On 15 March 2025, LHDN quietly dropped a major update — the new Rangka Kerja Audit Cukai dan Cukai Potongan Majikan (RKA CPM).

Not many SME bosses are talking about it yet. But I’ll say this clearly:

If you run a business in Malaysia — even a small one — this affects you.
Ignore it, and you may panic later when that audit letter shows up.

Let me break it down in simple terms, the way I explain to my clients.

1. What is RKA CPM?

It’s LHDN’s all-in-one audit framework — combining old guidelines into one clearer version.

It now covers:
• Income Tax
• Employer Tax
• Petroleum Tax
• Withholding Tax

So no more “Tak tahu ini audit ikut guideline mana.” One framework. One set of rules. Everyone plays the same game — including you.

2. Why Did LHDN Do This?

They want to:
• Improve compliance (yes, catch more underreporting)
• Ensure fairness
• Standardise audit procedures

This also means less guesswork and more consistency — but it also means you’re now easier to audit.

3. What Does It Mean For You?

Here’s the reality for SMEs:

A. You’re on LHDN’s radar — more clearly than before.
Doesn’t matter if your business is just “kecil-kecil.” If you file taxes and have employees, you’re in the scope.

B. Two audit types to expect:
• Desk Audit: They check your documents remotely.
• Field Audit: They come to your office or factory.

C. You have rights too.
LHDN must:
• Notify you in writing
• Share findings
• Allow you to respond
• Let you appeal

Fair game — but only if you’re ready.

4. What You Should Do Now (Before It’s Too Late)

Step 1: Clean up your tax file
• Are your accounts up to date?
• Did you file correctly?
• Keep everything — 7 years minimum!

Step 2: Train your people
Your accounts or HR team must know how to handle an audit.
Common audit targets: PCB, CP38, CP22, CP58, EA form, invoices, payslips…

Step 3: Speak to your tax agent
Audit is not something you prepare after you get the letter.
It’s something you prepare before.
You may even want to consider voluntary disclosure now.

Final word from me as tax agent …

Don’t say “nobody told me.”
Don’t say “I thought SME sure okay.”
Don’t wait for trouble to start googling “LHDN audit process.”

Audit is no longer random. It’s real. It’s structured. It’s here.

Be the boss who’s prepared — not the one making frantic phone calls later.