ISLAMABAD: The Federal Board of Revenue (FBR) has ushered in a new era of digital security for its Sales Tax System, making mandatory device registration a prerequisite for all users.
Effective today, May 26, 2025, a new Device Registration and Management System, developed by Pakistan Revenue Automation (Pvt.) Ltd. (PRAL), is being rolled out to significantly bolster security and streamline access to sensitive taxpayer data.
This pivotal initiative aims to ensure that only authorized and verified devices can successfully log into the Sales Tax System, thereby drastically reducing the risk of unauthorized access, potential data breaches, and fraudulent activities.
Why This Change? Bolstering digital tax operations
In an increasingly digitized world, tax compliance heavily relies on robust online platforms. The FBR recognizes the growing sophistication of cyber threats and the critical importance of safeguarding taxpayer information. The new device registration system is a direct response to this need, providing an additional, essential layer of authentication for system access.
“As part of our ongoing efforts to strengthen system security and ensure the integrity of the IRIS system, all tax consultants are hereby requested to implement Multi-Factor Authentication (MFA) along with Location Tracking using Tax Asaan Mobile App of FBR at the earliest. Please note, this will go into effect on Monday, May 26, 2025,” read a recent communication dispatched to tax consultants, underscoring the immediate implementation.
This move is part of the FBR’s broader strategy to modernizne and secure its digital tax operations. By mandating device registration, the FBR not only strengthens the authentication process but also empowers users with the ability to efficiently manage multiple devices linked to their accounts. This provides a clear, controlled mechanism for who and what device can access the system.
Key objectives of the new security framework:
The FBR has outlined clear objectives for the Device Registration and Management System:
Enhanced Security: The primary goal is to drastically restrict system access, allowing only explicitly registered and verified devices to log in. This creates a more secure environment for sensitive financial data.
Protection Against Cyber Threats: By limiting access points, the system serves as a stronger defense against unauthorized access attempts and potential cyber threats, protecting taxpayer information from compromise.
User-Friendly Management: Despite the added security, the FBR aims for a streamlined and intuitive process, allowing users to easily register, validate, and manage multiple devices associated with their tax profile.
Secure Device De-linking: Users will have the crucial ability to securely de-link devices that are no longer in use, have been replaced, or might be compromised (e.g., a lost mobile phone), minimizing security risks.
Ensuring Compliance and Confidence: The system is designed to ensure strict compliance with FBR’s authentication requirements, thereby improving overall system security and fostering greater user confidence in the integrity and reliability of the digital tax system.
How the system works: A step-by-step overview
The process involves linking a user’s FBR IRIS account with a mobile device via the Tax Asaan Mobile App and utilizing QR code scanning for verification. Here’s a general breakdown of the mandatory steps:
Dual Login: Users must log in to their IRIS account on a computer system (desktop/laptop) and simultaneously sign into the Tax Asaan Mobile Application on their intended mobile device using the same credentials.
QR Code Linking: A QR code will appear on the computer screen, which the user will scan using the “Login Authenticator” feature within the Tax Asaan Mobile App.
Device Update Initiation: The user will then click “Update Registered Device” on their computer screen, followed by a “Proceed” confirmation.
Second QR Code & Mobile Registration: A new QR code will appear on the computer, which the mobile device will scan again. The Tax Asaan app will then prompt the user to “Get Your Device Registered.”
Location Access & Details: Users will be required to grant location access to the Tax Asaan app (a key feature for location tracking) and input necessary device details.
OTP Verification: An One-Time Password (OTP) will be sent to the user’s registered mobile number for final verification.
Device Validation: After successful registration, a subsequent validation process will require scanning another QR code from the registered mobile device to fully activate its access.
The system also provides clear procedures for registering multiple devices to a single FBR account and, importantly, for de-linking a registered device when it’s no longer needed or if security is a concern.
Support & compliance:
The FBR has urged all tax consultants and users to comply with this directive without delay, emphasizing that their cooperation is “highly appreciated” in maintaining a secure and reliable system environment. To assist with the implementation, the FBR has provided detailed resources, including a “Sales Tax Login Authentication User Manual PDF)” and an “Instructional Video: How to Enable MFA for Location Tracking.”
For any assistance or queries, users can reach out to the FBR support team via telephone at +92 51 111 772 772 (Monday to Friday – 8:30 am to 11:30 pm) or by email at [email protected].
This mandatory device registration marks a significant stride in the FBR’s journey towards a more secure, transparent, and robust digital tax ecosystem, vital for the ongoing efforts to enhance tax compliance and protect national revenue.
