LHDN Tax Audit Malaysia 2026: What Happens and How a Sdn Bhd Should Prepare

What Is an LHDN Tax Audit

An LHDN tax audit is LHDN checking that what you declared in your tax return actually matches your real financial position. It's a compliance check, not an accusation. Every company that files taxes in Malaysia, from a one-director Sdn Bhd in Shah Alam to a group with operations across Kuala Lumpur and Penang, sits in LHDN's audit pool, and a share of returns get reviewed every year as a matter of routine coverage, not because something was necessarily wrong.

The letter that starts the process is usually called a Notis Pemeriksaan Cukai, or audit notice. It names the years of assessment under review and the documents LHDN wants to see. Getting one doesn't mean you're in trouble. It means your file came up for review, and how you respond from here determines whether it stays a straightforward audit or turns into something harder to close out.

Tax Audit vs Tax Investigation: What's the Difference

These two terms get used interchangeably, and that mix-up causes unnecessary panic. They are run by different branches of LHDN, for different reasons, with very different consequences.

Almost every Sdn Bhd that receives an LHDN letter is dealing with the left column, an audit, not the right one. An audit only escalates into an investigation if the audit officer's findings point to something deliberate, so how you handle the audit stage directly shapes which column you end up in.

Desk Audit vs Field Audit: What to Expect

A desk audit that raises further questions can escalate into a field audit. A field audit that's unusually clean can close faster than expected. Neither path is fixed in advance; the audit officer decides based on what the records show as the review goes on.

What Triggers an LHDN Audit

• Industry benchmark mismatch. Gross profit margin or expense ratio that's far off what's typical for your sector.
• Persistent losses with healthy director drawings. A company reporting losses year after year while directors draw a comfortable income invites questions.
• A sudden jump in claimed deductions. Capital allowances or expenses that spike well above prior years without an obvious reason.
• Data that doesn't reconcile. e-Invoice figures, SST filings, or CP204 estimates that don't line up with the income tax return.
• Information from a third party. An informer report, or data surfaced through LHDN's information exchange with other agencies.
• Random selection. LHDN sets annual audit coverage targets across the taxpayer base, and some files are simply pulled as part of that quota.

Johor Bahru and Ipoh companies that have been through an audit report the same thing: there often isn't one dramatic cause. A string of small inconsistencies, compounded over a few years, is usually enough.

The Audit Notice: What It Says and How Much Time You Have

The audit notice states the years of assessment under review, the specific records requested, and a response deadline, typically 14 to 30 days from the date on the letter. That clock starts from the letter's date, not the day you happen to open it, so don't lose days to a slow mail check.

If you genuinely can't meet the deadline, write to LHDN and ask for an extension before it passes. An extension request shows you're engaging with the process. Silence past the deadline reads as avoidance, and it's the single fastest way to turn a routine desk audit into a field visit.

Documents and Records LHDN Will Ask For

The exact list depends on the case, but most audit notices draw from the same core set:

• Full set of audited or management accounts for every year under review
• Bank statements for all business accounts, matching the audit period
• Sales invoices, purchase invoices, and e-Invoice records where applicable
• Payroll records, including EPF, SOCSO, and PCB schedules
• Inventory records and stock-take sheets, for businesses holding stock
• Loan agreements, hire-purchase agreements, and related interest schedules
• Prior years' tax computations and supporting schedules
• Documentation for any capital allowance, double deduction, or incentive claimed

Having these organised before the audit notice ever arrives is the real edge. Companies that can produce a clean, complete set within days usually get through faster than ones scrambling to reconstruct three years of records from scratch after the letter lands.

How a Sdn Bhd Should Prepare for an LHDN Audit

1. Read the notice fully and confirm the scope. Note the years under review and exactly which documents are requested.
2. Gather only what's requested first. Don't spend the limited response window on documents LHDN hasn't asked for yet.
3. Reconcile your own numbers before the auditor does. Walk through your tax computation against your accounts and bank records, and flag any gap yourself.
4. Bring in a tax agent. A licensed tax agent can correspond with LHDN directly, sit in on a field audit, and knows which clarifications close a query cleanly.
5. Submit on time, or request an extension before the deadline. Never let the date pass in silence.
6. Keep every communication in writing. Verbal assurances from a visit don't hold up later; a written record does.

If the audit uncovers a genuine understatement, it's almost always better for the company to disclose it voluntarily during the process rather than have the auditor find it independently. A self-disclosed error during an ongoing audit is treated differently from one LHDN uncovers on its own, and it's the difference between a manageable penalty and a much harder negotiation.

Penalties If the Audit Finds Errors

These are the statutory maximums written into the Act. In practice, LHDN applies its own Tax Audit Framework, which sets a sliding penalty rate for genuine audit cases well below the statutory ceiling, lower still if the taxpayer cooperates or discloses voluntarily before the audit even starts. The numbers above are the outer limit, not the typical outcome, but they're exactly why ignoring an audit notice is the wrong move.

What Happens After the Audit: Settlement, Appeal, or Escalation

Once LHDN finishes reviewing the records, one of three things usually happens. If no issue is found, the audit closes with no change to your assessment. If a discrepancy is found and you agree with it, LHDN issues a notice of additional assessment and you settle the tax and penalty. If you disagree, you can negotiate directly with the audit officer first, and if that doesn't resolve it, file Form Q to appeal to the Special Commissioners of Income Tax within 30 days of the assessment notice.

A small number of audits escalate further, referred to the Investigation Branch if the findings suggest the understatement wasn't accidental. That path moves from Section 113 territory into Section 114, and from an administrative penalty into real prosecution risk. Getting ahead of a routine audit is, in effect, how a company in Kuala Lumpur or anywhere else avoids ever being anywhere near that referral.

Common Mistakes That Trigger or Worsen an Audit

• Treating the audit notice as low priority and letting the response deadline slip without writing for an extension.
• Handing over more than what's requested, which can open new lines of questioning the auditor hadn't raised.
• Inconsistent explanations given verbally during a field visit versus what's in the written records.
• No tax agent involved until the audit has already gone badly, instead of from the first letter.
• Letting a small, honest error sit undisclosed, hoping the auditor won't find it, rather than raising it proactively.

For the filing itself that usually comes under audit scrutiny first, see our company tax return Malaysia guide, and if your CP204 estimates have drifted far from your actual tax liability, that gap is one of the more common audit triggers covered in our CP204 estimated tax guide.

Frequently Asked Questions

What is the difference between an LHDN tax audit and a tax investigation?
An audit is a routine accuracy check, usually for honest errors. An investigation is reserved for suspected deliberate fraud, run by a separate branch, and can lead to prosecution under Section 114.

What triggers an LHDN tax audit?
Benchmark mismatches, persistent losses alongside strong director drawings, a jump in claimed deductions, data that doesn't reconcile across filings, a tip-off, or simple random selection.

What is the difference between a desk audit and a field audit?
A desk audit happens entirely by correspondence. A field audit involves LHDN officers visiting your premises to review records on-site, usually for larger or more complex cases.

How much time do I have to respond to an LHDN audit notice?
Usually 14 to 30 days from the date on the letter. Request an extension in writing before the deadline if you need more time.

What records does LHDN ask for during a tax audit?
Full accounts, bank statements, invoices, payroll records, inventory records, loan agreements, prior tax computations, and support for any claimed deduction, as specified in the audit notice.

What happens if the audit finds an understatement of tax?
LHDN issues an additional assessment plus a penalty, usually under Section 113, settled administratively. A deliberate understatement can be referred to the Investigation Branch under Section 114 instead.

Can I appeal an LHDN audit finding?
Yes, by filing Form Q to the Special Commissioners of Income Tax within 30 days of the assessment notice, though many disputes settle through direct negotiation with the audit officer first.