What the PIN is and who needs one
The PIN is the identifier that links every tax event in Kenya to one taxpayer. It appears on invoices, contracts, bank applications, tender documents and customs entries. Individuals use theirs for employment income and any business income, and each company, partnership or trust holds its own separate PIN.
Employees typically get a PIN in order to file an annual return even when their employer already deducts PAYE. Business owners need one before they can register for VAT, enrol for PAYE as an employer, import or export, or be accepted as a supplier by larger buyers who verify the PIN before paying invoices.
A PIN stays with the taxpayer for life. You do not get a new PIN when you change business or address; instead you update the profile. Opening a second PIN for the same person is a common mistake that creates conflicting records and delayed refunds.
Foreign businesses and individuals who earn Kenyan income also need a PIN, for example to receive payment from a Kenyan client that must withhold tax, or to import goods. Non-residents register with their passport details and a contact address, and the Kenyan payer will usually ask for the certificate before releasing payment.
Registering on iTax
Individuals register on the iTax portal using their national ID or passport details and an active e-mail address and phone number. KRA verifies the details against civil registration records, which means a typo in a name or date of birth can block the application. Check every character against the identity document before you submit.
For companies, incorporation through BRS and the link to KRA often reduces manual steps, but you should still log in to iTax, confirm that a PIN exists, and verify that directors and the registered address match the certificate. Where a PIN was not generated, the company applies on iTax with its certificate of incorporation and director details.
After registration KRA issues a PIN certificate. Save it, because banks, landlords, tender portals and large customers regularly ask for a copy. Protect your iTax password and the e-mail attached to it: whoever controls that e-mail can reset access to your returns.
Keep the registered phone number active. One-time passwords and password resets are sent to the number and e-mail on file, and a lost SIM or an abandoned e-mail address is the most common reason taxpayers are locked out of iTax just before a filing deadline. Update contact details through the portal when they change.
Obligations you add after the PIN
The PIN alone creates few duties. The next step is to add the obligations that fit the business: income tax for the company or individual, VAT if registered, PAYE if you employ staff, and others such as excise where relevant. Each obligation brings its own return and deadline, so add only what actually applies.
An obligation that you do not need but forgot to remove still produces a filing expectation, and nil returns missed on an unnecessary obligation can attract penalties. Review the obligation list on iTax once a year, especially after a business changes its activity or stops trading.
Individual annual returns are due by 30 June after the tax year. Other deadlines depend on the tax head, for example PAYE is due by the ninth day of the following month. Put the dates in a calendar and ask your accountant to confirm them each January.
Nil filing matters. A taxpayer with an income tax obligation who earns nothing in a year must still file a nil return, and a missed nil return can attract a fixed penalty. Filing a few minutes of paperwork on time costs far less than clearing a penalty notice later.
Keeping PIN details consistent with other records
Mismatches are the most frequent cause of friction. A company name spelled one way on the BRS certificate and another on iTax, or an old postal address, can cause rejected invoices, failed tax compliance certificate requests and questions from banks. Update the iTax profile whenever BRS records change.
Buyers who must support their expenses with valid invoices will check your PIN and name. If a customer's system rejects your invoice because the name or PIN does not match what KRA holds, the fix is a correction of the master data, not a reissue of one invoice at a time.
A tax compliance certificate, which KRA issues to taxpayers whose filings and payments are up to date, is requested for many tenders and some licences. Staying current on returns is therefore not only about avoiding penalties but about being able to bid for work.
Agents and employees who file on your behalf should do so with documented authority. Never hand your iTax password to a third party. A company can appoint a tax agent through the portal, giving them defined access, and the appointment can be withdrawn when the relationship ends, which a shared password cannot match.
What 4b2b does and does not do
4b2b does not register you with KRA, store your iTax credentials or file returns on your behalf. The PIN procedure is entirely between you and KRA, and you should never share your iTax password with a third party offering to speed it up.
When you issue invoices, 4invoices.net produces PDF documents with the company details you enter, so copy the name, PIN and address exactly from your PIN certificate. It is general invoicing software and does not synchronise with KRA records or validate a customer's PIN.
Keep a record of the PIN certificate, obligation list and filing confirmations for each year in your own archive. KRA may request supporting records for several years, so a tidy folder structure saves real time during a query.