN no longer required, a false identity or a duplicate existing PIN. A business that remains active should not seek cancellation merely to clear a difficult ledger. Correct returns, payments or registrations through the proper route. For a foreign individual leaving Kenya or a deceased taxpayer’s estate, follow the evidence requirements published by KRA and retain proof of the final filing and payment position.
Build a compliance matrix before requesting a certificate
A Tax Compliance Certificate is the output of a much larger account review. The official KRA Tax Compliance Certificate guidance states that applicants must file returns on time for all applicable obligations, pay tax on time and clear outstanding tax debt. KRA also states that enhanced TCC checks include eTIMS or TIMS compliance for persons in business, including non-individual entities and individuals with income other than employment income.
Prepare a matrix with one row for each active tax obligation and columns for every relevant filing period. Record the due date, acknowledgement number, declared liability, payment registration number, payment date, ledger balance and any open assessment or dispute. Include nil returns where the obligation remained active but no taxable activity occurred. A portal dashboard showing “filed” is not a substitute for the acknowledgement and return content.
Then reconcile the matrix to the general ledger, payroll, sales records and bank account. PAYE should agree with payroll and employee deductions; VAT should agree with output and input schedules and electronic invoice records; corporation or individual income tax should agree with the annual computation and instalment payments. If the matrix exposes a substantive filing error, correct it lawfully rather than filing a second inconsistent return solely to obtain the certificate.
Common blocks include a missing return under an obligation the taxpayer forgot was active, a bank payment that was not allocated, an assessment left unanswered, an old ledger balance migrated from a legacy system, an eTIMS registration mismatch, or a payment plan not reflected on the compliance check. Each requires different evidence. A generic letter asking KRA to “clear the account” is less effective than a schedule identifying the exact tax head, period, amount, document and requested correction.
Apply for and verify a Tax Compliance Certificate
KRA’s guidance directs taxpayers to apply through iTax, after which the certificate is sent to the applicant’s email address. Before applying, download current ledgers, check all obligation tabs and resolve any pending return, debt or profile mismatch that is genuinely due. If tax is disputed, do not describe it as paid or cleared; record the assessment, objection or appeal status and obtain advice on how it affects the application.
A KRA Tax Compliance Certificate is valid for twelve months, according to the Authority’s published guidance. The validity period does not guarantee that every underlying transaction was correctly reported and does not prevent KRA from administering tax laws. Employers, procuring entities and counterparties should verify the certificate through the official mechanism rather than rely on a PDF forwarded without checking.
If an application is rejected, preserve the rejection message and date. Compare each stated reason with the compliance matrix. For a missing return, produce the acknowledgement or file the genuinely outstanding return. For a payment mismatch, submit the payment slip, bank confirmation and intended allocation. For an assessment, determine whether the time-sensitive response is payment, objection or appeal; the KRA tax demand guide helps classify the notice.
Do not allow certificate urgency to erase dispute deadlines. A section 51 objection to a tax decision ordinarily has a thirty-day time limit, subject to the statutory validity and extension rules. Paying or amending a return only to release a TCC may carry legal and accounting consequences. If the amount is disputed, protect the correct route and document any undisputed payment separately.
Resolve penalties, audits and false balances by cause
An account can be non-compliant because the taxpayer defaulted, because KRA’s record is incomplete, or because a decision is disputed. Diagnose which category applies to every line. Late filing or payment may generate statutory penalties and interest; a misallocated payment calls for reconciliation; a disputed assessment calls for objection or appeal; and a duplicated charge calls for correction. Combining them in one remission request obscures the remedy.
Where charges are valid but relief may be available, the Kenyan tax penalties and interest guide explains the distinction between correction, objection and remission. A remission application should not replace proof that a payment was timely or that a return was filed. Likewise, paying an unexplained portal balance may not fix the underlying registration or period mismatch.
If KRA opens a verification or audit, preserve the same records used in the TCC review. The KRA tax audit guide sets out how to control requests and reconcile adjustments. Do not send one sales schedule for TCC purposes and a materially different schedule in an audit. Differences should be explained through amendments, credit notes or identified accounting corrections.
A legacy or migrated balance needs a bridge from the old system to iTax. Gather the old ledger, returns, assessments, receipts and prior correspondence, then map each line to its current period. An unexplained opening figure should not be accepted merely because it is old, but age alone does not cancel a valid liability. Establish the legal and accounting origin before choosing correction, dispute, payment or remission.
Maintain an audit-ready PIN file
The permanent file should contain the PIN certificate; identity or incorporation documents; current registration particulars; active obligations; tax-agent authority; profile amendments; obligation registration or cancellation approvals; and correspondence about dormancy or cancellation. The annual section should contain the compliance matrix, returns, acknowledgements, computations, payment evidence, ledgers, eTIMS records, assessments, objections and the TCC application and certificate.
Run a quarterly control rather than waiting for a tender or transaction. Compare active obligations with actual activity, confirm that returns and payments appear in the correct periods, test portal users and download current ledgers. Calendar the TCC expiry date separately from filing deadlines. A certificate that expires during a procurement process can cause commercial delay even where the tax account is otherwise clean.
Escalate discrepancies with a concise evidence pack: identify the PIN, tax obligation, period, system result, correct result, financial difference and requested action. Attach only the documents mapped to that issue. Keep a dated log of KRA tickets, emails, visits, responses and resulting ledger changes, and close the matter only when the corrected record can be downloaded.
Request a confidential KRA PIN and tax-compliance review with the PIN certificate, active-obligation list, ledgers, returns, payment evidence, TCC result and any KRA notice. A structured review can separate registration errors, genuine defaults and disputed decisions before a transaction or certificate deadline is lost.
Frequently asked questions
Does having a KRA PIN mean that I am tax compliant?
No. A PIN identifies the taxpayer and is used across tax laws and specified transactions. Compliance depends on whether the correct obligations are registered, all required returns are filed, tax is paid or lawfully disputed, and account records such as eTIMS status and ledgers are accurate.
How long is a KRA Tax Compliance Certificate valid?
KRA’s current published guidance states that a Tax Compliance Certificate is valid for twelve months. The certificate should be verified through the official KRA mechanism, and the taxpayer must continue meeting filing, payment and other compliance duties during the validity period.
What should I do if iTax rejects my Tax Compliance Certificate application?
Save the rejection and compare every stated reason with a tax-obligation matrix, filed-return acknowledgements, payment evidence and current ledgers. Correct genuine omissions, request evidence-based reallocation or profile correction for system errors, and protect any statutory objection or appeal deadline where the block arises from a disputed tax decision.