Most people assume audits are chosen at random, but the truth is that the bulk of FBR's audit notices come from a computerised risk-scoring exercise, not luck of the draw. Knowing which behaviours actually raise your score lets you file a return that stays off the radar in the first place.
The Two Selection Routes
FBR's Compliance Risk Evaluation System, known as CREST, works in two parallel tracks. One is a straightforward random computer ballot that pulls a fixed percentage of all filers each year, with no relation to how accurate their return is. The other — and the one that catches most people — is risk-based scoring, where the system cross-checks your return against third-party data it already holds on you.
What Pushes Your Risk Score Up
- Late or inconsistent filing history: Filing every year on time keeps your profile calm; gaps or repeated late filings are themselves treated as a red flag.
- A wealth statement that doesn't add up: If your net worth grows by more in a year than your after-tax income could explain, CREST treats the gap as unexplained and worth investigating.
- Large, untraceable cash credits: Banks report account activity to FBR, and cash deposits that can't be tied to salary, business receipts, gifts, or documented remittances stand out immediately.
- Property or vehicle purchases beyond your declared means: Registration authorities share this data with FBR directly, so a mismatch is caught automatically at the point of registration.
- Salary figures that don't match your employer's WHT statement: Employers file withholding statements separately; any discrepancy between what they report and what you declare is an easy automated flag.
How to Keep Your Risk Score Low
The single biggest lever is consistency — file accurately and on time, every year, without exception. Beyond that, reconcile your bank statements against your declared income before you file, keep documented evidence for every gift, inheritance, or foreign remittance you receive, and make sure your wealth statement's closing balance actually reconciles arithmetically. If you spot a mistake in an old return, Section 122 lets you file a revised return within five years — correcting it yourself is always better than having CREST find it for you.
What Happens Once You're Flagged
A risk-based flag typically results in a notice under Section 177 or, for more serious mismatches, Section 111 covering unexplained assets or income. You'll usually get between 15 and 30 days to respond depending on the notice type. Random ballot selection carries the same process but without any implication of wrongdoing — you simply confirm your figures with supporting documents.
A Quick Review Before You File Can Save You a Notice
Because most audit triggers come down to numbers not matching across different government databases, a short pre-filing review by someone who knows what CREST is actually comparing can catch mismatches before they ever reach FBR's desk. NTNWaale reviews returns for exactly these red flags before submission, and represents clients through any notice that does arrive.