The second ledger
Your accounts were once the only record of your business. If the tax authority wanted to test the accounts, its officers had to come and look. That time is over.
Every e-invoice that MyInvois validates now goes into a database at LHDN. The record is exact for each transaction. Each document has a timestamp. After seventy-two hours, the document is locked. LHDN keeps this record about your business, one validated document at a time. This article calls that record the second ledger.
On 15 December 2025, LHDN published the framework that states what LHDN will do with the second ledger.
The framework
The framework is the Rangka Kerja Semakan Pematuhan e-Invois (RKe). It is the formal procedure for e-invoice compliance reviews. It is not a guide about how to issue an e-invoice. It is the enforcement procedure. It states how LHDN selects cases. It states how officers conduct a visit. It states what officers can examine, and what non-compliance costs.
Three parts of the framework need your full attention.
A computer selects the cases. The framework states that a computer system selects cases against defined risk criteria. No officer decides to examine you. The data decides. If the revenue in your validated e-invoices does not agree with the revenue in your tax return, the mismatch raises the flag. The review that follows is not a letter with questions. It is a visit.
Each review is a full review. General tax audits have two forms. E-invoice compliance reviews have one form. The review occurs at your premises. Officers interview you and your key staff about how the business operates. Officers examine your sales records, purchase records, debit notes, credit notes, and refund notes. Officers examine each source document behind them. The law gives officers access to your computer systems and your servers. Officers can copy what they find.
If your business records are not complete, the review can extend to your personal records. This includes your bank statements and your asset lists. For a sole proprietor or a partnership, a gap in the books can put your personal finances under examination.
Penalties count transactions, not audits. Each e-invoice that you do not issue is a separate offence. Each self-billed e-invoice that you do not issue is a separate offence. Each consolidated e-invoice that you do not submit is a separate offence. The penalty for each offence is RM200 to RM20,000, or imprisonment up to six months, or both. The law is section 82C of the Income Tax Act 1967, read with section 120(1)(d).
An example makes this clear. A business did not self-bill its foreign supplier payments for one year. That business does not face one penalty. It faces one penalty for each payment.
The review schedule
A review follows a fixed schedule. Know the schedule before a letter arrives.
- LHDN gives you written notice fourteen calendar days before the visit. The letter states the records and the years under review.
- The visit takes one to three days. It takes more days if the records are poor, or if the cooperation is poor.
- The finding is one of three results: compliant, non-compliant, or exempted.
- A non-compliant finding lists each e-invoice failure. It comes with an offer to compound.
- You have eighteen calendar days from the date of that letter to object with evidence. If you do not object, LHDN records your agreement.
- The case closes within ninety days. It covers up to two years of assessment.
- LHDN can prosecute an offence up to twelve years from the year of the offence.
None of these windows is generous. A business whose records were ready before the letter arrived can meet all of them.
Voluntary disclosure
The framework keeps one route open: voluntary disclosure. The conditions are exact.
- The disclosure must be in writing.
- You must make the disclosure before the review starts. After the visit starts, the route is closed.
- The disclosure must be complete. It must include the return, the audited accounts, and the full detail of each issue. It must list each e-invoice, self-billed e-invoice, consolidated e-invoice, credit note, debit note, and refund note that you did not report.
If a disclosure is not complete, and there is no reasonable excuse, LHDN rejects it.
Read the third condition again. You cannot disclose a failure that you have not found. A voluntary disclosure is not a letter of apology. It is the output of a reconciliation. A business that has never compared its MyInvois record with its general ledger does not know its failures. That business cannot use the route.
The route is open. It is open only to the business that has done the work.
The work is a reconciliation
Remove the procedure from the framework, and one obligation remains: a reconciliation. A reconciliation is a comparison of two records that finds each difference. This reconciliation is continuous, and it operates in two directions.
The revenue side. Four numbers must tell one story: the total of validated e-invoices in MyInvois, the revenue in your general ledger, the figures in your SST returns, and your CP204 estimate. A cancelled sale whose e-invoice was not cancelled in the seventy-two-hour window creates a difference. A duplicate submission creates a difference. An adjustment note that is not in the books creates a difference. Each difference is now an audit trigger.
The expense side. Here the proof points the other way. A deduction is only as strong as the validated document behind it. If your supplier had to issue an e-invoice, and there is none, the claim is weak. Some suppliers do not issue e-invoices. Foreign vendors and some classes of payment are examples. There, the self-billed e-invoice is your obligation. Issue it when you make the payment. Do not construct it at month-end. These are the failures that count one offence for each transaction.
The records below both sides. The record standards in the framework are not new. They are Public Rulings 4, 5 and 6 of 2000. Keep sufficient records. Keep them complete. Keep them for seven years. The MyInvois portal holds documents for two years. Your archive must hold the rest.
One more rule is easy to miss and expensive to learn. A business that issues consolidated e-invoices must still issue a receipt for each amount that it receives. The consolidated document satisfies section 82C. It does not satisfy section 82. Many businesses will learn the difference during a visit.
Where this leaves you
Businesses with an annual turnover of RM3 million to RM5 million carry the e-invoice obligation from 1 January 2026. A relaxation period runs to 31 December 2027. In the relaxation period, LHDN accepts consolidated monthly e-invoices and does not prosecute. Full enforcement starts on 1 January 2028. Businesses above RM5 million have carried the obligation since 2024 or 2025, and their relaxation periods have ended.
Since 1 September 2026, businesses with an annual turnover below RM3 million are exempt. The exemption has a limit. It does not apply if a corporate shareholder, holding company, related company, or joint venture has a turnover of RM3 million or more. Read the compliance timeline for the full table and the LHDN sources.
The window that exists now is the window that matters. The framework is published. The selection system already runs against the live phases. In the time that remains, a business can do the work:
- Build the reconciliation between MyInvois and the general ledger.
- Find each gap, and record it in a register.
- Build an archive that holds the records for seven years.
- Make the self-billed e-invoice a step in each payment procedure.
- Disclose the failures that the work finds, while the route is open.
This is not a formality for the month before enforcement. It is the structural question below your reports: does the record that you keep agree with the record that LHDN keeps about you? A machine now checks the answer, transaction by transaction. A published procedure states what happens when the answer is no.
You have carried the risk of a mismatch since your first validated e-invoice. Most businesses have not measured that risk. To measure it is the work. That work is foundation work, and it is the kind of work we do.
Ooroboros builds the reconciliation layer between your accounting system and MyInvois — from Zoho Books integration and e-invoice automation to a readiness review against the RKe record standards. This article is general information, not tax advice. Representation before LHDN requires a registered tax agent under section 153(3) of the Income Tax Act.
Updated 11 September 2026. The section “Where this leaves you” now states the RM3 million exemption of 1 September 2026 and the relaxation period to 31 December 2027.