PIN Identity Theft Victim Cannot Be Taxed

Case Study: Commissioner of Legal Services and Board Coordination v Kapwell Enterprises Limited (Income Tax Appeal E215 of 2024) [2025] KEHC 12272 (KLR) (Commercial and Tax) (27 August 2025) (Judgment)

Background Fact

• The KRA conducted an audit and found customs data showing that Kapwell’s Personal Identification Number (PIN) had been used to import goods worth millions of shillings (Ksh. 9.8M in 2013 and Ksh. 15.7M in 2014).
• However, Kapwell had filed NIL returns for Income Tax and VAT for the years 2015 and 2016, claiming it had not conducted any business.
• KRA treated these imports as Kapwell’s undeclared sales and issued additional tax assessments totaling Ksh. 5,944,774.
• Kapwell objected, arguing it was a victim of identity theft. It stated its business was solely clearing and forwarding, and it never imported goods for itself or clients. A business associate had misused its PIN without authorization.
• Kapwell had proactively reported the fraud to the KRA’s enforcement division and the police, providing the names of the actual clearing agents involved (Landmark Freight Services, Stemi Investment Ltd, etc.).
• Despite initially indicating it would engage the actual importers, KRA later confirmed the full assessment against Kapwell.

The Tax Appeals Tribunal’s Decision

The Tribunal ruled in favor of Kapwell, finding that:

• KRA had a statutory duty under the Tax Procedures Act to investigate tax matters but failed to disclose any investigation into Kapwell’s claims of identity theft.
• Kapwell had gone “above and beyond” by reporting the crime and identifying the culprits.
• Therefore, Kapwell had successfully discharged its burden of proof to show the assessments were excessive.
• The tax decision should have been made differently, and the assessments were vacated.

KRA Appeal to the High Court

KRA appealed, arguing the Tribunal erred in law by:

• Failing to consider all evidence.
• Failing to address all grounds Kapwell raised.
• Failing to adopt a “holistic view” of the matter.
• Overlooking that KRA relied on information Kapwell provided.
• Disregarding material facts.

Issues for Determination by the High Court

The High Court framed the sole issue as:

Whether the Tribunal erred in law by vacating the Income Tax and VAT assessments issued against the Respondent based on import data linked to its PIN.

The High Court’s Analysis & Decision

• The court affirmed that the burden is on the taxpayer (Kapwell) to prove an assessment is incorrect (S.56 TPA). The court found that Kapwell successfully discharged this burden by providing evidence of identity theft, reporting it to authorities, and identifying the third-party culprits.
• The court emphasized that the law (S.4(3) of the Tax Procedures Act) imposes a mandatory duty on KRA to “make all due inquiries” in tax matters. KRA completely failed to investigate the entities named by Kapwell, which was a “dereliction of its statutory duty.”
• The court cited S.13(3) of the TPA, which states a PIN can only be used by a tax agent with the taxpayer’s written permission and only for the taxpayer’s own affairs. There was no evidence Kapwell gave such permission.
• The court rejected KRA’s argument that Kapwell had “conceded” to the assessment, finding that a statement about engaging a business associate was a “conciliatory gesture” rather than a legal admission of liability.
• The appeal was dismissed for lacking merit.

You Can Book Consultation with me through

https://cal.com/hisibati/consulting-session