Direct answer: Pakistan’s Federal Board of Revenue announced the National Faceless Centre (NFC) in Islamabad on September 25, 2026. Under the announced model, a computerised risk-based system selects cases, the system assigns each case automatically, three different officers handle audit, assessment and quality review, and notices, replies and hearings take place through FBR’s IRIS portal.[1] Taxpayers should therefore treat IRIS as the primary case record: verify every notice inside the portal, record the deadline, preserve the original files and submission receipt, and do not send documents or money merely because someone contacts you by phone, email or WhatsApp.
Important timing note: Establishing the centre does not necessarily mean every audit in Pakistan moved into it immediately. In June, the National Assembly’s Finance Committee was told that implementation would be phased from October 2026 to October 2027.[2] A later report said initial operations were set to begin in October.[4] Check the actual notice in your IRIS account and the latest FBR notification for your case instead of assuming that every proceeding follows the new workflow today.
What changed at a glance
| Question | Announced NFC process |
|---|---|
| How is a case selected? | By a computerised, risk-based system rather than an individual officer.[1] |
| Who receives the case? | The system assigns it automatically to an officer who may be located anywhere in Pakistan.[1] |
| Does one officer control the whole case? | No. Audit, assessment and quality review are split across three officers.[1] |
| Where do notices and replies happen? | Electronically through FBR’s IRIS system.[1] |
| How are hearings conducted? | Electronically through IRIS under the announced model.[1] |
| Can physical action still happen? | Yes. A separate field team may conduct physical verification or recovery where the law requires it.[1] |
| Is every case already covered? | Do not assume so. Earlier official planning described a phased rollout.[2] |
The legal and policy direction is broader than one new office. FBR’s Budget 2026–27 summary says the National Faceless Centre is intended to conduct technology-driven audits, assessments and appeals while reducing taxpayer interface; the same budget summary also describes faceless audit and assessment provisions in sales tax and federal excise administration.[3]
The five-step flow taxpayers should expect
1. Risk-based selection
FBR says cases will be selected through a computerised, risk-based system rather than by an officer choosing a taxpayer manually.[1] This does not mean a selected case is automatically an accusation of wrongdoing. It means the return or available data has entered the audit or assessment workflow.
2. Automatic allocation
The selected case is assigned automatically to an officer, potentially in another part of Pakistan. The taxpayer will not know the officer’s identity, and the officer will not choose which case arrives.[1]
3. Separate audit and assessment
One officer conducts the audit and another makes the assessment. This separation is designed to prevent one person from controlling the complete proceeding.[1]
4. Quality review before an order
A third officer reviews the work for quality before an order is issued.[1] The announced workflow therefore has three distinct handling stages rather than one continuous officer-taxpayer relationship.
5. IRIS communication, with field work separated
Notices, replies and hearings are to take place electronically through IRIS. If the law requires physical verification or recovery, a separate field team handles that activity.[1]
IRIS audit notice checklist
Use this checklist as soon as you see an audit, assessment or information request. It is an organisational guide, not tax or legal advice.
Step 1: Verify the notice inside IRIS
Log in by typing the official IRIS address yourself or by starting from FBR’s official website. Do not trust a login link sent in an unsolicited message.
Confirm that the notice is visible in the correct taxpayer account. Record:
- notice date;
- tax year or tax period;
- legal section quoted;
- document or information requested;
- response deadline;
- reference or tracking number; and
- the proceeding or task area in which it appears.
If a caller mentions a notice that you cannot see in IRIS, do not send documents, credentials or money. Contact FBR through an official published channel or ask an authorised tax professional to verify the account.
Step 2: Save an evidence pack before replying
Create a folder named with the tax year, notice date and reference number. Save the original notice as a PDF or screenshot and keep a read-only copy.
Add only records relevant to the request, for example:
- filed return and wealth statement;
- sales tax return for the stated period;
- bank statements for the specified account and dates;
- invoices, ledgers and withholding certificates;
- property, vehicle or investment records;
- contracts and payment evidence; and
- prior replies or orders connected to the same issue.
Do not alter original documents. If a spreadsheet is used to reconcile figures, keep the source records and document every adjustment.
Step 3: Build a notice-to-evidence response table
A simple response matrix reduces omissions:
| Notice item | Your answer | Supporting file | Page/reference |
|---|---|---|---|
| Item 1 | Short factual response | 01-return.pdf |
Page 3 |
| Item 2 | Reconciliation and explanation | 02-reconciliation.xlsx |
Sheet “Summary” |
| Item 3 | Transaction evidence | 03-bank-statement.pdf |
Pages 8–10 |
Answer in the same order as the notice. Separate facts from assumptions. If a requested document does not exist or does not apply, say that clearly rather than uploading an unrelated file.
Step 4: Submit early and preserve proof
Upload the response before the stated IRIS deadline. After submission, save:
- the final reply as submitted;
- every attachment;
- the submission or acknowledgement screen;
- the timestamp and reference number; and
- a screenshot or PDF showing the task status.
Reopen the task if possible and verify that all attachments are present and readable. A local “uploaded” folder is not proof that IRIS accepted the response.
Step 5: Prepare for an electronic hearing
If a hearing is scheduled, test the device, browser, connection, microphone and document access in advance. Keep a concise chronology and the response matrix open during the hearing.
Ask your authorised representative which records should be available and who should attend. Do not share your password or one-time code with someone claiming they need it to conduct the hearing.
Scam and impersonation safeguards
The faceless model reduces routine direct contact, but it can also give scammers a new story: “I am your hidden officer” or “pay now to remove the computer-selected audit.” The safest response is procedural, not conversational.
Use these rules:
- Check IRIS first. An urgent call or message is not a substitute for an official portal record.
- Never disclose passwords or one-time codes. An adviser can work through properly authorised access and documented processes.
- Do not pay a person to cancel selection. FBR says selection and assignment are computerised under the new model.[1]
- Do not send records to a personal email or chat account. Use the channel stated in the verified notice.
- Verify any field visit. The announcement allows a separate team to perform physical verification or recovery where legally required, so “faceless” does not mean nobody can ever visit.[1] Ask for official identification and verify the authority through FBR’s published channels before providing access.
- Keep an incident log. Record the caller number, date, request and screenshots, but do not engage beyond what is needed to preserve evidence.
What the announcement does not settle
The September 25 announcement explains the operating model, but it does not provide a public list in that release showing every class of taxpayer or proceeding already transferred to the NFC.[1] Earlier parliamentary briefing described phased implementation beginning in October 2026 and reaching full integration by October 2027.[2]
That distinction matters. Taxpayers should not ignore a valid notice merely because it names a regional office, and they should not assume that an email is genuine merely because it mentions the National Faceless Centre. The verified IRIS record, the legal section in the notice and current FBR notifications are the controlling practical checks.
The National Assembly committee also raised concerns about algorithmic manipulation, data tampering, staff readiness, accountability, cybersecurity and citizen privacy during its June review.[2] These were oversight concerns, not findings that the new system had failed. They are reasons to preserve a complete digital record and use formal review or appeal routes where professional advice indicates that an order is incorrect.
Practical preparation before any notice arrives
A taxpayer does not need to wait for an audit to become digitally ready. A monthly compliance routine can include:
- downloading filed returns and acknowledgements;
- reconciling declared income or sales with bank and platform receipts;
- matching invoices to payments;
- storing withholding certificates by tax year;
- checking contact details in the taxpayer profile;
- reviewing IRIS tasks and notices at a fixed interval;
- maintaining secure backups; and
- confirming that the authorised representative and authority records remain current.
For businesses, assign one owner for portal monitoring and one backup. Create an internal escalation rule for notices with short deadlines. Keep tax records separate from general email attachments so the team can retrieve an exact period without exposing unrelated personal or commercial data.
Frequently asked questions
What is the FBR National Faceless Centre?
It is an FBR centre in Islamabad announced on September 25, 2026 to handle tax audits and assessments through computerised selection, automatic allocation, separated officer roles and electronic interaction through IRIS.[1]
Will taxpayers still meet an audit officer in person?
Under the announced model, routine notices, replies and hearings occur electronically through IRIS, and the taxpayer does not know the assigned officer’s identity.[1] A separate field team can still carry out physical verification or recovery when the law requires it.[1]
Has every FBR audit already become faceless?
No public source reviewed for this guide establishes that every audit moved immediately. The National Assembly was told that rollout would be phased from October 2026 through October 2027.[2] Verify the procedure stated in your own IRIS notice and current FBR notifications.
How many officers handle a faceless case?
FBR’s announced workflow uses three separate officers: one for audit, one for assessment and one for quality review before an order.[1]
Can I ignore a phone call if there is no IRIS notice?
Do not provide credentials, documents or payment based only on an unsolicited call. Verify the matter in IRIS and through an official FBR channel. If the issue is time-sensitive or unclear, consult an authorised tax professional promptly.
Is this article tax or legal advice?
No. It is a source-backed workflow and recordkeeping checklist. A taxpayer facing an audit, assessment, recovery action or appeal should obtain advice based on the exact notice and applicable law.