Getting a tax audit letter is one of those moments that makes your stomach drop. Whether you've been filing diligently or you've been... less diligent, the words "Notice of Tax Audit" can send anyone into a cold sweat.
But here's the thing: a tax audit is not a criminal investigation. It's a routine compliance check. The Nigeria Revenue Service (NRS) — or your State Internal Revenue Service — is simply verifying that what you declared on your tax returns matches what actually happened in your business. If you've been honest and kept decent records, an audit is an inconvenience, not a catastrophe.
This guide explains what happens during a Nigerian tax audit, how businesses get selected, what records you need, and how to respond without panicking.
Bottom line: If you've been filing accurately and keeping records, a tax audit is just paperwork and meetings. It's the people who haven't been filing — or who've been significantly under-declaring — who should worry. For everyone else, it's manageable.
What Is a Tax Audit?
A tax audit is a formal examination of your tax affairs by the NRS or State IRS. The tax authority reviews your financial records, bank statements, invoices, contracts, and other documents to verify that:
- The income you declared matches your actual earnings
- The deductions you claimed are legitimate and supported by evidence
- You've been complying with all applicable tax obligations (PIT/CIT, VAT, WHT, PAYE)
- You've been filing on time and remitting what you owe
It's essentially a fact-check. The tax authority is asking: "Did you tell us the truth?"
Why Do Audits Happen?
Tax audits don't happen randomly — well, some do, but most are triggered by specific factors. Here's what typically puts a business on the NRS audit list:
1. Discrepancies Between Declared Income and Bank Data
As at the time of writing, the NRS's digital systems (Rev360) allow them to cross-reference filed returns with bank data more efficiently than before. Data-matching capabilities have expanded significantly under the new regime. If your declared income is ₦20M but your bank accounts show ₦45M in deposits, that discrepancy flags you for review.
2. Lifestyle Flags
Declaring ₦5M in annual income while driving a ₦40M car and living in a ₦200M house raises questions. The NRS monitors certain transactions (property purchases, vehicle registrations) and compares them to declared income levels.
3. Refund Claims
If you apply for a VAT refund or excess WHT refund, expect scrutiny. Refund claims often trigger an audit to verify that the underlying transactions are legitimate before money leaves government coffers.
4. Random Selection
Some audits are genuinely random — the NRS maintains a program of random compliance checks across industries. Being randomly selected doesn't mean you did anything wrong. It just means your number came up.
5. Industry Campaigns
The NRS periodically targets specific industries for focused compliance drives. Real estate, fintech, e-commerce, oil and gas — when the NRS decides to focus on a sector, multiple businesses in that sector get audit letters simultaneously.
6. Third-Party Reports
Information from whistle-blowers, disgruntled employees, or data obtained from other government agencies (CAC, immigration, customs) can trigger an audit. If someone reports that your business is under-declaring, the NRS will investigate.
7. Non-Filing or Irregular Filing
If you've been inconsistent — filing some months but not others, filing VAT but not CIT, or not filing at all — the NRS will eventually notice. Non-filers are increasingly being identified through the Rev360 system and issued compliance notices.
The biggest trigger: The gap between bank deposits and declared income is, by far, the most common audit trigger. If you're depositing significantly more than you're declaring, it's only a matter of time. The NRS has direct access to banking data under the NTA 2025.
Types of Tax Review
Not all audits are created equal. The NRS uses three levels of review, escalating in intensity:
| Type | What It Involves | Intensity | Duration |
|---|---|---|---|
| Desk Review | NRS reviews your filed returns and documents from their office — no visit to your premises | Low | 2-4 weeks |
| Field Audit | NRS officers visit your business premises, inspect records on-site, interview staff | Medium | 1-3 months |
| Investigation | Full-scale probe — suspected fraud, evasion, or significant non-compliance | High | 3-12+ months |
Most businesses will only ever face a desk review or, at most, a field audit. Investigations are reserved for cases where the NRS suspects deliberate evasion — hiding income, maintaining double books, or using fraudulent invoices.
What Auditors Look For
When NRS auditors examine your records, they're checking specific things. Here's what's on their radar:
Bank Deposits vs. Declared Income
This is the first comparison they make. If your declared annual income is ₦15M but your bank accounts received ₦30M in deposits, you'll be asked to explain the difference. Not every deposit is income (loans, transfers between own accounts, refunds), but you need to prove that.
Unexplained Credits
Large, unexplained amounts entering your accounts — especially cash deposits — raise red flags. "I can't remember where that ₦5M came from" is not an acceptable explanation during an audit.
Personal Expenses Claimed as Business
Auditors look for patterns: school fees paid from business accounts, personal car fuel charged to the company, family holidays booked through the business. If personal expenses are mixed with business expenses, the auditor will disallow them and increase your taxable income.
Inconsistent Records
If your accounting records show one figure, your bank statement shows another, and your tax return shows a third — that's a problem. Consistency across all records is what auditors want to see.
Missing Invoices
You claimed ₦3M in business expenses? Show the invoices. You declared ₦10M in sales? Show the sales invoices. Every significant transaction should have a paper trail. Missing documentation means the auditor can disallow the expense or estimate the income — usually not in your favour.
What a clean audit looks like: Emeka's construction company gets a desk review. NRS requests his 2025 bank statements, sales invoices, and CIT return. Emeka provides them. The bank deposits (₦42M) match his declared revenue (₦40M sales + ₦2M in refunded deposits from suppliers). Every expense on his return has a corresponding invoice. The auditor closes the review with no adjustment. Emeka's life goes on.
Records You MUST Keep (For 6 Years)
Under the NTA 2025, businesses must maintain records for a minimum of 6 years. Here's what to keep:
| Record Type | Why It Matters |
|---|---|
| Bank statements (all accounts) | Proves actual cash flows — the primary comparison point |
| Sales invoices issued | Proves your declared revenue |
| Purchase invoices received | Proves your claimed expenses |
| Receipts for all expenses | Supports deductions and input VAT claims |
| Contracts and agreements | Explains large transactions and ongoing relationships |
| Payroll records | Proves PAYE compliance and staff costs |
| Asset register | Tracks fixed assets and depreciation claims |
| Tax computations | Shows how you arrived at declared figures |
| Filed returns (copies) | Proves what you actually submitted to NRS |
| WHT credit certificates | Proves tax already paid at source |
6 years means 6 years. If the NRS audits you in 2026 for your 2022 tax year, you need 2022 records. "I deleted those files" or "My old accountant has them" won't save you. Keep digital backups of everything. Cloud storage is cheap — penalties aren't.
How to Respond to a Tax Query Letter
You've received a letter from NRS. Don't panic. Here's the step-by-step response plan:
Step 1: Don't Ignore It
This seems obvious, but many people's first instinct is to throw the letter in a drawer and hope it goes away. It won't. Ignoring an audit notice leads to a "best of judgment" assessment — where NRS estimates your tax liability based on available data (bank records, industry averages). Their estimate will almost certainly be higher than your actual liability.
Step 2: Read It Carefully
The letter will specify:
- Which tax types are under review (CIT? VAT? WHT? All?)
- Which periods are covered (usually 3-5 years)
- What documents they're requesting
- The deadline for your response (typically 30 days)
- Who to contact (audit team leader's name and phone number)
Step 3: Gather Your Documents
Pull together everything the letter requests. Organize it by year and by tax type. If you're missing something, note it — and be prepared to explain why.
Step 4: Respond Within the Deadline
Write a formal response letter acknowledging the query, confirming you'll cooperate, and either providing the requested documents or requesting a brief extension (with good reason). Most NRS offices are reasonable about short extensions if you ask politely and early.
Step 5: Provide Clear Explanations
Don't just dump documents on the auditor. Include a cover note explaining your figures. If there are discrepancies between bank deposits and declared income, explain why (inter-account transfers, loans received, customer refunds). Make the auditor's job easy and they're more likely to accept your explanations.
Step 6: Consider Professional Representation
You have the right to be represented by a tax professional during an audit. For desk reviews, you can probably handle it yourself. For field audits — especially if the amounts involved are significant — consider engaging a tax consultant or chartered accountant to manage the process on your behalf.
Good response example: "Dear Audit Team Leader, we acknowledge receipt of your Notice of Tax Audit dated [date]. We confirm our willingness to cooperate fully with this review. Attached please find the requested documents for the 2024 and 2025 tax years, organized by category. We note that our bank deposits exceed declared revenue by ₦3.2M — this is explained by inter-company loan repayments from our sister company (see attached loan agreement and repayment schedule). We remain available for any clarification required."
What Happens If You Don't Respond
If you ignore the audit notice or refuse to provide documents, the NRS will issue a "Best of Judgment" (BOJ) assessment. This means:
- NRS estimates your income based on available data (bank records, third-party information, industry benchmarks)
- The estimated income is usually significantly higher than your actual income — because the NRS has no reason to give you the benefit of the doubt
- Tax is assessed on the inflated figure, plus penalties and interest
- You receive a Demand Notice for payment
- If you don't pay, enforcement action follows (liens, asset freezing, prosecution)
BOJ assessments are deliberately aggressive. The NRS knows that if they estimate high, you'll be motivated to engage and provide your actual records. It's a stick to force compliance. Don't let it get to this point — responding to the initial query is always cheaper than fighting a BOJ assessment later.
Your Rights During an Audit
You're not powerless in this process. Under the NTA 2025, taxpayers have specific rights:
Right to Professional Representation
You can appoint a tax consultant, chartered accountant, or lawyer to represent you. The NRS must deal with your representative if you designate one in writing.
Right to Object to Assessment
If the NRS issues an assessment you disagree with, you have 30 days to file a formal objection. The objection must state your reasons and provide supporting evidence. NRS must consider your objection and either revise the assessment or confirm it with reasons.
Right to Appeal
If your objection is rejected, you can appeal to the Tax Appeal Tribunal (TAT). The TAT is an independent body that hears tax disputes between taxpayers and the revenue authority. You have 30 days from the date of the NRS's decision to file your appeal.
Right to Confidentiality
Your tax information is confidential. NRS officers cannot share your records or audit findings with third parties (except as required by law). If you believe your information has been improperly disclosed, you can complain to the NRS Commissioner.
Right to Courtesy and Fairness
Auditors must conduct themselves professionally. They should provide reasonable notice before visits, respect your business hours, and not be unnecessarily disruptive. If an auditor is behaving inappropriately, escalate to their supervisor.
How to Minimize Your Audit Risk
Prevention is better than cure. Here's how to stay off the audit radar:
1. File on Time, Every Time
Non-filers are easy targets. If you're filing consistently — CIT annually, VAT monthly, PAYE monthly, WHT monthly — you're demonstrating good faith compliance. Late filing or non-filing is a bright red flag.
2. Declare Accurately
Under-declaration is the number one reason for adverse audit outcomes. If your bank deposits are ₦50M, don't declare ₦20M and hope nobody notices. They will notice. The data-matching technology is only getting better.
3. Keep Impeccable Records
Receipts, invoices, contracts, bank statements — everything filed, organized, and accessible. Digital copies backed up in the cloud. If an auditor asks for your 2023 Q2 bank statement, you should be able to produce it within 24 hours.
4. Separate Personal and Business Finances
Mixed accounts make audits exponentially more difficult. If your personal expenses flow through your business account, every transaction becomes a potential dispute. Use separate bank accounts for personal and business — and stick to the separation.
5. Avoid Red Flags
- Large cash deposits with no corresponding declared income
- Dramatically fluctuating income year-over-year with no clear business reason
- Claiming unusually high expenses relative to income
- Multiple years of declared losses (how are you staying in business?)
- Lifestyle inconsistent with declared income
The golden rule: If you're filing accurately and keeping records, an audit is an inconvenience — not a disaster. It's the people who haven't filed at all, or who've been significantly under-declaring, who should be worried. For compliant businesses, an audit is just a paperwork exercise that confirms what you already knew: you're doing the right thing.
What Happens After the Audit
Once the audit is complete, one of three outcomes occurs:
1. No Adjustment (Clean Bill)
The auditor finds everything in order. Your declared figures match your records. No additional tax is assessed. You receive a letter confirming the audit is closed. This is the best outcome — and it's completely achievable if you've been filing honestly.
2. Additional Assessment
The auditor finds discrepancies — undeclared income, disallowed expenses, or missed remittances. They issue an additional assessment for the extra tax owed, plus penalties and interest. You can accept and pay, or object and potentially appeal.
3. Referral for Investigation
In rare cases where the audit reveals suspected fraud or deliberate evasion, the matter is referred to NRS's investigation unit for deeper probe. This can lead to criminal prosecution. But this only happens in egregious cases — not for honest mistakes or minor discrepancies.
Typical outcome: Most audits that result in additional assessment involve relatively small adjustments — a disallowed expense here, an undeclared bank interest there. The typical result is an additional tax bill of 5-20% of your original liability, plus some penalty. It's annoying but not catastrophic. The goal is to avoid getting to this point by filing accurately in the first place.
Practical Preparation Checklist
If you want to be audit-ready at all times (and you should), here's your ongoing checklist:
- Monthly: Reconcile bank statements with accounting records
- Monthly: File all VAT/WHT/PAYE returns on time
- Quarterly: Review and organize receipts and invoices
- Annually: File CIT/PIT returns on time with accurate figures
- Annually: Reconcile total bank deposits against declared revenue — explain any gaps
- Ongoing: Keep digital copies of all financial documents (cloud backup)
- Ongoing: Maintain separate personal and business bank accounts
- Ongoing: Keep an asset register updated with purchases and disposals
Stay audit-ready with accurate filings
Taxly ensures your returns are filed correctly and on time — reducing your audit risk and giving you organized records if one ever comes.
File Accurately on Taxly →Frequently Asked Questions
How far back can the NRS audit me?
Generally, the NRS can audit up to 6 years back (the record-keeping requirement under NTA 2025). However, in cases of suspected fraud or where no return was filed at all, there may be no time limit. Best practice: keep records for at least 6 years.
Can I refuse to cooperate with an audit?
You can, but you shouldn't. Refusal leads to a Best of Judgment assessment — which will almost certainly be worse than the actual figures. Cooperation is always the better strategy, even if your records aren't perfect.
What if my records are incomplete?
Provide what you have and explain what's missing and why. An auditor is more likely to be reasonable if you're transparent about gaps rather than trying to hide them. "We lost our 2023 Q1 invoices when our office flooded — here are the bank statements covering the same period" is a legitimate explanation.
Do I need a lawyer for a tax audit?
For a desk review or standard field audit: usually not — a tax consultant or chartered accountant is sufficient. For an investigation or if you're facing potential criminal prosecution: yes, engage a lawyer who specializes in tax litigation. The stakes are higher in investigation scenarios.
Will an audit affect my Tax Clearance Certificate?
An ongoing audit may delay issuance of a TCC if there's an outstanding assessment. Once the audit is resolved and any additional tax is paid, the TCC should be issued normally.
Key Takeaways
- A tax audit is a compliance check — not a criminal investigation (unless escalated)
- Common triggers: bank deposits exceeding declared income, refund claims, industry campaigns, non-filing
- Keep all financial records for 6 years minimum — bank statements, invoices, contracts, payroll
- Respond to audit notices within the deadline (usually 30 days) — don't ignore them
- You have rights: professional representation, objection, appeal to Tax Appeal Tribunal
- Best of Judgment assessments (from non-cooperation) are deliberately inflated — avoid at all costs
- Prevention: file on time, declare accurately, keep records, separate personal and business accounts
- If you've been compliant, an audit is manageable paperwork — not a disaster