Understanding What You Are Dealing With
Before preparing for a tax audit, you need to understand what kind of audit you are facing. ZIMRA and SARS conduct different types of audit with different scopes, different information requirements, and different escalation risks. Treating every audit as equivalent wastes resources and potentially discloses information that would not otherwise have been required.
Type 1
Desk/Verification Audit
A request for specific documents or explanations relating to one or more items in your return — typically a reconciliation query or a request to substantiate a specific deduction. Narrow scope. Usually resolved by document submission without a site visit. The majority of audit contact is at this level.
Trigger: Algorithm flag, reconciliation mismatch, or claim outside normal range
Type 2
Field/Comprehensive Audit
A full review of all or most tax types for a defined period — typically 3–5 years. Auditors attend your premises, request comprehensive records, interview management, and examine all aspects of your tax compliance. High resource requirement. High assessment risk. Requires professional representation immediately.
Trigger: High risk score, significant inconsistencies, referral from another audit, or sector-wide audit campaign
Type 3
Criminal Investigation
A formal criminal investigation under the relevant Revenue Laws. SARS' Criminal Investigations unit operates alongside the National Prosecuting Authority. ZIMRA has powers to initiate criminal charges independently. At this level, professional legal representation — not just tax advisory — is mandatory from the first moment of contact.
Trigger: Suspected deliberate tax evasion, failure to disclose offshore assets, or referral from a comprehensive audit
"The businesses that suffer most in tax audits are not those with the most exposure — they are those whose records are so disorganised that they cannot prove what they legitimately did. Disorganisation is not a defence. It is evidence."
The Preparation Checklist: What You Must Have Ready Before Any Audit
The following checklist represents the baseline documentation that every African business with annual revenue above $500,000 should be able to produce within 48 hours for any period within the past 7 years. If you cannot do this, you are not audit-ready — regardless of whether your actual tax position is correct.
Financial Records
1
Audited financial statements — all years within the 7-year retention window
Signed, dated originals with auditor's report. If the business was subject to audit, these must be available. If it was below the audit threshold, management accounts must be sufficiently detailed to support tax declarations.
2
General ledger and trial balance for each tax year under review
Exportable from your accounting system in a format that can be provided electronically. Auditors increasingly request raw ledger data for computer-assisted analysis. A system you cannot export from is a liability.
3
Bank statements — all accounts, all currencies, all periods
Every business bank account, including foreign currency accounts. The auditor will compare declared revenue to bank deposits as a fundamental reconciliation check. Unexplained deposits are one of the most common starting points for revenue query assessments.
4
Fixed asset register with depreciation schedule
Itemised register of all fixed assets showing acquisition cost, date of purchase, depreciation method and rate, accumulated depreciation, and net book value. Must reconcile to the balance sheet and the tax computation simultaneously.
Revenue Documentation
5
Sales invoices or invoice summary reports — all tax years
Either original invoices or a complete system-generated invoice register. Revenue declared on your return must be reconcilable to invoices issued. Gaps between invoiced and declared revenue require explanation with supporting documentation.
6
VAT return workings and supporting schedules
The calculation that produced each VAT return — output VAT from sales, input VAT claimed from purchases, adjustments. Input VAT claims are one of the most frequently queried items. Every claim must be supported by a valid tax invoice.
7
Mobile money transaction records — if applicable
Given that ZIMRA and KRA have access to mobile money data, your declared revenue must reconcile to your mobile money receipts. Print or export full transaction histories from your mobile money operator. Unexplained discrepancies between declared revenue and electronic receipts are a primary AI audit trigger.
Expense Documentation
8
All supplier invoices supporting deductions claimed
For every expense deducted in your tax computation, you need a valid tax invoice from the supplier. Missing invoices — particularly for large or unusual expenses — are the most common cause of deduction disallowances. No invoice, no deduction. The disallowance does not care that the expense was real.
9
Payroll records and PAYE reconciliation
Every employee on payroll, all pay periods, PAYE deducted, and PAYE remitted to the revenue authority. The monthly PAYE remittances must reconcile to the annual employer reconciliation. A PAYE audit is frequently triggered by discrepancies between the employee count on payroll and the declared headcount in regulatory filings.
10
Intercompany agreements and transfer pricing documentation
For businesses with related-party transactions — management fees, intercompany loans, shared services — the agreements underlying those transactions must be in writing, signed, dated before the transaction, and priced at arm's length. An intercompany fee arrangement "agreed verbally" or backdated will be disallowed in its entirety.
Tax Computation Documentation
11
Tax computation workings for each year — bridging accounting profit to taxable income
The detailed calculation that converts your accounting profit to taxable income: add-backs of non-deductible items, deductions for allowances and incentives, application of assessed losses from prior years. This document is the backbone of every income tax audit — without it, you cannot defend your declared liability.
12
All filed returns and confirmation of filing dates
Copies of all submitted returns (VAT, PAYE, income tax, provisional tax) with evidence of filing dates. Portal submission confirmations, email acknowledgements, or stamped physical copies. In a dispute about whether a return was filed on time, the burden of proof is on the taxpayer.
What to Do When the Audit Letter Arrives
The audit notification is not the moment to start panicking. It is the moment to execute a plan that should already exist. The single most important action is to appoint professional representation immediately — before making any contact with the auditor, before providing any documents, and before allowing any access to your premises or systems.
What to do
The Right Response to an Audit Notification
→
Appoint a tax advisor or tax attorney immediately — before any contact with the auditor. Your representative manages all communication from this point.
→
Note the exact date of receipt — every response deadline runs from receipt, not the date on the letter. The 30-day objection window starts now.
→
Assemble the documents you have — do a rapid gap assessment: what can you produce and what cannot be found? Know your position before your advisor does.
→
Request an extension if needed — revenue authorities will often grant an extension of 2–4 weeks for document production on first request. Exercise this right proactively.
→
Provide only what is asked for — scope limitation is a legitimate professional strategy. Provide documents responsive to the query. Do not volunteer additional information that expands the audit scope.
→
Keep a full record of all interactions — date, time, name of auditor, what was requested, what was provided. Every interaction should be documented and confirmed in writing.
What not to do
The Mistakes That Make Audits Catastrophic
✗
Do not contact the auditor yourself without professional representation. Anything you say is evidence. Auditors are skilled at eliciting information from directors who believe they are being helpful.
✗
Do not provide documents you have not reviewed — a disorganised document dump that includes internal memos, draft documents, or communications that contradict your filed position creates problems that did not previously exist.
✗
Do not reconstruct or alter records — even to correct what you believe are genuine errors. Altered records are evidence of fraud, regardless of intent. Acknowledge gaps and let your advisor manage the strategy.
✗
Do not ignore the audit — non-response leads to best-estimate assessments calculated entirely by the revenue authority. These are consistently worse than any outcome achievable through engagement.
✗
Do not assume the assessment is correct if you receive an adverse finding. Most assessments contain errors. Every assessment is objectable within 30 days — and many objections succeed, substantially reducing or eliminating the liability.
✗
Do not miss the objection deadline — a 30-day window that passes without objection makes an assessment final. This is not an administrative inconvenience. It is a legally binding outcome, regardless of the accuracy of the assessment.
If You Receive an Adverse Assessment: The Objection and Appeal Path
An adverse assessment — one you believe is incorrect — is not the end of the road. Every African revenue authority provides a formal objection and appeal mechanism. The path is time-bound and procedurally demanding, but it exists and it works: many objections result in full or partial reversal of the assessment.
Assessment Issued
The revenue authority issues a formal assessment stating the additional tax, penalties, and interest payable. The 30-day objection window begins from receipt. Note: SARS assessments sent electronically are deemed received on the date of issue — your eFiling account receipt date is the clock-start.
File Objection
Lodge a formal, written objection stating specifically which items in the assessment you dispute and why. The objection must be precise — vague or general objections are dismissed. Supporting documentation accompanies the objection. Simultaneously, apply for suspension of payment of the disputed amount if the full amount cannot be paid without endangering operations.
60–90 days
Revenue authority reviews
Objection Decision
The revenue authority reviews your objection and issues a decision: allow (assessment reduced), partially allow (some items accepted, some rejected), or disallow (assessment upheld). This is a genuine review process — not a rubber stamp. Well-documented objections supported by clear evidence frequently succeed in reducing assessments significantly.
30 days post-decision
Appeal window
Appeal to Tax Tribunal
If the objection is partially or fully disallowed and you remain in dispute, you may appeal to the Tax Court or Tax Tribunal (jurisdiction-dependent). SARS matters go to the Tax Court. ZIMRA matters go to the Fiscal Appeal Court. This is litigation and requires legal representation. Success rates at tribunal level are lower than at objection — but tribunals do overturn assessments on procedural and substantive grounds.
The Voluntary Disclosure Programme — Your Most Powerful Pre-Audit Tool
The most important insight in tax audit preparation is this: the Voluntary Disclosure Programme (VDP) available in both Zimbabwe and South Africa delivers dramatically better outcomes than any defensive strategy available once an audit begins. The VDP allows a taxpayer to come forward with previously undisclosed liabilities, pay the outstanding tax, and receive — in exchange — a full waiver of criminal prosecution and a 50–80% reduction in civil penalties.
The VDP window is open only until the moment a formal audit commences. If ZIMRA or SARS has already issued an audit notification, the VDP is no longer available as a clean mechanism (though some elements of voluntary disclosure may still apply). This means the VDP is valuable precisely when it is least emotionally appealing — when there is no immediate enforcement pressure and the default is to do nothing.
The businesses that emerge from the digital enforcement era in the strongest position are those that treat compliance as a continuous function — not a response to crisis — and that use tools like the VDP proactively to close historical gaps before the regulator's increasingly sophisticated data systems identify them first.