Receiving a tax audit notice from LHDN (Lembaga Hasil Dalam Negeri Malaysia) is one of the most stressful events a business owner can face. An audit means months of gathering documents, answering detailed questions, and potentially facing extra tax assessments and penalties.
But here is what most business owners miss: LHDN does not select companies for audit by chance. They look for specific patterns. There are clear risk indicators that consistently draw their attention. Understanding these signs is your first line of defence.
Based on insights from recent tax audit and investigation guidelines, this guide sets out the eight red flags LHDN uses to identify audit candidates. This includes a major development for 2025 and 2026: real-time transaction monitoring through e-Invoice.
Red Flag 1: Unusual Expense ClaimsThe statutory test for a deductible business expense under Section 33 of the Income Tax Act 1967 is that it must be 'wholly and exclusively incurred in the production of income.' LHDN scrutinises claims that fail this test. Inflated deductions, personal expenses routed through the company, or directors' entertainment costs without clear business justification will trigger questions. If a private element exists, LHDN may disallow the claim and treat the amount as undeclared income.
Red Flag 2: Abnormal Margins or Persistent LossesLHDN compares your company against industry data. Margins significantly below sector norms, or year-on-year losses without a credible explanation, will attract attention. If related parties are involved, this may point to a transfer pricing issue where profits are shifted to a related entity at non-arm's length prices. Companies with cross-border related-party transactions must maintain contemporaneous transfer pricing documentation under s.140A ITA 1967 and the Transfer Pricing Rules 2012.
Red Flag 3: Significant Related Party TransactionsManagement fees, royalty arrangements, and intercompany loans are assessed for commercial substance and arm's length compliance. LHDN will question whether management fees paid to a holding company have genuine substance, whether royalty amounts are commercially justified, and whether intercompany loans carry market-rate interest.
Red Flag 4: Data Inconsistency Across Government AgenciesLHDN cross-references data from SSM (company filings), RMCD (SST returns), and from YA 2025 onwards, MITRS financial statement submissions. The revenue you declare in your SST return to Customs must reconcile to your Form C submitted to LHDN. Any discrepancy — even a legitimate one — will trigger a query. You should reconcile SST output figures to audited revenue before filing Form C, and document any legitimate differences.
Red Flag 4A: e-Invoice — Real-Time Monitoring (The Game Changer)This is the most significant shift in LHDN's audit capability. Under the MyInvois framework, e-Invoices issued and received are validated and stored on LHDN's platform in real time. LHDN can track your monthly revenue as it happens, cross-match supplier and buyer records automatically, and compare your declared figures against transaction-level data it already holds.
The era of year-end adjustments is effectively over. Your annual return must reconcile to e-Invoice data. The mandatory timeline is rolling out in phases:
• August 2024: Turnover > RM100 million
• January 2025: Turnover > RM25M to RM100M
• July 2025: Turnover > RM5M to RM25M
• January 2026: Turnover up to RM5M
Note: Businesses with turnover below RM1,000,000 are exempted from e-Invoice implementation.
Red Flag 5: Director and Shareholder TransactionsShareholder loans, excessive directors' remuneration, and personal expenses claimed through the company are examined closely. Asset transfers between directors and the company may also trigger RPGT or stamp duty questions. You must verify that directors' remuneration disclosed in the audited accounts is consistent with Form EA and Form C.
Red Flag 6: Significant Revenue or Profit FluctuationsSharp changes in revenue or profit that do not match the economic environment draw LHDN's scrutiny. A 40% revenue drop in a stable year, or a sudden profit surge when input costs rose, will raise questions. Maintain contemporaneous records like board minutes, management accounts, and key correspondence. The explanation must exist before the audit, not be constructed after.
Red Flag 7: Cash-Intensive BusinessesRestaurants, retailers, and construction companies handling large cash volumes face higher inherent risk. LHDN applies indirect income estimation methods, comparing declared revenue against electricity consumption, premises size, headcount, or lifestyle indicators. With e-Invoice now rolling out, LHDN will also compare declared cash revenue against e-Invoice-verified purchase volumes. Implement a POS system, maintain complete cash records, and ensure all sub-contractor payments in construction are supported by agreements and receipts.
Your Tax Audit Risk Checklist — Ask Yourself Right Now
- Are all expense claims supported by invoices and a clear business purpose?
- Can I explain why margins are low or why the company reported a loss?
- Is transfer pricing documentation in place for cross-border related-party transactions?
- Do SST output figures reconcile to audited revenue?
- Are directors' remuneration disclosures consistent with Form EA and Form C?
- Is there documentation explaining significant revenue or profit changes?
- Are cash transaction records complete and systematic?
- Does the business comply with the e-Invoice mandate, and do accounts reconcile to MyInvois data?
Need Help with Your Tax Audit Risk?
KS Chia & Associates provides tax compliance review, transfer pricing documentation assistance, e-Invoice compliance review, and annual tax compliance for Malaysian businesses.
WhatsApp us: 011-2366 5233
This article is prepared for general information purposes. It does not constitute legal or tax advice for specific circumstances. Readers are encouraged to seek professional advice for their individual situations.






.png)