In 2026, the Inland Revenue Board (LHDN) has moved far beyond simple manual checks. With the full implementation of e-Invoicing and the Automatic Exchange of Information (AEOI) with over 100 countries, their “digital eyes” are everywhere.
If you want to save the hassle of going through a long, intrusive audit process, you shall know exactly what triggers their selection system.
Here are 10 red flags that will get you noticed in the digital age.
1. Frequent Large Cash Transactions
LHDN monitors “unusual” cash flows.
Under the Anti-Money Laundering Act, banks automatically report large or frequent cash deposits to Bank Negara, which shares this data with LHDN.

If your bank account shows a flurry of RM10,000+ deposits but your tax return shows you are a “struggling freelancer,” the red flags will fly.
2. Flaunting Wealth on Social Media
“Lifestyle Audits” are real.
Tax officers are increasingly tech-savvy, monitoring social media for influencers or business owners who flaunt designer collections, luxury supercars, or five-star vacations.

If your digital lifestyle suggests a high-roller status that isn’t reflected in your tax bracket, expect an inquiry.
3. Involvement in Multiple Company Shareholdings
Holding shares in numerous companies (Sdn Bhd) makes your tax profile “complex.”
LHDN looks for individuals who use multiple entities to shift profits or hide personal income.

If you are a director of five companies but report a low personal salary, they may look for “deemed dividends” or undeclared director’s fees.
4. Owning a Large Number of Properties
The Real Property Gains Tax (RPGT) and the stamp duty database are goldmines for LHDN.
Buying and selling multiple properties—or even just owning several high-value rentals—triggers a check.

They will look to see if you are a “property trader” (which is taxed as business income) rather than just a casual investor.
5. Failure to Declare Foreign Income Sources
The era of hiding money abroad is over.
Through the AEOI,
LHDN now receives data from over 100 jurisdictions (including Singapore, Hong Kong, and Australia).

Even with the 2026 extensions on certain foreign-sourced income exemptions, you are still required to declare it. Hiding offshore accounts is now one of the easiest ways to get caught.
6. Never Having Filed a Tax Return
If you have a registered business, a professional license, or hold a high-ranking position but have never opened a tax file, you are a sitting duck.

LHDN cross-references data with the Companies Commission of Malaysia (SSM) and professional bodies to find “missing” taxpayers.
7. Reported by a Third Party (Whistleblowers)
LHDN has a formal mechanism for “informants.”
With LHDN’s e-Pelarian system, whether it’s a disgruntled ex-employee, a bitter business partner, or even a neighbor, third-party reports can lead to an investigation.
If someone provides credible evidence of tax evasion, LHDN is legally obligated to follow the trail.
8. Unclear or “Mysterious” Sources of Income
Vague descriptions like “Consultancy Fees” or “Other Income” for large sums of money are audit magnets.
With e-Invoicing now mandatory for most, every ringgit needs a digital trail.
If you cannot produce a validated e-invoice or a clear contract for your earnings, LHDN may classify the sum as taxable income by default.
9. A Business with a Long History of Reported Losses
While businesses can have bad years, reporting losses for 5 or 10 years straight while staying in operation is highly suspicious.

LHDN will investigate to see if you are “transfer pricing”—shifting profits elsewhere—or simply inflating your expenses to avoid paying tax.
10. Discrepancies in e-Invoice Validation
As of 2026, the MyInvois portal tracks transactions in near real-time.
If your monthly sales declaration doesn’t match the total of the e-invoices validated by LHDN, the system flags a “Reconciliation Gap.”
In the digital age, math errors are the fastest way to trigger an automated audit.
The Bottom Line: LHDN’s goal in 2026 is transparency. Most “notices” aren’t accusations of crime—they are requests for clarification. However, if you fall into any of the categories above, you must ensure your documentation is ironclad.
