No More Hiding: Finance Bill 2026 introduces Section 165AB, overriding decades of banking secrecy laws to feed high-value financial data directly into an AI-driven “Central Data Hub.”
ISLAMABAD — The walls are closing in on undisclosed wealth. In arguably the most aggressive legislative maneuver to date, the Federal Board of Revenue (FBR) has introduced Section 165AB into the Income Tax Ordinance under the Finance Bill, 2026.
This new law effectively strips away the traditional shield of banking confidentiality, empowering an automated, faceless digital system to hunt down hidden assets and cross-match the private financial records of high-value account holders with their tax profiles.
If you are moving massive amounts of cash outside the tax net, the system will now flag you automatically—without a human tax officer ever lifting a finger.
The Ultimate Secrecy Override
Section 165AB doesn’t just request data; it legally bulldozes existing protections. The law explicitly states that it operates “Notwithstanding anything contained in” the Banking Companies Ordinance, 1962, the State Bank of Pakistan Act, 1956, or the Protection of Economic Reforms Act, 1992.
Decades of statutory banking privacy have been bypassed in a single stroke. Every commercial bank and Electronic Money Institution (EMI) is now legally forced to electronically upload raw financial data directly to the FBR’s newly minted Central Data Hub.
Are You in the 100-Million-Rupee Crosshairs?
The digital dragnet isn’t looking for pocket change. It is calibrated to capture high-velocity capital. The system automatically triggers when an account holder hits the following threshold:
The Trigger Metric
Anyone with total deposits or withdrawals exceeding 100 million Rupees during a six-month reporting period across any or all of their bank accounts.
Once an account crosses this threshold, the bank must hand over a comprehensive financial forensic file, including:
• Specific particulars of all deposits and withdrawals.
• Exact opening and closing balances.
• Total credits accumulated during the period.
• Peak Credits: The single highest credit balance recorded on any given date during those six months.
The Faceless Assassin: How the Algorithmic Audit Works
To combat corruption and harassment, the FBR is removing human bias from the initial hunt. The entire process is automated, weaponizing data analytics against tax evaders.
1. The Blind Cross-Match: Financial data is fed into the virtual repository managed by PRAL. During this phase, the data is completely invisible to human Income Tax Authorities to prevent premature interference or tampering.
2. The CRM Alarm: If the algorithm uncovers a “gross mismatch” between your banking activity and your declared tax returns, the system automatically feeds the data into the Compliance Risk Management (CRM) computer program.
3. The Target Evaluation: The CRM scans specifically for tax evasion tactics: understatement of sales, overstatement of expenses, and hidden income or assets.
4. The Faceless Trial: Once flagged, the case is handed over to the National Faceless Centre for further legal proceedings, eliminating face-to-face interactions between taxpayers and auditors.
The Countdown Timetable
The law divides the fiscal year into two strict, unavoidable reporting windows. There is no lag time for compliance:
| Reporting Period | Date Range | Data Submission Deadline (“Specified Date”) |
| First Half | July 1st to December 31st | January 31st |
| Second Half | January 1st to June 30th | July 31st |
The Ironclad Promise of Secrecy (With a Catch)
The bill explicitly notes under subsection (6) that the Board must ensure this massive inflow of banking data remains strictly confidential and cannot be misused to disregard the baseline statutes of commercial banking.
However, that protection ends where Section 165AB begins. If your banking transactions tell a wildly different story than your tax returns, the algorithm will hand your file over to the state—and the National Faceless Centre will be waiting.
