LHDN Tax Audits and How to Appeal: Form Q, the Five-Year Time Bar and the Special Commissioners

Why an audit is the default, not an accusation

Under section 90(1) of the Income Tax Act 1967 the return you furnish is deemed to be a notice of assessment served on you on the day you file. LHDN has not agreed with your figures — it has simply deferred looking at them. Verification is done later through audit, and an audit letter is a request to substantiate what you already declared, not a finding that you did something wrong.

That matters for tone and for strategy. The great majority of cases are settled at branch level by producing documents. Treating the first letter as an attack, or as something that can be left unanswered, is what turns a document request into a raised assessment with a penalty on top.

Desk audit versus field audit

A desk audit can be escalated to a field audit if the answers raise wider questions. LHDN's Tax Audit Framework sets an indicative target of settling a field audit within about 90 days of the visit; in practice complex cases run longer, and the clock is not a right you can enforce.

What actually gets a file selected

• Ratios that sit outside the norm for your industry — a gross margin or an expense-to-sales ratio well away from comparable businesses.
• Reliefs claimed at or near the cap year after year, particularly medical, lifestyle, SSPN and the RM8,000 parental medical relief, where receipts are often missing.
• A large refund claim, which is reviewed before it is paid rather than after.
• Third-party data that does not match your return — property disposals, share transfers, e-invoices issued against your TIN, bank interest, and employer Form E submissions.
• A business reporting a loss for several consecutive years while the proprietor's visible spending rises.
• Rental income declared on one property when land-office or tenancy stamping records show several.
• An industry sweep: LHDN periodically runs sector-wide exercises, and selection can have nothing to do with you specifically.

How long your years stay open

Section 91(1) lets the Director General raise an assessment or additional assessment within five years after the end of the year of assessment. YA 2021, for example, became time-barred after 31 December 2026. Before 2019 this window was six years, so older cases you may have heard about ran longer.

The protection disappears entirely under section 91(3): where there is fraud, wilful default or negligence, there is no time limit at all. An unfiled year is never time-barred, because the five years run against assessments, not against the duty to file. This is the single most important asymmetry in the system and the reason back-filing voluntarily is nearly always cheaper than waiting.

Separately, section 82 requires business records to be kept for seven years — two years longer than the ordinary assessment window, deliberately. Discarding records at five years and then being audited means you carry the burden of proof with no documents to discharge it.

When the letter arrives

Under the audit framework a first-time understatement found on audit typically attracts a 15% penalty on the tax undercharged under section 113(2), against a statutory maximum of 100%. Repeat findings and obstruction push it higher.

• Diarise the reply-by date immediately and acknowledge the letter. If you genuinely need longer to retrieve documents, ask in writing before the date, not after it.
• Answer the question asked. Volunteering unrelated records widens the audit's scope for no benefit.
• Reconcile before you send. If bank deposits exceed declared sales, identify the non-income deposits — capital injections, loans, transfers between your own accounts — and document them, because unexplained credits are routinely treated as income.
• If you find a genuine error yourself before any audit action has begun, voluntary disclosure attracts a far lower penalty than the same error found by the auditor. See the penalties guide for the rates.
• You may be represented by a tax agent at any stage, and for a field audit you generally should be.
• Where the audit finding is wrong, say so during the audit. Resolving it before an assessment is raised avoids the whole appeal machinery.

The appeal chain, step by step

If the audit ends in a notice of assessment you disagree with, there is one formal route and it is strictly timed.

• The 30 days run from service of the notice, not from when you opened the envelope or when your agent told you.
• Form Q must set out the grounds in detail. A bare statement that the assessment is excessive is weak, and you are largely held to the case you pleaded.
• Paragraph 13 of Schedule 5 puts the onus on the appellant to prove the assessment is excessive. LHDN does not have to prove it is right.
• Most appeals never reach the SCIT — they are settled during the section 101 review, which is exactly what that stage exists for.

Pay first, appeal later

Section 103 makes the tax due and payable on the date stated in the notice whether or not you appeal. Filing Form Q does not suspend collection, and the flat 10% increase for late payment still applies to whatever is unpaid after the due date.

So an appeal carries a cash-flow decision separate from the merits. Paying under protest and recovering the excess if you win costs you the use of the money; not paying costs you 10% plus collection action, and if you lose you were always going to owe it. Where the amount is large, an instalment arrangement with the branch is usually more productive than silence.

Caveats

This describes the income tax appeal route under the Income Tax Act 1967. RPGT appeals run on their own CKHT timeline, SST disputes go to the Customs Appeal Tribunal, and stamp duty objections follow the Stamp Act — none of them use Form Q. Transfer pricing and Labuan cases have separate frameworks.

Audit frameworks, penalty concessions and processing timelines are administrative and are revised periodically; confirm the current version on hasil.gov.my. This is general information, not tax advice — for an assessment of any size, get a licensed tax agent involved before the 30 days expire, because that deadline is the one thing in the process that cannot be fixed afterwards.