Karachi, July 4, 2025 — The Karachi Chamber of Commerce and Industry (KCCI) has raised serious concerns over the new QR code authentication system introduced by the Federal Board of Revenue (FBR) for accessing the IRIS portal.
In a formal letter addressed to FBR Chairman Rashid Mehmood Langrial, the KCCI detailed the operational difficulties being faced by taxpayers and tax professionals following the abrupt implementation of QR code scanning as a mandatory step for logging into the IRIS portal.
While acknowledging the FBR’s initiative to strengthen cybersecurity protocols, the KCCI questioned the practicality of the QR code requirement, especially for businesses with complex organizational structures. KCCI President Jawed Bilwani explained that the QR code system—reintroduced through the Tax Asaan App—limits access by authorizing a single device per IRIS account after OTP verification via a registered mobile number. This setup, he noted, creates a logistical nightmare for firms that employ multiple accountants who work on different devices.
“The OTP usually goes to the CEO or a director, making it impossible for accountants or tax lawyers to get real-time access every time they need to log in,” Bilwani stated. He emphasized that the restriction is especially problematic during tax season, as professionals often handle numerous client accounts. Under the new QR code system, each time a new account is authorized on a device, the previous access is revoked—making it impossible to work efficiently across multiple accounts.
The KCCI warned that this QR code limitation will severely affect the timely submission of various tax annexures, including H, J, and C, and could lead to widespread delays and compliance issues.
In its communication, the KCCI urged the FBR to make the QR code login, single-device authorization, and 60-day password expiration optional features. “We support enhanced cyber protection,” the letter reads, “but it must not come at the cost of business continuity. The taxpayer should have the discretion to enable or disable these features based on their individual needs.”
By raising these issues, the KCCI aims to ensure that the QR code requirement supports security without hindering efficiency during Pakistan’s crucial tax return period.