FBR IRIS Portal Guide Pakistan 2026 — Login, Filing & Features

Most people who struggle with IRIS aren't struggling with tax law — they're struggling with a government portal that expects you to already know its own internal structure before it tells you where anything is.

Overview — One Portal, Several Distinct Functions

IRIS bundles together several genuinely separate functions under one login: registration, annual return filing, wealth statement submission, tax payment (through PSID generation), and status checks like Active Taxpayer List verification. Because all of these live inside the same portal, first-time users often expect a single, linear "do this, then this" flow, when in reality each function is really its own separate mini-system accessed through the same dashboard. Understanding IRIS as a set of distinct tools under one roof, rather than one continuous wizard, makes the portal considerably less confusing to navigate.

Registration and Logging In

Anyone with an NTN (which, for a salaried individual, is generally just their CNIC number activated for tax purposes) uses that same identity to register for IRIS access, setting up a password and registering a mobile number and email that IRIS uses for verification codes during login and sensitive actions. First-time registration asks for basic personal and, where applicable, business details, after which the account becomes the taxpayer's ongoing access point for every subsequent year — there's no need to re-register annually, only to log back into the same account each filing season.

Navigating to and Filing the Correct Return

Once logged in, the taxpayer needs to navigate to the correct return form for the specific tax year being filed — IRIS presents different form structures depending on the year and the taxpayer category (salaried individual, business individual, AOP, company), and selecting the wrong year's form is one of the most common points of confusion, particularly for someone catching up on a previous year's missed filing alongside the current year. The return itself walks through income declaration, deductions and credits, and tax computation, drawing in some cases on withholding data FBR already has on file, though this pre-filled data should always be checked against the taxpayer's own records rather than accepted blindly.

Generating a PSID and Paying Tax

When tax is actually due, IRIS doesn't process the payment itself — it generates a PSID (Payment Slip ID), a unique reference for that specific payment amount and purpose, which the taxpayer then uses to pay through a bank branch, online banking, or an approved payment app. The payment needs to be made against the correct PSID, and there can be a delay before the payment reflects back in IRIS as received — checking too soon and assuming a payment failed, when it's actually just pending reconciliation, is a common and usually unnecessary source of worry.

Checking Active Taxpayer List Status

ATL status — whether a taxpayer is currently on the Active Taxpayer List, which affects withholding tax rates across dozens of transaction types — can be checked directly through IRIS or through FBR's separate ATL verification tools. This status updates on a periodic cycle rather than instantly the moment a return is filed and processed, so a taxpayer who files today and checks ATL status the same day may not yet see the update reflected, without this necessarily indicating a problem with the filing itself.

Submitting the Wealth Statement Alongside the Return

For most individual taxpayers, the annual return isn't complete without an accompanying wealth statement, declaring assets and liabilities as of the year-end and reconciling the change in net wealth against declared income for the year. This is submitted through the same IRIS session as the income tax return, and a mismatch between declared income and the wealth change shown is one of the more common triggers for a follow-up notice — making the wealth statement worth completing as carefully as the income declaration itself, not treated as an afterthought tacked onto the end of filing.

Understanding the Dashboard Structure

IRIS's main dashboard organizes access around a handful of core categories — registration details, returns and statements, payments, and various notice or correspondence sections — and a lot of the initial confusion users report comes simply from not knowing which category a specific task lives under. Return filing and wealth statement submission generally sit together under the returns section, PSID generation lives under the payments area, and any notices or correspondence FBR has sent typically appear in a dedicated inbox-style section rather than by email — meaning taxpayers need to actively check IRIS periodically for notices rather than assuming they'll always be separately emailed or texted.

Adding an Authorized Representative

IRIS allows a taxpayer to authorize a tax consultant or representative to access and manage their account on their behalf, which is how most consultants — including firms handling filing for clients — actually operate within the portal rather than requiring the client's own login credentials each time. Setting this up correctly once, rather than repeatedly sharing personal login details insecurely, is both safer and more efficient for an ongoing consultant relationship, and it can generally be revoked by the taxpayer at any time if the relationship ends.

Common Mistakes on IRIS

• Filing under the wrong tax year's form: especially when catching up on a prior year's missed return alongside the current year.
• Accepting pre-filled withholding data without verification: assuming IRIS's own data is automatically complete and accurate.
• Paying against the wrong PSID, or checking payment status too soon: mistaking a normal reconciliation delay for a failed payment.
• Treating the wealth statement as optional or an afterthought: submitting a rushed wealth statement that doesn't properly reconcile with declared income.
• Panicking over an ATL status that hasn't updated yet: not accounting for the normal update cycle before assuming something went wrong.

A Worked Example

A first-time filer logs into IRIS using their CNIC-based NTN, navigates to the current tax year's individual return form, and works through income declaration using both their salary certificate and the portal's pre-filled withholding data — cross-checking the two rather than assuming they match. After completing the return and finding a small amount of tax still due, they generate a PSID and pay it through their bank's mobile app that same day. Checking ATL status immediately afterward, they see no change yet, which — rather than restarting the process out of concern — they correctly recognize as the normal update cycle, confirming their active status a few days later once the cycle runs. Throughout the process, they also make a habit of checking their IRIS inbox for any correspondence rather than waiting for a separate notification, having learned that FBR communications often land inside the portal itself well before, or instead of, any external email or SMS alert.

Frequently Asked Questions