The reality of KRA non-compliance: it is a slope, not a cliff
KRA does not shut down a business on day one of eTIMS going live. Non-compliance is an escalating series of steps: warnings, compliance notices, penalties, audit, adjustment, and only then, if you are defiant, suspension. Most businesses slip out of compliance unintentionally and fix it before reaching the suspension stage. But the risks are real if you ignore the warnings.
The timeline depends on your business size and visibility. A small duka doing KES 100,000 a month might go years without a KRA audit. A restaurant doing KES 10 million a month doing cash business without eTIMS will likely be selected within 12 months. A wholesaler in a high-enforcement hub like Eastleigh can expect scrutiny within weeks of the deadline if they are not compliant.
The escalation path is: (1) KRA notices non-compliance through risk-based selection or random audit, (2) they send a compliance notice, (3) you have 14 days to explain or fix, (4) if you do not respond, they audit, (5) they assess back taxes and penalties, (6) if penalties are unpaid, they move toward suspension. Each step offers an exit ramp: you can comply and stop the process at any stage.
Want to see it running in your own business first?
Sign UpThe six-step escalation from non-compliance to suspension
Knowing the path helps you see exactly where intervention is needed.
- 1
Step 1: KRA selects your business for audit
KRA uses risk algorithms to select businesses for audit. High-risk factors include: cash-intensive business (restaurant, retail), high turnover, multiple prior audits, location in enforcement hub (Eastleigh, CBD), and zero or minimal eTIMS records. You receive an audit notification by email or physical letter.
- 2
Step 2: KRA issues a compliance notice
If the initial audit finds eTIMS non-compliance, KRA sends a formal notice asking you to explain and provide eTIMS records. You have 14 days to respond. Most businesses either do not respond or provide insufficient records.
- 3
Step 3: You ignore or inadequately respond (the critical moment)
Many owners panic and do nothing, or respond with vague explanations. This is the point where the audit shifts from a query to an enforcement action. If you respond with a plan to get compliant (and follow through), KRA often pauses the audit.
- 4
Step 4: KRA conducts a full audit
KRA reviews your records, compares eTIMS data (or the absence of it) against your bank statements and tax returns. They assess back tax, penalties, and interest. The audit can take months and is stressful.
- 5
Step 5: KRA issues an assessment
KRA sends a formal assessment notice stating how much additional tax you owe, penalties for non-compliance, and interest charges. A small business owing KES 500,000 in back taxes might face KES 200,000 in penalties and interest on top. You have 30 days to pay or appeal.
- 6
Step 6: Non-payment escalates to suspension
If you do not pay the assessment within the timeline, KRA can move toward business suspension: revoking your KRA PIN, blocking your tax clearance certificate, or in extreme cases, involving debt collection. A revoked PIN means you cannot legally conduct business or get government contracts.
The biggest errors that push businesses toward suspension
Ignoring a compliance notice entirely
This is the deciding factor. Ignoring KRA is interpreted as defiance. A compliance notice is an opportunity to explain, provide records, or commit to fixing it. Silence escalates to audit.
Lying about your business size
Telling KRA you do KES 500,000 a month when your bank statement shows KES 2 million monthly is fraud. If KRA discovers the lie (which they will), they assume intentional evasion and penalties double.
Admitting fault without a fix plan
Saying "yes, I have not been issuing eTIMS invoices" without immediately explaining your plan to start is dangerous. Always say: "I was not aware of the requirement; I am onboarding immediately and can provide proof of registration by [date]."
Not responding within the 14-day window
The compliance notice gives you 14 days. Missing this deadline signals non-cooperation. Even if you respond on day 16, KRA has already moved to audit.
Claiming you cannot afford to be compliant
Saying "eTIMS is too expensive for my business" does not work with KRA. Compliance is non-negotiable. Veira Lite and the KRA eTIMS portal are free or nearly free, so cost is not a valid defense.
A real escalation: What happened to a Nairobi coffee shop
Now the other direction, as an illustration of how escalation works rather than a case we are reporting. Take a coffee shop with a till that never onboarded to eTIMS, handing out paper receipts. A compliance notice arrives asking for eTIMS records. At this point the situation is entirely recoverable: a notice is a request for information, and businesses that respond to one, even with an uncomfortable answer, are in a different position from those that do not.
The failure mode is ignoring it. The letter is confusing, the penalties sound frightening, and doing nothing feels safer than answering badly. It is not. Escalation from a notice to a full review brings a visit, an examination of till records, and a comparison against bank deposits, and that comparison is where an absent eTIMS record becomes impossible to explain: money demonstrably came in, and no invoices exist for any of it.
What follows can include an assessment for back tax, penalties and interest, and where that cannot be paid, consequences that reach past the tax bill itself: a tax compliance certificate is what banks and tender processes ask for, so losing access to one closes off financing and contracts at the same time. The specific amounts and the specific enforcement steps are KRA's to determine and they change, so confirm the current position at kra.go.ke rather than working from figures in an article. The pattern is the point: the cost of the notice is small, and the cost of ignoring it is not.
Compare this to a different shop owner who gets the same compliance notice, immediately calls Veira, onboards to eTIMS within a week, and sends KRA a letter saying "I have now registered for eTIMS and issued compliant invoices from [date]. I was not aware of the requirement and have fixed it." KRA closes the inquiry and never audits him. Different response, vastly different outcome.
Trading without eTIMS-compliant tax invoices risks KRA penalties, blocked VAT input claims for your customers, and receipts a business buyer cannot expense.
Veira signs every sale to KRA eTIMS automatically, so each receipt is compliant the moment it prints, with no separate device to reconcile.
How to avoid the escalation path
The single most important step is to be compliant before KRA audits you. Veira makes this simple: you onboard, start issuing compliant invoices immediately, and from day one your records align with what KRA expects. If KRA audits you, they find a clean eTIMS history.
If you receive a compliance notice from KRA, act immediately. Do not ignore it. If you are not yet compliant, register for eTIMS (Veira takes one hour), start issuing compliant invoices, and respond to KRA with proof of registration and a commitment to compliance. KRA typically stops the audit at this point.
Transparency matters. If KRA finds a gap in your records and you explain it honestly and fix it, they move on. If they suspect you are hiding something, they dig. Book a free Veira demo today, and the next time KRA audits you, your records will be perfect.
Frequently asked questions
How long does it take KRA to escalate from notice to suspension?
Can KRA shut my business down without warning?
What is a Tax Clearance Certificate and why does it matter?
If I become compliant now, will KRA audit my past?
What if KRA asks for eTIMS records I never created?
Can KRA force me to pay penalties for non-compliance before I started using eTIMS?
If I get a compliance notice, should I hire a lawyer or accountant?
Will KRA shut down your business if you do not use eTIMS? Not immediately. But the escalation path from notice to suspension is real, and it moves faster than most shop owners expect. The good news: you control when you start complying. Start today with Veira, and you will never face a compliance notice. You will never stress about KRA auditing you. And if KRA does audit (random chance), your records will be perfect. The question is not "will KRA shut me down?" The question is "why would I wait for that risk when compliance takes one hour to set up?" Book a free demo today.
Need help, or want to talk it through first? Chat with us on WhatsApp