eTIMS in 2026: what "No invoice, no expense deduction" really means for your business.

For most of the last three years, eTIMS has been treated as an invoicing problem. That changes this year. From 2026 it is, more accurately, a finance-control problem — because the cost of getting it wrong is no longer a fine or a follow-up. It's a permanently inflated tax bill.

We've spent the last nine months helping a handful of mid-market clients reconfigure their finance operations around the new validation rules. This essay is a synthesis of what we've learned — what changed in law, what changed in practice at KRA, and the operating-model adjustments that we now think every Kenyan business with material expenses should be making this quarter.

1. What changed at the start of 2026

The Electronic Tax Invoice Management System has been live since 2023. Until recently, KRA's enforcement focus was largely on onboarding — getting taxpayers registered, getting devices integrated, getting digital invoices into the pipe. By late 2025 over 500,000 taxpayers were on the system. Compliance, in other words, was about participating.

From 1 January 2026, the bar has moved. KRA now systematically cross-checks income-tax returns against the underlying eTIMS data. Where a claimed expense doesn't have a matching, fiscalized supplier invoice on the eTIMS database — the deduction is disallowed. This is the rule informally known as "No eTIMS, no expense". It is not a fine. It is a structural increase in your taxable profit.

2. Why this is a supplier-risk problem, not an invoicing problem

The intuition that catches most finance teams off guard is this: you may be doing everything right, and still be exposed. If you operate any kind of meaningful supplier base — and you almost certainly do — the validity of your tax deductions is now entangled with the invoicing discipline of every business you buy from.

Consider a typical mid-sized FMCG distributor we worked with in Q1. About 64% of their cost base, by value, sat with 18 large suppliers — all of whom were eTIMS-compliant from day one. Easy. The remaining 36% sat with several hundred small vendors: transport providers, packaging suppliers, casual labour contractors, the print shop down the road. About 40% of those small vendors had no eTIMS configuration at all in early 2026.

Under the new rule, the 36% of cost base that runs through small vendors is at risk every month. That is not an invoicing problem — the distributor receives an invoice, books it, pays it. It is a supplier-onboarding problem, which is a category of work that most finance teams have never been asked to do at scale.

The new rule re-classifies a large swathe of supplier-management activity from "nice-to-have" to "tax-control". That re-classification belongs on the agenda of every CFO and finance committee this quarter.

3. The technical baseline: VSCU, OSCU and what they require of your ERP

Practically, eTIMS exposes two integration paths. The Virtual Sales Control Unit (VSCU) is a server-side integration: your ERP, point-of-sale or invoicing system talks directly to KRA over a secure API, fiscalizes each invoice in near-real time, and receives a unique signature plus a QR code that must appear on the document. This is the right path for any business doing meaningful transaction volume.

The Online Sales Control Unit (OSCU) is the simpler, manual-portal path — appropriate for very small businesses where the per-invoice overhead of using the KRA web portal is acceptable. For most of our clients, OSCU is not a long-term answer.

The capabilities your ERP needs to support, in our view, are these:

• Direct VSCU integration. Real-time invoice transmission, signature retrieval, QR-code rendering, retry-and-backlog handling.
• Buyer-side validation. When you receive a purchase invoice, your system should validate the supplier's eTIMS signature against KRA's records before the AP team is allowed to post it.
• Supplier compliance dashboard. A live view of which of your suppliers are issuing compliant invoices, which are not, and the value at risk in each case.
• Audit trail. Every invoice — outbound and inbound — needs a tamper-proof record of when, how, and against which KRA endpoint it was fiscalized.
• VAT reporting alignment. The structured eTIMS data should drive your monthly VAT return rather than running as a parallel process.

4. A 90-day playbook for medium-sized businesses

Days 1–30 · Diagnose

Pull twelve months of AP data. Classify every supplier into three buckets: compliant (issuing valid eTIMS invoices today), onboarded but inconsistent, and not compliant. Calculate the share of your cost base sitting in each. This single analysis usually reveals the real shape of the problem — and tends to be very different from what management assumes.

Days 31–60 · Onboard & harden

For the value-at-risk segment of your supplier base, deploy a structured outreach: clear written guidance, an offer of co-onboarding support, and — where necessary — a contractual variation that ties payment terms to eTIMS-compliant invoicing. In parallel, configure buyer-side validation in your ERP so that non-compliant invoices are flagged before they post to the GL.

Days 61–90 · Embed & report

Stand up a monthly supplier-compliance dashboard that goes to the CFO. Move VAT preparation to run off the structured eTIMS data rather than as a separate workflow. Document the new control as part of the year-end audit pack — your external auditors will want to see it, and the absence of one will increasingly be a finding rather than a footnote.

5. Three scenarios where the new rule bites hardest

• Project-based businesses with many small subcontractors. Construction, professional services, marketing agencies. A long tail of small suppliers concentrates exposure.
• Distributors buying from informal-economy clusters. Anyone sourcing from Eastleigh, Gikomba or similar trading hubs has, until recently, had little reason to worry about supplier invoicing form. That has changed.
• Multi-entity groups with intercompany flows. If your group structure relies on internal recharges that aren't fiscalized end-to-end, the new rule can disallow legitimate cost transfers between your own entities.

6. What we do for clients

Our typical engagement on this topic is a 9–12 week programme: diagnostic, supplier-segmentation, ERP integration (or middleware build), finance-control redesign, and a documented handover. We deliver it as a fixed-price piece of work — and we make a point of telling clients up front when their existing ERP is fit for purpose, because most of the time it is.

If you'd like to talk through whether this applies to your business, or read the equivalent guide for your industry, drop us a line. We'd rather have a 30-minute conversation than send a brochure.

This essay reflects our practitioners' analysis as of May 2026. It is not tax or legal advice; please consult your auditors and KRA-accredited advisors on the specifics of your situation.