Pakistan’s tax administration is moving from selective scrutiny towards technology-driven risk assessment. Under FBR’s new Compliance Risk Management (CRM) framework, income tax returns are expected to be electronically cross-checked against information relating to bank accounts, properties, vehicles, travel and other available third-party data. The system is intended to identify inconsistencies before a case reaches an officer.
The development becomes particularly important after the Finance Act 2026 changes relating to banking information. According to the reported framework, banking information is to flow automatically into the system, including reporting of accounts meeting the prescribed transaction threshold. This means that substantial banking flows, property acquisitions or other financial activity inconsistent with the income and wealth disclosed in the return may increasingly generate automated risk indicators.
For taxpayers, the practical message is that reconciliation is becoming as important as return filing itself. Salary, business receipts, bank movements, investments, property transactions and wealth statements should be reviewed together rather than in isolation. Importantly, an automated flag does not by itself establish tax evasion or under-declaration; the material notes that a flagged case may proceed to audit or assessment, or may simply result in a compliance communication seeking correction or explanation.