Time’s up: Ensuring compliance with the e-Invoice review framework

Compliance reviews have officially begun, marking the next critical phase in the e-Invoicing journey. In our previous blogs on preparing for a tax audit and embarking on an e-Compliance journey, we discussed how the future of tax compliance is firmly digital. The challenges businesses face is not just about adapting to these changes but staying one step ahead to remain relevant in the evolving landscape. 

Following the successful rollout of new regulations, this next phase, the review stage, focuses on assessing how well organisations are meeting the requirements and where further improvements may be needed. This compliance review directly impacts your business by safeguarding integrity, minimising risks, and promoting continued alignment with regulatory requirements. Here’s what you need to know and why it matters.

Since the Malaysian Inland Revenue Board (IRB) announced the phased mandatory enforcement of e-Invoicing for businesses, many organisations have accelerated their transformation processes to meet these reporting requirements. As we progress through this transition, here’s a recap of the key timelines and events that have shaped our e-Invoicing journey so far. 

From our experience working closely with numerous organisations, it’s clear that substantial resources—whether in the form of financial investment, time, or overcoming a steep learning curve with new tools—have been dedicated to complying with the regulations rolled out within a tight timeframe. Despite these efforts, some organisations are still on the journey to achieve accurate and timely compliance.  

A significant milestone was reached on 15 December 2025, when the IRB formally published its first set of the e-Invoice Compliance Review Framework. The framework is designed to ensure compliance reviews are conducted in a fair, transparent, and equitable manner for all businesses. Refer to the diagram below to understand these principles.

Budget 2026 aligns with the IRB's 2026 vision and refund reform, reinforcing the government's dedication to enhancing tax enforcement and governance in Malaysia. Building on prior initiatives such as the Tax Identification Number and the e-Invoicing pilot programme, the government has consistently pursued greater transparency and voluntary compliance within the tax system. However, early analysis of e-Invoice data has now revealed discrepancies between reported income and actual business activities, lending greater urgency to these efforts. These gaps have prompted a firmer, more targeted enforcement approach—shifting from broad encouragement of compliance to data-driven action addressing specific inconsistencies, while the IRB continues to promote voluntary disclosure. This signals that the commitment to a transparent and accountable tax system is no longer aspirational alone; it is now backed by the tools and evidence to enforce it.

How will the e-Invoice compliance review be conducted?

Building on our previous discussions about the digital future of tax compliance and the mandatory phased enforcement of e-Invoicing, it’s important to understand how the compliance review process will actually be conducted. To provide clarity, the IRB has set out a detailed framework to guide these reviews. The table below summarises the key steps involved, from case selection and assessment periods to the documents required, offering a clear picture of what businesses can expect during the compliance review.

The compliance review examines business and e-Invoice records based on risk analysis, covering up to two years, with prosecutions possible for up to 12 years. It involves taxpayers, IRB officers, and tax agents (if appointed). Reviews focus on invoices, receipts, financial records, and bank statements, with visits typically lasting one to three days depending on the complexity of the case.

For businesses, this means staying thorough and accurate with their record-keeping is more important than ever. To prepare, businesses should regularly reconcile their e-Invoice data with reported income, conduct internal audits to identify discrepancies, and implement robust accounting systems. Being proactive and transparent can help ensure a smoother review process and reduce the risk of penalties.

How can businesses detect inconsistencies early and maintain accurate records? Using dashboards and analytics tools can provide real-time insights and streamline compliance, making the entire process more manageable and efficient.

Responsibilities of the IRB e-Invoice compliance officers (PEI) and taxpayers

The IRB has established a clear framework that outlines each stage of the compliance review, including the roles and responsibilities of both the compliance officers and taxpayers. The diagram below breaks down these key steps—from the initial notification and preparation to sharing of findings and the final conclusion—providing a straightforward guide to help businesses get ready and stay confident throughout the process.

It’s important to note that after the review, the PEI will classify taxpayers as compliant, non-compliant, or exempted. 

The Australian experience is often used as a comparison, as both frameworks prioritise transparency, accountability, and robust control environments, which is reflected in the taxpayer’s responsibilities. The Australian Taxation Office’s (ATO) “Justified Trust” methodology clearly indicates strong practices validated by independent testing, alongside areas requiring improvement, through a three-tier rating system. This approach signals that tax governance is a critical board-level responsibility, rather than a mere compliance obligation—a principle that is similarly applicable within our own regulatory environment. 

Closer to home, while the classification methods differ, both frameworks prioritise transparency, accountability, and robust control environments—key pillars of strong tax governance.

Additionally, taxpayers are permitted to appoint registered tax agents to represent them or attend reviews alongside them. The roles and responsibilities of registered tax agents are clearly outlined in the framework. 

Beyond understanding these roles and responsibilities, it’s essential for businesses to be familiar with the key timelines involved. The summary diagram below highlights these critical milestones—from the initial notification to the final conclusion of the review—providing a clear roadmap to navigate the compliance journey effectively.

Adhering to the key timings outlined above and providing the required records during the compliance review is crucial. Failure to comply may result in penalties, as outlined below.

Call to action

As the landscape of tax compliance continues to evolve with digitalisation and stricter enforcement, awareness of the e-Invoice Compliance Review Framework is more important than ever. Staying proactive—through accurate record-keeping, timely responses, and cooperation during reviews—can make the difference between a smooth process and potential penalties for non-compliance. Building a robust tax governance framework remains foundational to navigating today’s complex regulatory landscape. Such a framework not only ensures compliance but also promotes greater transparency, risk management, and informed decision-making at the board level. By embedding strong governance principles, organisations can align tax strategies with broader business objectives, fostering resilience and sustainable growth in an ever-evolving environment.

As you review your current compliance practices, consider asking yourself these questions:

• Are your records digitally up to date and aligned with your reported income? 

• How effectively does your organisation use analytics and dashboards to detect discrepancies early?

• Have you clearly defined roles and responsibilities internally to manage compliance reviews?

• Are you prepared to engage transparently with the IRB and respond promptly to notifications?

• How does your organisation keep track of evolving regulations to support compliance readiness? 

Now is the time to act, instead of waiting for a compliance review. Evaluate your current systems, invest in robust digital tools, and ensure your team is equipped and informed. Reach out to experts, review your processes, and position your business for seamless compliance and long-term success.