Tax identity theft occurs when a fraudster uses someone else’s personal identification, usually the National Identification Number and the KRA Pin, to fraudulently register businesses, open tax accounts and file false tax returns. A worrying trend of identity theft in tax-related matters is emerging in Kenya which is leaving innocent Kenyans burdened with tax debts that they never incurred. Regardless of your social status, everyone is at a high risk of being a victim to tax fraud. There have been various stories from Kenyans where they were shocked to learn that they allegedly own businesses, owed taxes and even defaulted on obligations that they were not aware of. What strategies can be put in place by the relevant authorities such as Kenya Revenue Authority and individuals to minimize the level of identity theft in Kenya.
Majority of the victims are normally from low income tax brackets who rarely interact with the online tax system, which makes them perfect targets in the eyes of potential fraudsters. The various means in which these fraudsters source for their victim’s data include cyber cafes who collect ID numbers under the guise of job applications or registration services and sell them to criminals. Second, fraud rings operating within or around government agencies who exploit weak internal controls to register fake entities. Fake online job advertisements which are used to gather personal data in large numbers and use them for fraudulent schemes.
The main reasons why Kenya is vulnerable to such attacks can be attributed to factors such as weak digital protection procedures such as Know-Your-Customer Procedures. Government Authorities such as the Kenya Revenue Authority have prioritized speed and efficiency over data verification. This can be attributed to pressures from the government to enroll many potential taxpayers so that they can increase their revenue pool. However, this has enabled fraudsters to utilize this by making numerous registrations with minimal checks. Second, reduced legal protection for personal data. Although the 2019 Data Protection Act is a step in the right direction, enforcement remains weak. Many organizations collect ID data without disclosing how it is stored or used. Third, low digital literacy where Many citizens are not aware of how to monitor or manage their tax profiles or even the risks posed by casually sharing personal data.
Strategies that can be undertaken by individuals include being cautious with personal data. Individuals should not share their IDs or their KRA details with unverified individuals. Individuals should be beware of suspicious job advertisements requesting KRA details and unverified agents who claim to offer quick government services. People should also educate themselves and spread awareness among their family and friends against this trend among fraudsters. Regularly check your KRA profiles, avoid oversharing data, and be cautious online. The Kenya Regulatory Authority could also enhance KYC procedures at the point of registration where all new taxpayer and business registration should be subjected to biometric verification and mandatory mobile number and email OTP confirmation. The Authority should also introduce strict penalties for people charged with tax identity fraud as this will deter people from stealing people’s details.
By combining personal responsibility with stronger institutional frameworks and public awareness, Kenya can reverse this dangerous trend and build a more secure tax system.
