The State Bank of Pakistan (SBP) has been empowered to establish and operate a secure centralized virtual repository of banking data, bringing together prescribed information on financial transactions maintained by scheduled banks under amendments to the Income Tax Ordinance, 2001.
The new framework introduces Section 165AB, requiring banking companies and Electronic Money Institutions (EMIs) to electronically upload specified information on account holders whose deposits or withdrawals exceed Rs. 100 million during a reporting period. The information will be processed through a Central Data Hub for algorithmic cross-matching with tax records.
Table of Contents
Key Takeaways
- Regulator: State Bank of Pakistan (SBP)
- Legal Provision: Section 165AB of the Income Tax Ordinance, 2001
- Reporting Threshold: More than Rs. 100 million in deposits or withdrawals
- Reporting Entities: Banks and Electronic Money Institutions (EMIs)
- Data Platform: Central Data Hub
- Purpose: Algorithmic cross-matching of banking and tax information
- Repository: Secure centralized virtual banking data repository
- Further Action: Gross mismatches can be referred to FBR’s Compliance Risk Management system
New Section 165AB Introduces Central Bank Data Repository
The newly inserted Section 165AB provides the legal framework for electronic reporting of specified financial transaction data by banking companies and EMIs.
Under the provision, SBP may establish, operate and maintain a secure centralized virtual repository of banking data, containing information, records and financial transactions of persons maintained by scheduled banks.
The repository is intended to support the exchange and automated analysis of financial information for tax-compliance purposes.
Banks and EMIs Must Report High-Value Accounts
The new rules require every banking company and Electronic Money Institution to electronically upload prescribed information concerning account holders whose deposits or withdrawals exceed Rs. 100 million during a reporting period.
The reported information can include:
- Deposits and withdrawals
- Opening balance
- Closing balance
- Peak credits
- Total credits during the reporting period
- Other prescribed transaction details
The threshold applies to the account holder’s deposits or withdrawals across any or all bank accounts maintained by that person, as specified under the new provision.
Data Will Be Used for Automated Tax Cross-Matching
The purpose of the system is to compare banking information with tax information using automated algorithms.
Instead of requiring tax officials to manually review every high-value transaction, the system will digitally process the information and identify significant discrepancies between banking activity and declared tax information.
This creates a data-driven mechanism for identifying cases that may require additional scrutiny.
Tax Officials Will Not See the Data During Initial Matching
A key safeguard in Section 165AB is that the information uploaded to the Central Data Hub will not be visible to Income Tax Authorities during the automated cross-matching process.
The data is digitally processed first. If the system identifies a gross mismatch, the relevant information can then be fed into FBR’s Compliance Risk Management (CRM) system.
Further proceedings can subsequently be conducted through the National Faceless Centre under the Income Tax Ordinance.
This means the system is designed around automated screening rather than immediate manual access to every transaction record.
Rs. 100 Million Threshold Targets High-Value Activity
The Rs. 100 million threshold places the initial reporting focus on account holders with substantial banking activity.
The measure is therefore designed to provide tax authorities with a more systematic way of identifying significant differences between reported financial circumstances and actual banking activity.
The government introduced the provision as part of broader efforts to improve tax compliance through greater use of financial data and digital systems.
SBP’s Role Expands Under the New Framework
The amendment gives SBP an important infrastructure role in the data-sharing process.
The central bank can establish and maintain the secure repository, while banks and EMIs provide the prescribed financial information electronically.
This creates a centralized architecture connecting the banking system, SBP’s data infrastructure and FBR’s tax-compliance mechanisms.
The framework also overrides certain banking confidentiality provisions for the specific reporting mechanism established under Section 165AB.
Electronic Money Institutions Also Covered
The new reporting framework is not limited to conventional banks.
Electronic Money Institutions (EMIs) are also required to provide prescribed information under Section 165AB.
EMIs are non-bank entities licensed by SBP to provide e-money services, including digital wallets, person-to-person transfers and merchant payments.
Including EMIs extends the framework beyond traditional bank accounts and reflects the growing importance of digital financial services in Pakistan.
How the New System Works
The process can broadly be understood in five stages:
1. Banking activity occurs:
An account holder’s deposits or withdrawals cross the Rs. 100 million reporting threshold.
2. Data is uploaded:
The relevant bank or EMI electronically submits prescribed information to the Central Data Hub.
3. Automated cross-matching:
The information is digitally compared with available tax records using algorithms.
4. Gross mismatch identified:
If a significant discrepancy is detected, the system feeds the relevant information into FBR’s Compliance Risk Management system.
5. Further proceedings:
The case can move to the National Faceless Centre for proceedings under the Income Tax Ordinance.
This structure is intended to make tax enforcement more targeted and data-driven.
What This Means for Banks
Banks and EMIs will face additional reporting and technology requirements under the new framework.
They will need systems capable of identifying qualifying account holders, compiling the prescribed information and securely transmitting it to the Central Data Hub.
The measure also increases the importance of data accuracy, cybersecurity and compliance controls within financial institutions.
Stronger Link Between Banking and Tax Records
The new mechanism represents a significant development in Pakistan’s use of financial data for tax administration.
Rather than relying solely on information provided through tax returns, the government will be able to use high-value banking information as an additional data source for automated comparison.
This could help identify cases where reported taxable income or financial information appears inconsistent with substantial banking activity.
Privacy and Confidentiality Safeguards
Although the new framework provides for centralized banking data, Section 165AB includes safeguards around how the information is initially processed.
The information is digitally processed for cross-matching and is not made visible to individual Income Tax Authorities during this stage.
Only information relating to gross mismatches is subsequently transferred into FBR’s compliance-risk system for further proceedings.
The amendment also provides for definitions and confidentiality-related provisions governing the system.
Wider Push Toward Digital Tax Administration
The centralized banking data mechanism is part of a broader shift toward technology-based tax administration in Pakistan.
The government has increasingly sought to use digital records, automated analytics and data integration to improve compliance and reduce reliance on manual tax enforcement.
Section 165AB extends this approach into the banking and digital-money ecosystem.
What Account Holders Should Know
The Rs. 100 million threshold does not mean that every transaction above Rs. 100 million is automatically treated as tax evasion.
Rather, qualifying account information is subject to automated cross-matching with tax data.
A mismatch can lead to further scrutiny, but additional proceedings would depend on the facts and the applicable tax rules.
Therefore, individuals and businesses with substantial banking activity should ensure that their financial records and tax declarations are properly documented and consistent.
Why This Matters for Pakistan’s Banking Sector
The new framework could have several implications for Pakistan’s financial and tax systems:
- Greater integration between banking and tax databases
- Automated identification of significant financial mismatches
- Increased digital reporting obligations for banks and EMIs
- More targeted tax-compliance investigations
- Reduced reliance on manual data matching
- Greater importance of financial data security
- Broader use of technology in tax administration
The effectiveness of the system will ultimately depend on the quality, security and accuracy of the data being exchanged.
What Happens Next?
Banks and EMIs will be required to comply with the reporting framework prescribed under Section 165AB and related rules.
SBP’s centralized repository will provide the infrastructure for receiving and maintaining the relevant information, while FBR’s digital systems will use the data for algorithmic cross-matching and compliance-risk assessment.
The new mechanism could mark a further step toward a more integrated digital financial and tax ecosystem in Pakistan.
FAQs
What is Section 165AB?
Section 165AB is a newly inserted provision in Pakistan’s Income Tax Ordinance, 2001 covering the reporting of financial transaction data by banking companies and financial institutions.
What bank transactions trigger reporting?
The provision covers account holders whose deposits or withdrawals exceed Rs. 100 million during a reporting period.
What information will banks report?
The prescribed information can include deposits and withdrawals, opening and closing balances, peak credits and total credits during the reporting period.
Will FBR tax officials immediately see all reported banking data?
No. The information is digitally processed for algorithmic cross-matching and is not visible to Income Tax Authorities during the initial matching process. Gross mismatches can subsequently be transferred to FBR’s Compliance Risk Management system.
What is the Central Data Hub?
The Central Data Hub is the digital infrastructure through which prescribed banking and financial transaction information will be uploaded and processed for tax-data cross-matching.
Are Electronic Money Institutions covered?
Yes. Electronic Money Institutions (EMIs) are specifically included among the entities required to electronically upload prescribed information.
Does crossing Rs. 100 million automatically mean tax evasion?
No. Crossing the reporting threshold triggers inclusion in the data-matching process. A mismatch may result in further scrutiny, but it does not by itself establish tax evasion.
Why is SBP involved in the system?
SBP is empowered to establish, operate and maintain the secure centralized virtual repository of banking data used for the reporting and cross-matching framework.
